Function at 0x404bf0
Capabilities:
Access peb ldr_data
Get kernel32 base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401266
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x214
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401238
mov edx, dword [ebp + 0xc]
xor eax, eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1f8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov edi, 8
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x1f0], 0x404068
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x1f0], 0x404028
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x1f0], 0x404078
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x1f0], 0x404018
mov dword [ebp - 0x1f8], edi
call esi
mov ebx, 0x40404c
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1f8], edi
call esi
mov dword [ebp - 0x1f0], 0x404018
mov dword [ebp - 0x1f8], edi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x198]
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x1f0], 0x404078
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x1f0], 0x404028
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x1f0], 0x404068
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x1f0], 0x40408c
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x1f0], 0x4040a4
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x1f0], 0x4040c0
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x1f0], 0x4040ec
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x1f0], 0x4040dc
mov dword [ebp - 0x1f8], edi
call esi
mov eax, dword [ebp - 0x19c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x94], eax
mov ebx, dword [ecx]
push ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
push ebx
push 1
mov dword [ebp - 0x60], eax
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1f0], 0x4040dc
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x1f0], 0x4040ec
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x1f0], 0x4040c0
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x1f0], 0x4040a4
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x1f0], 0x40408c
mov dword [ebp - 0x1f8], edi
call esi
push 0x31
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x1c0]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Str]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov edx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x4c]
cmp eax, edx
jg 0x4055d6
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x1f0], 0x403f88
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x1f0], 0x4040fc
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x1f0], 0x403f98
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x1f0], 0x40410c
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x1f0], 0x404120
mov dword [ebp - 0x1f8], edi
call esi
push 0x31
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov edx, eax
lea ecx, [ebp - 0x1c0]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Str]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x1e8]
push eax
push ecx
push edx
mov dword [ebp - 0x1e8], 3
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1c4]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov cx, ax
xor ecx, 0xff
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov byte [ebp - 0x188], al
lea eax, [ebp - 0x1c4]
lea ecx, [ebp - 0x1c0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x1e8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x1f0], 0x404120
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x1f0], 0x40410c
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x1f0], 0x403f98
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x1f0], 0x4040fc
mov dword [ebp - 0x1f8], edi
call esi
mov dword [ebp - 0x1f0], 0x403f88
mov dword [ebp - 0x1f8], edi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x104]
call esi
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x24]
sar eax, 0x1f
mov ecx, eax
xor ecx, edx
mov edx, dword [ebp - 0x28]
xor eax, edx
cmp eax, ecx
jg 0x40546b
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x1f0], 0x403efc
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x1f0], 0x404134
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x1f0], 0x403b34
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x1f0], 0x403cdc
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x1f0], 0x403ce8
mov dword [ebp - 0x1f8], edi
call esi
mov edx, dword [ebp + 8]
mov eax, dword [edx]
test eax, eax
mov dword [ebp - 0x218], eax
je 0x40525c
cmp word [eax], 1
jne 0x40525c
mov ecx, dword [ebp - 0x28]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0x200], ecx
jb 0x405254
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x21c], ecx
jmp 0x40526e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x4052a7
cmp word [eax], 1
jne 0x4052a7
mov ecx, dword [ebp - 0x28]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0x1fc], ecx
jb 0x40529f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x220], ecx
jmp 0x4052b9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x218]
mov eax, dword [eax + 0xc]
push 0x26
mov dword [ebp - 0x224], eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov edx, eax
lea ecx, [ebp - 0x1c0]
call ebx
push eax
push 0x48
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov edx, eax
lea ecx, [ebp - 0x1c4]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x1c8]
call ebx
push eax
push 0x46
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov edx, eax
lea ecx, [ebp - 0x1cc]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call ebx
push eax
push 0x46
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov edx, eax
lea ecx, [ebp - 0x1d4]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x1d8]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Str]
mov edx, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x224]
mov ecx, eax
mov eax, dword [ebp - 0x21c]
and ecx, edx
xor edx, edx
mov dl, byte [ebx + eax]
mov eax, dword [ebp - 0x188]
and eax, 0xff
xor edx, eax
xor ecx, edx
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I4]
mov ecx, dword [ebp - 0x220]
lea edx, [ebp - 0x1d8]
push edx
lea edx, [ebp - 0x1cc]
mov byte [ebx + ecx], al
lea eax, [ebp - 0x1d4]
lea ecx, [ebp - 0x1d0]
push eax
push ecx
lea eax, [ebp - 0x1c8]
push edx
lea ecx, [ebp - 0x1c4]
push eax
lea edx, [ebp - 0x1c0]
push ecx
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x20
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x1f0], 0x403ce8
mov dword [ebp - 0x1f8], edi
call esi
mov dword [ebp - 0x1f0], 0x403cdc
mov dword [ebp - 0x1f8], edi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xb4]
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x1f0], 0x403b34
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x1f0], 0x404134
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x1f0], 0x403efc
mov dword [ebp - 0x1f8], edi
call esi
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x28]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
add eax, ecx
jo 0x405702
mov dword [ebp - 0x28], eax
jmp 0x405168
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x1f0], 0x404168
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x1f0], 0x404174
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x1f0], 0x404150
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x1f0], 0x404184
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1f0], 0x404190
mov dword [ebp - 0x1f8], edi
call esi
push 0x31
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov edx, eax
lea ecx, [ebp - 0x1c0]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Str]
mov edx, dword [ebp - 0x60]
lea ecx, [ebp - 0x1c0]
add eax, edx
jo 0x405702
mov dword [ebp - 0x60], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1f0], 0x404190
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x1f0], 0x404184
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x1f0], 0x404150
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x1f0], 0x404174
mov dword [ebp - 0x1f8], edi
call esi
lea edx, [ebp - 0x1f8]
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x1f0], 0x404168
mov dword [ebp - 0x1f8], edi
call esi
mov ecx, dword [ebp - 0x4c]
mov eax, 1
add eax, ecx
jo 0x405702
mov dword [ebp - 0x4c], eax
jmp 0x404f9f
push 0x4056ef
jmp 0x405626
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x38]
call esi
lea ecx, [ebp - 0x48]
call esi
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x90]
call esi
lea ecx, [ebp - 0xa4]
call esi
lea ecx, [ebp - 0xb4]
call esi
lea ecx, [ebp - 0xc4]
call esi
lea ecx, [ebp - 0xd4]
call esi
lea ecx, [ebp - 0xe4]
call esi
lea ecx, [ebp - 0xf4]
call esi
lea ecx, [ebp - 0x104]
call esi
lea ecx, [ebp - 0x114]
call esi
lea ecx, [ebp - 0x124]
call esi
lea ecx, [ebp - 0x134]
call esi
lea ecx, [ebp - 0x144]
call esi
lea ecx, [ebp - 0x154]
call esi
lea ecx, [ebp - 0x164]
call esi
lea ecx, [ebp - 0x174]
call esi
lea ecx, [ebp - 0x184]
call esi
lea ecx, [ebp - 0x198]
call esi
lea ecx, [ebp - 0x19c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1ac]
call esi
lea ecx, [ebp - 0x1bc]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop