Function at 0x4256c0
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402816
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x104
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x4025a0
xor esi, esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0x100], esi
push 0x409754
push 0x4096f0
push 0x80000001
call fcn.004237b0
call fcn.00423f00
mov edx, eax
lea ecx, [ebp - 0x6c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
push eax
push 0x40976c
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call edi
mov edx, eax
lea ecx, [ebp - 0x54]
call ebx
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call fcn.00423f00
mov edx, eax
lea ecx, [ebp - 0x6c]
call ebx
push eax
push 0x409780
call edi
mov edx, eax
lea ecx, [ebp - 0x60]
call ebx
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x54]
push eax
call fcn.004242f0
test ax, ax
je 0x4257de
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4008
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcKillFiles]
push 0x40979c
mov eax, dword [ebp - 0x54]
push eax
call fcn.0041f9d0
cmp dword [0x42d798], esi
jne 0x425804
push 0x42d798
push 0x406fc0
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x42d798]
mov dword [ebp - 0x104], edi
mov ecx, dword [edi]
lea edx, [ebp - 0x7c]
push edx
push edi
call dword [ecx + 0x14]
fnclex
cmp eax, esi
jge 0x42582f
push 0x14
push 0x406fb0
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x7c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x6c]
push edx
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, esi
jge 0x425853
push 0x50
push 0x409288
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push esi
mov eax, dword [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
call edi
push eax
push esi
mov edx, dword [ebp - 0x54]
push edx
lea eax, [ebp - 0x74]
push eax
call edi
push eax
push 0x406f8c
lea ecx, [ebp - 0x70]
push ecx
call edi
push eax
push esi
call fcn.00406c5c
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x74]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
xor edi, edi
mov edx, dword [ebp - 0x60]
push edx
call fcn.004242f0
test ax, ax
jne 0x4258ed
cmp di, 0xf
jg 0x4258ed
push 0x3e8
call fcn.00406c04
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
add di, 1
jo 0x42657b
jmp 0x4258bd
mov eax, dword [ebp - 0x60]
push eax
call fcn.004242f0
test ax, ax
jne 0x4259c3
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x407028
mov ebx, 8
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
call esi
mov dword [ebp - 0xc4], 0x4097dc
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
push 0x10
lea ecx, [ebp - 0x8c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x8c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x42656a
jmp 0x426529
lea eax, [ebp - 0x60]
push eax
call fcn.004243b0
mov edx, eax
lea ecx, [ebp - 0x50]
call ebx
push esi
push 0xffffffffffffffff
push 1
push 0x406f9c
push 0x406ff8
mov ecx, dword [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x50]
call ebx
push 1
mov edx, dword [ebp - 0x50]
push edx
push 0x409828
push 1
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaInStr]
call edi
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x3c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
call esi
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0xcc], 0x8002
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x425b1b
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x407028
mov ebx, 8
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
call esi
mov dword [ebp - 0xc4], 0x409840
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 0x10
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x8c]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x42656a
jmp 0x426529
push 0x409828
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
lea ecx, [ebp - 0x3c]
push ecx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
call ebx
push eax
mov edx, dword [ebp - 0x50]
push edx
push 0x409890
push 1
call edi
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x2c]
call esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x9c]
call esi
lea eax, [ebp - 0x50]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4008
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x3c]
push edx
call ebx
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xac]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x4c]
call esi
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0xc4], 0x409898
mov ebx, 8
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
call esi
push 1
push 0xffffffffffffffff
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea edx, [ebp - 0x9c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea eax, [ebp - 0x9c]
push eax
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
mov dword [ebp - 0x100], eax
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x8c]
push ecx
push 2
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
call edi
add esp, 0xc
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x425cc3
cmp word [ecx], 1
jne 0x425cc3
mov eax, dword [ecx + 0x14]
neg eax
mov dword [ebp - 0x104], eax
cmp eax, dword [ecx + 0x10]
jb 0x425cbe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x104]
shl eax, 2
jmp 0x425ccc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Str]
mov word [0x42d030], ax
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x425d13
cmp word [ecx], 1
jne 0x425d13
mov eax, 1
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x104], eax
cmp eax, dword [ecx + 0x10]
jb 0x425d0e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x104]
shl eax, 2
jmp 0x425d1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Str]
mov word [0x42d032], ax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
push 0x4098f0
push 0x4098a0
push 0x80000002
call fcn.004234a0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x8c], ebx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x9c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea edx, [ebp - 0x9c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x8c]
push ecx
push 2
call edi
add esp, 0xc
jmp 0x425e0c
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xc4], 0x409898
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
push 1
push 0xffffffffffffffff
lea ecx, [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x58]
push edx
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xdc]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xd4]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd0]
mov dword [ecx + 0xc], eax
push 1
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0xac]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2ErrVar]
mov word [0x42d034], ax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x8c]
push edx
push 3
call edi
add esp, 0x10
mov ax, word [0x42d030]
cmp ax, 5
mov cx, word [0x42d032]
jne 0x425edc
test cx, cx
je 0x425eec
cmp ax, 6
jne 0x425f66
cmp cx, 2
jne 0x425f66
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x407028
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409924
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 0x30
jmp 0x42649a
cmp ax, 5
jne 0x42605e
cmp cx, 1
jne 0x426029
cmp word [0x42d034], bx
jge 0x42618f
mov edx, 0x406440
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x64]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4008
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0xd4], 0x406f9c
mov dword [ebp - 0xdc], 0x8008
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x104], ax
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0x104], 0
je 0x426425
mov eax, dword [0x42d0c4]
test eax, eax
jne 0x4262e8
push 0x42d0c4
push 0x404190
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
call edi
jmp 0x4262ee
cmp cx, 2
jne 0x425f95
cmp word [0x42d034], bx
jge 0x426245
call fcn.00427170
test ax, ax
je 0x426054
mov edx, 0x406628
jmp 0x425f8c
mov edx, 0x40651c
jmp 0x425f8c
cmp ax, 6
jne 0x426232
test cx, cx
jne 0x426113
cmp word [0x42d034], 9
jge 0x426099
call fcn.00427170
test ax, ax
je 0x42608f
mov edx, 0x406330
jmp 0x425f8c
mov edx, 0x40624c
jmp 0x425f8c
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x407028
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409970
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 0x40
jmp 0x42649a
cmp cx, 1
jne 0x425f95
mov ax, word [0x42d034]
cmp ax, 0xb
jge 0x426147
call fcn.00427170
test ax, ax
je 0x42613d
mov edx, 0x405d84
jmp 0x425f8c
mov edx, 0x405ca0
jmp 0x425f8c
cmp ax, 9
jge 0x42616b
call fcn.00427170
test ax, ax
je 0x426161
mov edx, 0x40614c
jmp 0x425f8c
mov edx, 0x406070
jmp 0x425f8c
cmp ax, 0xa
jge 0x42618f
call fcn.00427170
test ax, ax
je 0x426185
mov edx, 0x405f70
jmp 0x425f8c
mov edx, 0x405e8c
jmp 0x425f8c
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x407028
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409970
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 0x40
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x8c]
push eax
jmp 0x4264c3
cmp ax, 0xa
jne 0x425f95
test cx, cx
jne 0x425f95
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x407028
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x409970
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
push 0x40
lea ecx, [ebp - 0x8c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x8c]
push edx
jmp 0x4264c3
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x42d0c4]
mov dword [ebp - 0x104], esi
mov edx, dword [esi]
mov eax, dword [ebp - 0x64]
push eax
push esi
call dword [edx + 0x6f8]
fnclex
test eax, eax
jge 0x42631f
push 0x6f8
push 0x4094d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x42d0c4]
test eax, eax
jne 0x426334
push 0x42d0c4
push 0x404190
call edi
mov esi, dword [0x42d0c4]
mov dword [ebp - 0x104], esi
mov ecx, dword [esi]
push 0x4099bc
push esi
call dword [ecx + 0x6fc]
fnclex
test eax, eax
jge 0x426366
push 0x6fc
push 0x4094d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x42d0c4]
test eax, eax
jne 0x42637b
push 0x42d0c4
push 0x404190
call edi
mov esi, dword [0x42d0c4]
mov dword [ebp - 0x104], esi
mov eax, 0x80020004
mov dword [ebp - 0xd4], eax
mov ecx, 0xa
mov dword [ebp - 0xdc], ecx
mov edx, 1
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 3
mov edi, dword [esi]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0xcc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc8]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xc0]
mov dword [ecx + 0xc], edx
push esi
call dword [edi + 0x2b0]
fnclex
test eax, eax
jge 0x4264d0
push 0x2b0
push 0x4094a0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x42656a
jmp 0x426529
mov eax, 0x80020004
mov dword [ebp - 0xb4], eax
mov ecx, 0xa
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xd4], 0x407028
mov dword [ebp - 0xdc], ebx
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call esi
mov dword [ebp - 0xc4], 0x4099c8
mov dword [ebp - 0xcc], ebx
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x8c]
call esi
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 0x10
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x8c]
push ecx
push 4
call edi
add esp, 0x14
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x42656a
jmp 0x426529
lea ecx, [ebp - 0x2c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
call esi
lea ecx, [ebp - 0x3c]
call esi
lea ecx, [ebp - 0x4c]
call esi
lea ecx, [ebp - 0x50]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call esi
lea ecx, [ebp - 0x54]
call esi
lea ecx, [ebp - 0x58]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x64]
call esi
lea ecx, [ebp - 0x68]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop