Function at 0x41aa3b
Capabilities:
Accept command line arguments
Get file attributes

Disassembly:
push 0x20c
mov eax, 0x446c54
call fcn.0042bf10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x198], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x194], ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x1e8], ecx
mov ecx, dword [ebp + 0x1c]
xor ebx, ebx
push eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1a8], ecx
mov byte [ebp - 0x199], bl
mov byte [ebp - 0x19a], bl
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
xor edi, edi
inc edi
test edi, eax
jne 0x41aadb
push dword [ebp - 0x190]
lea eax, [ebp - 0x110]
push eax
call fcn.00419ada
push eax
mov dword [ebp - 4], ebx
call fcn.0041f795
add esp, 0xc
neg al
sbb al, al
push ebx
inc al
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x189], al
call fcn.00409e40
cmp byte [ebp - 0x189], bl
je 0x41aae2
mov byte [ebp - 0x199], 1
xor eax, eax
mov dword [ebp - 0x134], 7
mov dword [ebp - 0x138], ebx
mov word [ebp - 0x148], ax
mov dword [ebp - 4], edi
mov dword [ebp - 0x188], ebx
push ecx
mov dword [ebp - 0x1a4], esp
lea eax, [ebp - 0x189]
mov dword [ebp - 0x1a4], esp
push eax
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
call fcn.004178d0
lea eax, [ebp - 0x1f8]
push eax
mov byte [ebp - 4], 3
call fcn.0041a331
push esi
call fcn.004241a1
test eax, eax
pop ecx
setne byte [ebp - 0x1ac]
pop ecx
mov esi, 0x44c7c4
cmp byte [ebp - 0x1ac], bl
je 0x41ab5a
mov esi, str.Excel.Sheet.12
xor eax, eax
mov dword [ebp - 0x16c], 7
mov dword [ebp - 0x170], ebx
mov word [ebp - 0x180], ax
mov dword [ebp - 0x1c4], ebx
push 4
push ebx
push str.Excel.Application
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 5
call fcn.004195c3
cmp eax, ebx
jl 0x41abd5
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x188]
push eax
call fcn.004197a5
pop ecx
pop ecx
test al, al
jne 0x41abd5
lea eax, [ebp - 0x188]
push str.Quit
push eax
call fcn.0042405e
mov eax, dword [ebp - 0x188]
pop ecx
pop ecx
cmp eax, ebx
je 0x41abe1
mov dword [ebp - 0x188], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x188], ebx
jne 0x41ac6a
push 4
push ebx
push esi
lea ecx, [ebp - 0x1c4]
call fcn.004195c3
mov esi, eax
cmp esi, ebx
jl 0x41ac5e
lea eax, [ebp - 0x1c4]
push str.Activate
push eax
call fcn.0042405e
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.0041ec48
add esp, 0x10
test eax, eax
jne 0x41ac28
mov esi, 0x80004005
jmp 0x41ac5e
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0041edce
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 6
call fcn.00408da0
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 5
call fcn.00409e40
cmp dword [ebp - 0x188], ebx
je 0x41bc58
xor eax, eax
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], ebx
mov word [ebp - 0xf4], ax
push ebx
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x188]
push 0x44b6f4
push eax
mov byte [ebp - 4], 7
call fcn.00423dd3
add esp, 0x10
test al, al
je 0x41acdf
cmp dword [ebp - 0xe4], ebx
je 0x41acdf
cmp dword [ebp - 0xe0], 8
mov eax, dword [ebp - 0xf4]
jae 0x41acca
lea eax, [ebp - 0xf4]
lea ecx, [ebp - 0x1e4]
push ecx
push 0x454ad4
push eax
call fcn.0042c7d5
add esp, 0xc
push ebx
push edi
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 5
call fcn.00409e40
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x188]
push eax
call fcn.004197a5
pop ecx
pop ecx
test al, al
jne 0x41ad1b
mov esi, str.The_file_you_are_using_cant_be_opened_in_this_version_of_Microsoft_Excel._nPlease__make_sure_that_your_default_version_of_Excel_application_is_Excel_2007_or_higher_and_try_again.
push esi
call fcn.0042c321
pop ecx
push eax
push esi
jmp 0x41bd43
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x182], bl
mov byte [ebp - 0x189], bl
call fcn.0041f04e
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 8
call fcn.0041f172
push str.LockXLSRuntime.Connect
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 9
call fcn.00408d50
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0xa
call fcn.0041f3a2
cmp dword [eax], ebx
lea ecx, [ebp - 0x1a4]
setne byte [ebp - 0x181]
call fcn.0041f016
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 9
call fcn.00409e40
cmp byte [ebp - 0x181], bl
je 0x41adb4
mov byte [ebp - 0x19a], 1
mov ecx, dword [ebp - 0x1e8]
xor eax, eax
cmp byte [ecx + 0x4c8], bl
lea ecx, [ebp - 0x1b0]
sete al
push eax
call fcn.0041ef82
lea eax, [ebp - 0x164]
push eax
call fcn.0041a5d6
mov dword [ebp - 0x1c8], ebx
push ebx
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x188]
push str.Workbooks
push eax
mov byte [ebp - 4], 0xc
call fcn.00423c14
add esp, 0x14
test al, al
je 0x41bc14
push edi
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], ebx
call fcn.00419090
mov byte [ebp - 4], 0xd
cmp byte [ebp - 0x19a], bl
je 0x41ae41
mov byte [ebp - 0x182], 1
jmp 0x41b2b1
push dword [ebp - 0x1e4]
lea eax, [ebp - 0x110]
push dword [ebp - 0x190]
push eax
call fcn.0041a731
add esp, 0xc
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xe
call fcn.00408da0
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xd
call fcn.00409e40
cmp dword [ebp - 0x138], ebx
jne 0x41aea3
mov esi, str.Loader_Add_In_can_not_be_extracted_from_the_executable.
push esi
call fcn.0042c321
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e20
jmp 0x41b2b1
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 0x181], bl
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push edi
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.00419090
push 0x44c53c
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
call fcn.00418c8e
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x11
call fcn.00418d2c
mov ecx, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
cmp ecx, ebx
je 0x41af0f
call fcn.00418dbc
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
call fcn.004240b0
add esp, 0x14
test al, al
je 0x41af5d
push 0xb
pop eax
cmp ax, word [ebp - 0xe8]
jne 0x41af5d
lea ecx, [ebp - 0xe8]
call fcn.00418cdb
cmp al, 1
jne 0x41af5d
mov byte [ebp - 0x181], al
mov byte [ebp - 0x189], al
lea ecx, [ebp - 0x1c0]
call fcn.00418fc8
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0xd
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 0x182], 1
cmp byte [ebp - 0x181], bl
jne 0x41b2b1
cmp dword [ebp - 0x134], 8
mov eax, dword [ebp - 0x148]
jae 0x41afa1
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00418c8e
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x12
call fcn.00418d2c
mov ecx, dword [ebp - 0x1a4]
cmp ecx, ebx
je 0x41afcc
call fcn.00418dbc
mov dword [ebp - 0x1a0], ebx
xor eax, eax
mov byte [ebp - 0x181], 1
mov dword [ebp - 0x118], 7
mov dword [ebp - 0x11c], ebx
mov word [ebp - 0x12c], ax
push ebx
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x188]
push str.Path
push eax
mov byte [ebp - 4], 0x14
call fcn.00423dd3
mov esi, 0x44c518
push esi
call fcn.0042c321
add esp, 0x14
push eax
push esi
lea ecx, [ebp - 0x12c]
call fcn.0040d3a0
cmp dword [ebp - 0x118], 8
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x190], ebx
jae 0x41b045
lea eax, [ebp - 0x12c]
lea ecx, [ebp - 0x190]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
test eax, eax
je 0x41b066
cmp dword [ebp - 0x190], 6
jne 0x41b066
mov byte [ebp - 0x181], bl
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1c8]
push str.Open
push eax
call fcn.004240f5
add esp, 0x14
test al, al
je 0x41b290
push 3
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.00419090
push 0x44c4e0
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x15
call fcn.00418c8e
mov ecx, dword [ebp - 0x1c0]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0x16
call fcn.00418d2c
mov ecx, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x41b0ea
call fcn.00418dbc
mov eax, dword [ebp - 0x198]
cmp byte [ebp - 0x181], bl
jne 0x41b0fe
mov eax, dword [ebp - 0x194]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418c8e
mov ecx, dword [ebp - 0x1c0]
push eax
add ecx, 0x10
mov byte [ebp - 4], 0x17
call fcn.00418d2c
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x41b130
call fcn.00418dbc
cmp dword [ebp - 0x150], 8
mov eax, dword [ebp - 0x164]
jae 0x41b145
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418c8e
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x18
call fcn.00418d2c
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b170
call fcn.00418dbc
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x198], ebx
mov edi, str.Macro_can_not_be_executed._Please_make
mov esi, 0x454e90
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
call fcn.004240b0
add esp, 0x14
test al, al
jne 0x41b259
push edi
mov byte [ebp - 0x182], bl
call fcn.0042c321
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push edi
call fcn.00408e20
xor eax, eax
mov dword [ebp - 0xfc], 7
mov dword [ebp - 0x100], ebx
mov word [ebp - 0x110], ax
lea eax, [ebp - 0x110]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00423ea5
push esi
call fcn.0042c321
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.0040d3a0
mov ecx, dword [ebp - 0x1a8]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x110]
push eax
call fcn.00405750
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x19
call fcn.00409e40
inc dword [ebp - 0x198]
cmp dword [ebp - 0x198], 0xa
jl 0x41b191
cmp dword [ebp - 0x198], 0xa
jge 0x41b275
lea eax, [ebp - 0x188]
push eax
call fcn.00419109
pop ecx
mov byte [ebp - 0x182], al
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
call fcn.00418fc8
xor edi, edi
inc edi
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.00409e40
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41b2b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x1d0], ebx
cmp byte [ebp - 0x182], bl
je 0x41bbf9
push ebx
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x188]
push str.HWND
push eax
call fcn.00423b1d
add esp, 0x10
test al, al
jne 0x41b37e
push ecx
mov dword [ebp - 0x194], esp
lea eax, [ebp - 0x189]
mov dword [ebp - 0x194], esp
push eax
lea ecx, [ebp - 0xe8]
call fcn.004178d0
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0041a331
pop ecx
cmp dword [ebp - 0xe0], ebx
je 0x41b36f
mov edi, dword [ebp - 0xe4]
mov esi, dword [edi]
mov dword [ebp - 0x190], esi
jmp 0x41b360
lea eax, [esi + 0xc]
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00417520
mov ecx, dword [ebp - 0x1f4]
cmp ecx, dword [eax]
je 0x41b366
lea ecx, [ebp - 0x190]
call fcn.00417990
mov esi, dword [ebp - 0x190]
cmp edi, esi
jne 0x41b32f
jmp 0x41b36f
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xd
call fcn.00416c50
cmp dword [ebp - 0x1d0], ebx
je 0x41b392
push dword [ebp - 0x1d0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x198], ebx
push ebx
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x188]
push str.Workbooks
push eax
mov byte [ebp - 4], 0x1d
call fcn.00423c14
lea eax, [ebp - 0x198]
push eax
xor esi, esi
call fcn.0041ec25
mov edi, eax
add esp, 0x14
cmp edi, ebx
jle 0x41b4b3
lea eax, [ebp - 0x190]
push eax
inc esi
lea eax, [ebp - 0x198]
push esi
push eax
call fcn.0041ec6b
add esp, 0xc
test eax, eax
je 0x41b43f
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0041ee15
cmp dword [eax + 0x14], 8
pop ecx
pop ecx
jb 0x41b40f
mov eax, dword [eax]
push eax
push dword [ebp - 0x1cc]
call fcn.0042c981
pop ecx
pop ecx
neg eax
sbb al, al
push ebx
inc al
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x181], al
call fcn.00409e40
cmp byte [ebp - 0x181], bl
jne 0x41b445
cmp esi, edi
jl 0x41b3d6
jmp 0x41b4b3
lea eax, [ebp - 0x188]
push str.Activate
push eax
mov byte [ebp - 0x182], bl
call fcn.0042405e
mov dword [ebp - 0x1a0], ebx
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x188]
push str.ActiveWindow
push eax
mov byte [ebp - 4], 0x1e
call fcn.00423c14
add esp, 0x18
test al, al
je 0x41b49f
push 0xffffefd7
lea eax, [ebp - 0x1a0]
push str.WindowState
push eax
call fcn.004239ff
add esp, 0xc
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0x1d
cmp eax, ebx
je 0x41b4b3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0x1c
cmp eax, ebx
je 0x41b4c7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41b4db
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [ebp - 0x182], bl
je 0x41bbf9
cmp byte [ebp - 0x189], bl
jne 0x41b4fc
lea eax, [ebp - 0x1b0]
push eax
call fcn.0041a54f
pop ecx
mov dword [ebp - 0x198], ebx
mov byte [ebp - 4], 0x1f
cmp byte [ebp - 0x19a], bl
je 0x41b651
push str.LockXLSRuntime.Connect
lea ecx, [ebp - 0x110]
call fcn.00408d50
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x20
call fcn.0041f3a2
push ebx
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x22
call fcn.00409e40
cmp dword [ebp - 0x190], ebx
je 0x41b63d
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x190]
call fcn.0041f072
push eax
lea ecx, [ebp - 0x198]
call fcn.0041975d
mov eax, dword [ebp - 0x194]
cmp eax, ebx
je 0x41b58b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x198], ebx
je 0x41b624
lea eax, [ebp - 0x198]
push str.IsWorkbookProtected
push eax
call fcn.0042405e
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x1e0]
call fcn.00419090
cmp dword [ebp - 0x150], 8
mov eax, dword [ebp - 0x164]
jae 0x41b5cc
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418c8e
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x23
call fcn.00418d2c
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x22
cmp ecx, ebx
je 0x41b5fb
call fcn.00418dbc
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x198]
push str.PrepareWorkbook
push eax
call fcn.0042415c
lea eax, [ebp - 0x188]
push eax
call fcn.00419387
add esp, 0x10
jmp 0x41b63d
mov esi, str.File_cant_be_opened._Please_make_sure_that_LockXLS_Runtime_Add_in_is_not_disabled_on_your_PC.
push esi
call fcn.0042c321
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e20
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x1f
call fcn.0041f016
jmp 0x41b70c
push 1
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.00419090
push 0x44c328
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x24
call fcn.00418c8e
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x25
call fcn.00418d2c
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b6a3
call fcn.00418dbc
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
mov byte [ebp - 4], 0x26
call fcn.004240b0
add esp, 0x14
test al, al
je 0x41b6f0
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x198]
push eax
call fcn.00423beb
pop ecx
pop ecx
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x1f
call fcn.00418fc8
cmp dword [ebp - 0x198], ebx
je 0x41b7e4
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x198]
push str.Arguments
push eax
mov byte [ebp - 4], 0x28
call fcn.004240f5
add esp, 0x14
test al, al
je 0x41b7c5
push 1
lea ecx, [ebp - 0x1c0]
call fcn.00419090
lea eax, [ebp - 0x190]
push eax
mov dword [ebp - 0x190], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
cmp edi, ebx
je 0x41b7c5
xor esi, esi
inc esi
cmp dword [ebp - 0x190], esi
jle 0x41b7c5
push dword [edi + esi*4]
mov ecx, dword [ebp - 0x1c0]
call fcn.004196ae
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1a0]
push 0x44c30c
push eax
call fcn.0042415c
add esp, 0xc
inc esi
cmp esi, dword [ebp - 0x190]
jl 0x41b793
lea ecx, [ebp - 0x1c0]
call fcn.00418fc8
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0x1f
cmp eax, ebx
je 0x41b7e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a8]
cmp dword [eax + 0x10], ebx
jne 0x41bbe3
push str.GoogleDesktop.OfficeAddin
lea ecx, [ebp - 0x110]
call fcn.00408d50
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x29
call fcn.0041f3a2
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x2b
call fcn.00409e40
cmp dword [ebp - 0x1a0], ebx
je 0x41b848
push ebx
lea ecx, [ebp - 0x1a0]
call fcn.0041ef9a
mov dword [ebp - 0x1a4], ebx
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1e0]
cmp byte [ebp - 0x199], bl
je 0x41b8bb
push 3
call fcn.00419090
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x194]
call fcn.00418c8e
mov ecx, dword [ebp - 0x1e0]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0x2d
call fcn.00418d2c
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x2c
cmp ecx, ebx
je 0x41b89e
call fcn.00418dbc
mov ecx, dword [ebp - 0x1e0]
push edi
add ecx, 0x10
call fcn.004196f3
mov ecx, dword [ebp - 0x1e0]
push edi
call fcn.004196f3
jmp 0x41b8f5
push edi
call fcn.00419090
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x194]
call fcn.00418c8e
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x2e
call fcn.00418d2c
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x2c
cmp ecx, ebx
je 0x41b8f5
call fcn.00418dbc
push 0x20
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.0042c390
add esp, 0xc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x1e8]
cmp byte [esi + 0x4c8], bl
jne 0x41b92c
push edi
lea ecx, [ebp - 0x1b0]
call fcn.0041ef82
mov dword [ebp - 0x190], ebx
push ebx
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x188]
push str.ActiveWindow
push eax
mov byte [ebp - 4], 0x2f
call fcn.00423c14
add esp, 0x10
test al, al
je 0x41b96f
push 0xffffefd7
lea eax, [ebp - 0x190]
push str.WindowState
push eax
call fcn.004239ff
add esp, 0xc
lea eax, [ebp - 0x1c8]
push str.xl5galry.xls
push eax
call fcn.00419826
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1c8]
push str.Open
push eax
call fcn.004240f5
add esp, 0x1c
test al, al
je 0x41baad
cmp byte [esi + 0x4c8], bl
je 0x41b9d8
lea ecx, [ebp - 0x1b0]
call fcn.0041ef61
test eax, eax
jne 0x41b9d8
lea ecx, [ebp - 0x1b0]
call fcn.0041ef53
jmp 0x41bbac
push edi
lea eax, [ebp - 0x188]
push str.EnableEvents
push eax
call fcn.00423a42
add esp, 0xc
push edi
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.00419090
push str.Auto_Open
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x30
call fcn.00418c8e
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x31
call fcn.00418d2c
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41ba3e
call fcn.00418dbc
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4e0
push eax
mov byte [ebp - 4], 0x32
call fcn.004240b0
push edi
lea eax, [ebp - 0x188]
push str.ScreenUpdating
push eax
call fcn.00423a42
lea eax, [ebp - 0x1b0]
push eax
call fcn.00419fe7
add esp, 0x24
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
call fcn.00418fc8
jmp 0x41bbac
push edi
push 3
lea ecx, [ebp - 0xb8]
call fcn.00404200
push str.Error_description:
push str._can_not_be_opened._n
push dword [ebp - 0x1cc]
lea eax, [ebp - 0xa8]
push str.File_
push eax
mov byte [ebp - 4], 0x33
call fcn.00406cb0
pop ecx
pop ecx
push eax
call fcn.00406cb0
pop ecx
pop ecx
push eax
call fcn.00406cb0
pop ecx
pop ecx
push eax
call fcn.00406cb0
pop ecx
pop ecx
cmp dword [ebp - 0x210], ebx
je 0x41bb47
push dword [ebp - 0x210]
lea ecx, [ebp - 0x194]
call fcn.00418c8e
mov eax, dword [eax]
mov byte [ebp - 4], 0x34
cmp eax, ebx
je 0x41bb21
mov eax, dword [eax]
jmp 0x41bb23
xor eax, eax
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.00406cb0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x33
cmp ecx, ebx
je 0x41bb5a
call fcn.00418dbc
jmp 0x41bb5a
lea eax, [ebp - 0xa8]
push str._not_available_
push eax
call fcn.00406cb0
pop ecx
pop ecx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00404330
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x35
jb 0x41bb7a
mov esi, dword [eax]
jmp 0x41bb7c
mov esi, eax
push esi
call fcn.0042c321
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e20
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.00409e40
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x2f
call fcn.00401310
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2c
cmp eax, ebx
je 0x41bbc0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x2b
cmp eax, ebx
je 0x41bbd4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x1f
call fcn.0041f016
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41bc06
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41bc06
push 1
lea ecx, [ebp - 0x1b0]
call fcn.0041ef82
lea ecx, [ebp - 0x1e0]
call fcn.00418fc8
xor edi, edi
inc edi
mov eax, dword [ebp - 0x1c8]
mov byte [ebp - 4], 0xb
cmp eax, ebx
je 0x41bc28
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x164]
call fcn.00409e40
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 8
call fcn.0041f016
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 5
call fcn.0041f016
jmp 0x41bd4e
cmp esi, 0x800401f3
je 0x41bc6c
cmp esi, 0x80040154
jne 0x41bd1a
push edi
push 3
lea ecx, [ebp - 0xb8]
call fcn.00404200
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xa8]
cmp byte [ebp - 0x1ac], bl
je 0x41bc93
push str.This_file_requires_Microsoft_Excel_2007_or_higher_to_be_installed_on_your_PC._n
jmp 0x41bc98
push str.This_file_requires_Microsoft_Excel_to_be_installed_on_your_PC._n
push eax
call fcn.00406cb0
pop ecx
pop ecx
push str.______Excel_is_not_registered_as_COM_Server_on_your_PC
push str.______your_user_account_doesnt_have_enough_rights_to_run_Excel_application_n
push str.______you_doesnt_have_Microsoft_Excel_installed_n
lea eax, [ebp - 0xa8]
push str.Possible_reasons_of_this_error:_n_n
push eax
call fcn.00406cb0
pop ecx
pop ecx
push eax
call fcn.00406cb0
pop ecx
pop ecx
push eax
call fcn.00406cb0
pop ecx
pop ecx
push eax
call fcn.00406cb0
pop ecx
pop ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00404330
mov ecx, dword [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x37
call fcn.00408da0
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.00409e40
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.00401310
jmp 0x41bd4e
push esi
lea eax, [ebp - 0xd8]
push str.LockXLS_was_unable_to_launch_Excel_application._Error_code:_0x_LX
push eax
call fcn.0042d38b
lea eax, [ebp - 0xd8]
push eax
call fcn.0042c321
add esp, 0x10
push eax
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x1a8]
call fcn.00408e20
mov eax, dword [ebp - 0x1c4]
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x41bd62
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x180]
call fcn.00409e40
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
call fcn.00416c50
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x41bd92
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x148]
call fcn.00409e40
call fcn.0042bf93
ret