Function at 0x41e5d0
Capabilities:
Reference sql statements
Reference wmi statements

Disassembly:
jmp dword [sym.imp.MSVBVM60.DLL___vbaFPException]
push ebp
mov ebp, esp
sub esp, 0xc
push 0x402556
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402530
xor eax, eax
mov ecx, 0xc
mov dword [ebp - 0x24], eax
lea edi, [ebp - 0x54]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x8c]
xor ebx, ebx
push ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0x84], 0x80020004
mov dword [ebp - 0x8c], 0xa
call dword [sym.imp.MSVBVM60.DLL_rtcFreeFile]
lea ecx, [ebp - 0x8c]
movsx esi, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp + 0xc]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov ecx, esi
mov eax, dword [edx]
push eax
call edi
push eax
push 0xffffffffffffffff
push 0x20
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
mov ecx, esi
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcFileLength]
cmp eax, ebx
mov dword [ebp - 0x1c], eax
jne 0x41e6ac
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
add eax, 0x2c
jo 0x41ecce
mov dword [ebp - 0x1c], eax
mov edx, 0x403718
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaLsetFixstr]
lea eax, [ebp - 0x24]
push 0x405a50
push eax
push 4
call ebx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0x10]
mov edx, ecx
movsx eax, word [eax]
sub edx, 0x2c
jo 0x41ecce
sub eax, 0
mov dword [ebp - 0x6c], edx
je 0x41e74b
dec eax
jne 0x41e9a1
lea ecx, [ebp - 0x54]
push 0x4054f0
push ecx
push 4
call ebx
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x48]
sub edx, 8
push 0x4059ac
push eax
push 8
jo 0x41ecce
mov dword [ebp - 0x4c], edx
call ebx
mov eax, 0x10
mov ecx, 1
mov dword [ebp - 0x38], eax
mov word [ebp - 0x34], cx
mov word [ebp - 0x32], cx
mov dword [ebp - 0x30], 0xac44
mov dword [ebp - 0x2c], 0x15888
mov word [ebp - 0x28], 2
mov word [ebp - 0x26], ax
jmp 0x41e9a1
test ecx, ecx
jle 0x41e9a1
mov ecx, esi
call edi
lea ecx, [ebp - 0x54]
push eax
push ecx
push 0x402fc8
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
push eax
push 0x405984
call dword [sym.imp.MSVBVM60.DLL___vbaGetOwner3]
lea edx, [ebp - 0x8c]
push 0
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x8c]
sub ecx, 0x10
push eax
jo 0x41ecce
lea edx, [ebp - 0x9c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x8c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov ecx, esi
call edi
push eax
lea eax, [ebp - 0x18]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaGet3]
mov ecx, esi
call edi
lea ecx, [ebp - 0x24]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaGetFxStr3]
lea edx, [ebp - 0x24]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov edx, eax
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x405a50
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov ebx, eax
lea eax, [ebp - 0x24]
neg ebx
sbb ebx, ebx
push eax
inc ebx
push 4
neg ebx
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov edx, eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x7c]
inc eax
lea edx, [ebp - 0x78]
push ecx
push edx
neg eax
push 2
or ebx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov ecx, esi
test bx, bx
jne 0x41e959
call edi
push eax
lea eax, [ebp - 0x1c]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaGet3]
mov ecx, esi
call edi
push eax
mov ecx, esi
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcFileSeek]
sub eax, 4
jo 0x41ecce
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaFileSeek]
lea ecx, [ebp - 0x8c]
push 0
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x8c]
add eax, 4
push edx
jo 0x41ecce
lea ecx, [ebp - 0x9c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0x9c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x68]
call ebx
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x8c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov ecx, esi
call edi
lea edx, [ebp - 0x68]
push eax
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaGet3]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov edx, eax
lea ecx, [ebp - 0x78]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x7c]
call ebx
mov edx, dword [ebp - 0x68]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x18]
call ebx
lea eax, [ebp - 0x7c]
lea ecx, [ebp - 0x78]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
jmp 0x41e7e5
call edi
lea edx, [ebp - 0x1c]
push eax
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaGet3]
mov ecx, esi
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcFileSeek]
mov ecx, esi
mov ebx, eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcFileLength]
sub eax, ebx
mov ecx, esi
jo 0x41ecce
add eax, 1
jo 0x41ecce
mov dword [ebp - 0x6c], eax
call edi
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaFileSeek]
mov ecx, esi
call edi
push eax
lea eax, [ebp - 0x54]
push eax
push 0x405984
call dword [sym.imp.MSVBVM60.DLL___vbaPutOwner3]
mov ecx, esi
call edi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaPut3]
lea ecx, [ebp - 0x18]
push eax
push ecx
push 0
call ebx
mov ecx, esi
call edi
lea edx, [ebp - 0x24]
push eax
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaPutFxStr3]
mov ecx, esi
call edi
push eax
lea eax, [ebp - 0x6c]
push eax
push 4
call ebx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
jle 0x41ea03
mov ecx, esi
call edi
push eax
mov eax, dword [ebp + 0x14]
push eax
push 0
call ebx
mov ecx, dword [ebp + 0x18]
fld dword [ecx]
fcomp dword [0x401998]
fnstsw ax
test ah, 0x41
jne 0x41ebbb
movsx edx, word [ebp - 0x26]
mov dword [ebp - 0xcc], edx
fild dword [ebp - 0xcc]
movsx eax, word [ebp - 0x32]
fstp qword [ebp - 0xd4]
fld qword [ebp - 0xd4]
cmp dword [section..data], 0
jne 0x41ea4a
fdiv qword [0x402528]
jmp 0x41ea5b
push dword [0x40252c]
push dword [0x402528]
call sub.MSVBVM60.DLL__adj_fdiv_m64
mov dword [ebp - 0xd8], eax
fild dword [ebp - 0xd8]
fstp qword [ebp - 0xe0]
fmul qword [ebp - 0xe0]
fnstsw ax
test al, 0xd
jne 0x41ecc9
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x74], eax
fld dword [ecx]
fild dword [ebp - 0x30]
fstp qword [ebp - 0xe8]
fmul qword [ebp - 0xe8]
fnstsw ax
test al, 0xd
jne 0x41ecc9
call dword [sym.imp.MSVBVM60.DLL___vbaFPInt]
fild dword [ebp - 0x74]
mov edx, dword [ebp - 0x18]
push edx
fstp qword [ebp - 0xf0]
fmul qword [ebp - 0xf0]
fnstsw ax
test al, 0xd
jne 0x41ecc9
fstp qword [ebp - 0xf8]
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
add eax, 0x2d
jo 0x41ecce
add eax, 8
jo 0x41ecce
mov dword [ebp - 0xfc], eax
fild dword [ebp - 0xfc]
fstp qword [ebp - 0x104]
fld qword [ebp - 0xf8]
fadd qword [ebp - 0x104]
fnstsw ax
test al, 0xd
jne 0x41ecc9
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, esi
mov dword [ebp - 0x1c], eax
call edi
push eax
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaFileSeek]
mov ecx, dword [ebp - 0x74]
lea edx, [ebp - 0x8c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea eax, [ebp - 0x9c]
push 0
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x9c]
push 1
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0x8c]
push 0x403710
lea ecx, [ebp - 0x78]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov ecx, dword [ebp + 0x14]
mov edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0x78]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x8c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov ecx, esi
call edi
push eax
mov eax, dword [ebp + 0x14]
push eax
push 0
call ebx
mov ecx, esi
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
mov ecx, dword [ebp + 0x18]
fld dword [ecx]
fcomp dword [0x401998]
fnstsw ax
test ah, 0x41
je 0x41ebdf
mov esi, 1
jmp 0x41ebe1
xor esi, esi
mov edx, dword [ebp + 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
xor ecx, ecx
test eax, eax
setle cl
test esi, ecx
jne 0x41ec48
xor esi, esi
xor edx, edx
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xb4], esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x78]
push edx
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0xb0]
push eax
push ecx
lea eax, [ebp - 0x8c]
push edx
push eax
mov dword [ebp - 0xb0], esi
call fcn.0041e5d0
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
wait
push 0x41ec9a
jmp 0x41ec89
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x18]
call esi
lea ecx, [ebp - 0x68]
call esi
ret
jmp 0x40255c
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop