0040E410 push ebp 0040E411 mov ebp,esp 0040E413 sub esp,14h 0040E416 push 00401476h 0040E41B mov eax,fs:[00000000h] 0040E421 push eax 0040E422 mov fs:[00000000h],esp 0040E429 sub esp,48h 0040E42C push ebx 0040E42D push esi 0040E42E push edi 0040E42F mov [ebp-00000014h],esp * Possible string reference 401000h "" | 0040E432 mov dword ptr [ebp-00000010h],00401000h 0040E439 xor esi,esi 0040E43B mov [ebp-0000000Ch],esi 0040E43E mov [ebp-00000008h],esi 0040E441 mov [ebp-0000002Ch],esi 0040E444 mov [ebp-00000030h],esi 0040E447 mov [ebp-00000040h],esi 0040E44A mov [ebp-00000050h],esi 0040E44D mov [0041B018h],si 0040E454 mov [ebp-00000048h],esi 0040E457 mov edi,0000000Bh 0040E45C mov [ebp-00000050h],edi 0040E45F lea edx,[ebp-00000050h] 0040E462 lea ecx,[ebp-0000002Ch] * Reference to MSVBVM50.__vbaVarMove | 0040E465 call dword ptr [0041F1DCh] 0040E46B mov dword ptr [ebp-00000048h],FFFFFFFFh 0040E472 mov [ebp-00000050h],edi 0040E475 mov eax,[0041B02Ch] 0040E47A cmp eax,esi 0040E47C jnz 0040E493h 0040E47E push 0041B02Ch * Possible string reference 40685Ch "" | 0040E483 push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 0040E488 call dword ptr [0041F2F0h] 0040E48E mov eax,[0041B02Ch] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0040E47C(C) | 0040E493 sub esp,10h 0040E496 mov ecx,esp 0040E498 mov edx,[ebp-00000050h] 0040E49B mov [ecx],edx 0040E49D mov edx,[ebp-0000004Ch] 0040E4A0 mov [ecx+00000004h],edx 0040E4A3 mov edx,[ebp-00000048h] 0040E4A6 mov [ecx+00000008h],edx 0040E4A9 mov edx,[ebp-00000044h] 0040E4AC mov [ecx+0000000Ch],edx 0040E4AF push 12h 0040E4B1 mov ecx,[eax] 0040E4B3 push eax 0040E4B4 call dword ptr [ecx+0000039Ch] 0040E4BA push eax 0040E4BB lea edx,[ebp-00000030h] 0040E4BE push edx * Reference to MSVBVM50.__vbaObjSet | 0040E4BF mov esi,[0041F23Ch] 0040E4C5 call esi 0040E4C7 push eax * Reference to MSVBVM50.__vbaLateIdSt | 0040E4C8 mov ebx,[0041F358h] 0040E4CE call ebx 0040E4D0 lea ecx,[ebp-00000030h] * Reference to MSVBVM50.__vbaFreeObj | 0040E4D3 mov edi,[0041F36Ch] 0040E4D9 call edi 0040E4DB push 01h * Reference to MSVBVM50.__vbaOnError | 0040E4DD call dword ptr [0041F240h] 0040E4E3 mov dword ptr [ebp-00000048h],00080000h 0040E4EA mov dword ptr [ebp-00000050h],00000003h 0040E4F1 mov eax,[0041B02Ch] 0040E4F6 test eax,eax 0040E4F8 jnz 0040E50Fh 0040E4FA push 0041B02Ch * Possible string reference 40685Ch "" | 0040E4FF push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 0040E504 call dword ptr [0041F2F0h] 0040E50A mov eax,[0041B02Ch] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0040E4F8(C) | 0040E50F sub esp,10h 0040E512 mov ecx,esp 0040E514 mov edx,[ebp-00000050h] 0040E517 mov [ecx],edx 0040E519 mov edx,[ebp-0000004Ch] 0040E51C mov [ecx+00000004h],edx 0040E51F mov edx,[ebp-00000048h] 0040E522 mov [ecx+00000008h],edx 0040E525 mov edx,[ebp-00000044h] 0040E528 mov [ecx+0000000Ch],edx 0040E52B push 07h 0040E52D mov ecx,[eax] 0040E52F push eax 0040E530 call dword ptr [ecx+0000039Ch] 0040E536 push eax 0040E537 lea edx,[ebp-00000030h] 0040E53A push edx 0040E53B call esi 0040E53D push eax 0040E53E call ebx 0040E540 lea ecx,[ebp-00000030h] 0040E543 call edi 0040E545 mov eax,[0041B02Ch] 0040E54A test eax,eax 0040E54C jnz 0040E563h 0040E54E push 0041B02Ch * Possible string reference 40685Ch "" | 0040E553 push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 0040E558 call dword ptr [0041F2F0h] 0040E55E mov eax,[0041B02Ch] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0040E54C(C) | 0040E563 push 00h 0040E565 push 22h 0040E567 mov ecx,[eax] 0040E569 push eax 0040E56A call dword ptr [ecx+0000039Ch] 0040E570 push eax 0040E571 lea edx,[ebp-00000030h] 0040E574 push edx 0040E575 call esi 0040E577 push eax * Reference to MSVBVM50.__vbaLateIdCall | 0040E578 call dword ptr [0041F1ECh] 0040E57E add esp,0Ch 0040E581 lea ecx,[ebp-00000030h] 0040E584 call edi 0040E586 push 00h * Reference to MSVBVM50.__vbaOnError | 0040E588 call dword ptr [0041F240h] 0040E58E mov eax,[0041B02Ch] 0040E593 test eax,eax 0040E595 jnz 0040E5ACh 0040E597 push 0041B02Ch * Possible string reference 40685Ch "" | 0040E59C push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 0040E5A1 call dword ptr [0041F2F0h] 0040E5A7 mov eax,[0041B02Ch] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0040E595(C) | 0040E5AC push 00h 0040E5AE push 11h 0040E5B0 mov ecx,[eax] 0040E5B2 push eax 0040E5B3 call dword ptr [ecx+0000039Ch] 0040E5B9 push eax 0040E5BA lea edx,[ebp-00000030h] 0040E5BD push edx 0040E5BE call esi 0040E5C0 push eax 0040E5C1 lea eax,[ebp-00000040h] 0040E5C4 push eax * Reference to MSVBVM50.__vbaLateIdCallLd | 0040E5C5 mov ebx,[0041F2A4h] 0040E5CB call ebx 0040E5CD add esp,10h 0040E5D0 push eax * Reference to MSVBVM50.__vbaI2Var | 0040E5D1 call dword ptr [0041F2D8h] 0040E5D7 mov [0041B018h],ax 0040E5DD lea ecx,[ebp-00000030h] 0040E5E0 call edi 0040E5E2 lea ecx,[ebp-00000040h] * Reference to MSVBVM50.__vbaFreeVar | 0040E5E5 call dword ptr [0041F1E0h] 0040E5EB mov eax,[0041B02Ch] 0040E5F0 test eax,eax 0040E5F2 jnz 0040E609h 0040E5F4 push 0041B02Ch * Possible string reference 40685Ch "" | 0040E5F9 push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 0040E5FE call dword ptr [0041F2F0h] 0040E604 mov eax,[0041B02Ch] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0040E5F2(C) | 0040E609 push 00h 0040E60B push 07h 0040E60D mov ecx,[eax] 0040E60F push eax 0040E610 call dword ptr [ecx+0000039Ch] 0040E616 push eax 0040E617 lea edx,[ebp-00000030h] 0040E61A push edx 0040E61B call esi 0040E61D push eax 0040E61E lea eax,[ebp-00000040h] 0040E621 push eax 0040E622 call ebx 0040E624 add esp,10h 0040E627 push eax * Reference to MSVBVM50.__vbaI4Var | 0040E628 call dword ptr [0041F324h] 0040E62E xor ecx,ecx 0040E630 cmp eax,00080001h 0040E635 setz cl 0040E638 neg ecx 0040E63A mov esi,ecx 0040E63C lea ecx,[ebp-00000030h] 0040E63F call edi 0040E641 lea ecx,[ebp-00000040h] * Reference to MSVBVM50.__vbaFreeVar | 0040E644 call dword ptr [0041F1E0h] 0040E64A test si,si 0040E64D jz 0040E669h 0040E64F mov dword ptr [ebp-00000048h],FFFFFFFFh 0040E656 mov dword ptr [ebp-00000050h],0000000Bh 0040E65D lea edx,[ebp-00000050h] 0040E660 lea ecx,[ebp-0000002Ch] * Reference to MSVBVM50.__vbaVarMove | 0040E663 call dword ptr [0041F1DCh] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0040E64D(C) | * Reference to MSVBVM50.__vbaExitProc | 0040E669 call dword ptr [0041F230h] * Possible string reference 40E693h "" | 0040E66F push 0040E693h 0040E674 jmp 0040E689h 0040E676 lea ecx,[ebp-00000030h] * Reference to MSVBVM50.__vbaFreeObj | 0040E679 call dword ptr [0041F36Ch] 0040E67F lea ecx,[ebp-00000040h] * Reference to MSVBVM50.__vbaFreeVar | 0040E682 call dword ptr [0041F1E0h] 0040E688 ret * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0040E674(U) | 0040E689 lea ecx,[ebp-0000002Ch] * Reference to MSVBVM50.__vbaFreeVar | 0040E68C jmp dword ptr [0041F1E0h] 0040E692 ret 0040E693 mov ecx,[ebp-0000001Ch] 0040E696 mov fs:[00000000h],ecx 0040E69D pop edi 0040E69E pop esi 0040E69F pop ebx 0040E6A0 mov esp,ebp 0040E6A2 pop ebp 0040E6A3 ret 0040E6A4 nop 0040E6A5 nop 0040E6A6 nop 0040E6A7 nop 0040E6A8 nop 0040E6A9 nop 0040E6AA nop 0040E6AB nop 0040E6AC nop 0040E6AD nop 0040E6AE nop 0040E6AF nop