Function at 0x4d5300
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x4044f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401570
mov edx, dword [ebp + 8]
xor ebx, ebx
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0x110], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov esi, eax
cmp esi, 0xfb
jb 0x4d539f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x5c11fc]
mov ecx, dword [eax + esi*4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0xe8], ecx
lea edx, [ebp - 0xf0]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xf0], 3
call esi
fld qword [0x5bff98]
fadd qword [0x401490]
mov edi, 5
lea edx, [ebp - 0xe0]
lea ecx, [ebp - 0x40]
fstp qword [ebp - 0xd8]
fnstsw ax
test al, 0xd
jne 0x4d5f14
mov dword [ebp - 0xe0], edi
call esi
mov edx, dword [0x5bffa0]
mov eax, dword [0x5bffa4]
lea ecx, [ebp - 0x100]
mov dword [ebp - 0xf8], edx
mov edx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xd8], 0x47ae147b
mov dword [ebp - 0xd4], 0x3f747ae1
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0x108], 0x3126e979
mov dword [ebp - 0x104], 0x3f6cac08
mov dword [ebp - 0x110], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea ecx, [ebp - 0xc0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xe0]
push edx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xe0], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
jne 0x4d5e73
lea eax, [ebp - 0xa0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaOnGoCheck]
movsx eax, ax
dec eax
cmp eax, 9
ja case.0x4d54f1.2
jmp dword [eax*4 + 0x4d5eec]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xbc6a7efa
mov dword [ebp - 0xd4], 0x3f889374
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
mov ecx, 0xbc6a7efa
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xd8], ecx
mov eax, 0x3f589374
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0xc0]
push edx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xd0], 2
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xe0], edi
call ebx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004d80a0
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0xc0]
push edx
lea eax, [ebp - 0xb0]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
wait
add esp, 0x10
push 0x4d5ed6
jmp 0x4d5e9c
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f80624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f70624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0x47ae147b
mov dword [ebp - 0xd4], 0x3f647ae1
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xe0]
push edx
mov dword [ebp - 0xd8], 6
mov dword [ebp - 0xe0], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4d572c
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
mov ebx, 2
push edx
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f50624d
mov dword [ebp - 0xe0], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0xc0]
call esi
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0xc0]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x40]
push ecx
call fcn.004d5040
lea edx, [ebp - 0xd0]
push edx
lea eax, [ebp - 0xc0]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x4d5731
mov ebx, 2
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x80]
mov edi, 1
push edx
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xb0]
call esi
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x40]
push ecx
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
wait
push 0x4d5ed6
jmp 0x4d5e9c
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xbc6a7efa
mov dword [ebp - 0xd4], 0x3f889374
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f60624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xb020c49c
mov dword [ebp - 0xd4], 0x3f916872
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x40]
mov edi, 1
mov ebx, 2
push edx
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xb0]
call esi
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x90]
push ecx
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
mov eax, 0x8002
lea edx, [ebp - 0xa0]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xd8], 3
mov dword [ebp - 0xe8], 0xa
push edx
lea eax, [ebp - 0xe0]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0xb0]
push ecx
call edi
push eax
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0xc0]
push ecx
call edi
push eax
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x4d59a3
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x90]
push ecx
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 0xd8], 0xa
mov dword [ebp - 0xe0], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4d5e73
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x40]
push edx
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
wait
push 0x4d5ed6
jmp 0x4d5e9c
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f70624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f60624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x60]
call esi
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f60624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xd8], 0x47ae147b
mov dword [ebp - 0xd4], 0x3f747ae1
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x20]
call esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f60624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f70624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x50]
call esi
mov dword [ebp - 0xa8], 1
mov ebx, 2
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x40]
push ecx
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x90]
push edx
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
mov eax, 0x8002
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 4
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x4d5d18
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
mov eax, 0x8002
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xe0]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xf0], eax
push edx
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xe8], edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
mov dword [ebp - 0xd8], ebx
call edi
push eax
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xc0]
push eax
call edi
push eax
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x4d5e73
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], ebx
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call esi
wait
push 0x4d5ed6
jmp 0x4d5e9c
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xb020c49c
mov dword [ebp - 0xd4], 0x3f916872
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xd8], 0xd2f1a9fc
mov dword [ebp - 0xd4], 0x3f50624d
mov dword [ebp - 0xe0], edi
call ebx
mov edx, eax
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x40]
push edx
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb0], 2
call fcn.004d5040
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
wait
push 0x4d5ed6
jmp 0x4d5e9c
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x90]
call esi
lea ecx, [ebp - 0xa0]
call esi
ret
jmp 0x4044fc