Function at 0x42bbc0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x401f86
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x110
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x4018a0
xor esi, esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xfc], esi
mov dword [ebp - 0x10c], esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov eax, dword [ebp - 0x30]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
call edi
test eax, eax
jle 0x42beb9
cmp word [0x43c0bc], si
jne 0x42bc84
call fcn.0042bb10
mov word [0x43c0bc], ax
mov ecx, dword [ebp - 0x30]
push ecx
call edi
mov dword [ebp - 0x118], eax
mov edi, 1
cmp edi, dword [ebp - 0x118]
jg 0x42be07
mov dword [ebp - 0x54], 1
mov esi, 2
mov dword [ebp - 0x5c], esi
lea edx, [ebp - 0x5c]
push edx
push edi
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov bl, al
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0xb4], 0xffffff00
mov eax, 3
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xc4], 0x100
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xd4], 0xffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe4], 0xff
mov dword [ebp - 0xec], esi
mov byte [ebp - 0xf4], bl
mov dword [ebp - 0xfc], 0x11
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0x8c]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
call ebx
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x9c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarXor]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov esi, eax
cmp esi, 0x100
jb 0x42bd88
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x43c0d0]
mov ecx, dword [eax + esi*4]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x10c], 3
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call ebx
push eax
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIdiv]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0x7c]
push edx
call ebx
push eax
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0xac]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarXor]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, 1
add eax, edi
jo 0x42bf4d
mov edi, eax
xor esi, esi
jmp 0x42bc95
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0xbc], 3
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarXor]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x28]
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xbc], 0x4003
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcHexBstrFromVar]
mov edx, eax
lea ecx, [ebp - 0x4c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], esi
push 8
push 0x41b808
lea ecx, [ebp - 0x44]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x48]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharBstr]
mov edx, eax
lea ecx, [ebp - 0x20]
call edi
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x42bf37
jmp 0x42bf24
mov edx, 0x41b808
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x42bf37
jmp 0x42bf24
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop