Function at 0x41f020
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x402b86
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401598
mov eax, dword [0x43f05c]
xor edi, edi
add eax, 0x34
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], edi
mov ecx, dword [eax]
cmp ecx, edi
jne 0x41f07a
push eax
push 0x40551c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [0x43f05c]
lea eax, [ecx + 0x34]
mov edx, dword [eax]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
lea eax, [ebp - 0x28]
push edx
push eax
call ebx
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
cmp eax, edi
fnclex
jge 0x41f0b2
mov ecx, dword [ebp - 0x28]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x3c
push 0x408358
push ecx
push eax
call esi
jmp 0x41f0b8
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [0x43f020]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
je 0x41f327
mov eax, dword [ebp - 0x28]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x40]
cmp eax, edi
fnclex
jge 0x41f0e7
mov ecx, dword [ebp - 0x28]
push 0x40
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
push eax
mov edx, dword [eax]
call dword [edx + 0xa0]
cmp eax, edi
fnclex
jge 0x41f10a
mov ecx, dword [ebp - 0x28]
push 0xa0
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
push 0x407238
push eax
mov edx, dword [eax]
call dword [edx + 0x20]
cmp eax, edi
fnclex
jge 0x41f12c
mov ecx, dword [ebp - 0x28]
push 0x20
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x14]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
cmp eax, edi
fnclex
jge 0x41f153
mov edx, dword [ebp - 0x28]
push 0xb4
push 0x408358
push edx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
cmp eax, edi
fnclex
jge 0x41f174
mov ecx, dword [ebp - 0x28]
push 0x2c
push 0x408358
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
add edx, 0x108
jo 0x41f3a3
mov dword [ebp - 0x18], edx
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x18]
push edx
push eax
call dword [ecx + 0x1c8]
cmp eax, edi
fnclex
jge 0x41f1b1
mov ecx, dword [ebp - 0x28]
push 0x1c8
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x14]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x324]
cmp eax, edi
fnclex
jge 0x41f1d8
mov edx, dword [ebp - 0x28]
push 0x324
push 0x408358
push edx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1ec]
cmp eax, edi
fnclex
jge 0x41f1ff
mov ecx, dword [ebp - 0x28]
push 0x1ec
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x12c
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x200]
cmp eax, edi
fnclex
jge 0x41f231
mov edx, dword [ebp - 0x28]
push 0x200
push 0x408358
push edx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
cmp eax, edi
fnclex
jge 0x41f252
mov ecx, dword [ebp - 0x28]
push 0x2c
push 0x408358
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
add edx, 0x100
jo 0x41f3a3
mov dword [ebp - 0x18], edx
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x18]
push edx
push eax
call dword [ecx + 0x3c8]
cmp eax, edi
fnclex
jge 0x41f28f
mov ecx, dword [ebp - 0x28]
push 0x3c8
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x14]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x100]
cmp eax, edi
fnclex
jge 0x41f2b6
mov edx, dword [ebp - 0x28]
push 0x100
push 0x408358
push edx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + pe_nt_image_headers32]
cmp eax, edi
fnclex
jge 0x41f2dd
mov ecx, dword [ebp - 0x28]
push pe_nt_image_headers32
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x14]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xc4]
cmp eax, edi
fnclex
jge 0x41f304
mov edx, dword [ebp - 0x28]
push 0xc4
push 0x408358
push edx
push eax
call esi
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
cmp eax, edi
fnclex
jge 0x41f327
mov edx, dword [ebp - 0x28]
push 0x9c
push 0x408358
push edx
push eax
call esi
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x28]
push edx
lea edx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x108
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x78]
cmp eax, edi
fnclex
jge 0x41f353
mov ecx, dword [ebp - 0x28]
push 0x78
push 0x408358
push ecx
push eax
call esi
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x14]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xa4]
cmp eax, edi
fnclex
jge 0x41f37a
mov edx, dword [ebp - 0x28]
push 0xa4
push 0x408358
push edx
push eax
call esi
lea eax, [ebp - 0x28]
push edi
push eax
call ebx
push 0x41f390
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop