Function at 0x4cb310
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402336
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfc
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401e28
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x3c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4c], ebx
mov ecx, 7
lea edi, [ebp - 0x68]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
xor ecx, ecx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf8], ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 0x8c], 0x36fc9e60
mov word [ebp - 0x88], 0xc465
mov word [ebp - 0x86], 0x11cf
mov byte [ebp - 0x84], 0x80
mov byte [ebp - 0x83], 0x56
mov byte [ebp - 0x82], 0x44
mov byte [ebp - 0x81], 0x45
mov byte [ebp - 0x80], 0x53
mov byte [ebp - 0x7f], 0x54
mov byte [ebp - 0x7e], bl
mov byte [ebp - 0x7d], bl
push 2
push ebx
push ebx
lea edx, [ebp - 0x8c]
push edx
call fcn.00408b50
mov dword [ebp - 0xf8], eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
call edi
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x78], 0xa5dcbf10
mov word [ebp - 0x74], 0x6530
mov word [ebp - 0x72], 0x11d2
mov byte [ebp - 0x70], 0x90
mov byte [ebp - 0x6f], 0x1f
mov byte [ebp - 0x6e], bl
mov byte [ebp - 0x6d], 0xc0
mov byte [ebp - 0x6c], 0x4f
mov byte [ebp - 0x6b], 0xb9
mov byte [ebp - 0x6a], 0x51
mov byte [ebp - 0x69], 0xed
push 0x12
push ebx
push ebx
lea ecx, [ebp - 0x78]
push ecx
call fcn.00408b50
mov dword [ebp - 0xf8], eax
call edi
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x7c], edx
mov eax, 0x1c
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x94], bl
mov dword [ebp - 0x20], ebx
movsx esi, word [ebp - 0x20]
lea eax, [ebp - 0x3c]
push eax
push esi
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00408d90
mov dword [ebp - 0xf8], eax
call edi
cmp dword [ebp - 0xf8], ebx
je 0x4cb6ef
lea edx, [ebp - 0x68]
push edx
push esi
lea eax, [ebp - 0x78]
push eax
push ebx
mov esi, dword [ebp - 0x7c]
push esi
call fcn.00408de4
mov dword [ebp - 0xf8], eax
call edi
cmp dword [ebp - 0xf8], ebx
je 0x4cb751
push ebx
lea ecx, [ebp - 0xa8]
push ecx
push ebx
push ebx
lea edx, [ebp - 0x68]
push edx
push esi
call fcn.00408e40
mov dword [ebp - 0xf8], eax
call edi
cmp dword [ebp - 0xf8], ebx
jne 0x4cb5e2
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xf8]
push edx
push esi
call dword [ecx + 0x4c]
fnclex
cmp eax, ebx
jge 0x4cb542
push 0x4c
push 0x409104
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xf8]
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
cmp esi, 0x7a
jne 0x4cb5e2
push ebx
mov eax, dword [ebp - 0xa8]
dec eax
push eax
push 1
push 0x11
lea ecx, [ebp - 0xa0]
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov eax, dword [ebp - 0xa0]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx], 5
mov eax, dword [ebp - 0xa0]
push eax
lea ecx, [ebp - 0xac]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
push ebx
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0xac]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
push ecx
lea edx, [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x7c]
push eax
call fcn.00408e40
mov dword [ebp - 0xf8], eax
call edi
lea ecx, [ebp - 0xac]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0xa0]
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xe4], 0x6011
push ebx
push 0x40
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0xc4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
mov edx, dword [ebp - 0xa8]
add edx, 0xfffffffb
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xd4], 3
lea eax, [ebp - 0xd4]
push eax
push 5
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [0x4010f4]
mov edx, eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0xc4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x4c]
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xe4], 0x4008
push 0x19
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0xc4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov dword [ebp - 0xec], 0x40d9d8
mov dword [ebp - 0xf4], 0x8008
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov esi, eax
lea ecx, [ebp - 0xc4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp si, bx
je 0x4cb6e7
or byte [ebp - 0x94], 1
inc dword [ebp - 0x20]
jmp 0x4cb495
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea ecx, [ebp - 0xb4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov edx, dword [esi]
lea eax, [ebp - 0xf8]
push eax
push esi
call dword [edx + 0x4c]
fnclex
cmp eax, ebx
jge 0x4cb727
push 0x4c
push 0x409104
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xf8]
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
cmp esi, 0x103
je 0x4cb7a3
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x4cb832
jmp 0x4cb819
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea ecx, [ebp - 0xb4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov edx, dword [esi]
lea eax, [ebp - 0xf8]
push eax
push esi
call dword [edx + 0x4c]
fnclex
cmp eax, ebx
jge 0x4cb789
push 0x4c
push 0x409104
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xf8]
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
cmp esi, 0x103
jne 0x4cb7cd
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00408e98
call edi
mov edx, dword [ebp - 0x7c]
push edx
call fcn.00408e98
call edi
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x4cb832
jmp 0x4cb819
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x4cb832
jmp 0x4cb819
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa0]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret