Function at 0x4180a0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x401606
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcc
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x401578
mov edx, dword [ebp + 0xc]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
xor edi, edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xd4], edi
call esi
push 8
push 0x40c638
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov ebx, 2
push ebx
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0x2c]
push eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x88], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0x68]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x38]
mov edx, 0x40c2f4
lea ecx, [eax + 4]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c300
add ecx, 8
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c310
lea ecx, [eax + 0xc]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c31c
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c328
lea ecx, [eax + 0x14]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c338
add ecx, 0x18
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c344
lea ecx, [eax + 0x1c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c350
add ecx, 0x20
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c35c
lea ecx, [eax + 0x24]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c36c
add ecx, 0x28
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c37c
lea ecx, [eax + 0x2c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c388
add ecx, 0x30
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c394
lea ecx, [eax + 0x34]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c3a0
add ecx, 0x38
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c3ac
lea ecx, [eax + 0x3c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c3bc
add ecx, 0x40
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c3cc
lea ecx, [eax + 0x44]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c3dc
add ecx, 0x48
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c3e8
lea ecx, [eax + 0x4c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c258
add ecx, 0x50
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c09c
lea ecx, [eax + 0x54]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40bc3c
add ecx, 0x58
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c3f4
lea ecx, [eax + 0x5c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c404
add ecx, 0x60
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c414
lea ecx, [eax + 0x64]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c420
add ecx, 0x68
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c430
lea ecx, [eax + 0x6c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c440
add ecx, 0x70
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c450
lea ecx, [eax + 0x74]
call esi
mov edx, 0x40c464
mov ecx, dword [ebp - 0x38]
add ecx, 0x78
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c470
lea ecx, [eax + 0x7c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c480
add ecx, 0x80
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c490
lea ecx, [eax + 0x84]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c49c
add ecx, 0x88
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c4ac
lea ecx, [eax + 0x8c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c4bc
add ecx, 0x90
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c4cc
lea ecx, [eax + 0x94]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c4dc
add ecx, 0x98
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c4ec
lea ecx, [eax + 0x9c]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c4fc
add ecx, 0xa0
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c50c
lea ecx, [eax + 0xa4]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c51c
add ecx, 0xa8
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c528
lea ecx, [eax + 0xac]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c53c
add ecx, 0xb0
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c54c
lea ecx, [eax + 0xb4]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c55c
add ecx, 0xb8
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c56c
lea ecx, [eax + 0xbc]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c57c
add ecx, 0xc0
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x409734
lea ecx, [eax + 0xc4]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c58c
add ecx, 0xc8
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c59c
lea ecx, [eax + 0xcc]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c5ac
add ecx, 0xd0
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c5bc
lea ecx, [eax + 0xd4]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c5cc
add ecx, 0xd8
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c5dc
lea ecx, [eax + 0xdc]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c5ec
add ecx, 0xe0
call esi
mov eax, dword [ebp - 0x38]
mov edx, 0x40c5fc
lea ecx, [eax + 0xe4]
call esi
mov ecx, dword [ebp - 0x38]
mov edx, 0x40c60c
add ecx, 0xe8
call esi
mov edx, 0x40c628
lea ecx, [ebp - 0x28]
call esi
mov eax, 1
mov dword [ebp - 0x80], eax
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x90], 0x64
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa8], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x41864d
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov esi, eax
cmp esi, 0x65
jb 0x41852b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x38]
push ebx
lea ecx, [eax + esi*4]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x88], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x98], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea ecx, [ebp - 0x68]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp si, di
je 0x418630
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0x24]
push ecx
call esi
cmp eax, 0x65
mov dword [ebp - 0xb4], eax
jb 0x4185a6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x24]
push edx
call esi
mov esi, eax
cmp esi, 0x65
jb 0x4185b9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0xb4]
lea ecx, [eax + esi*4]
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x88], 0x4008
mov eax, dword [eax + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, ebx
jo 0x418710
push eax
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x80], 0x3e8
mov dword [ebp - 0x88], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xd4]
push ecx
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41850c
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x80], ecx
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x88], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
push 0x4186e1
jmp 0x418696
lea ecx, [ebp - 0xd4]
push ecx
lea edx, [ebp - 0xc4]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0xac]
push ecx
lea eax, [ebp - 0x44]
push 0
mov dword [ebp - 0xac], eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop