Function at 0x4a5fa0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x402596
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc4
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x401cb8
xor edi, edi
lea edx, [ebp + 8]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xcc], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 8
lea eax, [ebp - 0x40]
push 0x4196b8
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov ecx, dword [ebp - 0x34]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x418210
add ecx, 4
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x41821c
lea ecx, [eax + 8]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x418228
add ecx, 0xc
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x418234
lea ecx, [eax + 0x10]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x418240
add ecx, 0x14
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x41824c
lea ecx, [eax + 0x18]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x418258
add ecx, 0x1c
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x418264
lea ecx, [eax + 0x20]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x418270
add ecx, 0x24
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x414dcc
lea ecx, [eax + 0x28]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x41827c
add ecx, 0x2c
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x418288
lea ecx, [eax + 0x30]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x418294
add ecx, 0x34
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x4182a0
lea ecx, [eax + 0x38]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x4182ac
add ecx, 0x3c
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x4182b8
lea ecx, [eax + 0x40]
call esi
mov ecx, dword [ebp - 0x34]
mov edx, 0x4182c4
add ecx, 0x44
call esi
mov eax, dword [ebp - 0x34]
mov edx, 0x4182d0
lea ecx, [eax + 0x48]
call esi
lea ecx, [ebp - 0x40]
mov ebx, 2
push ecx
push 1
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x84], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x94]
push edx
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xbc]
push edx
lea ecx, [ebp - 0x24]
push eax
push ecx
mov dword [ebp - 0x94], 3
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xa4], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x4a6231
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
cmp ebx, 0x13
jb 0x4a6194
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x94]
push edx
lea edx, [ebp - 0x64]
mov ecx, dword [eax + ebx*4]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x84]
push eax
push ecx
push edx
mov dword [ebp - 0x94], 0x8008
mov dword [ebp - 0x7c], 0x9999999a
mov dword [ebp - 0x78], 0x3fb99999
mov dword [ebp - 0x84], 5
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
jne 0x4a6207
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0xbc]
push eax
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x4a6175
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
cmp edi, 0x13
jb 0x4a621e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx + edi*4]
lea ecx, [ebp - 0x28]
call esi
wait
push 0x4a62b1
jmp 0x4a626f
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
wait
push 0x4a62b1
jmp 0x4a626f
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0xbc]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0xc
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0xa8]
lea eax, [ebp - 0x40]
push ecx
push 0
mov dword [ebp - 0xa8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x54]
call esi
ret