Function at 0x4bda50
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x403d36
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1b0
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x403870
xor eax, eax
cmp word [0x4f7ef2], ax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a4], eax
jne 0x4c0df7
mov eax, dword [0x4f7ffc]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x4090ac
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x4087b4
call esi
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ebx, [ebp - 0xd8]
mov ecx, 0xa
push ebx
mov dword [ebp - 0x19c], ecx
sub esp, 0x10
mov esi, ecx
mov ebx, esp
mov eax, 0x80020004
sub esp, 0x10
mov dword [ebp - 0x194], eax
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x198]
mov edx, eax
mov dword [ebp - 0x17c], 3
mov dword [ebx + 4], ecx
mov ecx, esp
mov dword [ebp - 0x184], edx
sub esp, 0x10
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x174], 4
mov edi, dword [0x4f6224]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x188]
mov dword [ecx], esi
mov dword [ebp - 0x18c], esi
mov edi, dword [edi]
mov dword [ecx + 4], eax
mov eax, esp
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x180]
mov dword [ecx + 0xc], edx
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x178]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x174]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x170]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xd4]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x70]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
mov edx, dword [0x4f6224]
push eax
push edx
call dword [edi + 0xbc]
test eax, eax
fnclex
jge 0x4bdc62
mov ecx, dword [0x4f6224]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xbc
push 0x407f28
push ecx
push eax
call esi
jmp 0x4bdc68
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xd8], 0
push eax
push 0x4f624c
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0x1a0]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x20]
test eax, eax
fnclex
jge 0x4bdcb9
mov edx, dword [0x4f624c]
push 0x20
push 0x407f38
push edx
push eax
call esi
mov eax, dword [0x4f624c]
lea edx, [ebp - 0x1a4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
fnclex
jge 0x4bdce2
mov ecx, dword [0x4f624c]
push 0x34
push 0x407f38
push ecx
push eax
call esi
xor edx, edx
cmp word [ebp - 0x1a4], dx
sete dl
xor eax, eax
cmp word [ebp - 0x1a0], ax
sete al
or edx, eax
je 0x4c0dae
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bdd45
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bbc0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bdda7
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bddcd
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6de8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4bde49
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bbd8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bdeab
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bded1
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e00], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bdf38
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bbec
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bdf9a
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bdfc0
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e02], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be027
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc00
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be089
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be0af
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7b88], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7b84], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be11b
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc18
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be17d
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be1a3
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7bf0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7bec], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be223
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc30
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be285
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be2ab
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6e0c
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4be327
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc48
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be389
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be3af
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e24], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be416
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc5c
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be478
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be49e
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e26], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be505
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc70
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be567
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be58d
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7b90], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7b8c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be5f9
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc88
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be65b
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be681
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7bf8], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7bf4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be701
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bca0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be763
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be789
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6e30
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4be805
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bcb8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be867
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be88d
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e48], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be8f4
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bccc
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4be956
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4be97c
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e4a], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4be9e3
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bb10
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bea45
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bea6b
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7b98], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7b94], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bead7
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bce0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4beb39
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4beb5f
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7c00], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7bfc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bebdf
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bcf8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bec41
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bec67
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6e54
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4bece3
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd10
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bed45
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bed6b
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e6c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bedd2
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd24
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bee34
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bee5a
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e6e], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4beec1
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd38
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bef23
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bef49
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7ba0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7b9c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4befb5
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd50
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf017
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf03d
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7c08], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7c04], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf0bd
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd68
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf11f
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf145
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6e78
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4bf1c1
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd80
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf223
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf249
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e90], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf2b0
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd94
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf312
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf338
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6e92], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf39f
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bda8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf401
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf427
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7ba8], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7ba4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf493
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bdc0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf4f5
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf51b
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7c10], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7c0c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf59b
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bdd8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf5fd
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf623
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6e9c
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4bf69f
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bdf0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf701
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf727
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6eb4], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf78e
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be04
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf7f0
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf816
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6eb6], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf87d
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be18
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf8df
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf905
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7bb0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7bac], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bf971
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be30
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bf9d3
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bf9f9
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7c18], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7c14], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bfa79
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be48
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bfadb
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bfb01
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6ec0
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4bfb7d
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be60
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bfbdf
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bfc05
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6ed8], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bfc6c
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be74
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bfcce
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bfcf4
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6eda], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bfd5b
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be88
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bfdbd
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bfde3
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7bb8], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7bb4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bfe4f
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bea0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bfeb1
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bfed7
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7c20], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7c1c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4bff57
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40beb8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4bffb9
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4bffdf
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6ee4
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4c005b
mov edx, dword [0x4f624c]
push 0xb4
push 0x407f38
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bed0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4c00bd
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4c00e3
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6efc], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4c014a
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bee4
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4c01ac
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4c01d2
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x4f6efe], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4c0239
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bef8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4c029b
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4c02c1
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7bc0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7bbc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4c032d
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bf10
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4c038f
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4c03b5
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x4f7c28], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x4f7c24], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x406a2c
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4c0435
mov ecx, dword [0x4f624c]
push 0xb4
push 0x407f38
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bf28
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4c0497
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f64
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4c04bd
push 0x44
push 0x4081bc
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x4f6f08
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f624c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4c0539
mov eax, dword [0x4f624c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc4]
test eax, eax
fnclex
jge 0x4c0ddc
mov edx, dword [0x4f624c]
push 0xc4
push 0x407f38
push edx
push eax
call esi
push 0x407f38
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
push 0x4f624c
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
jmp 0x4c0dfd
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f6dfc]
mov ecx, dword [0x4f6df8]
mov edx, dword [0x4f6f54]
push eax
mov eax, dword [0x4f6f50]
push ecx
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCySub]
mov dword [ebp - 0x170], edx
mov edi, 6
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7a00
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], edi
call ebx
or eax, 0xffffffff
cmp word [0x4f6e24], ax
je 0x4c0e56
cmp word [0x4f6e26], ax
jne 0x4c0e9a
mov ecx, dword [0x4f6e1c]
mov edx, dword [0x4f6e20]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x4f7d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
jmp 0x4c0ea0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
or eax, 0xffffffff
cmp word [0x4f6e48], ax
je 0x4c0eb5
cmp word [0x4f6e4a], ax
jne 0x4c0ef0
mov edx, dword [0x4f6e40]
mov eax, dword [0x4f6e44]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x4f7d44
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f6e6c], ax
je 0x4c0f05
cmp word [0x4f6e6e], ax
jne 0x4c0f40
mov eax, dword [0x4f6e64]
mov ecx, dword [0x4f6e68]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x4f7d44
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f6e90], ax
je 0x4c0f55
cmp word [0x4f6e92], ax
jne 0x4c0f91
mov ecx, dword [0x4f6e88]
mov edx, dword [0x4f6e8c]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x4f7d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f6eb4], ax
je 0x4c0fa6
cmp word [0x4f6eb6], ax
jne 0x4c0fe1
mov edx, dword [0x4f6eac]
mov eax, dword [0x4f6eb0]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x4f7d44
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f6ed8], ax
je 0x4c0ff6
cmp word [0x4f6eda], ax
jne 0x4c1031
mov eax, dword [0x4f6ed0]
mov ecx, dword [0x4f6ed4]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x4f7d44
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f6efc], ax
je 0x4c1046
cmp word [0x4f6efe], ax
jne 0x4c1082
mov ecx, dword [0x4f6ef4]
mov edx, dword [0x4f6ef8]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x4f7d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f6f20], ax
je 0x4c1097
cmp word [0x4f6f22], ax
jne 0x4c10d2
mov edx, dword [0x4f6f18]
mov eax, dword [0x4f6f1c]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x4f7d44
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f6f44], ax
je 0x4c10e7
cmp word [0x4f6f46], ax
jne 0x4c1122
mov eax, dword [0x4f6f3c]
mov ecx, dword [0x4f6f40]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x4f7d44
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
or eax, 0xffffffff
cmp word [0x4f80f4], ax
je 0x4c1137
cmp word [0x4f80f6], ax
jne 0x4c1173
mov ecx, dword [0x4f80e0]
mov edx, dword [0x4f80e4]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x4f7d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d44
call ebx
cmp word [0x4f6e24], 0
jne 0x4c11c2
cmp word [0x4f6e26], 0
jne 0x4c11c2
mov edx, dword [0x4f6e1c]
mov eax, dword [0x4f6e20]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x4f7d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6e48], 0
jne 0x4c1211
cmp word [0x4f6e4a], 0
jne 0x4c1211
mov eax, dword [0x4f6e40]
mov ecx, dword [0x4f6e44]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x4f7d54
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6e6c], 0
jne 0x4c1261
cmp word [0x4f6e6e], 0
jne 0x4c1261
mov ecx, dword [0x4f6e64]
mov edx, dword [0x4f6e68]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x4f7d54
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6e90], 0
jne 0x4c12b0
cmp word [0x4f6e92], 0
jne 0x4c12b0
mov edx, dword [0x4f6e88]
mov eax, dword [0x4f6e8c]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x4f7d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6eb4], 0
jne 0x4c12ff
cmp word [0x4f6eb6], 0
jne 0x4c12ff
mov eax, dword [0x4f6eac]
mov ecx, dword [0x4f6eb0]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x4f7d54
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6ed8], 0
jne 0x4c134f
cmp word [0x4f6eda], 0
jne 0x4c134f
mov ecx, dword [0x4f6ed0]
mov edx, dword [0x4f6ed4]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x4f7d54
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6efc], 0
jne 0x4c139e
cmp word [0x4f6efe], 0
jne 0x4c139e
mov edx, dword [0x4f6ef4]
mov eax, dword [0x4f6ef8]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x4f7d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6f20], 0
jne 0x4c13ed
cmp word [0x4f6f22], 0
jne 0x4c13ed
mov eax, dword [0x4f6f18]
mov ecx, dword [0x4f6f1c]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x4f7d54
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6f44], 0
jne 0x4c143d
cmp word [0x4f6f46], 0
jne 0x4c143d
mov ecx, dword [0x4f6f3c]
mov edx, dword [0x4f6f40]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x4f7d54
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f80f6], 0
jne 0x4c1482
mov edx, dword [0x4f80e0]
mov eax, dword [0x4f80e4]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x4f7d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x4f7d54
call ebx
cmp word [0x4f6e24], 0xffff
jne 0x4c14ff
mov eax, dword [0x4f68a0]
mov ecx, dword [0x4f689c]
mov edx, dword [0x4f6e20]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaCyMul]
push eax
mov eax, dword [0x4f6e1c]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c14c7
fdiv qword [0x401970]
jmp 0x4c14d8
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
jmp 0x4c1505
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaCyMul]
cmp word [0x4f6e24], 0
jne 0x4c152e
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6e48], 0xffff
jne 0x4c15a7
mov ecx, dword [0x4f68a0]
mov edx, dword [0x4f689c]
mov eax, dword [0x4f6e44]
push ecx
mov ecx, dword [0x4f6e40]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c156e
fdiv qword [0x401970]
jmp 0x4c157f
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e48], 0
jne 0x4c15d3
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6e6c], 0xffff
jne 0x4c164c
mov edx, dword [0x4f68a0]
mov eax, dword [0x4f689c]
mov ecx, dword [0x4f6e68]
push edx
mov edx, dword [0x4f6e64]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1613
fdiv qword [0x401970]
jmp 0x4c1624
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e6c], 0
jne 0x4c1678
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6e90], 0xffff
jne 0x4c16ed
mov eax, dword [0x4f68a0]
mov ecx, dword [0x4f689c]
mov edx, dword [0x4f6e8c]
push eax
mov eax, dword [0x4f6e88]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c16b7
fdiv qword [0x401970]
jmp 0x4c16c8
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e90], 0
jne 0x4c1716
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6eb4], 0xffff
jne 0x4c178c
mov ecx, dword [0x4f68a0]
mov edx, dword [0x4f689c]
mov eax, dword [0x4f6eb0]
push ecx
mov ecx, dword [0x4f6eac]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1756
fdiv qword [0x401970]
jmp 0x4c1767
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6eb4], 0
jne 0x4c17b5
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6ed8], 0xffff
jne 0x4c182b
mov edx, dword [0x4f68a0]
mov eax, dword [0x4f689c]
mov ecx, dword [0x4f6ed4]
push edx
mov edx, dword [0x4f6ed0]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c17f5
fdiv qword [0x401970]
jmp 0x4c1806
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6ed8], 0
jne 0x4c1854
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6efc], 0xffff
jne 0x4c18c9
mov eax, dword [0x4f68a0]
mov ecx, dword [0x4f689c]
mov edx, dword [0x4f6ef8]
push eax
mov eax, dword [0x4f6ef4]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1893
fdiv qword [0x401970]
jmp 0x4c18a4
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6efc], 0
jne 0x4c18f2
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6f20], 0xffff
jne 0x4c1968
mov ecx, dword [0x4f68a0]
mov edx, dword [0x4f689c]
mov eax, dword [0x4f6f1c]
push ecx
mov ecx, dword [0x4f6f18]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1932
fdiv qword [0x401970]
jmp 0x4c1943
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6f20], 0
jne 0x4c1991
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6f44], 0xffff
jne 0x4c1a0a
mov edx, dword [0x4f68a0]
mov eax, dword [0x4f689c]
mov ecx, dword [0x4f6f40]
push edx
mov edx, dword [0x4f6f3c]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c19d1
fdiv qword [0x401970]
jmp 0x4c19e2
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6f44], 0
jne 0x4c1a36
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
or eax, 0xffffffff
cmp word [0x4f7ef2], ax
jne 0x4c1ae9
cmp word [0x4f80f4], ax
jne 0x4c1abd
mov eax, dword [0x4f68a0]
mov ecx, dword [0x4f689c]
mov edx, dword [0x4f80e4]
push eax
mov eax, dword [0x4f80e0]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1a84
fdiv qword [0x401970]
jmp 0x4c1a95
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f80f4], 0
jne 0x4c1ae9
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0xc0]
push ecx
lea eax, [ebp - 0xec]
push edx
push eax
call esi
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x10c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x60]
lea eax, [ebp - 0x11c]
push edx
push eax
call esi
lea ecx, [ebp - 0x50]
push eax
lea edx, [ebp - 0x12c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x14c]
push edx
push eax
call esi
lea ecx, [ebp - 0xd0]
push eax
lea edx, [ebp - 0x15c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa0]
lea ecx, [ebp - 0x16c]
push eax
push ecx
call esi
mov edx, eax
mov ecx, 0x4f7d24
call ebx
lea edx, [ebp - 0x15c]
lea eax, [ebp - 0x14c]
push edx
lea ecx, [ebp - 0x13c]
push eax
lea edx, [ebp - 0x12c]
push ecx
lea eax, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x10c]
push eax
lea edx, [ebp - 0xfc]
push ecx
lea eax, [ebp - 0xec]
push edx
push eax
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 0x64
mov ecx, 2
add esp, 0x24
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x19c], ecx
lea ecx, [ebp - 0x17c]
push 0x4f7d24
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0x3fe00000
mov dword [ebp - 0x18c], 5
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xfc]
push eax
push ecx
call esi
lea edx, [ebp - 0x10c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
push eax
lea eax, [ebp - 0x19c]
lea ecx, [ebp - 0x11c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
mov edx, eax
mov ecx, 0x4f7d24
call ebx
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [0x4f6e02], 0xffff
jne 0x4c1cdc
mov edx, dword [0x4f68b0]
mov eax, dword [0x4f68ac]
mov ecx, dword [0x4f6dfc]
push edx
mov edx, dword [0x4f6df8]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1ca4
fdiv qword [0x401970]
jmp 0x4c1cb5
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d64
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e02], 0
jne 0x4c1d07
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d64
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
lea eax, [ebp - 0x17c]
push 0x4f7d64
push eax
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x4c1dd8
mov ecx, 0x64
push 0x4f7d64
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x194], ecx
lea ecx, [ebp - 0x17c]
lea edx, [ebp - 0xec]
mov eax, 2
push ecx
push edx
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0x3fe00000
mov dword [ebp - 0x18c], 5
mov dword [ebp - 0x19c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xfc]
push eax
push ecx
call esi
lea edx, [ebp - 0x10c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
push eax
lea eax, [ebp - 0x19c]
lea ecx, [ebp - 0x11c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
mov edx, eax
mov ecx, 0x4f7d64
call ebx
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [0x4f6e26], 0xffff
jne 0x4c1e50
mov edx, dword [0x4f68b0]
mov eax, dword [0x4f68ac]
mov ecx, dword [0x4f6e20]
push edx
mov edx, dword [0x4f6e1c]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1e18
fdiv qword [0x401970]
jmp 0x4c1e29
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d74
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e26], 0
jne 0x4c1e7b
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d74
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6e4a], 0xffff
jne 0x4c1ef2
mov eax, dword [0x4f68b0]
mov ecx, dword [0x4f68ac]
mov edx, dword [0x4f6e44]
push eax
mov eax, dword [0x4f6e40]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1eba
fdiv qword [0x401970]
jmp 0x4c1ecb
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d84
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e4a], 0
jne 0x4c1f1d
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d84
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6e6e], 0xffff
jne 0x4c1f95
mov ecx, dword [0x4f68b0]
mov edx, dword [0x4f68ac]
mov eax, dword [0x4f6e68]
push ecx
mov ecx, dword [0x4f6e64]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c1f5d
fdiv qword [0x401970]
jmp 0x4c1f6e
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d94
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e6e], 0
jne 0x4c1fc0
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7d94
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6e92], 0xffff
jne 0x4c2038
mov edx, dword [0x4f68b0]
mov eax, dword [0x4f68ac]
mov ecx, dword [0x4f6e8c]
push edx
mov edx, dword [0x4f6e88]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c2000
fdiv qword [0x401970]
jmp 0x4c2011
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7da4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6e92], 0
jne 0x4c2063
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7da4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6eb6], 0xffff
jne 0x4c20da
mov eax, dword [0x4f68b0]
mov ecx, dword [0x4f68ac]
mov edx, dword [0x4f6eb0]
push eax
mov eax, dword [0x4f6eac]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c20a2
fdiv qword [0x401970]
jmp 0x4c20b3
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7db4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6eb6], 0
jne 0x4c2105
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7db4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6eda], 0xffff
jne 0x4c217d
mov ecx, dword [0x4f68b0]
mov edx, dword [0x4f68ac]
mov eax, dword [0x4f6ed4]
push ecx
mov ecx, dword [0x4f6ed0]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c2145
fdiv qword [0x401970]
jmp 0x4c2156
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7dc4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6eda], 0
jne 0x4c21a8
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7dc4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6efe], 0xffff
jne 0x4c2220
mov edx, dword [0x4f68b0]
mov eax, dword [0x4f68ac]
mov ecx, dword [0x4f6ef8]
push edx
mov edx, dword [0x4f6ef4]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c21e8
fdiv qword [0x401970]
jmp 0x4c21f9
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7dd4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6efe], 0
jne 0x4c224b
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7dd4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6f22], 0xffff
jne 0x4c22c2
mov eax, dword [0x4f68b0]
mov ecx, dword [0x4f68ac]
mov edx, dword [0x4f6f1c]
push eax
mov eax, dword [0x4f6f18]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c228a
fdiv qword [0x401970]
jmp 0x4c229b
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7de4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6f22], 0
jne 0x4c22ed
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7de4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x4f6f46], 0xffff
jne 0x4c2365
mov ecx, dword [0x4f68b0]
mov edx, dword [0x4f68ac]
mov eax, dword [0x4f6f40]
push ecx
mov ecx, dword [0x4f6f3c]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c232d
fdiv qword [0x401970]
jmp 0x4c233e
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7df4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4c2772
call ebx
cmp word [0x4f6f46], 0
jne 0x4c2390
lea edx, [ebp - 0x17c]
mov ecx, 0x4f7df4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
or eax, 0xffffffff
cmp word [0x4f7ef2], ax
jne 0x4c2428
cmp word [0x4f80f6], ax
jne 0x4c240b
mov edx, dword [0x4f68b0]
mov eax, dword [0x4f68ac]
mov ecx, dword [0x4f80e4]
push edx
mov edx, dword [0x4f80e0]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4c23df
fdiv qword [0x401970]
jmp 0x4c23f0
push dword [0x401974]
push dword [0x401970]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fnstsw ax
test al, 0xd
jne 0x4c2772
call dword [sym.imp.MSVBVM60.DLL___vbaFpCy]
mov dword [0x4f80fc], eax
mov dword [0x4f8100], edx
cmp word [0x4f80f6], 0
jne 0x4c2428
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
mov dword [0x4f80fc], eax
mov dword [0x4f8100], edx
mov eax, dword [0x4f80fc]
mov ecx, dword [0x4f8100]
push 0x4f7d74
lea edx, [ebp - 0xec]
push 0x4f7d84
push edx
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], 6
call esi
push eax
lea eax, [ebp - 0xfc]
push 0x4f7d94
push eax
call esi
push eax
lea ecx, [ebp - 0x10c]
push 0x4f7da4
push ecx
call esi
push eax
lea edx, [ebp - 0x11c]
push 0x4f7db4
push edx
call esi
push eax
lea eax, [ebp - 0x12c]
push 0x4f7dc4
push eax
call esi
push eax
lea ecx, [ebp - 0x13c]
push 0x4f7dd4
push ecx
call esi
push eax
lea edx, [ebp - 0x14c]
push 0x4f7de4
push edx
call esi
push eax
lea eax, [ebp - 0x15c]
push 0x4f7df4
push eax
call esi
lea ecx, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x16c]
push ecx
push edx
call esi
mov edx, eax
mov ecx, 0x4f7d34
call ebx
lea eax, [ebp - 0x15c]
lea ecx, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x13c]
push ecx
lea eax, [ebp - 0x12c]
push edx
lea ecx, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x10c]
push ecx
lea eax, [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xec]
push eax
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 0x64
mov ecx, 2
add esp, 0x24
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0x3fe00000
mov dword [ebp - 0x18c], 5
mov dword [ebp - 0x194], eax
lea edx, [ebp - 0x17c]
push 0x4f7d34
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x19c], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
lea ecx, [ebp - 0x18c]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
lea ecx, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x11c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
mov edx, eax
mov ecx, 0x4f7d34
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xfc]
call edi
mov eax, dword [0x4f6298]
mov ecx, dword [0x4f629c]
lea edx, [ebp - 0x17c]
mov dword [ebp - 0x174], eax
push edx
push 0x4f7d64
lea eax, [ebp - 0xec]
push 0x4f7d34
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], 0x8006
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGe]
lea ecx, [ebp - 0xec]
mov esi, eax
call edi
test si, si
je 0x4c2678
mov ecx, dword [0x4f6298]
mov edx, dword [0x4f629c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x174], ecx
push eax
lea ecx, [ebp - 0xec]
push 0x4f7d64
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], 6
call esi
push eax
lea edx, [ebp - 0xfc]
push 0x4f7d34
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
wait
push 0x4c2761
jmp 0x4c270f
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
wait
push 0x4c2761
jmp 0x4c270f
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x90]
call esi
lea ecx, [ebp - 0xa0]
call esi
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0xc0]
call esi
lea ecx, [ebp - 0xd0]
call esi
ret
jmp 0x403d3c