Function at 0x433680
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x4014e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401470
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, 0x13
mov dword [ebp - 0x14], 0
call esi
mov ecx, dword [0x436034]
mov byte [ecx], al
mov ecx, 4
call esi
mov edx, dword [0x436034]
mov ecx, 0x16
mov byte [edx + 1], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 2], al
mov ecx, 4
call esi
mov edx, dword [0x436034]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [edx + 3], al
mov eax, dword [0x436034]
mov edx, 0x4094dc
lea ecx, [eax + 4]
call edi
mov ecx, dword [0x436034]
mov edx, 0x40a304
add ecx, 8
call edi
mov eax, dword [0x436034]
mov edx, 0x41fd50
lea ecx, [eax + 0xc]
call edi
mov ecx, 0x14
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x10], al
mov ecx, 5
call esi
mov edx, dword [0x436034]
mov ecx, 0x17
mov byte [edx + 0x11], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x12], al
mov ecx, 5
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x13], al
mov eax, dword [0x436034]
mov edx, 0x40a304
lea ecx, [eax + 0x14]
call edi
mov ecx, dword [0x436034]
mov edx, 0x40b880
add ecx, 0x18
call edi
mov eax, dword [0x436034]
mov edx, 0x420230
lea ecx, [eax + 0x1c]
call edi
mov ecx, 0x14
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x20], al
mov ecx, 6
call esi
mov edx, dword [0x436034]
mov ecx, 0x17
mov byte [edx + 0x21], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x22], al
mov ecx, 6
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x23], al
mov edx, 0x40b880
mov eax, dword [0x436034]
lea ecx, [eax + 0x24]
call edi
mov ecx, dword [0x436034]
mov edx, 0x40e5e4
add ecx, 0x28
call edi
mov eax, dword [0x436034]
mov edx, 0x4207a0
lea ecx, [eax + 0x2c]
call edi
mov ecx, 0x15
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x30], al
mov ecx, 7
call esi
mov edx, dword [0x436034]
mov ecx, 0x18
mov byte [edx + 0x31], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x32], al
mov ecx, 7
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x33], al
mov eax, dword [0x436034]
mov edx, 0x40e5e4
lea ecx, [eax + 0x34]
call edi
mov ecx, dword [0x436034]
mov edx, 0x4105f4
add ecx, 0x38
call edi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x420e90
push 0x421514
call ebx
mov edx, eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [0x436034]
lea ecx, [eax + 0x3c]
call edi
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, 0x16
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x40], al
mov ecx, 8
call esi
mov edx, dword [0x436034]
mov ecx, 0x19
mov byte [edx + 0x41], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x42], al
mov ecx, 8
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x43], al
mov eax, dword [0x436034]
mov edx, 0x4105f4
lea ecx, [eax + 0x44]
call edi
mov ecx, dword [0x436034]
mov edx, 0x4116b8
add ecx, 0x48
call edi
mov eax, dword [0x436034]
mov edx, 0x421684
lea ecx, [eax + 0x4c]
call edi
mov ecx, 0x16
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x50], al
mov ecx, 9
call esi
mov edx, dword [0x436034]
mov ecx, 0x19
mov byte [edx + 0x51], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x52], al
mov ecx, 9
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x53], al
mov eax, dword [0x436034]
mov edx, 0x4116b8
lea ecx, [eax + 0x54]
call edi
mov ecx, dword [0x436034]
mov edx, 0x40a6d4
add ecx, 0x58
call edi
mov eax, dword [0x436034]
mov edx, 0x421cc0
lea ecx, [eax + 0x5c]
call edi
mov ecx, 0x16
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x60], al
mov ecx, 0xa
call esi
mov edx, dword [0x436034]
mov ecx, 0x19
mov byte [edx + 0x61], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x62], al
mov ecx, 0xa
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x63], al
mov eax, dword [0x436034]
mov edx, 0x40a6d4
lea ecx, [eax + 0x64]
call edi
mov ecx, dword [0x436034]
mov edx, 0x40b86c
add ecx, 0x68
call edi
push 0x422328
push 0x422a7c
call ebx
mov edx, eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [0x436034]
lea ecx, [eax + 0x6c]
call edi
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, 0x15
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x70], al
mov ecx, 0xb
call esi
mov edx, dword [0x436034]
mov ecx, 0x18
mov byte [edx + 0x71], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x72], al
mov ecx, 0xb
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x73], al
mov eax, dword [0x436034]
mov edx, 0x40b86c
lea ecx, [eax + 0x74]
call edi
mov ecx, dword [0x436034]
mov edx, 0x40e5c8
add ecx, 0x78
call edi
push 0x422de8
push 0x423524
call ebx
mov edx, eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [0x436034]
lea ecx, [eax + 0x7c]
call edi
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, 0x14
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x80], al
mov ecx, 0xc
call esi
mov edx, dword [0x436034]
mov ecx, 0x17
mov byte [edx + 0x81], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x82], al
mov ecx, 0xc
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x83], al
mov eax, dword [0x436034]
mov edx, 0x40e5c8
lea ecx, [eax + 0x84]
call edi
mov ecx, dword [0x436034]
mov edx, 0x4105dc
add ecx, 0x88
call edi
push 0x423b8c
push 0x424268
call ebx
mov edx, eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [0x436034]
lea ecx, [eax + 0x8c]
call edi
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, 0x13
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x90], al
mov ecx, 1
call esi
mov edx, dword [0x436034]
mov ecx, 0x16
mov byte [edx + 0x91], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0x92], al
mov ecx, 1
call esi
mov edx, dword [0x436034]
mov byte [edx + 0x93], al
mov eax, dword [0x436034]
mov edx, 0x4105dc
lea ecx, [eax + 0x94]
call edi
mov ecx, dword [0x436034]
mov edx, 0x41189c
add ecx, 0x98
call edi
mov eax, dword [0x436034]
mov edx, 0x424938
lea ecx, [eax + 0x9c]
call edi
mov ecx, 0x11
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0xa0], al
mov ecx, 2
call esi
mov edx, dword [0x436034]
mov ecx, 0x14
mov byte [edx + 0xa1], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0xa2], al
mov ecx, 2
call esi
mov edx, dword [0x436034]
mov byte [edx + 0xa3], al
mov eax, dword [0x436034]
mov edx, 0x41189c
lea ecx, [eax + 0xa4]
call edi
mov ecx, dword [0x436034]
mov edx, 0x414468
add ecx, 0xa8
call edi
mov eax, dword [0x436034]
mov edx, 0x424c58
lea ecx, [eax + 0xac]
call edi
mov ecx, 0x13
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0xb0], al
mov ecx, 3
call esi
mov edx, dword [0x436034]
mov ecx, 0x16
mov byte [edx + 0xb1], al
call esi
mov ecx, dword [0x436034]
mov byte [ecx + 0xb2], al
mov ecx, 3
call esi
mov edx, dword [0x436034]
mov byte [edx + 0xb3], al
mov eax, dword [0x436034]
mov edx, 0x414468
lea ecx, [eax + 0xb4]
call edi
mov ecx, dword [0x436034]
mov edx, 0x4094dc
add ecx, 0xb8
call edi
mov eax, dword [0x436034]
mov edx, 0x424f24
lea ecx, [eax + 0xbc]
call edi
push 0x433cc3
jmp 0x433cc2
ret