Function at 0x4222e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4017a6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x120
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x401428
xor edi, edi
lea eax, [ebp - 0x48]
push edi
push 0xd
push 1
push edi
push eax
push 0x10
push 0x880
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x128], edi
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x48]
mov ebx, 5
mov dword [ebp - 0x50], 0x9999999a
mov dword [ebp - 0x4c], 0x401b9999
mov dword [ebp - 0x58], ebx
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
add esp, 0x1c
lea edx, [ebp - 0x58]
call esi
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x60], 0x66666666
mov dword [ebp - 0x5c], 0x40226666
mov dword [ebp - 0x68], ebx
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x68]
shl ecx, 4
mov dword [ebp - 0x134], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x134]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 2
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], 0x40270000
mov dword [ebp - 0x78], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x78]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 3
mov dword [ebp - 0x80], 0x9999999a
mov dword [ebp - 0x7c], 0x402b9999
mov dword [ebp - 0x88], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x88]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x90], 0x9999999a
mov eax, dword [ebp - 0x48]
mov ecx, 4
mov dword [ebp - 0x8c], 0x40301999
mov dword [ebp - 0x98], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x98]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, ebx
mov dword [ebp - 0xa0], 0x66666666
mov dword [ebp - 0x9c], 0x40326666
mov dword [ebp - 0xa8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 6
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xac], 0x40348000
mov dword [ebp - 0xb8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xb8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 7
mov dword [ebp - 0xc0], 0x66666666
mov dword [ebp - 0xbc], 0x40366666
mov dword [ebp - 0xc8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 8
mov dword [ebp - 0xd0], 0x66666666
mov dword [ebp - 0xcc], 0x40386666
mov dword [ebp - 0xd8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 9
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0xdc], 0x403a8000
mov dword [ebp - 0xe8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 0xa
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], 0x403c8000
mov dword [ebp - 0xf8], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov ecx, 0xb
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xfc], 0x403e8000
mov dword [ebp - 0x108], ebx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x108]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x110], 0x33333333
mov dword [ebp - 0x10c], 0x40403333
mov eax, dword [ebp - 0x48]
mov ecx, 0xc
mov dword [ebp - 0x118], ebx
lea edx, [ebp - 0x118]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x120], 0xcccccccd
mov dword [ebp - 0x11c], 0x40414ccc
mov dword [ebp - 0x128], ebx
mov ebx, dword [eax + 0x14]
mov ecx, 0xd
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
lea edx, [ebp - 0x128]
add ecx, ebx
call esi
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x48]
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x24]
call esi
sub esp, 0x10
mov eax, dword [ebp + 0xc]
mov edx, esp
mov ecx, 0x4002
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x50], eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0x54]
push 1
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x24]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x4c]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
wait
push 0x4226b8
jmp 0x4226ae
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
ret