Function at 0x4289be
Capabilities:
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x403ab6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1b8
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x402198
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call sub.MSVBVM60.DLL___vbaOnError
mov dword [ebp - 4], 3
and dword [ebp - 0x58], 0
mov dword [ebp - 0x60], 2
lea eax, [ebp - 0x60]
push eax
push 0x401
lea eax, [ebp - 0x70]
push eax
call sub.MSVBVM60.DLL_rtcStringVar
lea eax, [ebp - 0x70]
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0xc
mov dword [ebp - 4], 4
push 0x409be0
push 0x40c4e8
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call fcn.0042a434
mov edx, eax
lea ecx, [ebp - 0x38]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0xc
mov dword [ebp - 4], 5
push 0x40c550
push 0
call sub.MSVBVM60.DLL___vbaCastObj
push eax
lea eax, [ebp - 0x4c]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
push eax
push 0
push 0x400
push dword [ebp - 0x30]
lea eax, [ebp - 0x38]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push dword [ebp - 0x2c]
lea eax, [ebp - 0x34]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push 0
lea eax, [ebp - 0x48]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
push eax
call sub.URLMON.DLL_URLDownloadToCacheFileA
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jge 0x428b1e
push dword [ebp - 0x11c]
call sub.MSVBVM60.DLL___vbaHresultCheck
mov dword [ebp - 0x168], eax
jmp 0x428b25
and dword [ebp - 0x168], 0
push dword [ebp - 0x34]
lea eax, [ebp - 0x2c]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
push dword [ebp - 0x38]
lea eax, [ebp - 0x30]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeObjList
add esp, 0xc
mov dword [ebp - 4], 6
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x48]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
push dword [ebp - 0x11c]
call dword [eax + 0x1c]
fnclex
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x428bc6
push 0x1c
push 0x40a720
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x16c], eax
jmp 0x428bcd
and dword [ebp - 0x16c], 0
xor eax, eax
cmp dword [ebp - 0x110], 0
setne al
neg eax
mov word [ebp - 0x124], ax
lea ecx, [ebp - 0x48]
call sub.MSVBVM60.DLL___vbaFreeObj
movsx eax, word [ebp - 0x124]
test eax, eax
je 0x428c8e
mov dword [ebp - 4], 7
mov dword [ebp - 0x88], 0x80020004
mov dword [ebp - 0x90], 0xa
mov dword [ebp - 0x78], 0x80020004
mov dword [ebp - 0x80], 0xa
mov dword [ebp - 0x68], 0x80020004
mov dword [ebp - 0x70], 0xa
mov dword [ebp - 0xc8], 0x40c564
mov dword [ebp - 0xd0], 8
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x60]
call sub.MSVBVM60.DLL___vbaVarDup
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x10
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
jmp 0x429b2e
mov dword [ebp - 4], 0xa
push dword [ebp - 0x30]
call fcn.004201ae
mov edx, eax
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrMove
mov dword [ebp - 4], 0xb
push dword [ebp - 0x30]
call fcn.00428147
mov edx, eax
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrMove
mov dword [ebp - 4], 0xc
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x48]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
push dword [ebp - 0x11c]
call dword [eax + 0x1c]
fnclex
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x428d25
push 0x1c
push 0x40a720
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x170], eax
jmp 0x428d2c
and dword [ebp - 0x170], 0
xor eax, eax
cmp dword [ebp - 0x110], 0
setne al
neg eax
mov word [ebp - 0x124], ax
lea ecx, [ebp - 0x48]
call sub.MSVBVM60.DLL___vbaFreeObj
movsx eax, word [ebp - 0x124]
test eax, eax
je 0x428ded
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x88], 0x80020004
mov dword [ebp - 0x90], 0xa
mov dword [ebp - 0x78], 0x80020004
mov dword [ebp - 0x80], 0xa
mov dword [ebp - 0x68], 0x80020004
mov dword [ebp - 0x70], 0xa
mov dword [ebp - 0xc8], 0x40c5d4
mov dword [ebp - 0xd0], 8
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x60]
call sub.MSVBVM60.DLL___vbaVarDup
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x10
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
jmp 0x429b2e
mov dword [ebp - 4], 0x10
cmp dword [0x450184], 0
jne 0x428e18
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x174], 0x450184
jmp 0x428e22
mov dword [ebp - 0x174], 0x450184
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
push dword [ebp - 0x11c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x428e76
push 0x14
push 0x40a0cc
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x178], eax
jmp 0x428e7d
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x104]
push eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
push dword [ebp - 0x124]
call dword [eax + pe_nt_image_headers32]
fnclex
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jge 0x428ed5
push pe_nt_image_headers32
push 0x40a918
push dword [ebp - 0x124]
push dword [ebp - 0x128]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x17c], eax
jmp 0x428edc
and dword [ebp - 0x17c], 0
cmp dword [0x450184], 0
jne 0x428f00
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x180], 0x450184
jmp 0x428f0a
mov dword [ebp - 0x180], 0x450184
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
push dword [ebp - 0x12c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jge 0x428f5e
push 0x14
push 0x40a0cc
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x184], eax
jmp 0x428f65
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x134]
mov eax, dword [eax]
push dword [ebp - 0x134]
call dword [eax + 0xc0]
fnclex
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jge 0x428fbd
push 0xc0
push 0x40a918
push dword [ebp - 0x134]
push dword [ebp - 0x138]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x188], eax
jmp 0x428fc4
and dword [ebp - 0x188], 0
cmp dword [0x450184], 0
jne 0x428fe8
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x18c], 0x450184
jmp 0x428ff2
mov dword [ebp - 0x18c], 0x450184
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax]
push dword [ebp - 0x13c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jge 0x429046
push 0x14
push 0x40a0cc
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x190], eax
jmp 0x42904d
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [ebp - 0x144]
mov eax, dword [eax]
push dword [ebp - 0x144]
call dword [eax + 0xc8]
fnclex
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jge 0x4290a5
push 0xc8
push 0x40a918
push dword [ebp - 0x144]
push dword [ebp - 0x148]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x194], eax
jmp 0x4290ac
and dword [ebp - 0x194], 0
push dword [ebp - 0x24]
movsx eax, word [ebp - 0x10c]
push eax
movsx eax, word [ebp - 0x108]
push eax
movsx eax, word [ebp - 0x104]
push eax
call fcn.0041ff85
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x14c], ax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaFreeStr
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 3
call sub.MSVBVM60.DLL___vbaFreeObjList
add esp, 0x10
movsx eax, word [ebp - 0x14c]
test eax, eax
je 0x4291b1
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x88], 0x80020004
mov dword [ebp - 0x90], 0xa
mov dword [ebp - 0x78], 0x80020004
mov dword [ebp - 0x80], 0xa
mov dword [ebp - 0x68], 0x80020004
mov dword [ebp - 0x70], 0xa
mov dword [ebp - 0xc8], 0x40c644
mov dword [ebp - 0xd0], 8
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x60]
call sub.MSVBVM60.DLL___vbaVarDup
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x40
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
jmp 0x429b2e
mov dword [ebp - 4], 0x13
cmp dword [0x450184], 0
jne 0x4291dc
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x198], 0x450184
jmp 0x4291e6
mov dword [ebp - 0x198], 0x450184
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
push dword [ebp - 0x11c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x42923a
push 0x14
push 0x40a0cc
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x19c], eax
jmp 0x429241
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x104]
push eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
push dword [ebp - 0x124]
call dword [eax + pe_nt_image_headers32]
fnclex
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jge 0x429299
push pe_nt_image_headers32
push 0x40a918
push dword [ebp - 0x124]
push dword [ebp - 0x128]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1a0], eax
jmp 0x4292a0
and dword [ebp - 0x1a0], 0
cmp dword [0x450184], 0
jne 0x4292c4
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x1a4], 0x450184
jmp 0x4292ce
mov dword [ebp - 0x1a4], 0x450184
mov eax, dword [ebp - 0x1a4]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
push dword [ebp - 0x12c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jge 0x429322
push 0x14
push 0x40a0cc
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1a8], eax
jmp 0x429329
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x134]
mov eax, dword [eax]
push dword [ebp - 0x134]
call dword [eax + 0xc0]
fnclex
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jge 0x429381
push 0xc0
push 0x40a918
push dword [ebp - 0x134]
push dword [ebp - 0x138]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1ac], eax
jmp 0x429388
and dword [ebp - 0x1ac], 0
cmp dword [0x450184], 0
jne 0x4293ac
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x1b0], 0x450184
jmp 0x4293b6
mov dword [ebp - 0x1b0], 0x450184
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax]
push dword [ebp - 0x13c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jge 0x42940a
push 0x14
push 0x40a0cc
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1b4], eax
jmp 0x429411
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [ebp - 0x144]
mov eax, dword [eax]
push dword [ebp - 0x144]
call dword [eax + 0xc8]
fnclex
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jge 0x429469
push 0xc8
push 0x40a918
push dword [ebp - 0x144]
push dword [ebp - 0x148]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1b8], eax
jmp 0x429470
and dword [ebp - 0x1b8], 0
push dword [ebp - 0x24]
movsx eax, word [ebp - 0x10c]
push eax
movsx eax, word [ebp - 0x108]
push eax
movsx eax, word [ebp - 0x104]
push eax
call fcn.0041ff85
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCmp
xor ecx, ecx
test eax, eax
setl cl
neg ecx
mov word [ebp - 0x14c], cx
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaFreeStr
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 3
call sub.MSVBVM60.DLL___vbaFreeObjList
add esp, 0x10
movsx eax, word [ebp - 0x14c]
test eax, eax
je 0x429572
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x88], 0x80020004
mov dword [ebp - 0x90], 0xa
mov dword [ebp - 0x78], 0x80020004
mov dword [ebp - 0x80], 0xa
mov dword [ebp - 0x68], 0x80020004
mov dword [ebp - 0x70], 0xa
mov dword [ebp - 0xc8], 0x40c68c
mov dword [ebp - 0xd0], 8
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x60]
call sub.MSVBVM60.DLL___vbaVarDup
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x40
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
jmp 0x429b2e
mov dword [ebp - 4], 0x17
push 0x409be0
push 0x40c6c0
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call fcn.0042a434
mov edx, eax
lea ecx, [ebp - 0x38]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0xc
mov dword [ebp - 4], 0x18
and dword [ebp - 0x58], 0
mov dword [ebp - 0x60], 2
lea eax, [ebp - 0x60]
push eax
push 0x401
lea eax, [ebp - 0x70]
push eax
call sub.MSVBVM60.DLL_rtcStringVar
lea eax, [ebp - 0x70]
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0xc
mov dword [ebp - 4], 0x19
push 0x40c550
push 0
call sub.MSVBVM60.DLL___vbaCastObj
push eax
lea eax, [ebp - 0x4c]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
push eax
push 0
push 0x400
push dword [ebp - 0x30]
lea eax, [ebp - 0x38]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push dword [ebp - 0x2c]
lea eax, [ebp - 0x34]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push 0
lea eax, [ebp - 0x48]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
push eax
call sub.URLMON.DLL_URLDownloadToCacheFileA
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jge 0x42967f
push dword [ebp - 0x11c]
call sub.MSVBVM60.DLL___vbaHresultCheck
mov dword [ebp - 0x1bc], eax
jmp 0x429686
and dword [ebp - 0x1bc], 0
push dword [ebp - 0x34]
lea eax, [ebp - 0x2c]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
push dword [ebp - 0x38]
lea eax, [ebp - 0x30]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeObjList
add esp, 0xc
mov dword [ebp - 4], 0x1a
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x48]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
push dword [ebp - 0x11c]
call dword [eax + 0x1c]
fnclex
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x429727
push 0x1c
push 0x40a720
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1c0], eax
jmp 0x42972e
and dword [ebp - 0x1c0], 0
xor eax, eax
cmp dword [ebp - 0x110], 0
setne al
neg eax
mov word [ebp - 0x124], ax
lea ecx, [ebp - 0x48]
call sub.MSVBVM60.DLL___vbaFreeObj
movsx eax, word [ebp - 0x124]
test eax, eax
je 0x4297ef
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x88], 0x80020004
mov dword [ebp - 0x90], 0xa
mov dword [ebp - 0x78], 0x80020004
mov dword [ebp - 0x80], 0xa
mov dword [ebp - 0x68], 0x80020004
mov dword [ebp - 0x70], 0xa
mov dword [ebp - 0xc8], 0x40c708
mov dword [ebp - 0xd0], 8
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x60]
call sub.MSVBVM60.DLL___vbaVarDup
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x10
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
jmp 0x429b2e
mov dword [ebp - 4], 0x1e
push dword [ebp - 0x30]
call fcn.004201ae
mov edx, eax
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrMove
mov dword [ebp - 4], 0x1f
call sub.KERNEL32.DLL_GetCurrentProcessId
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], 3
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x70]
push eax
call sub.MSVBVM60.DLL_rtcHexVarFromVar
cmp dword [0x450184], 0
jne 0x42984f
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x1c4], 0x450184
jmp 0x429859
mov dword [ebp - 0x1c4], 0x450184
mov eax, dword [ebp - 0x1c4]
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
push dword [ebp - 0x11c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x4298ad
push 0x14
push 0x40a0cc
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1c8], eax
jmp 0x4298b4
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
push dword [ebp - 0x124]
call dword [eax + 0x50]
fnclex
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jge 0x429903
push 0x50
push 0x40a918
push dword [ebp - 0x124]
push dword [ebp - 0x128]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1cc], eax
jmp 0x42990a
and dword [ebp - 0x1cc], 0
cmp dword [0x450184], 0
jne 0x42992e
push 0x450184
push 0x40a0dc
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x1d0], 0x450184
jmp 0x429938
mov dword [ebp - 0x1d0], 0x450184
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
push dword [ebp - 0x12c]
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jge 0x42998c
push 0x14
push 0x40a0cc
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1d4], eax
jmp 0x429993
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x134]
mov eax, dword [eax]
push dword [ebp - 0x134]
call dword [eax + 0x58]
fnclex
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jge 0x4299e2
push 0x58
push 0x40a918
push dword [ebp - 0x134]
push dword [ebp - 0x138]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x1d8], eax
jmp 0x4299e9
and dword [ebp - 0x1d8], 0
push dword [ebp - 0x3c]
push 0x40aafc
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x40]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push dword [ebp - 0x38]
call fcn.0041fe41
mov edx, eax
lea ecx, [ebp - 0x44]
call sub.MSVBVM60.DLL___vbaStrMove
push 0x40a39c
push dword [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x40c75c
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x80], 8
mov dword [ebp - 0xd8], 0x40bb6c
mov dword [ebp - 0xe0], 8
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x164], eax
and dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb0], 8
push 1
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x90]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xa0]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xc0]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL_rtcShell
fstp qword [ebp - 0x118]
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 5
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x18
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeObjList
add esp, 0xc
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x60]
push eax
push 7
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x20
mov dword [ebp - 4], 0x20
or word [ebp - 0x28], 0xffff
wait
push 0x429bb6
jmp 0x429b9d
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaFreeStr
ret