Function at 0x4c9540
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x408076
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x406d90
lea eax, [ebp - 0x48]
xor esi, esi
push eax
push 0xff
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xd0], esi
call dword [sym.imp.MSVBVM60.DLL___vbaFixstrConstruct]
cmp dword [0x4f7970], esi
jne 0x4c95d1
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x4f7970]
lea edx, [ebp - 0xa8]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0x58]
cmp eax, esi
fnclex
jge 0x4c95f9
push 0x58
push 0x41f7fc
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x48]
push 1
push 0x28
lea ecx, [ebp - 0x4c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0xa8]
push eax
push edx
call fcn.0041e388
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x50]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x48]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaLsetFixstr]
push eax
push edx
push esi
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x4c]
push eax
push ecx
push 2
call edi
add esp, 0xc
lea edx, [ebp - 0x64]
push esi
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
push esi
push 0xffffffffffffffff
push 1
lea eax, [ebp - 0x64]
push 0x41e108
lea ecx, [ebp - 0x50]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
mov edx, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
push edx
push eax
push 0
call ebx
mov edx, dword [ebp - 0x54]
mov ecx, 0x4f7064
mov dword [ebp - 0x54], 0
call esi
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4c]
push ecx
push edx
push 2
call edi
add esp, 0xc
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 2
mov edi, 3
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x94], eax
mov eax, dword [0x4f7064]
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x8c], edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x9c], eax
lea edx, [ebp - 0x94]
push ecx
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0xd0]
push eax
lea edx, [ebp - 0xc0]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
mov dword [ebp - 0xa4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test eax, eax
je 0x4c97b5
lea ecx, [ebp - 0x64]
lea edx, [ebp - 0x44]
push ecx
push edx
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x64], 2
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
mov eax, dword [0x4f7064]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
inc eax
neg eax
mov dword [ebp - 0xac], eax
call edi
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xac], 0
jne 0x4c97b5
lea ecx, [ebp - 0xd0]
lea edx, [ebp - 0xc0]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x4c9736
lea ecx, [ebp - 0x44]
lea edx, [ebp - 0x84]
push ecx
push edx
mov dword [ebp - 0x7c], 3
mov dword [ebp - 0x84], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x4c97fd
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x4f7064]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharBstr]
mov edx, eax
mov ecx, 0x4f7064
call esi
lea edx, [ebp - 0x64]
push 0
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x64]
push eax
push 0xff
call dword [sym.imp.MSVBVM60.DLL_rtcStringBstr]
mov ecx, dword [ebp - 0x48]
push eax
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaLsetFixstrFree]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4c9847
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
lea ecx, [ebp - 0xa8]
push ecx
push eax
mov edx, dword [eax]
mov dword [ebp - 0xac], eax
call dword [edx + 0x58]
test eax, eax
fnclex
jge 0x4c987a
mov edx, dword [ebp - 0xac]
push 0x58
push 0x41f7fc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x48]
push 1
push 0x23
lea ecx, [ebp - 0x4c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0xa8]
push eax
push edx
call fcn.0041e388
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x50]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x48]
push eax
push edx
push 0
call ebx
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x4c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0x64]
push 0
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
push 0
push 0xffffffffffffffff
push 1
lea eax, [ebp - 0x64]
push 0x41e108
lea ecx, [ebp - 0x50]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
mov edx, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
push edx
push eax
push 0
call ebx
mov edx, dword [ebp - 0x54]
mov ecx, 0x4f7068
mov dword [ebp - 0x54], 0
call esi
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x64]
push 0
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea ecx, [ebp - 0x64]
push ecx
push 0xff
call dword [sym.imp.MSVBVM60.DLL_rtcStringBstr]
mov edx, dword [ebp - 0x48]
push eax
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaLsetFixstrFree]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4c998c
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
lea edx, [ebp - 0xa8]
push edx
push eax
mov ecx, dword [eax]
mov dword [ebp - 0xac], eax
call dword [ecx + 0x58]
test eax, eax
fnclex
jge 0x4c99bf
mov ecx, dword [ebp - 0xac]
push 0x58
push 0x41f7fc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x48]
push 1
push 0x128
lea eax, [ebp - 0x4c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0xa8]
push eax
push ecx
call fcn.0041e388
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x50]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x48]
push eax
push ecx
push 0
call ebx
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x4c]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x64]
push 0
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
push 0
push 0xffffffffffffffff
push 1
lea edx, [ebp - 0x64]
push 0x41e108
lea eax, [ebp - 0x50]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
mov edx, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
push ecx
push edx
push 0
call ebx
mov edx, dword [ebp - 0x54]
mov ecx, 0x4f7084
mov dword [ebp - 0x54], 0
call esi
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x4c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 0x4c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0xff
call fcn.0041eff4
mov dword [ebp - 0xa8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x4c]
lea edx, [ebp - 0x50]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
push eax
mov eax, dword [ebp - 0x48]
push eax
push 0
call ebx
mov ecx, dword [ebp - 0xa8]
lea edx, [ebp - 0x84]
mov dword [ebp - 0x7c], ecx
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x4c]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x24]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edx, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x50]
call esi
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
push edx
push eax
push 0
call ebx
mov edx, dword [ebp - 0x50]
mov ecx, 0x4f706c
mov dword [ebp - 0x50], 0
call esi
lea ecx, [ebp - 0x4c]
call edi
mov ecx, dword [ebp - 0x48]
push 0xff
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.0041f044
mov dword [ebp - 0xa8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x50]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x48]
push eax
push edx
push 0
call ebx
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x84], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edx, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x50]
call esi
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
push ecx
push edx
push 0
call ebx
mov edx, dword [ebp - 0x50]
mov ecx, 0x4f7060
mov dword [ebp - 0x50], 0
call esi
lea ecx, [ebp - 0x4c]
call edi
mov eax, dword [ebp - 0x48]
push 0xff
lea ecx, [ebp - 0x4c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.0041f254
mov dword [ebp - 0xa8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x50]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x48]
push eax
push ecx
push 0
call ebx
mov edx, dword [ebp - 0xa8]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x7c], edx
lea edx, [ebp - 0x84]
mov dword [ebp - 0x84], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x4c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edx, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
push eax
push ecx
push 0
call ebx
mov edx, dword [ebp - 0x50]
xor ebx, ebx
mov ecx, 0x4f705c
mov dword [ebp - 0x50], ebx
call esi
lea ecx, [ebp - 0x4c]
call edi
mov dword [ebp - 0x5c], ebx
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x74]
push edx
push 0x4280c0
push 0x428038
push 0x80000002
push eax
mov dword [ebp - 0x64], 2
call fcn.00479a30
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
mov ebx, dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
push eax
call ebx
mov edx, eax
mov ecx, 0x4f7070
call esi
lea ecx, [ebp - 0x4c]
call edi
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x64]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x74]
mov dword [ebp - 0x5c], 0
push edx
push 0x42816c
push 0x4280e4
push 0x80000001
push eax
mov dword [ebp - 0x64], 2
call fcn.00479a30
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call ebx
mov edx, eax
mov ecx, 0x4f7074
call esi
lea ecx, [ebp - 0x4c]
call edi
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x64]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x74]
mov dword [ebp - 0x5c], 0
push edx
push 0x428180
push 0x428038
push 0x80000002
push eax
mov dword [ebp - 0x64], 2
call fcn.00479a30
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call ebx
mov edx, eax
mov ecx, 0x4f7078
call esi
lea ecx, [ebp - 0x4c]
call edi
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x64]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x74]
mov dword [ebp - 0x5c], 0
push edx
push 0x42821c
push 0x4281a8
push 0x80000002
push eax
mov dword [ebp - 0x64], 2
call fcn.00479a30
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call ebx
mov edx, eax
mov ecx, 0x4f707c
call esi
lea ecx, [ebp - 0x4c]
call edi
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x64]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x74]
mov dword [ebp - 0x5c], 0
push edx
push 0x428240
push 0x4281a8
push 0x80000002
push eax
mov dword [ebp - 0x64], 2
call fcn.00479a30
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call ebx
mov edx, eax
mov ecx, 0x4f7080
call esi
lea ecx, [ebp - 0x4c]
call edi
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x64]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [0x4f7060]
add esp, 0xc
push 1
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharBstr]
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov ebx, eax
lea ecx, [ebp - 0x4c]
neg ebx
sbb ebx, ebx
neg ebx
neg ebx
call edi
test bx, bx
je 0x4c9ece
mov eax, dword [0x4f7060]
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7060
call esi
mov ecx, dword [0x4f705c]
mov ebx, dword [sym.imp.MSVBVM60.DLL_rtcRightCharBstr]
push 1
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4c9f2a
mov edx, dword [0x4f705c]
push edx
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f705c
call esi
mov eax, dword [0x4f706c]
push 1
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4c9f7f
mov ecx, dword [0x4f706c]
push ecx
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f706c
call esi
mov edx, dword [0x4f7070]
push 1
push edx
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4c9fd4
mov eax, dword [0x4f7070]
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7070
call esi
mov ecx, dword [0x4f7074]
push 1
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4ca02a
mov edx, dword [0x4f7074]
push edx
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7074
call esi
mov eax, dword [0x4f7078]
push 1
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4ca07f
mov ecx, dword [0x4f7078]
push ecx
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7078
call esi
mov edx, dword [0x4f707c]
push 1
push edx
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4ca0d4
mov eax, dword [0x4f707c]
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f707c
call esi
mov ecx, dword [0x4f7080]
push 1
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4ca12a
mov edx, dword [0x4f7080]
push edx
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7080
call esi
mov eax, dword [0x4f7064]
push 1
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4ca17f
mov ecx, dword [0x4f7064]
push ecx
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7064
call esi
mov edx, dword [0x4f7068]
push 1
push edx
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x4c]
neg eax
neg eax
mov dword [ebp - 0xac], eax
call edi
cmp word [ebp - 0xac], 0
je 0x4ca1d4
mov eax, dword [0x4f7068]
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7068
call esi
mov ecx, dword [0x4f7084]
push 1
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov ebx, eax
lea ecx, [ebp - 0x4c]
neg ebx
sbb ebx, ebx
neg ebx
neg ebx
call edi
test bx, bx
je 0x4ca221
mov edx, dword [0x4f7084]
push edx
push 0x41f594
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
mov ecx, 0x4f7084
call esi
push 0x4ca292
jmp 0x4ca25f
lea edx, [ebp - 0xd0]
lea eax, [ebp - 0xc0]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0xc
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x44]
call esi
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret