Function at 0x438bb0
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4022d6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x11c
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402278
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
lea eax, [ebp - 0x2c]
xor ebx, ebx
push 0x40d298
push eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x108], ebx
call esi
push 5
lea ecx, [ebp - 0x50]
push 0x40d2b4
push ecx
call esi
push 0xb
lea edx, [ebp - 0x74]
push 0x40d298
push edx
call esi
push 5
lea eax, [ebp - 0x90]
push 0x40d2b4
push eax
call esi
mov ecx, dword [ebp - 0x84]
mov dword [ecx + 8], ebx
mov edx, dword [ebp - 0x84]
mov dword [edx + 0xc], ebx
mov eax, dword [ebp - 0x84]
mov dword [eax + 0x10], ebx
mov ecx, dword [ebp - 0x84]
mov dword [ecx + 0x14], ebx
mov edx, dword [ebp - 0x84]
mov dword [edx + 0x18], ebx
mov eax, dword [ebp - 0x84]
mov dword [eax + 0x1c], ebx
mov ecx, dword [ebp - 0x84]
mov dword [ecx + 0x20], ebx
mov edx, dword [ebp - 0x84]
mov dword [edx + 0x24], ebx
mov eax, dword [ebp - 0x84]
mov dword [eax + 0x28], ebx
mov ecx, dword [ebp - 0x84]
mov dword [ecx + 0x2c], ebx
mov edx, dword [ebp - 0x84]
mov dword [edx + 0x30], ebx
mov eax, dword [ebp - 0x84]
mov dword [eax + 0x34], ebx
mov ecx, dword [ebp - 0x68]
mov word [ecx], bx
mov edx, dword [ebp - 0x68]
mov word [edx + 2], bx
mov eax, dword [ebp - 0x68]
mov word [eax + 4], bx
mov ecx, dword [ebp - 0x68]
mov word [ecx + 6], bx
mov edx, dword [ebp - 0x68]
mov word [edx + 8], bx
mov eax, dword [ebp - 0x68]
mov word [eax + 0xa], bx
mov ecx, dword [ebp - 0x68]
mov word [ecx + 0xc], bx
mov edx, dword [0x43c0cc]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x118], eax
xor eax, eax
cmp ax, word [ebp - 0x118]
mov dword [ebp - 0x34], eax
jg 0x438e9b
mov ecx, dword [0x43c0cc]
cmp ecx, ebx
je 0x438d62
cmp word [ecx], 1
jne 0x438d62
mov edx, dword [ecx + 0x14]
movsx esi, ax
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x438d59
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x43c0cc]
lea eax, [esi*4]
jmp 0x438d6e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x43c0cc]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax]
push edx
push 0x409aa0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x438e87
mov ecx, 1
mov eax, 6
mov dword [ebp - 0x38], ecx
cmp cx, ax
jg 0x438e87
movsx esi, cx
cmp esi, 7
jb 0x438daf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
cmp word [eax + esi*2], bx
jne 0x438e72
movsx esi, cx
cmp esi, 7
jb 0x438dca
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x38]
lea edx, [ebp - 0x34]
push ecx
push edx
call 0x4390d0
mov eax, dword [ebp - 0x44]
fstp qword [eax + esi*8]
mov ecx, dword [ebp - 0x38]
movsx edi, cx
cmp edi, 7
jb 0x438df1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x38]
movsx esi, cx
cmp esi, 7
jb 0x438e02
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x84]
fld qword [edx + edi*8]
fcomp qword [eax + esi*8]
fnstsw ax
test ah, 0x41
jne 0x438e72
movsx edi, cx
cmp edi, 7
jb 0x438e29
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x38]
movsx esi, cx
cmp esi, 7
jb 0x438e37
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x44]
lea edx, [ecx + edi*8]
mov ecx, dword [ebp - 0x84]
mov eax, dword [edx]
mov dword [ecx + esi*8], eax
mov eax, dword [ebp - 0x84]
mov edx, dword [edx + 4]
mov dword [eax + esi*8 + 4], edx
movsx esi, word [ebp - 0x38]
cmp esi, 7
jb 0x438e64
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x20]
mov dx, word [ebp - 0x34]
mov word [ecx + esi*2], dx
mov ecx, dword [ebp - 0x38]
mov eax, 1
add ax, cx
jo 0x4390bd
mov ecx, eax
jmp 0x438d8d
mov eax, 1
add ax, word [ebp - 0x34]
jo 0x4390bd
jmp 0x438d1e
mov edx, 0x409aa0
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edi, 1
mov eax, edi
mov dword [ebp - 0x128], 6
mov dword [ebp - 0x38], eax
cmp ax, word [ebp - 0x128]
jg 0x439001
mov ecx, dword [0x43c0cc]
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x98]
push ecx
push edx
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf8], 8
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0xa8], 2
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x98]
test ecx, ecx
je 0x438f58
cmp word [ecx], 1
jne 0x438f58
movsx esi, word [ebp - 0x38]
cmp esi, 7
jb 0x438f30
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x20]
mov edx, dword [ecx + 0x14]
movsx esi, word [eax + esi*2]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x438f4f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x98]
lea eax, [esi*4]
jmp 0x438f64
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xa8]
add ecx, eax
push edx
mov dword [ebp - 0xd0], ecx
lea eax, [ebp - 0xd8]
push 1
lea ecx, [ebp - 0xb8]
push eax
push ecx
mov dword [ebp - 0xd8], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0xf8]
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xc8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call ebx
lea eax, [ebp - 0xc8]
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ax, di
add esp, 0x10
add ax, word [ebp - 0x38]
jo 0x4390bd
mov dword [ebp - 0x38], eax
jmp 0x438ec3
wait
push 0x4390a9
jmp 0x439046
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0xfc]
lea ecx, [ebp - 0x2c]
push edx
push 0
mov dword [ebp - 0xfc], ecx
call esi
lea ecx, [ebp - 0x100]
lea eax, [ebp - 0x50]
push ecx
push 0
mov dword [ebp - 0x100], eax
call esi
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x104]
lea edx, [ebp - 0x74]
push eax
push 0
mov dword [ebp - 0x104], edx
call esi
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0x90]
push edx
push 0
mov dword [ebp - 0x108], ecx
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0xc
push ebx
push ebp
mov ebp, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
push esi
push edi
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x20]
movsx edi, word [eax]
cmp edi, 0x4e21
jb 0x4390fe
call ebp
movsx esi, word [esp + 0x10]
cmp esi, 0x177
jb 0x43910d
call ebp
mov ecx, dword [esp + 0x24]
movsx ebx, word [ecx]
cmp ebx, 0xa
jb 0x43911b
call ebp
cmp esi, 0x177
jb 0x439125
call ebp
lea eax, [esi + esi*4]
lea ecx, [esi + esi*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
mov eax, esi
shl edx, 5
add edi, edx
lea edx, [ebx + ecx*2]
mov ecx, dword [0x43c124]
add eax, edi
mov ax, word [ecx + eax*2]
mov ecx, dword [0x43c100]
cmp ax, word [ecx + edx*2]
jne 0x439165
mov dx, word [esp + 0x14]
add dx, 1
jo 0x4391d2
mov dword [esp + 0x14], edx
mov ax, word [esp + 0x10]
add ax, 1
jo 0x4391d2
cmp ax, 0x176
mov dword [esp + 0x10], eax
jle 0x4390ed
movsx eax, word [esp + 0x14]
mov dword [esp + 0x20], eax
pop edi
fild dword [esp + 0x1c]
pop esi
pop ebp
pop ebx
fstp qword [esp + 4]
fld qword [esp + 4]
cmp dword [section..data], 0
jne 0x4391a8
fdiv qword [0x402288]
jmp 0x4391b9
push dword [0x40228c]
push dword [0x402288]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fstp qword [esp + 4]
fnstsw ax
test al, 0xd
jne 0x4391cd
fld qword [esp + 4]
add esp, 0xc
ret 8
jmp fcn.004022dc
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop