Function at 0x486d10
Capabilities:
Manipulate safe mode programs

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x4106c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x158
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x406558
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov dword [ebp - 0xa4], 0x417628
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0x418224
push 0x428604
lea eax, [ebp - 0x88]
push eax
call fcn.004c7510
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 4
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x9c]
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 0xa4], 0x41fa98
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea ecx, [ebp - 0x64]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], 0x4008
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 0x9c]
mov ecx, 1
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x9c]
push ecx
push 1
mov edx, dword [ebp - 0x48]
push edx
call fcn.004c7c80
lea eax, [ebp - 0x9c]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
cmp eax, 1
jge 0x486e98
jmp 0x487777
mov dword [ebp - 4], 8
mov edx, dword [ebp - 0x64]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 9
push 0
lea edx, [ebp - 0x34]
push edx
call fcn.004d33c0
mov dword [ebp - 4], 0xa
call fcn.0048b870
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x164], eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x164]
push edx
call fcn.0041db64
mov dword [ebp - 0x160], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x28], 0xffffffff
jne 0x487182
mov dword [ebp - 4], 0xd
push 0
push 7
push 1
push 0
lea ecx, [ebp - 0x9c]
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 0xa4], 0x41fc8c
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], 0x4003
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 0x9c]
mov ecx, 1
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0xc4], 0x41fa98
mov dword [ebp - 0xcc], 8
lea edx, [ebp - 0xcc]
mov ecx, dword [ebp - 0x9c]
mov eax, 2
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x64]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xdc], 0x4008
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0x9c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0xe4], 0x41faac
mov dword [ebp - 0xec], 8
lea edx, [ebp - 0xec]
mov ecx, dword [ebp - 0x9c]
mov eax, 4
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x34]
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0xfc], 0x4008
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x9c]
mov ecx, 5
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0x104], 0x41fadc
mov dword [ebp - 0x10c], 8
lea edx, [ebp - 0x10c]
mov ecx, dword [ebp - 0x9c]
mov eax, 6
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x11c], 0x4003
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x9c]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x9c]
push ecx
call fcn.004e6720
mov edx, eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x9c]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov dword [ebp - 0x80], 0x80020004
mov dword [ebp - 0x88], 0xa
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
push 0x428400
mov edx, dword [ebp - 0x48]
push edx
call fcn.004ccc00
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4873fa
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x28], 0
jne 0x4873fa
mov dword [ebp - 4], 0xf
push 0
push 7
push 1
push 0
lea eax, [ebp - 0x9c]
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 0xa4], 0x41fc8c
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
mov ecx, dword [ebp - 0x9c]
xor eax, eax
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x28]
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xbc], 0x4003
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 0x9c]
mov ecx, 1
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0xc4], 0x41fa98
mov dword [ebp - 0xcc], 8
lea edx, [ebp - 0xcc]
mov ecx, dword [ebp - 0x9c]
mov eax, 2
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x64]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xdc], 0x4008
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0x9c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0xe4], 0x41faac
mov dword [ebp - 0xec], 8
lea edx, [ebp - 0xec]
mov ecx, dword [ebp - 0x9c]
mov eax, 4
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x34]
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0xfc], 0x4008
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x9c]
mov ecx, 5
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0x104], 0x41fadc
mov dword [ebp - 0x10c], 8
lea edx, [ebp - 0x10c]
mov ecx, dword [ebp - 0x9c]
mov eax, 6
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x11c], 0x4003
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x9c]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x9c]
push ecx
call fcn.004e6720
mov edx, eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x9c]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov dword [ebp - 0x80], 0x80020004
mov dword [ebp - 0x88], 0xa
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
push 0x428400
mov edx, dword [ebp - 0x48]
push edx
call fcn.004ccc00
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x11
call fcn.0048b9c0
mov dword [ebp - 4], 0x12
push 0
push 9
push 1
push 0
lea eax, [ebp - 0x9c]
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 0xa4], 0x41fc8c
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
mov ecx, dword [ebp - 0x9c]
xor eax, eax
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x28]
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xbc], 0x4003
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 0x9c]
mov ecx, 1
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0xc4], 0x41fa98
mov dword [ebp - 0xcc], 8
lea edx, [ebp - 0xcc]
mov ecx, dword [ebp - 0x9c]
mov eax, 2
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x64]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xdc], 0x4008
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0x9c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0xe4], 0x41faac
mov dword [ebp - 0xec], 8
lea edx, [ebp - 0xec]
mov ecx, dword [ebp - 0x9c]
mov eax, 4
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x34]
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0xfc], 0x4008
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x9c]
mov ecx, 5
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0x104], 0x41fadc
mov dword [ebp - 0x10c], 8
lea edx, [ebp - 0x10c]
mov ecx, dword [ebp - 0x9c]
mov eax, 6
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x11c], 0x4003
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x9c]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov dword [ebp - 0x124], 0x41fac4
mov dword [ebp - 0x12c], 8
lea edx, [ebp - 0x12c]
mov ecx, dword [ebp - 0x9c]
mov eax, 8
sub eax, dword [ecx + 0x14]
shl eax, 4
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x60]
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x13c], 0x4003
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0x9c]
mov ecx, 9
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x9c]
push ecx
call fcn.004e6720
mov edx, eax
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x9c]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov dword [ebp - 0x90], 0x80020004
mov dword [ebp - 0x98], 0xa
mov dword [ebp - 0x80], 0x80020004
mov dword [ebp - 0x88], 0xa
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x88]
push ecx
push 0
mov edx, dword [ebp - 0x74]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Str]
push eax
push 0x428400
push 0x4176e8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x420d1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov eax, dword [ebp - 0x48]
push eax
call fcn.004ccf10
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x70]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x88]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x28], 0xffffffff
je 0x487777
mov dword [ebp - 4], 0x14
mov ecx, dword [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaI4Abs]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 0x17
push 0
push 0
push 1
push 0
lea eax, [ebp - 0x9c]
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xac], 0x400b
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
sub ecx, dword [eax + 0x14]
shl ecx, 4
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x9c]
push ecx
push 0x10
mov edx, dword [ebp - 0x48]
push edx
call fcn.004c7c80
lea eax, [ebp - 0x9c]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov dword [ebp - 4], 0x18
mov cx, word [ebp - 0x2c]
mov word [ebp - 0x30], cx
mov dword [ebp - 4], 0x19
mov edx, dword [ebp - 0x48]
push edx
call fcn.004c8940
jmp 0x487849
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x4878d6
jmp 0x487896
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret