Function at 0x405fa0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x4011d6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14c
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401198
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x148], ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov edx, 0x40307c
mov eax, dword [0x408070]
lea ecx, [eax + 8]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call esi
mov edx, 0x40308c
mov ecx, dword [0x408070]
add ecx, 0xc
call esi
mov edx, 0x4030b0
mov eax, dword [0x408070]
lea ecx, [eax + 0x10]
call esi
mov edx, 0x4030c4
mov ecx, dword [0x408070]
add ecx, 0x14
call esi
mov edx, 0x4030e8
mov eax, dword [0x408070]
lea ecx, [eax + 0x28]
call esi
mov edx, 0x403104
mov ecx, dword [0x408070]
add ecx, 0x2c
call esi
mov edx, 0x403128
mov eax, dword [0x408070]
lea ecx, [eax + 0x38]
call esi
mov edx, 0x403144
mov ecx, dword [0x408070]
add ecx, 0x3c
call esi
mov edx, 0x403168
mov eax, dword [0x408070]
lea ecx, [eax + 0x40]
call esi
mov edx, 0x403190
mov ecx, dword [0x408070]
add ecx, 0x44
call esi
mov edx, 0x4031b4
mov eax, dword [0x408070]
lea ecx, [eax + 0x70]
call esi
mov edx, 0x4031e0
mov ecx, dword [0x408070]
add ecx, 0x74
call esi
mov edx, 0x403204
mov eax, dword [0x408070]
lea ecx, [eax + 0x68]
call esi
mov edx, 0x4030c4
mov ecx, dword [0x408070]
add ecx, 0x6c
call esi
mov edx, 0x403204
mov eax, dword [0x408070]
lea ecx, [eax + 0x50]
call esi
mov edx, 0x403214
mov ecx, dword [0x408070]
add ecx, 0x54
call esi
mov edx, 0x403238
mov eax, dword [0x408070]
lea ecx, [eax + 0x2d8]
call esi
mov edx, 0x40324c
mov ecx, dword [0x408070]
add ecx, 0x2dc
call esi
mov edx, 0x403270
mov eax, dword [0x408070]
lea ecx, [eax + 0xf0]
call esi
mov edx, 0x403298
mov ecx, dword [0x408070]
add ecx, 0xf4
call esi
mov edx, 0x4032bc
mov eax, dword [0x408070]
lea ecx, [eax + 0xf8]
call esi
mov edx, 0x4032e0
mov ecx, dword [0x408070]
add ecx, 0xfc
call esi
mov edx, 0x403304
mov eax, dword [0x408070]
lea ecx, [eax + 0x100]
call esi
mov edx, 0x40332c
mov ecx, dword [0x408070]
add ecx, 0x104
call esi
mov edx, 0x403350
mov eax, dword [0x408070]
lea ecx, [eax + 0x108]
call esi
mov edx, 0x403370
mov ecx, dword [0x408070]
add ecx, 0x10c
call esi
mov edx, 0x403394
mov eax, dword [0x408070]
lea ecx, [eax + 0x110]
call esi
mov edx, 0x4033b8
mov ecx, dword [0x408070]
add ecx, 0x114
call esi
mov edx, 0x4033dc
mov eax, dword [0x408070]
lea ecx, [eax + 0x118]
call esi
mov edx, 0x403408
mov ecx, dword [0x408070]
add ecx, 0x11c
call esi
mov edx, 0x40342c
mov eax, dword [0x408070]
lea ecx, [eax + 0x120]
call esi
mov edx, 0x403460
mov ecx, dword [0x408070]
add ecx, 0x124
call esi
mov edx, 0x403484
mov eax, dword [0x408070]
lea ecx, [eax + 0x280]
call esi
mov edx, 0x4034b4
mov ecx, dword [0x408070]
add ecx, 0x284
call esi
mov edx, 0x4034d8
mov eax, dword [0x408070]
lea ecx, [eax + 0x190]
call esi
mov edx, 0x4034ec
mov ecx, dword [0x408070]
add ecx, 0x194
call esi
mov edx, 0x403510
mov eax, dword [0x408070]
lea ecx, [eax + 0x1b8]
call esi
mov edx, 0x403524
mov ecx, dword [0x408070]
add ecx, 0x1bc
call esi
mov edx, 0x403548
mov ecx, dword [0x408038]
call esi
mov edx, 0x402e0c
mov eax, dword [0x408038]
lea ecx, [eax + 4]
call esi
mov edx, 0x403550
mov ecx, dword [0x408038]
add ecx, 8
call esi
mov edx, 0x403558
mov eax, dword [0x408038]
lea ecx, [eax + 0xc]
call esi
mov edx, 0x403560
mov ecx, dword [0x408038]
add ecx, 0x10
call esi
mov edx, 0x403568
mov eax, dword [0x408038]
lea ecx, [eax + 0x14]
call esi
mov edx, 0x403570
mov ecx, dword [0x408038]
add ecx, 0x18
call esi
mov edx, 0x403578
mov eax, dword [0x408038]
lea ecx, [eax + 0x1c]
call esi
mov edx, 0x403580
mov ecx, dword [0x408038]
add ecx, 0x20
call esi
mov edx, 0x403588
mov eax, dword [0x408038]
lea ecx, [eax + 0x24]
call esi
mov edx, 0x403590
mov ecx, dword [0x408038]
add ecx, 0x28
call esi
mov edx, 0x403598
mov eax, dword [0x408038]
lea ecx, [eax + 0x2c]
call esi
mov edx, 0x4035a0
mov ecx, dword [0x408038]
add ecx, 0x30
call esi
mov edx, 0x4035a8
mov eax, dword [0x408038]
lea ecx, [eax + 0x34]
call esi
mov edx, 0x4035b0
mov ecx, dword [0x408038]
add ecx, 0x38
call esi
mov edx, 0x4035b8
mov eax, dword [0x408038]
lea ecx, [eax + 0x3c]
call esi
mov edx, 0x4035c0
mov ecx, dword [0x408038]
add ecx, 0x40
call esi
mov edx, 0x4035c8
mov eax, dword [0x408038]
lea ecx, [eax + 0x44]
call esi
mov edx, 0x4035d0
mov ecx, dword [0x408038]
add ecx, 0x48
call esi
mov edx, 0x4035d8
mov eax, dword [0x408038]
lea ecx, [eax + 0x4c]
call esi
mov edx, 0x4035e0
mov ecx, dword [0x408038]
add ecx, 0x50
call esi
mov edx, 0x4035e8
mov eax, dword [0x408038]
lea ecx, [eax + 0x54]
call esi
mov edx, 0x4035f0
mov ecx, dword [0x408038]
add ecx, 0x58
call esi
mov edx, 0x4035f8
mov eax, dword [0x408038]
lea ecx, [eax + 0x5c]
call esi
mov edx, 0x403600
mov ecx, dword [0x408038]
add ecx, 0x60
call esi
mov edx, 0x403608
mov eax, dword [0x408038]
lea ecx, [eax + 0x64]
call esi
mov edx, 0x403610
mov ecx, dword [0x408038]
add ecx, 0x68
call esi
mov edx, 0x403618
mov eax, dword [0x408038]
lea ecx, [eax + 0x6c]
call esi
mov edx, 0x403620
mov ecx, dword [0x408038]
add ecx, 0x70
call esi
mov edx, 0x403628
mov eax, dword [0x408038]
lea ecx, [eax + 0x74]
call esi
mov edx, 0x403630
mov ecx, dword [0x408038]
add ecx, 0x78
call esi
mov edx, 0x402e60
mov eax, dword [0x408038]
lea ecx, [eax + 0x7c]
call esi
mov edx, 0x403638
mov ecx, dword [0x408038]
add ecx, 0x80
call esi
mov edx, 0x403640
mov eax, dword [0x408038]
lea ecx, [eax + 0x84]
call esi
mov edx, 0x402e3c
mov ecx, dword [0x408038]
add ecx, 0x88
call esi
mov edx, 0x403648
mov eax, dword [0x408038]
lea ecx, [eax + 0x8c]
call esi
mov edx, 0x403650
mov ecx, dword [0x408054]
call esi
mov edx, 0x403660
mov ecx, dword [0x408054]
add ecx, 4
call esi
mov edx, 0x403670
mov eax, dword [0x408054]
lea ecx, [eax + 8]
call esi
mov edx, 0x403680
mov ecx, dword [0x408054]
add ecx, 0xc
call esi
mov edx, 0x403690
mov eax, dword [0x408054]
lea ecx, [eax + 0x10]
call esi
mov edx, 0x4036a0
mov ecx, dword [0x408054]
add ecx, 0x14
call esi
mov edx, 0x4036b0
mov eax, dword [0x408054]
lea ecx, [eax + 0x18]
call esi
mov edx, 0x4036c0
mov ecx, dword [0x408054]
add ecx, 0x1c
call esi
mov edx, 0x4036d0
mov eax, dword [0x408054]
lea ecx, [eax + 0x20]
call esi
mov edx, 0x4036e0
mov ecx, dword [0x408054]
add ecx, 0x24
call esi
mov edx, 0x4036f0
mov eax, dword [0x408054]
lea ecx, [eax + 0x28]
call esi
mov edx, 0x403700
mov ecx, dword [0x408054]
add ecx, 0x2c
call esi
mov edx, 0x403710
mov eax, dword [0x408054]
lea ecx, [eax + 0x30]
call esi
mov edx, 0x403720
mov ecx, dword [0x408054]
add ecx, 0x34
call esi
mov edx, 0x403730
mov eax, dword [0x408054]
lea ecx, [eax + 0x38]
call esi
mov edx, 0x403740
mov ecx, dword [0x408054]
add ecx, 0x3c
call esi
mov edx, 0x403750
mov eax, dword [0x408054]
lea ecx, [eax + 0x40]
call esi
mov edx, 0x403760
mov ecx, dword [0x408054]
add ecx, 0x44
call esi
mov edx, 0x403770
mov eax, dword [0x408054]
lea ecx, [eax + 0x48]
call esi
mov edx, 0x403780
mov ecx, dword [0x408054]
add ecx, 0x4c
call esi
mov edx, 0x403790
mov eax, dword [0x408054]
lea ecx, [eax + 0x50]
call esi
mov edx, 0x4037a0
mov ecx, dword [0x408054]
add ecx, 0x54
call esi
mov edx, 0x4037b0
mov eax, dword [0x408054]
lea ecx, [eax + 0x58]
call esi
mov edx, 0x4037c0
mov ecx, dword [0x408054]
add ecx, 0x5c
call esi
mov edx, 0x4037d0
mov eax, dword [0x408054]
lea ecx, [eax + 0x60]
call esi
mov edx, 0x4037e0
mov ecx, dword [0x408054]
add ecx, 0x64
call esi
mov edx, 0x4037f0
mov eax, dword [0x408054]
lea ecx, [eax + 0x68]
call esi
mov edx, 0x403800
mov ecx, dword [0x408054]
add ecx, 0x6c
call esi
mov edx, 0x403810
mov eax, dword [0x408054]
lea ecx, [eax + 0x70]
call esi
mov edx, 0x403820
mov ecx, dword [0x408054]
add ecx, 0x74
call esi
mov edx, 0x403830
mov eax, dword [0x408054]
lea ecx, [eax + 0x78]
call esi
mov edx, 0x403840
mov ecx, dword [0x408054]
add ecx, 0x7c
call esi
mov edx, 0x403650
mov eax, dword [0x408054]
lea ecx, [eax + 0x80]
call esi
mov edx, 0x403650
mov ecx, dword [0x408054]
add ecx, 0x84
call esi
mov edx, 0x403650
mov eax, dword [0x408054]
lea ecx, [eax + 0x88]
call esi
mov edx, 0x403650
mov ecx, dword [0x408054]
add ecx, 0x8c
call esi
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x406b0c
jmp 0x406b0b
ret