Function at 0x4239f0
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402bb6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x104
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401f78
xor esi, esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0x100], esi
push 0x409748
push 0x4096e8
push 0x80000001
call fcn.004213b0
call fcn.00421b00
mov edx, eax
lea ecx, [ebp - 0x6c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
push eax
push 0x409760
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call edi
mov edx, eax
lea ecx, [ebp - 0x54]
call ebx
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call fcn.00421b00
mov edx, eax
lea ecx, [ebp - 0x6c]
call ebx
push eax
push 0x409774
call edi
mov edx, eax
lea ecx, [ebp - 0x60]
call ebx
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x54]
push eax
call fcn.00421ef0
test ax, ax
je 0x423b0e
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4008
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcKillFiles]
push 0x409790
mov eax, dword [ebp - 0x54]
push eax
call fcn.0041ff50
cmp dword [0x4328c8], esi
jne 0x423b34
push 0x4328c8
push 0x4089a0
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x4328c8]
mov dword [ebp - 0x104], edi
mov ecx, dword [edi]
lea edx, [ebp - 0x7c]
push edx
push edi
call dword [ecx + 0x14]
fnclex
cmp eax, esi
jge 0x423b5f
push 0x14
push 0x408990
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x7c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x6c]
push edx
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, esi
jge 0x423b83
push 0x50
push 0x408f14
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push esi
mov eax, dword [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
call edi
push eax
push esi
mov edx, dword [ebp - 0x54]
push edx
lea eax, [ebp - 0x74]
push eax
call edi
push eax
push 0x40817c
lea ecx, [ebp - 0x70]
push ecx
call edi
push eax
push esi
call fcn.00407544
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x74]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
xor edi, edi
mov edx, dword [ebp - 0x60]
push edx
call fcn.00421ef0
test ax, ax
jne 0x423c1d
cmp di, 0xf
jg 0x423c1d
push 0x3e8
call fcn.004074fc
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
add di, 1
jo 0x4248ab
jmp 0x423bed
mov eax, dword [ebp - 0x60]
push eax
call fcn.00421ef0
test ax, ax
jne 0x423cf3
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x408958
mov ebx, 8
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
call esi
mov dword [ebp - 0xc4], 0x4097d0
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
push 0x10
lea ecx, [ebp - 0x8c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x8c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
call dword [fcn.004010a8]
push 0x42489a
jmp 0x424859
lea eax, [ebp - 0x60]
push eax
call fcn.00421fb0
mov edx, eax
lea ecx, [ebp - 0x50]
call ebx
push esi
push 0xffffffffffffffff
push 1
push 0x4071a4
push 0x408414
mov ecx, dword [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x50]
call ebx
push 1
mov edx, dword [ebp - 0x50]
push edx
push 0x40981c
push 1
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaInStr]
call edi
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x3c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
call esi
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0xcc], 0x8002
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x423e4b
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x408958
mov ebx, 8
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
call esi
mov dword [ebp - 0xc4], 0x409834
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 0x10
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x8c]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
call dword [fcn.004010a8]
push 0x42489a
jmp 0x424859
push 0x40981c
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
lea ecx, [ebp - 0x3c]
push ecx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
call ebx
push eax
mov edx, dword [ebp - 0x50]
push edx
push 0x409884
push 1
call edi
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x2c]
call esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x9c]
call esi
lea eax, [ebp - 0x50]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4008
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x3c]
push edx
call ebx
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xac]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x4c]
call esi
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0xc4], 0x40988c
mov ebx, 8
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
call esi
push 1
push 0xffffffffffffffff
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea edx, [ebp - 0x9c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea eax, [ebp - 0x9c]
push eax
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
mov dword [ebp - 0x100], eax
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x8c]
push ecx
push 2
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
call edi
add esp, 0xc
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x423ff3
cmp word [ecx], 1
jne 0x423ff3
mov eax, dword [ecx + 0x14]
neg eax
mov dword [ebp - 0x104], eax
cmp eax, dword [ecx + 0x10]
jb 0x423fee
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x104]
shl eax, 2
jmp 0x423ffc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Str]
mov word [0x432040], ax
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x424043
cmp word [ecx], 1
jne 0x424043
mov eax, 1
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x104], eax
cmp eax, dword [ecx + 0x10]
jb 0x42403e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x104]
shl eax, 2
jmp 0x42404c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Str]
mov word [0x432042], ax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
push 0x4098e4
push 0x409894
push 0x80000002
call fcn.004210a0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x8c], ebx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x9c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea edx, [ebp - 0x9c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x8c]
push ecx
push 2
call edi
add esp, 0xc
jmp 0x42413c
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xc4], 0x40988c
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
push 1
push 0xffffffffffffffff
lea ecx, [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x58]
push edx
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xdc]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xd4]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd0]
mov dword [ecx + 0xc], eax
push 1
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0xac]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2ErrVar]
mov word [0x432044], ax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x8c]
push edx
push 3
call edi
add esp, 0x10
mov ax, word [0x432040]
cmp ax, 5
mov cx, word [0x432042]
jne 0x42420c
test cx, cx
je 0x42421c
cmp ax, 6
jne 0x424296
cmp cx, 2
jne 0x424296
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x408958
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409914
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 0x30
jmp 0x4247ca
cmp ax, 5
jne 0x42438e
cmp cx, 1
jne 0x424359
cmp word [0x432044], bx
jge 0x4244bf
mov edx, 0x406958
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x64]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4008
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0xd4], 0x4071a4
mov dword [ebp - 0xdc], 0x8008
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x104], ax
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0x104], 0
je 0x424755
mov eax, dword [0x4320a4]
test eax, eax
jne 0x424618
push 0x4320a4
push 0x40465c
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
call edi
jmp 0x42461e
cmp cx, 2
jne 0x4242c5
cmp word [0x432044], bx
jge 0x424575
call fcn.00425870
test ax, ax
je 0x424384
mov edx, 0x406b48
jmp 0x4242bc
mov edx, 0x406a34
jmp 0x4242bc
cmp ax, 6
jne 0x424562
test cx, cx
jne 0x424443
cmp word [0x432044], 9
jge 0x4243c9
call fcn.00425870
test ax, ax
je 0x4243bf
mov edx, 0x406854
jmp 0x4242bc
mov edx, 0x406770
jmp 0x4242bc
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x408958
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409960
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 0x40
jmp 0x4247ca
cmp cx, 1
jne 0x4242c5
mov ax, word [0x432044]
cmp ax, 0xb
jge 0x424477
call fcn.00425870
test ax, ax
je 0x42446d
mov edx, 0x406294
jmp 0x4242bc
mov edx, 0x4061b0
jmp 0x4242bc
cmp ax, 9
jge 0x42449b
call fcn.00425870
test ax, ax
je 0x424491
mov edx, 0x406660
jmp 0x4242bc
mov edx, 0x406584
jmp 0x4242bc
cmp ax, 0xa
jge 0x4244bf
call fcn.00425870
test ax, ax
je 0x4244b5
mov edx, 0x406480
jmp 0x4242bc
mov edx, 0x40639c
jmp 0x4242bc
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x408958
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409960
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 0x40
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x8c]
push eax
jmp 0x4247f3
cmp ax, 0xa
jne 0x4242c5
test cx, cx
jne 0x4242c5
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x408958
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409960
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
push 0x40
lea ecx, [ebp - 0x8c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x8c]
push edx
jmp 0x4247f3
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4320a4]
mov dword [ebp - 0x104], esi
mov edx, dword [esi]
mov eax, dword [ebp - 0x64]
push eax
push esi
call dword [edx + 0x6f8]
fnclex
test eax, eax
jge 0x42464f
push 0x6f8
push 0x4092e0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x4320a4]
test eax, eax
jne 0x424664
push 0x4320a4
push 0x40465c
call edi
mov esi, dword [0x4320a4]
mov dword [ebp - 0x104], esi
mov ecx, dword [esi]
push 0x4099ac
push esi
call dword [ecx + 0x6fc]
fnclex
test eax, eax
jge 0x424696
push 0x6fc
push 0x4092e0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x4320a4]
test eax, eax
jne 0x4246ab
push 0x4320a4
push 0x40465c
call edi
mov esi, dword [0x4320a4]
mov dword [ebp - 0x104], esi
mov eax, 0x80020004
mov dword [ebp - 0xd4], eax
mov ecx, 0xa
mov dword [ebp - 0xdc], ecx
mov edx, 1
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 3
mov edi, dword [esi]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0xcc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc8]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xc0]
mov dword [ecx + 0xc], edx
push esi
call dword [edi + 0x2b0]
fnclex
test eax, eax
jge 0x424800
push 0x2b0
push 0x4092b0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call dword [fcn.004010a8]
push 0x42489a
jmp 0x424859
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x408958
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x4099b8
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 0x10
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x8c]
push ecx
push 4
call edi
add esp, 0x14
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
call dword [fcn.004010a8]
push 0x42489a
jmp 0x424859
lea ecx, [ebp - 0x2c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
call esi
lea ecx, [ebp - 0x3c]
call esi
lea ecx, [ebp - 0x4c]
call esi
lea ecx, [ebp - 0x50]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call esi
lea ecx, [ebp - 0x54]
call esi
lea ecx, [ebp - 0x58]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x64]
call esi
lea ecx, [ebp - 0x68]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop