Function at 0x41cb80
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401526
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401508
mov ecx, dword [0x41e080]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
xor edi, edi
mov edx, 0x416c7c
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
call esi
mov eax, dword [0x41e080]
mov edx, 0x416cb4
lea ecx, [eax + 4]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416ce8
add ecx, 8
call esi
mov eax, dword [0x41e080]
mov edx, 0x416d14
lea ecx, [eax + 0xc]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416d4c
add ecx, 0x10
call esi
mov eax, dword [0x41e080]
mov edx, 0x416d7c
lea ecx, [eax + 0x14]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416dac
add ecx, 0x18
call esi
mov eax, dword [0x41e080]
mov edx, 0x416dd4
lea ecx, [eax + 0x1c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416e08
add ecx, 0x20
call esi
mov eax, dword [0x41e080]
mov edx, 0x416ce8
lea ecx, [eax + 0x24]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416e34
add ecx, 0x28
call esi
mov eax, dword [0x41e080]
mov edx, 0x416e7c
lea ecx, [eax + 0x2c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416ebc
add ecx, 0x30
call esi
mov eax, dword [0x41e080]
mov edx, 0x416ef4
lea ecx, [eax + 0x34]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416f24
add ecx, 0x38
call esi
mov eax, dword [0x41e080]
mov edx, 0x416f5c
lea ecx, [eax + 0x3c]
call esi
mov edx, 0x416f8c
mov ecx, dword [0x41e080]
add ecx, 0x40
call esi
mov eax, dword [0x41e080]
mov edx, 0x416fdc
lea ecx, [eax + 0x44]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x417010
add ecx, 0x48
call esi
mov eax, dword [0x41e080]
mov edx, 0x41703c
lea ecx, [eax + 0x4c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x417070
add ecx, 0x50
call esi
mov eax, dword [0x41e080]
mov edx, 0x4170ac
lea ecx, [eax + 0x54]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x4170e4
add ecx, 0x58
call esi
mov eax, dword [0x41e080]
mov edx, 0x417124
lea ecx, [eax + 0x5c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x417160
add ecx, 0x60
call esi
mov eax, dword [0x41e080]
mov edx, 0x417194
lea ecx, [eax + 0x64]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x4171d4
add ecx, 0x68
call esi
mov eax, dword [0x41e080]
mov edx, 0x41720c
lea ecx, [eax + 0x6c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x41724c
add ecx, 0x70
call esi
mov eax, dword [0x41e080]
mov edx, 0x417284
lea ecx, [eax + 0x74]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x4172c0
add ecx, 0x78
call esi
mov eax, dword [0x41e080]
mov edx, 0x4172f4
lea ecx, [eax + 0x7c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x417328
add ecx, 0x80
call esi
mov eax, dword [0x41e080]
mov edx, 0x417354
lea ecx, [eax + 0x84]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x41738c
add ecx, 0x88
call esi
mov eax, dword [0x41e080]
mov edx, 0x4173bc
lea ecx, [eax + 0x8c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x4173ec
add ecx, 0x90
call esi
mov eax, dword [0x41e080]
mov edx, 0x417424
lea ecx, [eax + 0x94]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x417458
add ecx, 0x98
call esi
mov eax, dword [0x41e080]
mov edx, 0x417484
lea ecx, [eax + 0x9c]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x4174b0
add ecx, 0xa0
call esi
mov eax, dword [0x41e080]
mov edx, 0x4174e4
lea ecx, [eax + 0xa4]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x416fb4
add ecx, 0xa8
call esi
mov eax, dword [0x41e080]
mov edx, 0x417514
lea ecx, [eax + 0xac]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x417560
add ecx, 0xb0
call esi
mov eax, dword [0x41e080]
mov edx, 0x4175a4
lea ecx, [eax + 0xb4]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x4175ec
add ecx, 0xb8
call esi
mov eax, dword [0x41e080]
mov edx, 0x41762c
lea ecx, [eax + 0xbc]
call esi
mov ecx, dword [0x41e080]
mov edx, 0x41766c
add ecx, 0xc0
call esi
mov eax, dword [0x41e080]
mov edx, 0x4176c0
lea ecx, [eax + 0xc4]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x4176f0
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x41771c
add ecx, 4
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417750
lea ecx, [eax + 8]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417780
add ecx, 0xc
call esi
mov eax, dword [0x41e09c]
mov edx, 0x4177b0
lea ecx, [eax + 0x10]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x4177dc
add ecx, 0x14
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417800
lea ecx, [eax + 0x18]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x41782c
add ecx, 0x1c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417858
lea ecx, [eax + 0x20]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417888
add ecx, 0x24
call esi
mov eax, dword [0x41e09c]
mov edx, 0x4178b4
lea ecx, [eax + 0x28]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x4178e8
add ecx, 0x2c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417924
lea ecx, [eax + 0x30]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417958
add ecx, 0x34
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417990
lea ecx, [eax + 0x38]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x4179c0
add ecx, 0x3c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x4179f4
lea ecx, [eax + 0x40]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417a1c
add ecx, 0x44
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417a48
lea ecx, [eax + 0x48]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417a84
add ecx, 0x4c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417ab4
lea ecx, [eax + 0x50]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417af0
add ecx, 0x54
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417b24
lea ecx, [eax + 0x58]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417ab4
add ecx, 0x5c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417b50
lea ecx, [eax + 0x60]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417b8c
add ecx, 0x64
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417bc0
lea ecx, [eax + 0x68]
call esi
mov edx, 0x417bf4
mov ecx, dword [0x41e09c]
add ecx, 0x6c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417c24
lea ecx, [eax + 0x70]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417c60
add ecx, 0x74
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417c94
lea ecx, [eax + 0x78]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417cc8
add ecx, 0x7c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417cfc
lea ecx, [eax + 0x80]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417d2c
add ecx, 0x84
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417d64
lea ecx, [eax + 0x88]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417d94
add ecx, 0x8c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417dc8
lea ecx, [eax + 0x90]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417e00
add ecx, 0x94
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417e2c
lea ecx, [eax + 0x98]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417e5c
add ecx, 0x9c
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417e90
lea ecx, [eax + 0xa0]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417ed0
add ecx, 0xa4
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417f08
lea ecx, [eax + 0xa8]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417f38
add ecx, 0xac
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417f6c
lea ecx, [eax + 0xb0]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417f9c
add ecx, 0xb4
call esi
mov eax, dword [0x41e09c]
mov edx, 0x417fc8
lea ecx, [eax + 0xb8]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x417ff8
add ecx, 0xbc
call esi
mov eax, dword [0x41e09c]
mov edx, 0x418034
lea ecx, [eax + 0xc0]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x418070
add ecx, 0xc4
call esi
mov eax, dword [0x41e09c]
mov edx, 0x4180a0
lea ecx, [eax + 0xc8]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x4180d0
add ecx, 0xcc
call esi
mov eax, dword [0x41e09c]
mov edx, 0x4180fc
lea ecx, [eax + 0xd0]
call esi
mov ecx, dword [0x41e09c]
mov edx, 0x418128
add ecx, 0xd4
call esi
call fcn.00419490
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push eax
push 0x418158
call ebx
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
push 1
push 0xffffffffffffffff
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea edx, [ebp - 0x38]
lea eax, [ebp - 0x34]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
push 1
call dword [sym.imp.MSVBVM60.DLL_rtcEndOfFile]
test ax, ax
push 1
jne 0x41d346
lea ecx, [ebp - 0x30]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLineInputVar]
lea edx, [ebp - 0x30]
push 1
lea eax, [ebp - 0x58]
push edx
push eax
lea ecx, [ebp - 0x48]
push edi
push ecx
mov dword [ebp - 0x50], 0x418194
mov dword [ebp - 0x58], 8
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x5c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0x5c], di
je 0x41d2d5
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x58], 0xb
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x41d2d5
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x58]
push edx
push eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x58], 0x800b
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x41d44e
call fcn.00419490
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
push eax
push 0x418158
call ebx
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
push 1
push 0xffffffffffffffff
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0x38]
lea edx, [ebp - 0x34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push 0x418194
push 1
push 0x4163e8
call esi
add esp, 0x18
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0x60]
push 0x41e074
push 0x41e0a8
push eax
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaForEachAry]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNextEachAry]
cmp eax, edi
je 0x41d404
push 0x41e0a8
push 1
push 0x4181ac
call esi
add esp, 0xc
lea edx, [ebp - 0x68]
lea eax, [ebp - 0x60]
push 0x41e0a8
push edx
push eax
push 8
call ebx
jmp 0x41d3dc
push 0x41e090
lea ecx, [ebp - 0x6c]
push 0x41e0b8
lea edx, [ebp - 0x64]
push ecx
push edx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaForEachAry]
cmp eax, edi
je 0x41d446
push 0x41e0b8
push 1
push 0x4181ac
call esi
add esp, 0xc
lea eax, [ebp - 0x6c]
lea ecx, [ebp - 0x64]
push 0x41e0b8
push eax
push ecx
push 8
call ebx
jmp 0x41d41e
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
push 0x41d495
jmp 0x41d472
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x60]
push ecx
call esi
lea edx, [ebp - 0x64]
push edx
call esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x30]
call esi
ret