Function at 0x478020
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebx
push esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
push edi
mov ecx, 0x43
call esi
mov ecx, dword [0x48a150]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, 1
cmp edi, 0x83
mov byte [ecx], al
jb 0x47804d
call ebx
mov ecx, 0x4d
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478071
call ebx
mov ecx, 0x47
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478095
call ebx
mov ecx, 0x3d
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4780b9
call ebx
mov ecx, 0x22
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4780dd
call ebx
mov ecx, 0x45
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478101
call ebx
mov ecx, 0x30
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478125
call ebx
mov ecx, 0x45
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478149
call ebx
mov ecx, 0x32
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47816d
call ebx
mov ecx, 0x34
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478191
call ebx
mov ecx, 0x43
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4781b5
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4781d9
call ebx
mov ecx, 0x41
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4781fd
call ebx
mov ecx, 0x35
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478221
call ebx
mov ecx, 0x30
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478245
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478269
call ebx
mov ecx, 0x41
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47828d
call ebx
mov ecx, 0x35
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4782b1
call ebx
mov ecx, 0x30
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4782d5
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4782f9
call ebx
mov ecx, 0x45
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47831d
call ebx
mov ecx, 0x35
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478341
call ebx
mov ecx, 0x34
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478365
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478389
call ebx
mov ecx, 0x45
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4783ad
call ebx
mov ecx, 0x35
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4783d1
call ebx
mov ecx, 0x34
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4783f5
call ebx
mov ecx, 0x22
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478419
call ebx
mov ecx, 0xd
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47843d
call ebx
mov ecx, 0xa
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478461
call ebx
mov ecx, 0x44
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478485
call ebx
mov ecx, 0x50
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4784a9
call ebx
mov ecx, 0x42
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4784cd
call ebx
mov ecx, 0x3d
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4784f1
call ebx
mov ecx, 0x22
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478515
call ebx
mov ecx, 0x43
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478539
call ebx
mov ecx, 0x30
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47855d
call ebx
mov ecx, 0x43
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478581
call ebx
mov ecx, 0x32
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4785a5
call ebx
mov ecx, 0x36
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4785c9
call ebx
mov ecx, 0x43
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4785ed
call ebx
mov ecx, 0x37
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478611
call ebx
mov ecx, 0x33
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478635
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478659
call ebx
mov ecx, 0x39
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47867d
call ebx
mov ecx, 0x37
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4786a1
call ebx
mov ecx, 0x33
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4786c5
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4786e9
call ebx
mov ecx, 0x39
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47870d
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478731
call ebx
mov ecx, 0x43
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478755
call ebx
mov ecx, 0x37
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478779
call ebx
mov ecx, 0x37
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47879d
call ebx
mov ecx, 0x37
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4787c1
call ebx
mov ecx, 0x34
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4787e5
call ebx
mov ecx, 0x38
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478809
call ebx
mov ecx, 0x39
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x47882d
call ebx
mov ecx, 0x43
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478851
call ebx
mov ecx, 0x36
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478875
call ebx
mov ecx, 0x31
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478899
call ebx
mov ecx, 0x36
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4788bd
call ebx
mov ecx, 0x34
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x4788e1
call ebx
mov ecx, 0x43
call esi
mov ecx, dword [0x48a150]
add edi, 1
mov byte [ecx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478905
call ebx
mov ecx, 0x30
call esi
mov edx, dword [0x48a150]
add edi, 1
mov byte [edx + edi - 1], al
jo 0x479275
cmp edi, 0x83
jb 0x478929
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop