Function at 0x641620
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x710a2c
mov eax, dword fs:[0]
push eax
sub esp, 0x520
mov eax, dword [0x831704]
xor eax, esp
mov dword [esp + 0x51c], eax
push esi
push edi
mov eax, dword [0x831704]
xor eax, esp
push eax
lea eax, [esp + 0x52c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x53c]
xor eax, eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x30], esi
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
mov dword [esi + 0x18], eax
mov edi, dword [esp + 0x540]
mov dword [esp + 0x534], eax
mov dword [esp + 0xc], 1
cmp edi, 0x4000
ja 0x64183c
je 0x641755
test edi, edi
jne case.default.0x64184b
push str.no_DDE_error.
lea ecx, [esp + 0x2ec]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 1
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], edi
mov word [esp + 0x94], ax
mov dword [esp + 0xac], eax
mov byte [esp + 0x534], 2
call fcn.005eae80
test eax, eax
je 0x64171d
lea ecx, [esp + 0x94]
push ecx
lea ecx, [esp + 0x2ec]
push ecx
mov ecx, eax
call fcn.005ecae0
test eax, eax
jne 0x64172d
lea eax, [esp + 0x2e8]
push eax
call fcn.005ed1e0
add esp, 4
cmp esi, eax
je 0x64173d
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x94]
call fcn.00418210
lea ecx, [esp + 0x2e8]
jmp 0x6420fd
push str.a_request_for_a_synchronous_advise_transaction_has_timed_out.
lea ecx, [esp + 0x2ac]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 3
mov dword [esp + 0x24], 7
mov dword [esp + 0x20], 0
mov word [esp + 0x10], ax
mov dword [esp + 0x28], eax
mov byte [esp + 0x534], 4
call fcn.005eae80
test eax, eax
je 0x6417b5
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x2ac]
push ecx
mov ecx, eax
call fcn.005ecae0
test eax, eax
jne 0x6417c5
lea eax, [esp + 0x2a8]
push eax
call fcn.005ed1e0
add esp, 4
cmp esi, eax
je 0x6417d5
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
push dword [esp + 0x28]
mov edi, dword [sym.imp.MSVCR120.dll_free]
call edi
add esp, 4
cmp dword [esp + 0x24], 8
jb 0x6417f7
push dword [esp + 0x10]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
push dword [esp + 0x2c0]
xor eax, eax
mov dword [esp + 0x28], 7
mov dword [esp + 0x24], 0
mov word [esp + 0x14], ax
call edi
add esp, 4
cmp dword [esp + 0x2bc], 8
jb 0x642102
push dword [esp + 0x2a8]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
jmp 0x642102
lea eax, [edi - 0x4001]
cmp eax, 0x10
ja case.default.0x64184b
jmp dword [eax*4 + 0x64212c]
push str.the_response_to_the_transaction_caused_the_DDE_FBUSY_bit_to_be_set.
lea ecx, [esp + 0x3cc]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 5
mov dword [esp + 0x1a8], 7
mov dword [esp + 0x1a4], 0
mov word [esp + 0x194], ax
mov dword [esp + 0x1ac], eax
lea eax, [esp + 0x194]
mov byte [esp + 0x534], 6
push eax
lea eax, [esp + 0x3cc]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x6418c5
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x194]
call fcn.00418210
lea ecx, [esp + 0x3c8]
jmp 0x6420fd
push str.a_request_for_a_synchronous_data_transaction_has_timed_out.
lea ecx, [esp + 0x38c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 7
mov dword [esp + 0x168], 7
mov dword [esp + 0x164], 0
mov word [esp + 0x154], ax
mov dword [esp + 0x16c], eax
lea eax, [esp + 0x154]
mov byte [esp + 0x534], 8
push eax
lea eax, [esp + 0x38c]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x641950
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x154]
call fcn.00418210
lea ecx, [esp + 0x388]
jmp 0x6420fd
push str.a_DDEML_function_was_called_without_first_calling_the_DdeInitialize_function__nor_an_invalid_instance_identifier_nwas_passed_to_a_DDEML_function.
lea ecx, [esp + 0x30c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 9
mov dword [esp + 0xe8], 7
mov dword [esp + 0xe4], 0
mov word [esp + 0xd4], ax
mov dword [esp + 0xec], eax
lea eax, [esp + 0xd4]
mov byte [esp + 0x534], 0xa
push eax
lea eax, [esp + 0x30c]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x6419db
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0xd4]
call fcn.00418210
lea ecx, [esp + 0x308]
jmp 0x6420fd
push str.an_application_initialized_as_APPCLASS_MONITOR_has_nattempted_to_perform_a_DDE_transaction__nor_an_application_initialized_as_APPCMD_CLIENTONLY_has__nattempted_to_perform_server_transactions.
lea ecx, [esp + 0x40c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0xb
mov dword [esp + 0x188], 7
mov dword [esp + 0x184], 0
mov word [esp + 0x174], ax
mov dword [esp + 0x18c], eax
lea eax, [esp + 0x174]
mov byte [esp + 0x534], 0xc
push eax
lea eax, [esp + 0x40c]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x641a66
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x174]
call fcn.00418210
lea ecx, [esp + 0x408]
jmp 0x6420fd
push str.a_request_for_a_synchronous_execute_transaction_has_timed_out.
lea ecx, [esp + 0x44c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0xd
mov dword [esp + 0x148], 7
mov dword [esp + 0x144], 0
mov word [esp + 0x134], ax
mov dword [esp + 0x14c], eax
lea eax, [esp + 0x134]
mov byte [esp + 0x534], 0xe
push eax
lea eax, [esp + 0x44c]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x641af1
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x134]
call fcn.00418210
lea ecx, [esp + 0x448]
jmp 0x6420fd
push str.a_parameter_failed_to_be_validated_by_the_DDEML.
lea ecx, [esp + 0x48c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0xf
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], 0
mov word [esp + 0xb4], ax
mov dword [esp + 0xcc], eax
lea eax, [esp + 0xb4]
mov byte [esp + 0x534], 0x10
push eax
lea eax, [esp + 0x48c]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x641b7c
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0xb4]
call fcn.00418210
lea ecx, [esp + 0x488]
jmp 0x6420fd
push str.a_DDEML_application_has_created_a_prolonged_race_condition.
lea ecx, [esp + 0x4cc]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0x11
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x34]
mov byte [esp + 0x534], 0x12
push eax
lea eax, [esp + 0x4cc]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x641bf8
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x34]
call fcn.00418210
lea ecx, [esp + 0x4c8]
jmp 0x6420fd
push str.a_memory_allocation_failed.
lea ecx, [esp + 0x50c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0x13
mov dword [esp + 0x128], 7
mov dword [esp + 0x124], 0
mov word [esp + 0x114], ax
mov dword [esp + 0x12c], eax
lea eax, [esp + 0x114]
mov byte [esp + 0x534], 0x14
push eax
lea eax, [esp + 0x50c]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x641c80
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x114]
call fcn.00418210
lea ecx, [esp + 0x508]
jmp 0x6420fd
push str.a_clients_attempt_to_establish_a_conversation_has_failed.
lea ecx, [esp + 0x42c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0x15
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov word [esp + 0x54], ax
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x54]
mov byte [esp + 0x534], 0x16
push eax
lea eax, [esp + 0x42c]
push eax
call fcn.00420160
add esp, 8
cmp esi, eax
je 0x641cfc
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.00419170
lea ecx, [esp + 0x54]
call fcn.00418210
lea ecx, [esp + 0x428]
jmp 0x6420fd
push str.a_transaction_failed.
lea ecx, [esp + 0x36c]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0x17
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], 0
mov word [esp + 0x74], ax
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x74]
mov byte [esp + 0x534], 0x18
push eax
lea eax, [esp + 0x36c]
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x74]
call fcn.00418210
lea ecx, [esp + 0x368]
jmp 0x6420fd
push str.a_request_for_a_synchronous_poke_transaction_has_timed_out.
lea ecx, [esp + 0x4ac]
call fcn.00418040
lea ecx, [esp + 0x228]
mov dword [esp + 0x534], 0x19
call fcn.00419eb0
push eax
lea eax, [esp + 0x4ac]
mov byte [esp + 0x538], 0x1a
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x228]
call fcn.00418210
lea ecx, [esp + 0x4a8]
jmp 0x6420fd
push str.an_internal_call_to_the_PostMessage_function_has_failed.
lea ecx, [esp + 0x3ac]
call fcn.00418040
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x534], 0x1b
call fcn.00419eb0
push eax
lea eax, [esp + 0x3ac]
mov byte [esp + 0x538], 0x1c
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x1e8]
call fcn.00418210
lea ecx, [esp + 0x3a8]
jmp 0x6420fd
push str.reentrancy_problem.
lea ecx, [esp + 0x46c]
call fcn.00418040
lea ecx, [esp + 0x208]
mov dword [esp + 0x534], 0x1d
call fcn.00419eb0
push eax
lea eax, [esp + 0x46c]
mov byte [esp + 0x538], 0x1e
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x208]
call fcn.00418210
lea ecx, [esp + 0x468]
jmp 0x6420fd
push str.a_server_side_transaction_was_attempted_on_a_conversation_nthat_was_terminated_by_the_client__or_the_server_nterminated_before_completing_a_transaction.
lea ecx, [esp + 0x3ec]
call fcn.00418040
lea ecx, [esp + 0x248]
mov dword [esp + 0x534], 0x1f
call fcn.00419eb0
push eax
lea eax, [esp + 0x3ec]
mov byte [esp + 0x538], 0x20
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x248]
call fcn.00418210
lea ecx, [esp + 0x3e8]
jmp 0x6420fd
push str.an_internal_error_has_occurred_in_the_DDEML.
lea ecx, [esp + 0x4ec]
call fcn.00418040
lea ecx, [esp + 0x288]
mov dword [esp + 0x534], 0x21
call fcn.00419eb0
push eax
lea eax, [esp + 0x4ec]
mov byte [esp + 0x538], 0x22
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x288]
call fcn.00418210
lea ecx, [esp + 0x4e8]
jmp 0x6420fd
push str.a_request_to_end_an_advise_transaction_has_timed_out.
lea ecx, [esp + 0x32c]
call fcn.00418040
lea ecx, [esp + 0x1c8]
mov dword [esp + 0x534], 0x23
call fcn.00419eb0
push eax
lea eax, [esp + 0x32c]
mov byte [esp + 0x538], 0x24
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x1c8]
call fcn.00418210
lea ecx, [esp + 0x328]
jmp 0x6420fd
push str.an_invalid_transaction_identifier_was_passed_to_a_DDEML_function._nOnce_the_application_has_returned_from_an_XTYP_XACT_COMPLETE_callback__nthe_transaction_identifier_for_that_callback_is_no_longer_valid.
lea ecx, [esp + 0x34c]
call fcn.00418040
lea ecx, [esp + 0x268]
mov dword [esp + 0x534], 0x25
call fcn.00419eb0
push eax
lea eax, [esp + 0x34c]
mov byte [esp + 0x538], 0x26
push eax
call fcn.00420160
add esp, 8
mov ecx, esi
push eax
call fcn.004181a0
lea ecx, [esp + 0x268]
call fcn.00418210
lea ecx, [esp + 0x348]
jmp 0x6420fd
push str.Unknown_DDE_error__08x
lea ecx, [esp + 0x2cc]
call fcn.00418040
xor eax, eax
mov dword [esp + 0x534], 0x27
mov dword [esp + 0x108], 7
mov dword [esp + 0x104], 0
mov word [esp + 0xf4], ax
mov dword [esp + 0x10c], eax
mov byte [esp + 0x534], 0x28
call fcn.005eae80
test eax, eax
je 0x6420a1
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x2cc]
push ecx
mov ecx, eax
call fcn.005ecae0
test eax, eax
jne 0x6420b1
lea eax, [esp + 0x2c8]
push eax
call fcn.005ed1e0
add esp, 4
push eax
lea ecx, [esp + 0x1b8]
call fcn.0041fd90
push edi
lea eax, [esp + 0x1b8]
mov byte [esp + 0x538], 0x29
push eax
mov ecx, esi
call fcn.005e2870
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x534], 0x28
call fcn.00420020
lea ecx, [esp + 0xf4]
call fcn.00418210
lea ecx, [esp + 0x2c8]
call fcn.00418210
mov eax, esi
mov ecx, dword [esp + 0x52c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x51c]
xor ecx, esp
call fcn.006d1ba7
add esp, 0x52c
ret