Function at 0x41a99e
Capabilities:
Accept command line arguments
Get file attributes

Disassembly:
push 0x20c
mov eax, 0x446b2a
call fcn.0042be10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x198], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x194], ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x1e4], ecx
mov ecx, dword [ebp + 0x1c]
xor ebx, ebx
push eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x1a8], ecx
mov byte [ebp - 0x199], bl
mov byte [ebp - 0x19a], bl
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
xor edi, edi
inc edi
test edi, eax
jne 0x41aa3e
push dword [ebp - 0x190]
lea eax, [ebp - 0x110]
push eax
call fcn.00419aed
push eax
mov dword [ebp - 4], ebx
call fcn.0041f697
add esp, 0xc
neg al
sbb al, al
push ebx
inc al
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x189], al
call fcn.00409e50
cmp byte [ebp - 0x189], bl
je 0x41aa45
mov byte [ebp - 0x199], 1
xor eax, eax
mov dword [ebp - 0x134], 7
mov dword [ebp - 0x138], ebx
mov word [ebp - 0x148], ax
mov dword [ebp - 4], edi
mov dword [ebp - 0x188], ebx
push ecx
mov dword [ebp - 0x1a4], esp
lea eax, [ebp - 0x189]
mov dword [ebp - 0x1a4], esp
push eax
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
call fcn.00417f60
lea eax, [ebp - 0x1f8]
push eax
mov byte [ebp - 4], 3
call fcn.0041a35a
push esi
call fcn.00423e6f
test eax, eax
pop ecx
setne byte [ebp - 0x1ac]
pop ecx
mov esi, 0x44c7ac
cmp byte [ebp - 0x1ac], bl
je 0x41aabd
mov esi, str.Excel.Sheet.12
xor eax, eax
mov dword [ebp - 0x16c], 7
mov dword [ebp - 0x170], ebx
mov word [ebp - 0x180], ax
mov dword [ebp - 0x1c8], ebx
push 4
push ebx
push str.Excel.Application
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 5
call fcn.004195d6
cmp eax, ebx
jl 0x41ab38
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x188]
push eax
call fcn.004197b8
pop ecx
pop ecx
test al, al
jne 0x41ab38
lea eax, [ebp - 0x188]
push str.Quit
push eax
call fcn.00423d2c
mov eax, dword [ebp - 0x188]
pop ecx
pop ecx
cmp eax, ebx
je 0x41ab44
mov dword [ebp - 0x188], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x188], ebx
jne 0x41abcd
push 4
push ebx
push esi
lea ecx, [ebp - 0x1c8]
call fcn.004195d6
mov esi, eax
cmp esi, ebx
jl 0x41abc1
lea eax, [ebp - 0x1c8]
push str.Activate
push eax
call fcn.00423d2c
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.0041ebb1
add esp, 0x10
test eax, eax
jne 0x41ab8b
mov esi, 0x80004005
jmp 0x41abc1
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0041ed37
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 6
call fcn.00408db0
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 5
call fcn.00409e50
cmp dword [ebp - 0x188], ebx
je 0x41bbc1
xor eax, eax
mov dword [ebp - 0x1e8], ebx
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], ebx
mov word [ebp - 0xf4], ax
push ebx
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x188]
push 0x44b6f4
push eax
mov byte [ebp - 4], 7
call fcn.00423aa1
add esp, 0x10
test al, al
je 0x41ac42
cmp dword [ebp - 0xe4], ebx
je 0x41ac42
cmp dword [ebp - 0xe0], 8
mov eax, dword [ebp - 0xf4]
jae 0x41ac2d
lea eax, [ebp - 0xf4]
lea ecx, [ebp - 0x1e8]
push ecx
push 0x454a94
push eax
call fcn.0042c6d5
add esp, 0xc
push ebx
push edi
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 5
call fcn.00409e50
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x188]
push eax
call fcn.004197b8
pop ecx
pop ecx
test al, al
jne 0x41ac7e
mov esi, str.The_file_you_are_using_cant_be_opened_in_this_version_of_Microsoft_Excel._nPlease__make_sure_that_your_default_version_of_Excel_application_is_Excel_2007_or_higher_and_try_again.
push esi
call fcn.0042c221
pop ecx
push eax
push esi
jmp 0x41bcac
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x182], bl
mov byte [ebp - 0x189], bl
call fcn.0041efb7
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 8
call fcn.0041f0db
push str.LockXLSRuntime.Connect
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 9
call fcn.00408d60
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0xa
call fcn.0041f30b
cmp dword [eax], ebx
lea ecx, [ebp - 0x1a4]
setne byte [ebp - 0x181]
call fcn.0041ef7f
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 9
call fcn.00409e50
cmp byte [ebp - 0x181], bl
je 0x41ad17
mov byte [ebp - 0x19a], 1
mov ecx, dword [ebp - 0x1e4]
xor eax, eax
cmp byte [ecx + 0x4c8], bl
lea ecx, [ebp - 0x1b0]
sete al
push eax
call fcn.0041eeeb
lea eax, [ebp - 0x164]
push eax
call fcn.0041a539
mov dword [ebp - 0x1cc], ebx
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x188]
push str.Workbooks
push eax
mov byte [ebp - 4], 0xc
call fcn.004238e2
add esp, 0x14
test al, al
je 0x41bb7d
push edi
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], ebx
call fcn.004190a3
mov byte [ebp - 4], 0xd
cmp byte [ebp - 0x19a], bl
je 0x41ada4
mov byte [ebp - 0x182], 1
jmp 0x41b214
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x110]
push dword [ebp - 0x190]
push eax
call fcn.0041a694
add esp, 0xc
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xe
call fcn.00408db0
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xd
call fcn.00409e50
cmp dword [ebp - 0x138], ebx
jne 0x41ae06
mov esi, str.Loader_Add_In_can_not_be_extracted_from_the_executable.
push esi
call fcn.0042c221
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e30
jmp 0x41b214
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 0x181], bl
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push edi
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190a3
push 0x44c524
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
call fcn.00418ca1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x11
call fcn.00418d3f
mov ecx, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
cmp ecx, ebx
je 0x41ae72
call fcn.00418dcf
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
call fcn.00423d7e
add esp, 0x14
test al, al
je 0x41aec0
push 0xb
pop eax
cmp ax, word [ebp - 0xe8]
jne 0x41aec0
lea ecx, [ebp - 0xe8]
call fcn.00418cee
cmp al, 1
jne 0x41aec0
mov byte [ebp - 0x181], al
mov byte [ebp - 0x189], al
lea ecx, [ebp - 0x1c0]
call fcn.00418fdb
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0xd
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 0x182], 1
cmp byte [ebp - 0x181], bl
jne 0x41b214
cmp dword [ebp - 0x134], 8
mov eax, dword [ebp - 0x148]
jae 0x41af04
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00418ca1
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x12
call fcn.00418d3f
mov ecx, dword [ebp - 0x1a4]
cmp ecx, ebx
je 0x41af2f
call fcn.00418dcf
mov dword [ebp - 0x1a0], ebx
xor eax, eax
mov byte [ebp - 0x181], 1
mov dword [ebp - 0x118], 7
mov dword [ebp - 0x11c], ebx
mov word [ebp - 0x12c], ax
push ebx
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x188]
push str.Path
push eax
mov byte [ebp - 4], 0x14
call fcn.00423aa1
mov esi, 0x44c500
push esi
call fcn.0042c221
add esp, 0x14
push eax
push esi
lea ecx, [ebp - 0x12c]
call fcn.0040d350
cmp dword [ebp - 0x118], 8
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x190], ebx
jae 0x41afa8
lea eax, [ebp - 0x12c]
lea ecx, [ebp - 0x190]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
test eax, eax
je 0x41afc9
cmp dword [ebp - 0x190], 6
jne 0x41afc9
mov byte [ebp - 0x181], bl
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1cc]
push str.Open
push eax
call fcn.00423dc3
add esp, 0x14
test al, al
je 0x41b1f3
push 3
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190a3
push 0x44c4c8
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x15
call fcn.00418ca1
mov ecx, dword [ebp - 0x1c0]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0x16
call fcn.00418d3f
mov ecx, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x41b04d
call fcn.00418dcf
mov eax, dword [ebp - 0x198]
cmp byte [ebp - 0x181], bl
jne 0x41b061
mov eax, dword [ebp - 0x194]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418ca1
mov ecx, dword [ebp - 0x1c0]
push eax
add ecx, 0x10
mov byte [ebp - 4], 0x17
call fcn.00418d3f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x41b093
call fcn.00418dcf
cmp dword [ebp - 0x150], 8
mov eax, dword [ebp - 0x164]
jae 0x41b0a8
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418ca1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x18
call fcn.00418d3f
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b0d3
call fcn.00418dcf
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x198], ebx
mov edi, str.Macro_can_not_be_executed._Please_make
mov esi, 0x454e50
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
call fcn.00423d7e
add esp, 0x14
test al, al
jne 0x41b1bc
push edi
mov byte [ebp - 0x182], bl
call fcn.0042c221
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push edi
call fcn.00408e30
xor eax, eax
mov dword [ebp - 0xfc], 7
mov dword [ebp - 0x100], ebx
mov word [ebp - 0x110], ax
lea eax, [ebp - 0x110]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00423b73
push esi
call fcn.0042c221
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.0040d350
mov ecx, dword [ebp - 0x1a8]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x110]
push eax
call fcn.00405780
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x19
call fcn.00409e50
inc dword [ebp - 0x198]
cmp dword [ebp - 0x198], 0xa
jl 0x41b0f4
cmp dword [ebp - 0x198], 0xa
jge 0x41b1d8
lea eax, [ebp - 0x188]
push eax
call fcn.0041911c
pop ecx
mov byte [ebp - 0x182], al
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
call fcn.00418fdb
xor edi, edi
inc edi
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.00409e50
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41b214
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x1d0], ebx
cmp byte [ebp - 0x182], bl
je 0x41bb62
push ebx
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x188]
push str.HWND
push eax
call fcn.004237eb
add esp, 0x10
test al, al
jne 0x41b2e1
push ecx
mov dword [ebp - 0x194], esp
lea eax, [ebp - 0x189]
mov dword [ebp - 0x194], esp
push eax
lea ecx, [ebp - 0xe8]
call fcn.00417f60
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0041a35a
pop ecx
cmp dword [ebp - 0xe0], ebx
je 0x41b2d2
mov edi, dword [ebp - 0xe4]
mov esi, dword [edi]
mov dword [ebp - 0x190], esi
jmp 0x41b2c3
lea eax, [esi + 0xc]
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00417bc0
mov ecx, dword [ebp - 0x1f4]
cmp ecx, dword [eax]
je 0x41b2c9
lea ecx, [ebp - 0x190]
call fcn.00418020
mov esi, dword [ebp - 0x190]
cmp edi, esi
jne 0x41b292
jmp 0x41b2d2
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xd
call fcn.004172f0
cmp dword [ebp - 0x1d0], ebx
je 0x41b2f5
push dword [ebp - 0x1d0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x198], ebx
push ebx
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x188]
push str.Workbooks
push eax
mov byte [ebp - 4], 0x1d
call fcn.004238e2
lea eax, [ebp - 0x198]
push eax
xor esi, esi
call fcn.0041eb8e
mov edi, eax
add esp, 0x14
cmp edi, ebx
jle 0x41b416
lea eax, [ebp - 0x190]
push eax
inc esi
lea eax, [ebp - 0x198]
push esi
push eax
call fcn.0041ebd4
add esp, 0xc
test eax, eax
je 0x41b3a2
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0041ed7e
cmp dword [eax + 0x14], 8
pop ecx
pop ecx
jb 0x41b372
mov eax, dword [eax]
push eax
push dword [ebp - 0x1c4]
call fcn.0042c881
pop ecx
pop ecx
neg eax
sbb al, al
push ebx
inc al
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x181], al
call fcn.00409e50
cmp byte [ebp - 0x181], bl
jne 0x41b3a8
cmp esi, edi
jl 0x41b339
jmp 0x41b416
lea eax, [ebp - 0x188]
push str.Activate
push eax
mov byte [ebp - 0x182], bl
call fcn.00423d2c
mov dword [ebp - 0x1a0], ebx
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x188]
push str.ActiveWindow
push eax
mov byte [ebp - 4], 0x1e
call fcn.004238e2
add esp, 0x18
test al, al
je 0x41b402
push 0xffffefd7
lea eax, [ebp - 0x1a0]
push str.WindowState
push eax
call fcn.004236cd
add esp, 0xc
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0x1d
cmp eax, ebx
je 0x41b416
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0x1c
cmp eax, ebx
je 0x41b42a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41b43e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [ebp - 0x182], bl
je 0x41bb62
cmp byte [ebp - 0x189], bl
jne 0x41b45f
lea eax, [ebp - 0x1b0]
push eax
call fcn.0041a4b2
pop ecx
mov dword [ebp - 0x198], ebx
mov byte [ebp - 4], 0x1f
cmp byte [ebp - 0x19a], bl
je 0x41b5b4
push str.LockXLSRuntime.Connect
lea ecx, [ebp - 0x110]
call fcn.00408d60
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x20
call fcn.0041f30b
push ebx
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x22
call fcn.00409e50
cmp dword [ebp - 0x190], ebx
je 0x41b5a0
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x190]
call fcn.0041efdb
push eax
lea ecx, [ebp - 0x198]
call fcn.00419770
mov eax, dword [ebp - 0x194]
cmp eax, ebx
je 0x41b4ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x198], ebx
je 0x41b587
lea eax, [ebp - 0x198]
push str.IsWorkbookProtected
push eax
call fcn.00423d2c
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x1e0]
call fcn.004190a3
cmp dword [ebp - 0x150], 8
mov eax, dword [ebp - 0x164]
jae 0x41b52f
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418ca1
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x23
call fcn.00418d3f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x22
cmp ecx, ebx
je 0x41b55e
call fcn.00418dcf
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x198]
push str.PrepareWorkbook
push eax
call fcn.00423e2a
lea eax, [ebp - 0x188]
push eax
call fcn.0041939a
add esp, 0x10
jmp 0x41b5a0
mov esi, str.File_cant_be_opened._Please_make_sure_that_LockXLS_Runtime_Add_in_is_not_disabled_on_your_PC.
push esi
call fcn.0042c221
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e30
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x1f
call fcn.0041ef7f
jmp 0x41b66f
push 1
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190a3
push 0x44c310
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x24
call fcn.00418ca1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x25
call fcn.00418d3f
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b606
call fcn.00418dcf
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
mov byte [ebp - 4], 0x26
call fcn.00423d7e
add esp, 0x14
test al, al
je 0x41b653
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x198]
push eax
call fcn.004238b9
pop ecx
pop ecx
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x1f
call fcn.00418fdb
cmp dword [ebp - 0x198], ebx
je 0x41b747
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x198]
push str.Arguments
push eax
mov byte [ebp - 4], 0x28
call fcn.00423dc3
add esp, 0x14
test al, al
je 0x41b728
push 1
lea ecx, [ebp - 0x1c0]
call fcn.004190a3
lea eax, [ebp - 0x190]
push eax
mov dword [ebp - 0x190], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
cmp edi, ebx
je 0x41b728
xor esi, esi
inc esi
cmp dword [ebp - 0x190], esi
jle 0x41b728
push dword [edi + esi*4]
mov ecx, dword [ebp - 0x1c0]
call fcn.004196c1
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1a0]
push 0x44c2f4
push eax
call fcn.00423e2a
add esp, 0xc
inc esi
cmp esi, dword [ebp - 0x190]
jl 0x41b6f6
lea ecx, [ebp - 0x1c0]
call fcn.00418fdb
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0x1f
cmp eax, ebx
je 0x41b747
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a8]
cmp dword [eax + 0x10], ebx
jne 0x41bb4c
push str.GoogleDesktop.OfficeAddin
lea ecx, [ebp - 0x110]
call fcn.00408d60
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x29
call fcn.0041f30b
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x2b
call fcn.00409e50
cmp dword [ebp - 0x1a0], ebx
je 0x41b7ab
push ebx
lea ecx, [ebp - 0x1a0]
call fcn.0041ef0b
mov dword [ebp - 0x1a4], ebx
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1e0]
cmp byte [ebp - 0x199], bl
je 0x41b81e
push 3
call fcn.004190a3
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x194]
call fcn.00418ca1
mov ecx, dword [ebp - 0x1e0]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0x2d
call fcn.00418d3f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x2c
cmp ecx, ebx
je 0x41b801
call fcn.00418dcf
mov ecx, dword [ebp - 0x1e0]
push edi
add ecx, 0x10
call fcn.00419706
mov ecx, dword [ebp - 0x1e0]
push edi
call fcn.00419706
jmp 0x41b858
push edi
call fcn.004190a3
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x194]
call fcn.00418ca1
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x2e
call fcn.00418d3f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x2c
cmp ecx, ebx
je 0x41b858
call fcn.00418dcf
push 0x20
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.0042c290
add esp, 0xc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x1e4]
cmp byte [esi + 0x4c8], bl
jne 0x41b88f
push edi
lea ecx, [ebp - 0x1b0]
call fcn.0041eeeb
mov dword [ebp - 0x190], ebx
push ebx
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x188]
push str.ActiveWindow
push eax
mov byte [ebp - 4], 0x2f
call fcn.004238e2
add esp, 0x10
test al, al
je 0x41b8d2
push 0xffffefd7
lea eax, [ebp - 0x190]
push str.WindowState
push eax
call fcn.004236cd
add esp, 0xc
lea eax, [ebp - 0x1cc]
push str.xl5galry.xls
push eax
call fcn.00419839
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1cc]
push str.Open
push eax
call fcn.00423dc3
add esp, 0x1c
test al, al
je 0x41ba16
cmp byte [esi + 0x4c8], bl
je 0x41b93b
lea ecx, [ebp - 0x1b0]
call fcn.0041eeca
test eax, eax
jne 0x41b93b
lea ecx, [ebp - 0x1b0]
call fcn.0041eebc
jmp 0x41bb15
push edi
lea eax, [ebp - 0x188]
push str.EnableEvents
push eax
call fcn.00423710
add esp, 0xc
push edi
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190a3
push str.Auto_Open
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x30
call fcn.00418ca1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x31
call fcn.00418d3f
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b9a1
call fcn.00418dcf
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
mov byte [ebp - 4], 0x32
call fcn.00423d7e
push edi
lea eax, [ebp - 0x188]
push str.ScreenUpdating
push eax
call fcn.00423710
push dword [ebp - 0x1c4]
lea eax, [ebp - 0x1b0]
push eax
call fcn.00419ffa
add esp, 0x28
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
call fcn.00418fdb
jmp 0x41bb15
push edi
push 3
lea ecx, [ebp - 0xb8]
call fcn.00404200
push str.Error_description:
push str._can_not_be_opened._n
push dword [ebp - 0x1c4]
lea eax, [ebp - 0xa8]
push str.File_
push eax
mov byte [ebp - 4], 0x33
call fcn.00406ce0
pop ecx
pop ecx
push eax
call fcn.00406ce0
pop ecx
pop ecx
push eax
call fcn.00406ce0
pop ecx
pop ecx
push eax
call fcn.00406ce0
pop ecx
pop ecx
cmp dword [ebp - 0x210], ebx
je 0x41bab0
push dword [ebp - 0x210]
lea ecx, [ebp - 0x194]
call fcn.00418ca1
mov eax, dword [eax]
mov byte [ebp - 4], 0x34
cmp eax, ebx
je 0x41ba8a
mov eax, dword [eax]
jmp 0x41ba8c
xor eax, eax
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.00406ce0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x33
cmp ecx, ebx
je 0x41bac3
call fcn.00418dcf
jmp 0x41bac3
lea eax, [ebp - 0xa8]
push str._not_available_
push eax
call fcn.00406ce0
pop ecx
pop ecx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00404330
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x35
jb 0x41bae3
mov esi, dword [eax]
jmp 0x41bae5
mov esi, eax
push esi
call fcn.0042c221
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e30
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.00409e50
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x2f
call fcn.00401310
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2c
cmp eax, ebx
je 0x41bb29
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x2b
cmp eax, ebx
je 0x41bb3d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x1f
call fcn.0041ef7f
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41bb6f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41bb6f
push 1
lea ecx, [ebp - 0x1b0]
call fcn.0041eeeb
lea ecx, [ebp - 0x1e0]
call fcn.00418fdb
xor edi, edi
inc edi
mov eax, dword [ebp - 0x1cc]
mov byte [ebp - 4], 0xb
cmp eax, ebx
je 0x41bb91
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x164]
call fcn.00409e50
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 8
call fcn.0041ef7f
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 5
call fcn.0041ef7f
jmp 0x41bcb7
cmp esi, 0x800401f3
je 0x41bbd5
cmp esi, 0x80040154
jne 0x41bc83
push edi
push 3
lea ecx, [ebp - 0xb8]
call fcn.00404200
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xa8]
cmp byte [ebp - 0x1ac], bl
je 0x41bbfc
push str.This_file_requires_Microsoft_Excel_2007_or_higher_to_be_installed_on_your_PC._n
jmp 0x41bc01
push str.This_file_requires_Microsoft_Excel_to_be_installed_on_your_PC._n
push eax
call fcn.00406ce0
pop ecx
pop ecx
push str.______Excel_is_not_registered_as_COM_Server_on_your_PC
push str.______your_user_account_doesnt_have_enough_rights_to_run_Excel_application_n
push str.______you_doesnt_have_Microsoft_Excel_installed_n
lea eax, [ebp - 0xa8]
push str.Possible_reasons_of_this_error:_n_n
push eax
call fcn.00406ce0
pop ecx
pop ecx
push eax
call fcn.00406ce0
pop ecx
pop ecx
push eax
call fcn.00406ce0
pop ecx
pop ecx
push eax
call fcn.00406ce0
pop ecx
pop ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00404330
mov ecx, dword [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x37
call fcn.00408db0
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.00409e50
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.00401310
jmp 0x41bcb7
push esi
lea eax, [ebp - 0xd8]
push str.LockXLS_was_unable_to_launch_Excel_application._Error_code:_0x_LX
push eax
call fcn.0042d28b
lea eax, [ebp - 0xd8]
push eax
call fcn.0042c221
add esp, 0x10
push eax
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x1a8]
call fcn.00408e30
mov eax, dword [ebp - 0x1c8]
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x41bccb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x180]
call fcn.00409e50
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
call fcn.004172f0
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x41bcfb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x148]
call fcn.00409e50
call fcn.0042be93
ret