Function at 0x49b15e30
Capabilities:
Create new key via cryptacquirecontext

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x49aa1c56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x890
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x49ba0268
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x48c], eax
mov dword [ebp - 0x49c], eax
push eax
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x4dc], eax
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x4fc], eax
mov dword [ebp - 0x50c], eax
mov dword [ebp - 0x51c], eax
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x56c], eax
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x58c], eax
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 0x5fc], eax
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x65c], eax
mov dword [ebp - 0x66c], eax
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x6bc], eax
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 0x6dc], eax
mov dword [ebp - 0x6ec], eax
mov dword [ebp - 0x6fc], eax
mov dword [ebp - 0x70c], eax
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x73c], eax
mov dword [ebp - 0x74c], eax
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x76c], eax
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x79c], eax
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 0x7bc], eax
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x7dc], eax
mov dword [ebp - 0x7ec], eax
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x880], eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov edi, dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov dword [ebp - 0x884], eax
lea eax, [ebp - 0x2c]
push 0x4d
push eax
call edi
mov ebx, dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromChar]
lea ecx, [ebp - 0x3c]
push 0x69
push ecx
call ebx
lea edx, [ebp - 0x5c]
push 0x63
push edx
call ebx
push 0x72
lea eax, [ebp - 0x7c]
push eax
call edi
lea ecx, [ebp - 0x9c]
push 0x6f
push ecx
call edi
lea edx, [ebp - 0xbc]
push 0x73
push edx
call edi
lea eax, [ebp - 0xdc]
push 0x6f
push eax
call ebx
lea ecx, [ebp - 0xfc]
push 0x66
push ecx
call ebx
lea edx, [ebp - 0x11c]
push 0x74
push edx
call ebx
lea eax, [ebp - 0x13c]
push 0x20
push eax
call edi
lea ecx, [ebp - 0x15c]
push 0x45
push ecx
call edi
lea edx, [ebp - 0x17c]
push 0x6e
push edx
call edi
lea eax, [ebp - 0x19c]
push 0x68
push eax
call ebx
lea ecx, [ebp - 0x1bc]
push 0x61
push ecx
call edi
lea edx, [ebp - 0x1dc]
push 0x6e
push edx
call ebx
lea eax, [ebp - 0x1fc]
push 0x63
push eax
call ebx
lea ecx, [ebp - 0x21c]
push 0x65
push ecx
call ebx
lea edx, [ebp - 0x23c]
push 0x64
push edx
call edi
lea eax, [ebp - 0x25c]
push 0x20
push eax
call ebx
lea ecx, [ebp - 0x27c]
push 0x52
push ecx
call ebx
lea edx, [ebp - 0x29c]
push 0x53
push edx
call ebx
lea eax, [ebp - 0x2bc]
push 0x41
push eax
call edi
lea ecx, [ebp - 0x2dc]
push 0x20
push ecx
call ebx
push 0x61
lea edx, [ebp - 0x2fc]
push edx
call edi
lea eax, [ebp - 0x31c]
push 0x6e
push eax
call edi
lea ecx, [ebp - 0x33c]
push 0x64
push ecx
call edi
lea edx, [ebp - 0x35c]
push 0x20
push edx
call ebx
lea eax, [ebp - 0x37c]
push 0x41
push eax
call ebx
lea ecx, [ebp - 0x39c]
push 0x45
push ecx
call ebx
lea edx, [ebp - 0x3bc]
push 0x53
push edx
call edi
lea eax, [ebp - 0x3dc]
push 0x20
push eax
call edi
lea ecx, [ebp - 0x3fc]
push 0x43
push ecx
call ebx
lea edx, [ebp - 0x41c]
push 0x72
push edx
call edi
lea eax, [ebp - 0x43c]
push 0x79
push eax
call ebx
lea ecx, [ebp - 0x45c]
push 0x70
push ecx
call edi
lea edx, [ebp - 0x47c]
push 0x74
push edx
call edi
lea eax, [ebp - 0x49c]
push 0x6f
push eax
call ebx
lea ecx, [ebp - 0x4bc]
push 0x67
push ecx
call ebx
lea edx, [ebp - 0x4dc]
push 0x72
push edx
call ebx
lea eax, [ebp - 0x4fc]
push 0x61
push eax
call ebx
lea ecx, [ebp - 0x51c]
push 0x70
push ecx
call edi
lea edx, [ebp - 0x53c]
push 0x68
push edx
call ebx
lea eax, [ebp - 0x55c]
push 0x69
push eax
call edi
lea ecx, [ebp - 0x57c]
push 0x63
push ecx
call ebx
lea edx, [ebp - 0x59c]
push 0x20
push edx
call edi
lea eax, [ebp - 0x5bc]
push 0x50
push eax
call ebx
lea ecx, [ebp - 0x5dc]
push 0x72
push ecx
call ebx
lea edx, [ebp - 0x5fc]
push 0x6f
push edx
call ebx
lea eax, [ebp - 0x61c]
push 0x76
push eax
call edi
lea ecx, [ebp - 0x63c]
push 0x69
push ecx
call ebx
lea edx, [ebp - 0x65c]
push 0x64
push edx
call ebx
lea eax, [ebp - 0x67c]
push 0x65
push eax
call edi
lea ecx, [ebp - 0x69c]
push 0x72
push ecx
call ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x4c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x5c]
lea eax, [ebp - 0x6c]
push edx
push eax
call esi
lea ecx, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x8c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0xac]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xbc]
lea eax, [ebp - 0xcc]
push edx
push eax
call esi
lea ecx, [ebp - 0xdc]
push eax
lea edx, [ebp - 0xec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xfc]
lea ecx, [ebp - 0x10c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x11c]
lea eax, [ebp - 0x12c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
push eax
lea edx, [ebp - 0x14c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x15c]
lea ecx, [ebp - 0x16c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x17c]
lea eax, [ebp - 0x18c]
push edx
push eax
call esi
lea ecx, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x1ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1bc]
lea ecx, [ebp - 0x1cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x1dc]
lea eax, [ebp - 0x1ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x1fc]
push eax
lea edx, [ebp - 0x20c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x22c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x23c]
lea eax, [ebp - 0x24c]
push edx
push eax
call esi
lea ecx, [ebp - 0x25c]
push eax
lea edx, [ebp - 0x26c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x27c]
lea ecx, [ebp - 0x28c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x29c]
lea eax, [ebp - 0x2ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x2bc]
push eax
push ecx
lea edx, [ebp - 0x2cc]
push edx
call esi
push eax
lea eax, [ebp - 0x2dc]
lea ecx, [ebp - 0x2ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x2fc]
lea eax, [ebp - 0x30c]
push edx
push eax
call esi
lea ecx, [ebp - 0x31c]
push eax
lea edx, [ebp - 0x32c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x33c]
lea ecx, [ebp - 0x34c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x36c]
push edx
push eax
call esi
lea ecx, [ebp - 0x37c]
push eax
lea edx, [ebp - 0x38c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x39c]
lea ecx, [ebp - 0x3ac]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x3bc]
lea eax, [ebp - 0x3cc]
push edx
push eax
call esi
lea ecx, [ebp - 0x3dc]
push eax
lea edx, [ebp - 0x3ec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x3fc]
lea ecx, [ebp - 0x40c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x41c]
lea eax, [ebp - 0x42c]
push edx
push eax
call esi
lea ecx, [ebp - 0x43c]
push eax
lea edx, [ebp - 0x44c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x45c]
lea ecx, [ebp - 0x46c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x47c]
lea eax, [ebp - 0x48c]
push edx
push eax
call esi
lea ecx, [ebp - 0x49c]
push eax
lea edx, [ebp - 0x4ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x4bc]
lea ecx, [ebp - 0x4cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x4dc]
lea eax, [ebp - 0x4ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x4fc]
push eax
lea edx, [ebp - 0x50c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x51c]
lea ecx, [ebp - 0x52c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x53c]
lea eax, [ebp - 0x54c]
push edx
push eax
call esi
lea ecx, [ebp - 0x55c]
push eax
lea edx, [ebp - 0x56c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x57c]
lea ecx, [ebp - 0x58c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x59c]
lea eax, [ebp - 0x5ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x5bc]
push eax
lea edx, [ebp - 0x5cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x5dc]
lea ecx, [ebp - 0x5ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x5fc]
lea eax, [ebp - 0x60c]
push edx
push eax
call esi
lea ecx, [ebp - 0x61c]
push eax
push ecx
lea edx, [ebp - 0x62c]
push edx
call esi
push eax
lea eax, [ebp - 0x63c]
lea ecx, [ebp - 0x64c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x65c]
lea eax, [ebp - 0x66c]
push edx
push eax
call esi
lea ecx, [ebp - 0x67c]
push eax
lea edx, [ebp - 0x68c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x69c]
lea ecx, [ebp - 0x6ac]
push eax
push ecx
call esi
lea edx, [ebp - 0x1c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
push 0
push 0x18
push eax
mov eax, dword [ebp - 0x884]
lea ecx, [ebp - 0x18]
push eax
push ecx
call dword [sym.imp.ADVAPI32.DLL_CryptAcquireContextW]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x1c]
inc eax
neg eax
mov dword [ebp - 0x88c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x1fc]
lea eax, [ebp - 0x1ec]
push edx
lea ecx, [ebp - 0x1dc]
push eax
lea edx, [ebp - 0x1cc]
push ecx
lea eax, [ebp - 0x1bc]
push edx
lea ecx, [ebp - 0x1ac]
push eax
lea edx, [ebp - 0x19c]
push ecx
lea eax, [ebp - 0x18c]
push edx
lea ecx, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x16c]
push ecx
lea eax, [ebp - 0x15c]
push edx
lea ecx, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x13c]
push ecx
lea eax, [ebp - 0x12c]
push edx
lea ecx, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x10c]
push ecx
push edx
lea eax, [ebp - 0xfc]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xdc]
push ecx
lea eax, [ebp - 0xcc]
push edx
lea ecx, [ebp - 0xbc]
push eax
lea edx, [ebp - 0xac]
push ecx
lea eax, [ebp - 0x9c]
push edx
lea ecx, [ebp - 0x8c]
push eax
lea edx, [ebp - 0x7c]
push ecx
lea eax, [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x5c]
push eax
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x3dc]
push ecx
lea eax, [ebp - 0x3cc]
push edx
lea ecx, [ebp - 0x3bc]
push eax
lea edx, [ebp - 0x3ac]
push ecx
lea eax, [ebp - 0x39c]
push edx
lea ecx, [ebp - 0x38c]
push eax
lea edx, [ebp - 0x37c]
push ecx
lea eax, [ebp - 0x36c]
push edx
lea ecx, [ebp - 0x35c]
push eax
lea edx, [ebp - 0x34c]
push ecx
lea eax, [ebp - 0x33c]
push edx
lea ecx, [ebp - 0x32c]
push eax
lea edx, [ebp - 0x31c]
push ecx
lea eax, [ebp - 0x30c]
push edx
lea ecx, [ebp - 0x2fc]
push eax
lea edx, [ebp - 0x2ec]
push ecx
lea eax, [ebp - 0x2dc]
push edx
lea ecx, [ebp - 0x2cc]
push eax
lea edx, [ebp - 0x2bc]
push ecx
lea eax, [ebp - 0x2ac]
push edx
lea ecx, [ebp - 0x29c]
push eax
lea edx, [ebp - 0x28c]
push ecx
lea eax, [ebp - 0x27c]
push edx
lea ecx, [ebp - 0x26c]
push eax
lea edx, [ebp - 0x25c]
push ecx
lea eax, [ebp - 0x24c]
push edx
lea ecx, [ebp - 0x23c]
push eax
push ecx
lea edx, [ebp - 0x22c]
lea eax, [ebp - 0x21c]
push edx
lea ecx, [ebp - 0x20c]
push eax
lea edx, [ebp - 0x5bc]
push ecx
lea eax, [ebp - 0x5ac]
push edx
lea ecx, [ebp - 0x59c]
push eax
lea edx, [ebp - 0x58c]
push ecx
lea eax, [ebp - 0x57c]
push edx
lea ecx, [ebp - 0x56c]
push eax
lea edx, [ebp - 0x55c]
push ecx
lea eax, [ebp - 0x54c]
push edx
lea ecx, [ebp - 0x53c]
push eax
lea edx, [ebp - 0x52c]
push ecx
lea eax, [ebp - 0x51c]
push edx
lea ecx, [ebp - 0x50c]
push eax
lea edx, [ebp - 0x4fc]
push ecx
lea eax, [ebp - 0x4ec]
push edx
lea ecx, [ebp - 0x4dc]
push eax
lea edx, [ebp - 0x4cc]
push ecx
lea eax, [ebp - 0x4bc]
push edx
lea ecx, [ebp - 0x4ac]
push eax
lea edx, [ebp - 0x49c]
push ecx
lea eax, [ebp - 0x48c]
push edx
lea ecx, [ebp - 0x47c]
push eax
lea edx, [ebp - 0x46c]
push ecx
lea eax, [ebp - 0x45c]
push edx
lea ecx, [ebp - 0x44c]
push eax
lea edx, [ebp - 0x43c]
push ecx
lea eax, [ebp - 0x42c]
push edx
lea ecx, [ebp - 0x41c]
push eax
lea edx, [ebp - 0x40c]
push ecx
lea eax, [ebp - 0x3fc]
push edx
lea ecx, [ebp - 0x3ec]
push eax
lea edx, [ebp - 0x6ac]
push ecx
lea eax, [ebp - 0x69c]
push edx
lea ecx, [ebp - 0x68c]
push eax
lea edx, [ebp - 0x67c]
push ecx
lea eax, [ebp - 0x66c]
push edx
lea ecx, [ebp - 0x65c]
push eax
lea edx, [ebp - 0x64c]
push ecx
push edx
lea eax, [ebp - 0x63c]
lea ecx, [ebp - 0x62c]
push eax
lea edx, [ebp - 0x61c]
push ecx
lea eax, [ebp - 0x60c]
push edx
lea ecx, [ebp - 0x5fc]
push eax
lea edx, [ebp - 0x5ec]
push ecx
lea eax, [ebp - 0x5dc]
push edx
lea ecx, [ebp - 0x5cc]
push eax
push ecx
push 0x69
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1a8
cmp word [ebp - 0x88c], 0
je 0x49b18b79
push 0
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
lea edx, [ebp - 0x2c]
push 0x4d
push edx
mov dword [ebp - 0x884], eax
call edi
lea eax, [ebp - 0x3c]
push 0x69
push eax
call ebx
lea ecx, [ebp - 0x5c]
push 0x63
push ecx
call ebx
lea edx, [ebp - 0x7c]
push 0x72
push edx
call edi
lea eax, [ebp - 0x9c]
push 0x6f
push eax
call edi
lea ecx, [ebp - 0xbc]
push 0x73
push ecx
call edi
lea edx, [ebp - 0xdc]
push 0x6f
push edx
call ebx
lea eax, [ebp - 0xfc]
push 0x66
push eax
call ebx
lea ecx, [ebp - 0x11c]
push 0x74
push ecx
call ebx
lea edx, [ebp - 0x13c]
push 0x20
push edx
call edi
lea eax, [ebp - 0x15c]
push 0x45
push eax
call edi
lea ecx, [ebp - 0x17c]
push 0x6e
push ecx
call edi
lea edx, [ebp - 0x19c]
push 0x68
push edx
call ebx
lea eax, [ebp - 0x1bc]
push 0x61
push eax
call edi
lea ecx, [ebp - 0x1dc]
push 0x6e
push ecx
call ebx
lea edx, [ebp - 0x1fc]
push 0x63
push edx
call ebx
lea eax, [ebp - 0x21c]
push 0x65
push eax
call ebx
lea ecx, [ebp - 0x23c]
push 0x64
push ecx
call edi
lea edx, [ebp - 0x25c]
push 0x20
push edx
call ebx
push 0x52
lea eax, [ebp - 0x27c]
push eax
call ebx
lea ecx, [ebp - 0x29c]
push 0x53
push ecx
call ebx
lea edx, [ebp - 0x2bc]
push 0x41
push edx
call edi
lea eax, [ebp - 0x2dc]
push 0x20
push eax
call ebx
lea ecx, [ebp - 0x2fc]
push 0x61
push ecx
call edi
lea edx, [ebp - 0x31c]
push 0x6e
push edx
call edi
lea eax, [ebp - 0x33c]
push 0x64
push eax
call edi
lea ecx, [ebp - 0x35c]
push 0x20
push ecx
call ebx
lea edx, [ebp - 0x37c]
push 0x41
push edx
call ebx
lea eax, [ebp - 0x39c]
push 0x45
push eax
call ebx
lea ecx, [ebp - 0x3bc]
push 0x53
push ecx
call edi
lea edx, [ebp - 0x3dc]
push 0x20
push edx
call edi
lea eax, [ebp - 0x3fc]
push 0x43
push eax
call ebx
lea ecx, [ebp - 0x41c]
push 0x72
push ecx
call edi
lea edx, [ebp - 0x43c]
push 0x79
push edx
call ebx
lea eax, [ebp - 0x45c]
push 0x70
push eax
call edi
lea ecx, [ebp - 0x47c]
push 0x74
push ecx
call edi
lea edx, [ebp - 0x49c]
push 0x6f
push edx
call ebx
lea eax, [ebp - 0x4bc]
push 0x67
push eax
call ebx
lea ecx, [ebp - 0x4dc]
push 0x72
push ecx
call ebx
lea edx, [ebp - 0x4fc]
push 0x61
push edx
call ebx
lea eax, [ebp - 0x51c]
push 0x70
push eax
call edi
lea ecx, [ebp - 0x53c]
push 0x68
push ecx
call ebx
lea edx, [ebp - 0x55c]
push 0x69
push edx
call edi
lea eax, [ebp - 0x57c]
push 0x63
push eax
call ebx
lea ecx, [ebp - 0x59c]
push 0x20
push ecx
call edi
lea edx, [ebp - 0x5bc]
push 0x50
push edx
call ebx
lea eax, [ebp - 0x5dc]
push 0x72
push eax
call ebx
lea ecx, [ebp - 0x5fc]
push 0x6f
push ecx
call ebx
lea edx, [ebp - 0x61c]
push 0x76
push edx
call edi
lea eax, [ebp - 0x63c]
push 0x69
push eax
call ebx
lea ecx, [ebp - 0x65c]
push 0x64
push ecx
call ebx
lea edx, [ebp - 0x67c]
push 0x65
push edx
call edi
lea eax, [ebp - 0x69c]
push 0x72
push eax
call ebx
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x4c]
push edx
push eax
call esi
lea ecx, [ebp - 0x5c]
push eax
lea edx, [ebp - 0x6c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x7c]
lea ecx, [ebp - 0x8c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0xac]
push edx
push eax
call esi
lea ecx, [ebp - 0xbc]
push eax
push ecx
lea edx, [ebp - 0xcc]
push edx
call esi
push eax
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xfc]
lea eax, [ebp - 0x10c]
push edx
push eax
call esi
lea ecx, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x12c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x14c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x15c]
lea eax, [ebp - 0x16c]
push edx
push eax
call esi
lea ecx, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x18c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x19c]
lea ecx, [ebp - 0x1ac]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x1bc]
lea eax, [ebp - 0x1cc]
push edx
push eax
call esi
lea ecx, [ebp - 0x1dc]
push eax
lea edx, [ebp - 0x1ec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1fc]
lea ecx, [ebp - 0x20c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x21c]
lea eax, [ebp - 0x22c]
push edx
push eax
call esi
lea ecx, [ebp - 0x23c]
push eax
lea edx, [ebp - 0x24c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x25c]
lea ecx, [ebp - 0x26c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x27c]
lea eax, [ebp - 0x28c]
push edx
push eax
call esi
lea ecx, [ebp - 0x29c]
push eax
lea edx, [ebp - 0x2ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x2bc]
lea ecx, [ebp - 0x2cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x2dc]
lea eax, [ebp - 0x2ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x2fc]
push eax
lea edx, [ebp - 0x30c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x31c]
lea ecx, [ebp - 0x32c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x33c]
lea eax, [ebp - 0x34c]
push edx
push eax
call esi
lea ecx, [ebp - 0x35c]
push eax
lea edx, [ebp - 0x36c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x37c]
lea ecx, [ebp - 0x38c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x39c]
lea eax, [ebp - 0x3ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x3bc]
push eax
lea edx, [ebp - 0x3cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x3dc]
lea ecx, [ebp - 0x3ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x3fc]
lea eax, [ebp - 0x40c]
push edx
push eax
call esi
lea ecx, [ebp - 0x41c]
push eax
push ecx
lea edx, [ebp - 0x42c]
push edx
call esi
push eax
lea eax, [ebp - 0x43c]
lea ecx, [ebp - 0x44c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x45c]
lea eax, [ebp - 0x46c]
push edx
push eax
call esi
lea ecx, [ebp - 0x47c]
push eax
lea edx, [ebp - 0x48c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x49c]
lea ecx, [ebp - 0x4ac]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x4bc]
lea eax, [ebp - 0x4cc]
push edx
push eax
call esi
lea ecx, [ebp - 0x4dc]
push eax
lea edx, [ebp - 0x4ec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x4fc]
lea ecx, [ebp - 0x50c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x51c]
lea eax, [ebp - 0x52c]
push edx
push eax
call esi
lea ecx, [ebp - 0x53c]
push eax
lea edx, [ebp - 0x54c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x55c]
lea ecx, [ebp - 0x56c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x57c]
lea eax, [ebp - 0x58c]
push edx
push eax
call esi
lea ecx, [ebp - 0x59c]
push eax
lea edx, [ebp - 0x5ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x5bc]
lea ecx, [ebp - 0x5cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x5dc]
lea eax, [ebp - 0x5ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x5fc]
push eax
lea edx, [ebp - 0x60c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x61c]
lea ecx, [ebp - 0x62c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x63c]
lea eax, [ebp - 0x64c]
push edx
push eax
call esi
lea ecx, [ebp - 0x65c]
push eax
lea edx, [ebp - 0x66c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x67c]
lea ecx, [ebp - 0x68c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x69c]
lea eax, [ebp - 0x6ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x1c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov edx, dword [ebp - 0x884]
push 8
push 0x18
push eax
lea eax, [ebp - 0x18]
push edx
push eax
call dword [sym.imp.ADVAPI32.DLL_CryptAcquireContextW]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x1c]
inc eax
neg eax
mov dword [ebp - 0x88c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1fc]
lea edx, [ebp - 0x1ec]
push ecx
lea eax, [ebp - 0x1dc]
push edx
lea ecx, [ebp - 0x1cc]
push eax
lea edx, [ebp - 0x1bc]
push ecx
lea eax, [ebp - 0x1ac]
push edx
lea ecx, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x18c]
push ecx
lea eax, [ebp - 0x17c]
push edx
push eax
lea ecx, [ebp - 0x16c]
lea edx, [ebp - 0x15c]
push ecx
lea eax, [ebp - 0x14c]
push edx
lea ecx, [ebp - 0x13c]
push eax
lea edx, [ebp - 0x12c]
push ecx
lea eax, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x10c]
push eax
lea edx, [ebp - 0xfc]
push ecx
lea eax, [ebp - 0xec]
push edx
lea ecx, [ebp - 0xdc]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xbc]
push edx
lea ecx, [ebp - 0xac]
push eax
lea edx, [ebp - 0x9c]
push ecx
lea eax, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x6c]
push ecx
lea eax, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x3dc]
push eax
lea edx, [ebp - 0x3cc]
push ecx
lea eax, [ebp - 0x3bc]
push edx
lea ecx, [ebp - 0x3ac]
push eax
lea edx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x38c]
push edx
lea ecx, [ebp - 0x37c]
push eax
lea edx, [ebp - 0x36c]
push ecx
lea eax, [ebp - 0x35c]
push edx
lea ecx, [ebp - 0x34c]
push eax
lea edx, [ebp - 0x33c]
push ecx
lea eax, [ebp - 0x32c]
push edx
lea ecx, [ebp - 0x31c]
push eax
lea edx, [ebp - 0x30c]
push ecx
lea eax, [ebp - 0x2fc]
push edx
lea ecx, [ebp - 0x2ec]
push eax
lea edx, [ebp - 0x2dc]
push ecx
lea eax, [ebp - 0x2cc]
push edx
lea ecx, [ebp - 0x2bc]
push eax
push ecx
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x28c]
push eax
lea edx, [ebp - 0x27c]
push ecx
lea eax, [ebp - 0x26c]
push edx
lea ecx, [ebp - 0x25c]
push eax
lea edx, [ebp - 0x24c]
push ecx
lea eax, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x22c]
push eax
lea edx, [ebp - 0x21c]
push ecx
lea eax, [ebp - 0x20c]
push edx
lea ecx, [ebp - 0x5bc]
push eax
lea edx, [ebp - 0x5ac]
push ecx
lea eax, [ebp - 0x59c]
push edx
lea ecx, [ebp - 0x58c]
push eax
lea edx, [ebp - 0x57c]
push ecx
lea eax, [ebp - 0x56c]
push edx
lea ecx, [ebp - 0x55c]
push eax
lea edx, [ebp - 0x54c]
push ecx
lea eax, [ebp - 0x53c]
push edx
lea ecx, [ebp - 0x52c]
push eax
lea edx, [ebp - 0x51c]
push ecx
lea eax, [ebp - 0x50c]
push edx
lea ecx, [ebp - 0x4fc]
push eax
lea edx, [ebp - 0x4ec]
push ecx
lea eax, [ebp - 0x4dc]
push edx
lea ecx, [ebp - 0x4cc]
push eax
lea edx, [ebp - 0x4bc]
push ecx
lea eax, [ebp - 0x4ac]
push edx
lea ecx, [ebp - 0x49c]
push eax
lea edx, [ebp - 0x48c]
push ecx
lea eax, [ebp - 0x47c]
push edx
lea ecx, [ebp - 0x46c]
push eax
lea edx, [ebp - 0x45c]
push ecx
lea eax, [ebp - 0x44c]
push edx
lea ecx, [ebp - 0x43c]
push eax
lea edx, [ebp - 0x42c]
push ecx
lea eax, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x40c]
push eax
lea edx, [ebp - 0x3fc]
push ecx
lea eax, [ebp - 0x3ec]
push edx
push eax
lea ecx, [ebp - 0x6ac]
lea edx, [ebp - 0x69c]
push ecx
lea eax, [ebp - 0x68c]
push edx
lea ecx, [ebp - 0x67c]
push eax
lea edx, [ebp - 0x66c]
push ecx
lea eax, [ebp - 0x65c]
push edx
lea ecx, [ebp - 0x64c]
push eax
lea edx, [ebp - 0x63c]
push ecx
lea eax, [ebp - 0x62c]
push edx
lea ecx, [ebp - 0x61c]
push eax
lea edx, [ebp - 0x60c]
push ecx
lea eax, [ebp - 0x5fc]
push edx
lea ecx, [ebp - 0x5ec]
push eax
lea edx, [ebp - 0x5dc]
push ecx
lea eax, [ebp - 0x5cc]
push edx
push eax
push 0x69
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1a8
cmp word [ebp - 0x88c], 0
je 0x49b18b79
push 0
push 4
push 1
lea ecx, [ebp - 0x830]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea edx, [ebp - 0x18]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x840], 3
lea edx, [ebp - 0x840]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x894], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x894]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
push 0
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x850], 3
lea edx, [ebp - 0x850]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x898], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x898]
sub ecx, eax
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x2c]
push 0x4d
push ecx
call edi
lea edx, [ebp - 0x3c]
push 0x69
push edx
call edi
lea eax, [ebp - 0x5c]
push 0x63
push eax
call ebx
lea ecx, [ebp - 0x7c]
push 0x72
push ecx
call ebx
lea edx, [ebp - 0x9c]
push 0x6f
push edx
call ebx
lea eax, [ebp - 0xbc]
push 0x73
push eax
call ebx
lea ecx, [ebp - 0xdc]
push 0x6f
push ecx
call edi
lea edx, [ebp - 0xfc]
push 0x66
push edx
call edi
lea eax, [ebp - 0x11c]
push 0x74
push eax
call edi
lea ecx, [ebp - 0x13c]
push 0x20
push ecx
call ebx
lea edx, [ebp - 0x15c]
push 0x45
push edx
call ebx
lea eax, [ebp - 0x17c]
push 0x6e
push eax
call edi
lea ecx, [ebp - 0x19c]
push 0x68
push ecx
call ebx
lea edx, [ebp - 0x1bc]
push 0x61
push edx
call ebx
lea eax, [ebp - 0x1dc]
push 0x6e
push eax
call ebx
lea ecx, [ebp - 0x1fc]
push 0x63
push ecx
call edi
lea edx, [ebp - 0x21c]
push 0x65
push edx
call edi
lea eax, [ebp - 0x23c]
push 0x64
push eax
call edi
lea ecx, [ebp - 0x25c]
push 0x20
push ecx
call edi
lea edx, [ebp - 0x27c]
push 0x52
push edx
call ebx
lea eax, [ebp - 0x29c]
push 0x53
push eax
call edi
lea ecx, [ebp - 0x2bc]
push 0x41
push ecx
call ebx
lea edx, [ebp - 0x2dc]
push 0x20
push edx
call ebx
lea eax, [ebp - 0x2fc]
push 0x61
push eax
call edi
lea ecx, [ebp - 0x31c]
push 0x6e
push ecx
call ebx
lea edx, [ebp - 0x33c]
push 0x64
push edx
call edi
lea eax, [ebp - 0x35c]
push 0x20
push eax
call edi
lea ecx, [ebp - 0x37c]
push 0x41
push ecx
call ebx
lea edx, [ebp - 0x39c]
push 0x45
push edx
call edi
lea eax, [ebp - 0x3bc]
push 0x53
push eax
call edi
lea ecx, [ebp - 0x3dc]
push 0x20
push ecx
call ebx
lea edx, [ebp - 0x3fc]
push 0x43
push edx
call edi
lea eax, [ebp - 0x41c]
push 0x72
push eax
call ebx
lea ecx, [ebp - 0x43c]
push 0x79
push ecx
call edi
lea edx, [ebp - 0x45c]
push 0x70
push edx
call ebx
lea eax, [ebp - 0x47c]
push 0x74
push eax
call ebx
lea ecx, [ebp - 0x49c]
push 0x6f
push ecx
call ebx
lea edx, [ebp - 0x4bc]
push 0x67
push edx
call ebx
lea eax, [ebp - 0x4dc]
push 0x72
push eax
call edi
lea ecx, [ebp - 0x4fc]
push 0x61
push ecx
call edi
lea edx, [ebp - 0x51c]
push 0x70
push edx
call ebx
lea eax, [ebp - 0x53c]
push 0x68
push eax
call ebx
lea ecx, [ebp - 0x55c]
push 0x69
push ecx
call edi
lea edx, [ebp - 0x57c]
push 0x63
push edx
call ebx
lea eax, [ebp - 0x59c]
push 0x20
push eax
call edi
lea ecx, [ebp - 0x5bc]
push 0x50
push ecx
call edi
lea edx, [ebp - 0x5dc]
push 0x72
push edx
call edi
lea eax, [ebp - 0x5fc]
push 0x6f
push eax
call ebx
lea ecx, [ebp - 0x61c]
push 0x76
push ecx
call ebx
lea edx, [ebp - 0x63c]
push 0x69
push edx
call edi
lea eax, [ebp - 0x65c]
push 0x64
push eax
call edi
push 0x65
lea ecx, [ebp - 0x67c]
push ecx
call edi
lea edx, [ebp - 0x69c]
push 0x72
push edx
call edi
lea eax, [ebp - 0x6bc]
push 0x20
push eax
call ebx
lea ecx, [ebp - 0x6dc]
push 0x28
push ecx
call edi
lea edx, [ebp - 0x6fc]
push 0x50
push edx
call edi
lea eax, [ebp - 0x71c]
push 0x72
push eax
call ebx
lea ecx, [ebp - 0x73c]
push 0x6f
push ecx
call edi
lea edx, [ebp - 0x75c]
push 0x74
push edx
call edi
lea eax, [ebp - 0x77c]
push 0x6f
push eax
call ebx
lea ecx, [ebp - 0x79c]
push 0x74
push ecx
call edi
lea edx, [ebp - 0x7bc]
push 0x79
push edx
call edi
lea eax, [ebp - 0x7dc]
push 0x70
push eax
call ebx
lea ecx, [ebp - 0x7fc]
push 0x65
push ecx
call edi
lea edx, [ebp - 0x81c]
push 0x29
push edx
call ebx
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x3c]
push eax
lea edx, [ebp - 0x4c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x5c]
lea ecx, [ebp - 0x6c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0x8c]
push edx
push eax
call esi
lea ecx, [ebp - 0x9c]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xbc]
lea ecx, [ebp - 0xcc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0xec]
push edx
push eax
call esi
lea ecx, [ebp - 0xfc]
push eax
lea edx, [ebp - 0x10c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x11c]
lea ecx, [ebp - 0x12c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x14c]
push edx
push eax
call esi
lea ecx, [ebp - 0x15c]
push eax
lea edx, [ebp - 0x16c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x17c]
lea ecx, [ebp - 0x18c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x19c]
lea eax, [ebp - 0x1ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x1bc]
push eax
lea edx, [ebp - 0x1cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1dc]
lea ecx, [ebp - 0x1ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x1fc]
lea eax, [ebp - 0x20c]
push edx
push eax
call esi
lea ecx, [ebp - 0x21c]
push eax
lea edx, [ebp - 0x22c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x23c]
lea ecx, [ebp - 0x24c]
push eax
push ecx
call esi
lea edx, [ebp - 0x25c]
push eax
push edx
lea eax, [ebp - 0x26c]
push eax
call esi
lea ecx, [ebp - 0x27c]
push eax
lea edx, [ebp - 0x28c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x29c]
lea ecx, [ebp - 0x2ac]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x2bc]
lea eax, [ebp - 0x2cc]
push edx
push eax
call esi
lea ecx, [ebp - 0x2dc]
push eax
lea edx, [ebp - 0x2ec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x2fc]
lea ecx, [ebp - 0x30c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x31c]
lea eax, [ebp - 0x32c]
push edx
push eax
call esi
lea ecx, [ebp - 0x33c]
push eax
lea edx, [ebp - 0x34c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x35c]
lea ecx, [ebp - 0x36c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x37c]
lea eax, [ebp - 0x38c]
push edx
push eax
call esi
lea ecx, [ebp - 0x39c]
push eax
lea edx, [ebp - 0x3ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x3bc]
lea ecx, [ebp - 0x3cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x3dc]
lea eax, [ebp - 0x3ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x3fc]
push eax
lea edx, [ebp - 0x40c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x41c]
lea ecx, [ebp - 0x42c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x43c]
lea eax, [ebp - 0x44c]
push edx
push eax
call esi
lea ecx, [ebp - 0x45c]
push eax
lea edx, [ebp - 0x46c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x47c]
lea ecx, [ebp - 0x48c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x49c]
lea eax, [ebp - 0x4ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x4bc]
push eax
lea edx, [ebp - 0x4cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x4dc]
lea ecx, [ebp - 0x4ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x4fc]
lea eax, [ebp - 0x50c]
push edx
push eax
call esi
lea ecx, [ebp - 0x51c]
push eax
lea edx, [ebp - 0x52c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x53c]
lea ecx, [ebp - 0x54c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x55c]
lea eax, [ebp - 0x56c]
push edx
push eax
call esi
lea ecx, [ebp - 0x57c]
push eax
lea edx, [ebp - 0x58c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x59c]
lea ecx, [ebp - 0x5ac]
push eax
push ecx
call esi
lea edx, [ebp - 0x5bc]
push eax
push edx
lea eax, [ebp - 0x5cc]
push eax
call esi
lea ecx, [ebp - 0x5dc]
push eax
lea edx, [ebp - 0x5ec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x5fc]
lea ecx, [ebp - 0x60c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x61c]
lea eax, [ebp - 0x62c]
push edx
push eax
call esi
lea ecx, [ebp - 0x63c]
push eax
lea edx, [ebp - 0x64c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0x66c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x67c]
lea eax, [ebp - 0x68c]
push edx
push eax
call esi
lea ecx, [ebp - 0x69c]
push eax
lea edx, [ebp - 0x6ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x6bc]
lea ecx, [ebp - 0x6cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x6dc]
lea eax, [ebp - 0x6ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x6fc]
push eax
lea edx, [ebp - 0x70c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x71c]
lea ecx, [ebp - 0x72c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x73c]
lea eax, [ebp - 0x74c]
push edx
push eax
call esi
lea ecx, [ebp - 0x75c]
push eax
lea edx, [ebp - 0x76c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x77c]
lea ecx, [ebp - 0x78c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x79c]
lea eax, [ebp - 0x7ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x7bc]
push eax
lea edx, [ebp - 0x7cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x7dc]
lea ecx, [ebp - 0x7ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x7fc]
lea eax, [ebp - 0x80c]
push edx
push eax
call esi
lea ecx, [ebp - 0x81c]
push eax
lea edx, [ebp - 0x82c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x830]
mov ecx, 2
mov dword [ebp - 0x860], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x860]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [ebp - 0x830]
mov ecx, 3
mov dword [ebp - 0x868], 0x18
mov dword [ebp - 0x870], ecx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x870]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [ebp - 0x830]
mov ecx, 4
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x880], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x880]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x49bb01f8]
lea ecx, [ebp - 0x830]
push ecx
mov edx, 0x13
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
mov ecx, dword [eax + edx*4]
push ecx
call fcn.49aa1908
lea edx, [ebp - 0x830]
mov dword [ebp - 0x884], eax
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov edx, dword [ebp - 0x884]
xor eax, eax
test edx, edx
sete al
neg eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x88c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1fc]
lea edx, [ebp - 0x1ec]
push ecx
lea eax, [ebp - 0x1dc]
push edx
lea ecx, [ebp - 0x1cc]
push eax
lea edx, [ebp - 0x1bc]
push ecx
lea eax, [ebp - 0x1ac]
push edx
lea ecx, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x18c]
push ecx
lea eax, [ebp - 0x17c]
push edx
lea ecx, [ebp - 0x16c]
push eax
lea edx, [ebp - 0x15c]
push ecx
lea eax, [ebp - 0x14c]
push edx
lea ecx, [ebp - 0x13c]
push eax
lea edx, [ebp - 0x12c]
push ecx
lea eax, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x10c]
push eax
lea edx, [ebp - 0xfc]
push ecx
lea eax, [ebp - 0xec]
push edx
lea ecx, [ebp - 0xdc]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xbc]
push edx
lea ecx, [ebp - 0xac]
push eax
lea edx, [ebp - 0x9c]
push ecx
lea eax, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x6c]
push ecx
lea eax, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x3dc]
push eax
lea edx, [ebp - 0x3cc]
push ecx
lea eax, [ebp - 0x3bc]
push edx
lea ecx, [ebp - 0x3ac]
push eax
lea edx, [ebp - 0x39c]
push ecx
push edx
lea eax, [ebp - 0x38c]
lea ecx, [ebp - 0x37c]
push eax
lea edx, [ebp - 0x36c]
push ecx
lea eax, [ebp - 0x35c]
push edx
lea ecx, [ebp - 0x34c]
push eax
lea edx, [ebp - 0x33c]
push ecx
lea eax, [ebp - 0x32c]
push edx
lea ecx, [ebp - 0x31c]
push eax
lea edx, [ebp - 0x30c]
push ecx
lea eax, [ebp - 0x2fc]
push edx
lea ecx, [ebp - 0x2ec]
push eax
lea edx, [ebp - 0x2dc]
push ecx
lea eax, [ebp - 0x2cc]
push edx
lea ecx, [ebp - 0x2bc]
push eax
lea edx, [ebp - 0x2ac]
push ecx
lea eax, [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x28c]
push eax
lea edx, [ebp - 0x27c]
push ecx
lea eax, [ebp - 0x26c]
push edx
lea ecx, [ebp - 0x25c]
push eax
lea edx, [ebp - 0x24c]
push ecx
lea eax, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x22c]
push eax
lea edx, [ebp - 0x21c]
push ecx
lea eax, [ebp - 0x20c]
push edx
lea ecx, [ebp - 0x5bc]
push eax
lea edx, [ebp - 0x5ac]
push ecx
lea eax, [ebp - 0x59c]
push edx
lea ecx, [ebp - 0x58c]
push eax
lea edx, [ebp - 0x57c]
push ecx
lea eax, [ebp - 0x56c]
push edx
lea ecx, [ebp - 0x55c]
push eax
lea edx, [ebp - 0x54c]
push ecx
lea eax, [ebp - 0x53c]
push edx
lea ecx, [ebp - 0x52c]
push eax
lea edx, [ebp - 0x51c]
push ecx
lea eax, [ebp - 0x50c]
push edx
lea ecx, [ebp - 0x4fc]
push eax
lea edx, [ebp - 0x4ec]
push ecx
lea eax, [ebp - 0x4dc]
push edx
lea ecx, [ebp - 0x4cc]
push eax
push ecx
lea edx, [ebp - 0x4bc]
lea eax, [ebp - 0x4ac]
push edx
lea ecx, [ebp - 0x49c]
push eax
lea edx, [ebp - 0x48c]
push ecx
lea eax, [ebp - 0x47c]
push edx
lea ecx, [ebp - 0x46c]
push eax
lea edx, [ebp - 0x45c]
push ecx
lea eax, [ebp - 0x44c]
push edx
lea ecx, [ebp - 0x43c]
push eax
lea edx, [ebp - 0x42c]
push ecx
lea eax, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x40c]
push eax
lea edx, [ebp - 0x3fc]
push ecx
lea eax, [ebp - 0x3ec]
push edx
lea ecx, [ebp - 0x79c]
push eax
lea edx, [ebp - 0x78c]
push ecx
lea eax, [ebp - 0x77c]
push edx
lea ecx, [ebp - 0x76c]
push eax
lea edx, [ebp - 0x75c]
push ecx
lea eax, [ebp - 0x74c]
push edx
lea ecx, [ebp - 0x73c]
push eax
lea edx, [ebp - 0x72c]
push ecx
lea eax, [ebp - 0x71c]
push edx
lea ecx, [ebp - 0x70c]
push eax
lea edx, [ebp - 0x6fc]
push ecx
lea eax, [ebp - 0x6ec]
push edx
lea ecx, [ebp - 0x6dc]
push eax
lea edx, [ebp - 0x6cc]
push ecx
lea eax, [ebp - 0x6bc]
push edx
lea ecx, [ebp - 0x6ac]
push eax
lea edx, [ebp - 0x69c]
push ecx
lea eax, [ebp - 0x68c]
push edx
lea ecx, [ebp - 0x67c]
push eax
lea edx, [ebp - 0x66c]
push ecx
lea eax, [ebp - 0x65c]
push edx
lea ecx, [ebp - 0x64c]
push eax
lea edx, [ebp - 0x63c]
push ecx
lea eax, [ebp - 0x62c]
push edx
lea ecx, [ebp - 0x61c]
push eax
lea edx, [ebp - 0x60c]
push ecx
push edx
lea eax, [ebp - 0x5fc]
lea ecx, [ebp - 0x5ec]
push eax
lea edx, [ebp - 0x5dc]
push ecx
lea eax, [ebp - 0x5cc]
push edx
lea ecx, [ebp - 0x82c]
push eax
lea edx, [ebp - 0x81c]
push ecx
lea eax, [ebp - 0x80c]
push edx
lea ecx, [ebp - 0x7fc]
push eax
lea edx, [ebp - 0x7ec]
push ecx
lea eax, [ebp - 0x7dc]
push edx
lea ecx, [ebp - 0x7cc]
push eax
lea edx, [ebp - 0x7bc]
push ecx
lea eax, [ebp - 0x7ac]
push edx
push eax
push 0x81
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x208
cmp word [ebp - 0x88c], 0
je 0x49b18b79
push 0
push 4
push 1
lea ecx, [ebp - 0x830]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea edx, [ebp - 0x18]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x840], 3
lea edx, [ebp - 0x840]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x89c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x89c]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
push 0
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x850], 3
lea edx, [ebp - 0x850]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x8a0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x8a0]
sub ecx, eax
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x2c]
push 0x4d
push ecx
call edi
lea edx, [ebp - 0x3c]
push 0x69
push edx
call edi
lea eax, [ebp - 0x5c]
push 0x63
push eax
call ebx
lea ecx, [ebp - 0x7c]
push 0x72
push ecx
call ebx
lea edx, [ebp - 0x9c]
push 0x6f
push edx
call ebx
lea eax, [ebp - 0xbc]
push 0x73
push eax
call ebx
lea ecx, [ebp - 0xdc]
push 0x6f
push ecx
call edi
lea edx, [ebp - 0xfc]
push 0x66
push edx
call edi
lea eax, [ebp - 0x11c]
push 0x74
push eax
call edi
lea ecx, [ebp - 0x13c]
push 0x20
push ecx
call ebx
lea edx, [ebp - 0x15c]
push 0x45
push edx
call ebx
lea eax, [ebp - 0x17c]
push 0x6e
push eax
call edi
lea ecx, [ebp - 0x19c]
push 0x68
push ecx
call ebx
lea edx, [ebp - 0x1bc]
push 0x61
push edx
call ebx
lea eax, [ebp - 0x1dc]
push 0x6e
push eax
call ebx
lea ecx, [ebp - 0x1fc]
push 0x63
push ecx
call edi
lea edx, [ebp - 0x21c]
push 0x65
push edx
call edi
lea eax, [ebp - 0x23c]
push 0x64
push eax
call edi
lea ecx, [ebp - 0x25c]
push 0x20
push ecx
call edi
lea edx, [ebp - 0x27c]
push 0x52
push edx
call ebx
lea eax, [ebp - 0x29c]
push 0x53
push eax
call edi
lea ecx, [ebp - 0x2bc]
push 0x41
push ecx
call ebx
lea edx, [ebp - 0x2dc]
push 0x20
push edx
call ebx
lea eax, [ebp - 0x2fc]
push 0x61
push eax
call edi
lea ecx, [ebp - 0x31c]
push 0x6e
push ecx
call ebx
lea edx, [ebp - 0x33c]
push 0x64
push edx
call edi
lea eax, [ebp - 0x35c]
push 0x20
push eax
call edi
lea ecx, [ebp - 0x37c]
push 0x41
push ecx
call ebx
lea edx, [ebp - 0x39c]
push 0x45
push edx
call edi
lea eax, [ebp - 0x3bc]
push 0x53
push eax
call edi
lea ecx, [ebp - 0x3dc]
push 0x20
push ecx
call ebx
lea edx, [ebp - 0x3fc]
push 0x43
push edx
call edi
lea eax, [ebp - 0x41c]
push 0x72
push eax
call ebx
lea ecx, [ebp - 0x43c]
push 0x79
push ecx
call edi
lea edx, [ebp - 0x45c]
push 0x70
push edx
call ebx
lea eax, [ebp - 0x47c]
push 0x74
push eax
call ebx
lea ecx, [ebp - 0x49c]
push 0x6f
push ecx
call ebx
lea edx, [ebp - 0x4bc]
push 0x67
push edx
call ebx
lea eax, [ebp - 0x4dc]
push 0x72
push eax
call edi
lea ecx, [ebp - 0x4fc]
push 0x61
push ecx
call edi
lea edx, [ebp - 0x51c]
push 0x70
push edx
call ebx
lea eax, [ebp - 0x53c]
push 0x68
push eax
call ebx
lea ecx, [ebp - 0x55c]
push 0x69
push ecx
call edi
lea edx, [ebp - 0x57c]
push 0x63
push edx
call ebx
lea eax, [ebp - 0x59c]
push 0x20
push eax
call edi
lea ecx, [ebp - 0x5bc]
push 0x50
push ecx
call edi
lea edx, [ebp - 0x5dc]
push 0x72
push edx
call edi
lea eax, [ebp - 0x5fc]
push 0x6f
push eax
call ebx
lea ecx, [ebp - 0x61c]
push 0x76
push ecx
call ebx
lea edx, [ebp - 0x63c]
push 0x69
push edx
call edi
lea eax, [ebp - 0x65c]
push 0x64
push eax
call edi
push 0x65
lea ecx, [ebp - 0x67c]
push ecx
call edi
lea edx, [ebp - 0x69c]
push 0x72
push edx
call edi
lea eax, [ebp - 0x6bc]
push 0x20
push eax
call ebx
lea ecx, [ebp - 0x6dc]
push 0x28
push ecx
call edi
lea edx, [ebp - 0x6fc]
push 0x50
push edx
call edi
lea eax, [ebp - 0x71c]
push 0x72
push eax
call ebx
lea ecx, [ebp - 0x73c]
push 0x6f
push ecx
call edi
lea edx, [ebp - 0x75c]
push 0x74
push edx
call edi
lea eax, [ebp - 0x77c]
push 0x6f
push eax
call ebx
lea ecx, [ebp - 0x79c]
push 0x74
push ecx
call edi
lea edx, [ebp - 0x7bc]
push 0x79
push edx
call edi
lea eax, [ebp - 0x7dc]
push 0x70
push eax
call ebx
lea ecx, [ebp - 0x7fc]
push 0x65
push ecx
call edi
lea edx, [ebp - 0x81c]
push 0x29
push edx
call ebx
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x3c]
push eax
lea edx, [ebp - 0x4c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x5c]
lea ecx, [ebp - 0x6c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0x8c]
push edx
push eax
call esi
lea ecx, [ebp - 0x9c]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xbc]
lea ecx, [ebp - 0xcc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0xec]
push edx
push eax
call esi
lea ecx, [ebp - 0xfc]
push eax
lea edx, [ebp - 0x10c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x11c]
lea ecx, [ebp - 0x12c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x14c]
push edx
push eax
call esi
lea ecx, [ebp - 0x15c]
push eax
lea edx, [ebp - 0x16c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x17c]
lea ecx, [ebp - 0x18c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x19c]
lea eax, [ebp - 0x1ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x1bc]
push eax
lea edx, [ebp - 0x1cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1dc]
lea ecx, [ebp - 0x1ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x1fc]
lea eax, [ebp - 0x20c]
push edx
push eax
call esi
lea ecx, [ebp - 0x21c]
push eax
lea edx, [ebp - 0x22c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x23c]
lea ecx, [ebp - 0x24c]
push eax
push ecx
call esi
lea edx, [ebp - 0x25c]
push eax
push edx
lea eax, [ebp - 0x26c]
push eax
call esi
lea ecx, [ebp - 0x27c]
push eax
lea edx, [ebp - 0x28c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x29c]
lea ecx, [ebp - 0x2ac]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x2bc]
lea eax, [ebp - 0x2cc]
push edx
push eax
call esi
lea ecx, [ebp - 0x2dc]
push eax
lea edx, [ebp - 0x2ec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x2fc]
lea ecx, [ebp - 0x30c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x31c]
lea eax, [ebp - 0x32c]
push edx
push eax
call esi
lea ecx, [ebp - 0x33c]
push eax
lea edx, [ebp - 0x34c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x35c]
lea ecx, [ebp - 0x36c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x37c]
lea eax, [ebp - 0x38c]
push edx
push eax
call esi
lea ecx, [ebp - 0x39c]
push eax
lea edx, [ebp - 0x3ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x3bc]
lea ecx, [ebp - 0x3cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x3dc]
lea eax, [ebp - 0x3ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x3fc]
push eax
lea edx, [ebp - 0x40c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x41c]
lea ecx, [ebp - 0x42c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x43c]
lea eax, [ebp - 0x44c]
push edx
push eax
call esi
lea ecx, [ebp - 0x45c]
push eax
lea edx, [ebp - 0x46c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x47c]
lea ecx, [ebp - 0x48c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x49c]
lea eax, [ebp - 0x4ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x4bc]
push eax
lea edx, [ebp - 0x4cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x4dc]
lea ecx, [ebp - 0x4ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x4fc]
lea eax, [ebp - 0x50c]
push edx
push eax
call esi
lea ecx, [ebp - 0x51c]
push eax
lea edx, [ebp - 0x52c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x53c]
lea ecx, [ebp - 0x54c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x55c]
lea eax, [ebp - 0x56c]
push edx
push eax
call esi
lea ecx, [ebp - 0x57c]
push eax
lea edx, [ebp - 0x58c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x59c]
lea ecx, [ebp - 0x5ac]
push eax
push ecx
call esi
lea edx, [ebp - 0x5bc]
push eax
push edx
lea eax, [ebp - 0x5cc]
push eax
call esi
lea ecx, [ebp - 0x5dc]
push eax
lea edx, [ebp - 0x5ec]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x5fc]
lea ecx, [ebp - 0x60c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x61c]
lea eax, [ebp - 0x62c]
push edx
push eax
call esi
lea ecx, [ebp - 0x63c]
push eax
lea edx, [ebp - 0x64c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0x66c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x67c]
lea eax, [ebp - 0x68c]
push edx
push eax
call esi
lea ecx, [ebp - 0x69c]
push eax
lea edx, [ebp - 0x6ac]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x6bc]
lea ecx, [ebp - 0x6cc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x6dc]
lea eax, [ebp - 0x6ec]
push edx
push eax
call esi
lea ecx, [ebp - 0x6fc]
push eax
lea edx, [ebp - 0x70c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x71c]
lea ecx, [ebp - 0x72c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x73c]
lea eax, [ebp - 0x74c]
push edx
push eax
call esi
lea ecx, [ebp - 0x75c]
push eax
lea edx, [ebp - 0x76c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x77c]
lea ecx, [ebp - 0x78c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x79c]
lea eax, [ebp - 0x7ac]
push edx
push eax
call esi
lea ecx, [ebp - 0x7bc]
push eax
lea edx, [ebp - 0x7cc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x7dc]
lea ecx, [ebp - 0x7ec]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x7fc]
lea eax, [ebp - 0x80c]
push edx
push eax
call esi
lea ecx, [ebp - 0x81c]
push eax
lea edx, [ebp - 0x82c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x830]
mov edi, 3
mov ecx, 2
mov dword [ebp - 0x860], edi
mov esi, dword [eax + 0x14]
sub ecx, esi
mov esi, dword [eax + 0xc]
shl ecx, 4
add ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x860]
call esi
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x868], 0x18
mov dword [ebp - 0x870], edi
mov ecx, edi
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x870]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x878], 8
mov dword [ebp - 0x880], edi
mov ecx, 4
mov edi, dword [eax + 0x14]
lea edx, [ebp - 0x880]
sub ecx, edi
mov edi, dword [eax + 0xc]
shl ecx, 4
add ecx, edi
call esi
mov eax, dword [0x49bb01f8]
lea ecx, [ebp - 0x830]
push ecx
mov edx, 0x13
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
mov ecx, dword [eax + edx*4]
push ecx
call fcn.49aa1908
lea edx, [ebp - 0x830]
mov esi, eax
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
xor eax, eax
lea ecx, [ebp - 0x1c]
test esi, esi
sete al
neg eax
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1fc]
lea edx, [ebp - 0x1ec]
push ecx
lea eax, [ebp - 0x1dc]
push edx
lea ecx, [ebp - 0x1cc]
push eax
lea edx, [ebp - 0x1bc]
push ecx
lea eax, [ebp - 0x1ac]
push edx
lea ecx, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x18c]
push ecx
lea eax, [ebp - 0x17c]
push edx
lea ecx, [ebp - 0x16c]
push eax
lea edx, [ebp - 0x15c]
push ecx
lea eax, [ebp - 0x14c]
push edx
lea ecx, [ebp - 0x13c]
push eax
lea edx, [ebp - 0x12c]
push ecx
lea eax, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x10c]
push eax
lea edx, [ebp - 0xfc]
push ecx
lea eax, [ebp - 0xec]
push edx
lea ecx, [ebp - 0xdc]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xbc]
push edx
lea ecx, [ebp - 0xac]
push eax
lea edx, [ebp - 0x9c]
push ecx
lea eax, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x6c]
push ecx
lea eax, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x3dc]
push eax
lea edx, [ebp - 0x3cc]
push ecx
push edx
lea eax, [ebp - 0x3bc]
lea ecx, [ebp - 0x3ac]
push eax
lea edx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x38c]
push edx
lea ecx, [ebp - 0x37c]
push eax
lea edx, [ebp - 0x36c]
push ecx
lea eax, [ebp - 0x35c]
push edx
lea ecx, [ebp - 0x34c]
push eax
lea edx, [ebp - 0x33c]
push ecx
lea eax, [ebp - 0x32c]
push edx
lea ecx, [ebp - 0x31c]
push eax
lea edx, [ebp - 0x30c]
push ecx
lea eax, [ebp - 0x2fc]
push edx
lea ecx, [ebp - 0x2ec]
push eax
lea edx, [ebp - 0x2dc]
push ecx
lea eax, [ebp - 0x2cc]
push edx
lea ecx, [ebp - 0x2bc]
push eax
lea edx, [ebp - 0x2ac]
push ecx
lea eax, [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x28c]
push eax
lea edx, [ebp - 0x27c]
push ecx
lea eax, [ebp - 0x26c]
push edx
lea ecx, [ebp - 0x25c]
push eax
lea edx, [ebp - 0x24c]
push ecx
lea eax, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x22c]
push eax
lea edx, [ebp - 0x21c]
push ecx
lea eax, [ebp - 0x20c]
push edx
lea ecx, [ebp - 0x5bc]
push eax
lea edx, [ebp - 0x5ac]
push ecx
lea eax, [ebp - 0x59c]
push edx
lea ecx, [ebp - 0x58c]
push eax
lea edx, [ebp - 0x57c]
push ecx
lea eax, [ebp - 0x56c]
push edx
lea ecx, [ebp - 0x55c]
push eax
lea edx, [ebp - 0x54c]
push ecx
lea eax, [ebp - 0x53c]
push edx
lea ecx, [ebp - 0x52c]
push eax
lea edx, [ebp - 0x51c]
push ecx
lea eax, [ebp - 0x50c]
push edx
push eax
lea ecx, [ebp - 0x4fc]
lea edx, [ebp - 0x4ec]
push ecx
lea eax, [ebp - 0x4dc]
push edx
lea ecx, [ebp - 0x4cc]
push eax
lea edx, [ebp - 0x4bc]
push ecx
lea eax, [ebp - 0x4ac]
push edx
lea ecx, [ebp - 0x49c]
push eax
lea edx, [ebp - 0x48c]
push ecx
lea eax, [ebp - 0x47c]
push edx
lea ecx, [ebp - 0x46c]
push eax
lea edx, [ebp - 0x45c]
push ecx
lea eax, [ebp - 0x44c]
push edx
lea ecx, [ebp - 0x43c]
push eax
lea edx, [ebp - 0x42c]
push ecx
lea eax, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x40c]
push eax
lea edx, [ebp - 0x3fc]
push ecx
lea eax, [ebp - 0x3ec]
push edx
lea ecx, [ebp - 0x79c]
push eax
lea edx, [ebp - 0x78c]
push ecx
lea eax, [ebp - 0x77c]
push edx
lea ecx, [ebp - 0x76c]
push eax
lea edx, [ebp - 0x75c]
push ecx
lea eax, [ebp - 0x74c]
push edx
lea ecx, [ebp - 0x73c]
push eax
lea edx, [ebp - 0x72c]
push ecx
lea eax, [ebp - 0x71c]
push edx
lea ecx, [ebp - 0x70c]
push eax
lea edx, [ebp - 0x6fc]
push ecx
lea eax, [ebp - 0x6ec]
push edx
lea ecx, [ebp - 0x6dc]
push eax
lea edx, [ebp - 0x6cc]
push ecx
lea eax, [ebp - 0x6bc]
push edx
lea ecx, [ebp - 0x6ac]
push eax
lea edx, [ebp - 0x69c]
push ecx
lea eax, [ebp - 0x68c]
push edx
lea ecx, [ebp - 0x67c]
push eax
lea edx, [ebp - 0x66c]
push ecx
lea eax, [ebp - 0x65c]
push edx
lea ecx, [ebp - 0x64c]
push eax
lea edx, [ebp - 0x63c]
push ecx
push edx
lea eax, [ebp - 0x62c]
lea ecx, [ebp - 0x61c]
push eax
lea edx, [ebp - 0x60c]
push ecx
lea eax, [ebp - 0x5fc]
push edx
lea ecx, [ebp - 0x5ec]
push eax
lea edx, [ebp - 0x5dc]
push ecx
lea eax, [ebp - 0x5cc]
push edx
lea ecx, [ebp - 0x82c]
push eax
lea edx, [ebp - 0x81c]
push ecx
lea eax, [ebp - 0x80c]
push edx
lea ecx, [ebp - 0x7fc]
push eax
lea edx, [ebp - 0x7ec]
push ecx
lea eax, [ebp - 0x7dc]
push edx
lea ecx, [ebp - 0x7cc]
push eax
lea edx, [ebp - 0x7bc]
push ecx
lea eax, [ebp - 0x7ac]
push edx
push eax
push 0x81
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x208
test si, si
jne 0x49b18b7f
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
push 0x49b18f29
jmp 0x49b18f28
ret