00412BC0 	push	ebp
00412BC1 	mov	ebp,esp
00412BC3 	sub	esp,0Ch
00412BC6 	push	00401476h
00412BCB 	mov	eax,fs:[00000000h]
00412BD1 	push	eax
00412BD2 	mov	fs:[00000000h],esp
00412BD9 	sub	esp,3Ch
00412BDC 	push	ebx
00412BDD 	push	esi
00412BDE 	push	edi
00412BDF 	mov	edi,[ebp+00000008h]
00412BE2 	mov	eax,edi
00412BE4 	and	edi,FFFFFFFEh
00412BE7 	mov	[ebp-0000000Ch],esp
00412BEA 	and	eax,01h
00412BED 	mov	ecx,[edi]

* Possible string reference 4011D8h ""
|
00412BEF 	mov	dword ptr [ebp-00000008h],004011D8h
00412BF6 	push	edi
00412BF7 	mov	[ebp-00000004h],eax
00412BFA 	mov	[ebp+00000008h],edi
00412BFD 	call	dword ptr [ecx+00000004h]
00412C00 	mov	eax,[0041B02Ch]
00412C05 	xor	esi,esi
00412C07 	cmp	eax,esi
00412C09 	mov	[ebp-00000018h],esi
00412C0C 	mov	[ebp-00000028h],esi
00412C0F 	mov	[ebp-00000048h],esi
00412C12 	jnz	00412C29h
00412C14 	push	0041B02Ch

* Possible string reference 40685Ch ""
|
00412C19 	push	0040685Ch

* Reference to MSVBVM50.__vbaNew2
|
00412C1E 	call	dword ptr [0041F2F0h]
00412C24 	mov	eax,[0041B02Ch]

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412C12(C)
|
00412C29 	mov	edx,[eax]
00412C2B 	push	eax
00412C2C 	call	dword ptr [edx+00000310h]
00412C32 	push	eax
00412C33 	lea	eax,[ebp-00000048h]
00412C36 	push	eax

* Reference to MSVBVM50.__vbaObjSet
|
00412C37 	call	dword ptr [0041F23Ch]
00412C3D 	mov	eax,[ebp-00000048h]
00412C40 	lea	edx,[ebp-00000018h]
00412C43 	push	edx
00412C44 	push	eax
00412C45 	mov	ecx,[eax]
00412C47 	call	dword ptr [ecx+000000F0h]
00412C4D 	cmp	eax,esi
00412C4F 	jnl	00412C6Ah
00412C51 	mov	ecx,[ebp-00000048h]

* Reference to MSVBVM50.__vbaHresultCheckObj
|
00412C54 	mov	ebx,[0041F220h]
00412C5A 	push	000000F0h

* Possible string reference 4093ECh ""
|
00412C5F 	push	004093ECh
00412C64 	push	ecx
00412C65 	push	eax
00412C66 	call	ebx
00412C68 	jmp	00412C70h

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412C4F(C)
|
* Reference to MSVBVM50.__vbaHresultCheckObj
|
00412C6A 	mov	ebx,[0041F220h]

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412C68(U)
|
00412C70 	mov	eax,[ebp-00000018h]
00412C73 	push	eax
00412C74 	mov	esi,eax
00412C76 	mov	edx,[eax]
00412C78 	call	dword ptr [edx+000000D0h]
00412C7E 	test	eax,eax
00412C80 	jnl	00412C90h
00412C82 	push	000000D0h

* Possible string reference 408BA0h "1"
|
00412C87 	push	00408BA0h
00412C8C 	push	esi
00412C8D 	push	eax
00412C8E 	call	ebx

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412C80(C)
|
00412C90 	lea	ecx,[ebp-00000018h]

* Reference to MSVBVM50.__vbaFreeObj
|
00412C93 	call	dword ptr [0041F36Ch]
00412C99 	mov	eax,[ebp-00000048h]
00412C9C 	lea	edx,[ebp-00000018h]
00412C9F 	push	edx
00412CA0 	push	eax
00412CA1 	mov	ecx,[eax]
00412CA3 	call	dword ptr [ecx+000000F0h]
00412CA9 	test	eax,eax
00412CAB 	jnl	00412CBEh
00412CAD 	mov	ecx,[ebp-00000048h]
00412CB0 	push	000000F0h

* Possible string reference 4093ECh ""
|
00412CB5 	push	004093ECh
00412CBA 	push	ecx
00412CBB 	push	eax
00412CBC 	call	ebx

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412CAB(C)
|
00412CBE 	mov	edx,[edi]
00412CC0 	mov	esi,[ebp-00000018h]
00412CC3 	push	edi
00412CC4 	call	dword ptr [edx+000002FCh]
00412CCA 	sub	esp,10h
00412CCD 	mov	ecx,00000009h
00412CD2 	mov	ebx,esp
00412CD4 	mov	[ebp-00000028h],ecx
00412CD7 	mov	[ebp-00000020h],eax
00412CDA 	sub	esp,10h
00412CDD 	mov	[ebx],ecx
00412CDF 	mov	ecx,[ebp-00000024h]
00412CE2 	mov	edi,[esi]

* Possible string reference 409618h "notas"
|
00412CE4 	mov	edx,00409618h
00412CE9 	mov	[ebx+00000004h],ecx
00412CEC 	mov	ecx,esp
00412CEE 	push	esi
00412CEF 	mov	[ebx+00000008h],eax
00412CF2 	mov	eax,[ebp-0000001Ch]
00412CF5 	mov	[ebx+0000000Ch],eax
00412CF8 	mov	eax,00000008h
00412CFD 	mov	[ecx],eax
00412CFF 	mov	eax,[ebp-00000034h]
00412D02 	mov	[ecx+00000004h],eax
00412D05 	mov	[ecx+00000008h],edx
00412D08 	mov	edx,[ebp-0000002Ch]
00412D0B 	mov	[ecx+0000000Ch],edx
00412D0E 	call	dword ptr [edi+00000128h]
00412D14 	test	eax,eax
00412D16 	jnl	00412D2Eh

* Reference to MSVBVM50.__vbaHresultCheckObj
|
00412D18 	mov	edi,[0041F220h]
00412D1E 	push	00000128h

* Possible string reference 408BA0h "1"
|
00412D23 	push	00408BA0h
00412D28 	push	esi
00412D29 	push	eax
00412D2A 	call	edi
00412D2C 	jmp	00412D34h

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412D16(C)
|
* Reference to MSVBVM50.__vbaHresultCheckObj
|
00412D2E 	mov	edi,[0041F220h]

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412D2C(U)
|
* Reference to MSVBVM50.__vbaFreeObj
|
00412D34 	mov	ebx,[0041F36Ch]
00412D3A 	lea	ecx,[ebp-00000018h]
00412D3D 	call	ebx
00412D3F 	lea	ecx,[ebp-00000028h]

* Reference to MSVBVM50.__vbaFreeVar
|
00412D42 	call	dword ptr [0041F1E0h]
00412D48 	mov	eax,[ebp-00000048h]
00412D4B 	lea	edx,[ebp-00000018h]
00412D4E 	push	edx
00412D4F 	push	eax
00412D50 	mov	ecx,[eax]
00412D52 	call	dword ptr [ecx+000000F0h]
00412D58 	test	eax,eax
00412D5A 	jnl	00412D6Dh
00412D5C 	mov	ecx,[ebp-00000048h]
00412D5F 	push	000000F0h

* Possible string reference 4093ECh ""
|
00412D64 	push	004093ECh
00412D69 	push	ecx
00412D6A 	push	eax
00412D6B 	call	edi

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412D5A(C)
|
00412D6D 	mov	eax,[ebp-00000018h]
00412D70 	push	00h
00412D72 	push	01h
00412D74 	push	eax
00412D75 	mov	edx,[eax]
00412D77 	mov	esi,eax
00412D79 	call	dword ptr [edx+00000164h]
00412D7F 	test	eax,eax
00412D81 	jnl	00412D91h
00412D83 	push	00000164h

* Possible string reference 408BA0h "1"
|
00412D88 	push	00408BA0h
00412D8D 	push	esi
00412D8E 	push	eax
00412D8F 	call	edi

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412D81(C)
|
00412D91 	lea	ecx,[ebp-00000018h]
00412D94 	call	ebx
00412D96 	mov	eax,[ebp-00000048h]
00412D99 	push	eax
00412D9A 	mov	ecx,[eax]
00412D9C 	call	dword ptr [ecx+000001B8h]
00412DA2 	test	eax,eax
00412DA4 	jnl	00412DB7h
00412DA6 	mov	edx,[ebp-00000048h]
00412DA9 	push	000001B8h

* Possible string reference 4093ECh ""
|
00412DAE 	push	004093ECh
00412DB3 	push	edx
00412DB4 	push	eax
00412DB5 	call	edi

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412DA4(C)
|
00412DB7 	lea	eax,[ebp-00000048h]
00412DBA 	push	00h
00412DBC 	push	eax

* Reference to MSVBVM50.__vbaObjSetAddref
|
00412DBD 	call	dword ptr [0041F248h]
00412DC3 	mov	dword ptr [ebp-00000004h],00000000h

* Possible string reference 412DEEh ""
|
00412DCA 	push	00412DEEh
00412DCF 	jmp	00412DE4h
00412DD1 	lea	ecx,[ebp-00000018h]

* Reference to MSVBVM50.__vbaFreeObj
|
00412DD4 	call	dword ptr [0041F36Ch]
00412DDA 	lea	ecx,[ebp-00000028h]

* Reference to MSVBVM50.__vbaFreeVar
|
00412DDD 	call	dword ptr [0041F1E0h]
00412DE3 	ret

* Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address:
| 00412DCF(U)
|
00412DE4 	lea	ecx,[ebp-00000048h]

* Reference to MSVBVM50.__vbaFreeObj
|
00412DE7 	jmp	dword ptr [0041F36Ch]
00412DED 	ret
00412DEE 	mov	eax,[ebp+00000008h]
00412DF1 	push	eax
00412DF2 	mov	ecx,[eax]
00412DF4 	call	dword ptr [ecx+00000008h]
00412DF7 	mov	ecx,[ebp-00000014h]
00412DFA 	mov	eax,[ebp-00000004h]
00412DFD 	pop	edi
00412DFE 	pop	esi
00412DFF 	mov	fs:[00000000h],ecx
00412E06 	pop	ebx
00412E07 	mov	esp,ebp
00412E09 	pop	ebp
00412E0A 	ret	0008h
00412E0D 	nop
00412E0E 	nop
00412E0F 	nop