Function at 0x4239c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4017a6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f4
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x401478
xor edi, edi
lea eax, [ebp - 0x98]
push edi
push 0x15
push 1
push edi
push eax
push 0x10
push 0x880
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x148], edi
mov dword [ebp - 0x158], edi
mov dword [ebp - 0x168], edi
mov dword [ebp - 0x178], edi
mov dword [ebp - 0x188], edi
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x1a8], edi
mov dword [ebp - 0x1b8], edi
mov dword [ebp - 0x1c8], edi
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1e8], edi
mov dword [ebp - 0x1f8], edi
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0xa8], 2
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa8]
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
call esi
mov eax, dword [ebp - 0x98]
mov ebx, 5
mov dword [ebp - 0xb0], 0xf5c28f5c
mov dword [ebp - 0xac], 0x3fef5c28
mov dword [ebp - 0xb8], ebx
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x208], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x208]
lea edx, [ebp - 0xb8]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 2
mov dword [ebp - 0xc0], 0x66666666
mov dword [ebp - 0xbc], 0x3fee6666
mov dword [ebp - 0xc8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 3
mov dword [ebp - 0xd0], 0xd70a3d71
mov dword [ebp - 0xcc], 0x3fed70a3
mov dword [ebp - 0xd8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 4
mov dword [ebp - 0xe0], 0x3d70a3d7
mov dword [ebp - 0xdc], 0x3febd70a
mov dword [ebp - 0xe8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, ebx
mov dword [ebp - 0xf0], 0x1eb851ec
mov dword [ebp - 0xec], 0x3fe9eb85
mov dword [ebp - 0xf8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 6
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xfc], 0x3fe80000
mov dword [ebp - 0x108], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x108]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 7
mov dword [ebp - 0x110], 0x66666666
mov dword [ebp - 0x10c], 0x3fe66666
mov dword [ebp - 0x118], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x118]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 8
mov dword [ebp - 0x120], 0xcccccccd
mov dword [ebp - 0x11c], 0x3fe4cccc
mov dword [ebp - 0x128], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x128]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 9
mov dword [ebp - 0x130], 0x33333333
mov dword [ebp - 0x12c], 0x3fe33333
mov dword [ebp - 0x138], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x138]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0xa
mov dword [ebp - 0x140], 0x1eb851ec
mov dword [ebp - 0x13c], 0x3fe1eb85
mov dword [ebp - 0x148], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x148]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0xb
mov dword [ebp - 0x150], 0xa3d70a4
mov dword [ebp - 0x14c], 0x3fe0a3d7
mov dword [ebp - 0x158], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x158]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0xc
mov dword [ebp - 0x160], 0xeb851eb8
mov dword [ebp - 0x15c], 0x3fdeb851
mov dword [ebp - 0x168], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x168]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0xd
mov dword [ebp - 0x170], 0xc28f5c29
mov dword [ebp - 0x16c], 0x3fdc28f5
mov dword [ebp - 0x178], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x178]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0xe
mov dword [ebp - 0x180], 0x9999999a
mov dword [ebp - 0x17c], 0x3fd99999
mov dword [ebp - 0x188], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x188]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0xf
mov dword [ebp - 0x190], 0x70a3d70a
mov dword [ebp - 0x18c], 0x3fd70a3d
mov dword [ebp - 0x198], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x198]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0x10
mov dword [ebp - 0x1a0], 0x47ae147b
mov dword [ebp - 0x19c], 0x3fd47ae1
mov dword [ebp - 0x1a8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0x11
mov dword [ebp - 0x1b0], 0x28f5c28f
mov dword [ebp - 0x1ac], 0x3fd28f5c
mov dword [ebp - 0x1b8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0x12
mov dword [ebp - 0x1c0], 0xa3d70a4
mov dword [ebp - 0x1bc], 0x3fd0a3d7
mov dword [ebp - 0x1c8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x1d0], 0xd70a3d71
mov eax, dword [ebp - 0x98]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x3fcd70a3
mov dword [ebp - 0x1d8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov ecx, 0x14
mov dword [ebp - 0x1e0], 0xae147ae1
mov dword [ebp - 0x1dc], 0x3fcae147
mov dword [ebp - 0x1e8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1f0], 0x851eb852
mov dword [ebp - 0x1ec], 0x3fc851eb
mov dword [ebp - 0x1f8], ebx
mov ebx, dword [eax + 0x14]
mov ecx, 0x15
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
lea edx, [ebp - 0x1f8]
add ecx, ebx
call esi
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x98]
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x24]
call esi
mov ecx, dword [ebp + 0xc]
mov ax, word [ecx]
cmp ax, di
jg 0x423fc5
mov edx, dword [ebp - 0xa4]
sub esp, 0x10
mov ecx, esp
mov eax, 2
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa0], edi
mov dword [ecx], eax
mov eax, dword [ebp - 0x9c]
mov dword [ecx + 4], edx
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], eax
jmp 0x423ffd
cmp ax, 0x15
jl 0x424022
sub esp, 0x10
mov ecx, 2
mov edx, esp
mov dword [ebp - 0xa8], ecx
mov eax, 0x15
mov dword [edx], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa0], eax
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 0xc], eax
lea ecx, [ebp - 0x24]
push 1
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
wait
push 0x4241bc
jmp 0x4241b2
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xe0], ecx
lea ecx, [ebp - 0xd8]
add ax, 1
push ecx
mov edx, 0x4002
jo 0x4241eb
sub esp, 0x10
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xe8], edx
mov word [ebp - 0xa0], ax
mov ecx, dword [ebp - 0xa0]
mov edx, esp
mov eax, 2
push 1
mov dword [ebp - 0xa8], eax
mov dword [edx], eax
mov eax, dword [ebp - 0xa4]
mov word [ebp - 0xd0], di
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x9c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov dword [ebp - 0xd8], 2
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x24]
push ecx
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call edi
add esp, 0x1c
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xc4]
push eax
sub esp, 0x10
mov eax, esp
push 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc0]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xbc]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x54]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x24]
push eax
push ecx
call edi
add esp, 0x1c
lea edx, [ebp - 0x64]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, dword [ebp - 0xe8]
push eax
mov eax, dword [ebp - 0xe4]
sub esp, 0x10
mov ecx, esp
push 1
mov dword [ecx], edx
mov edx, dword [ebp - 0xe0]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xdc]
mov dword [ecx + 8], edx
lea edx, [ebp - 0x84]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x24]
push ecx
push edx
call edi
add esp, 0x1c
push eax
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0x54]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
wait
push 0x4241bc
jmp 0x4241b2
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop