Function at 0x41a9aa
Capabilities:
Accept command line arguments
Get file attributes

Disassembly:
push 0x20c
mov eax, 0x446b0a
call fcn.0042be00
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x198], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x194], ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x1e8], ecx
mov ecx, dword [ebp + 0x1c]
xor ebx, ebx
push eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1a8], ecx
mov byte [ebp - 0x199], bl
mov byte [ebp - 0x19a], bl
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
xor edi, edi
inc edi
test edi, eax
jne 0x41aa4a
push dword [ebp - 0x190]
lea eax, [ebp - 0x110]
push eax
call fcn.00419b0f
push eax
mov dword [ebp - 4], ebx
call fcn.0041f72d
add esp, 0xc
neg al
sbb al, al
push ebx
inc al
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x189], al
call fcn.00409e20
cmp byte [ebp - 0x189], bl
je 0x41aa51
mov byte [ebp - 0x199], 1
xor eax, eax
mov dword [ebp - 0x134], 7
mov dword [ebp - 0x138], ebx
mov word [ebp - 0x148], ax
mov dword [ebp - 4], edi
mov dword [ebp - 0x188], ebx
push ecx
mov dword [ebp - 0x1a4], esp
lea eax, [ebp - 0x189]
mov dword [ebp - 0x1a4], esp
push eax
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
call fcn.00417f60
lea eax, [ebp - 0x1f8]
push eax
mov byte [ebp - 4], 3
call fcn.0041a366
push esi
call fcn.00423d68
test eax, eax
pop ecx
setne byte [ebp - 0x1ac]
pop ecx
mov esi, 0x44c79c
cmp byte [ebp - 0x1ac], bl
je 0x41aac9
mov esi, str.Excel.Sheet.12
xor eax, eax
mov dword [ebp - 0x16c], 7
mov dword [ebp - 0x170], ebx
mov word [ebp - 0x180], ax
mov dword [ebp - 0x1c4], ebx
push 4
push ebx
push str.Excel.Application
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 5
call fcn.004195f8
cmp eax, ebx
jl 0x41ab44
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x188]
push eax
call fcn.004197da
pop ecx
pop ecx
test al, al
jne 0x41ab44
lea eax, [ebp - 0x188]
push str.Quit
push eax
call fcn.00423c25
mov eax, dword [ebp - 0x188]
pop ecx
pop ecx
cmp eax, ebx
je 0x41ab50
mov dword [ebp - 0x188], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x188], ebx
jne 0x41abd9
push 4
push ebx
push esi
lea ecx, [ebp - 0x1c4]
call fcn.004195f8
mov esi, eax
cmp esi, ebx
jl 0x41abcd
lea eax, [ebp - 0x1c4]
push str.Activate
push eax
call fcn.00423c25
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.0041eb94
add esp, 0x10
test eax, eax
jne 0x41ab97
mov esi, 0x80004005
jmp 0x41abcd
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0041ed1a
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 6
call fcn.00408d90
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 5
call fcn.00409e20
cmp dword [ebp - 0x188], ebx
je 0x41bbc7
xor eax, eax
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], ebx
mov word [ebp - 0xf4], ax
push ebx
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x188]
push 0x44b6e4
push eax
mov byte [ebp - 4], 7
call fcn.0042399a
add esp, 0x10
test al, al
je 0x41ac4e
cmp dword [ebp - 0xe4], ebx
je 0x41ac4e
cmp dword [ebp - 0xe0], 8
mov eax, dword [ebp - 0xf4]
jae 0x41ac39
lea eax, [ebp - 0xf4]
lea ecx, [ebp - 0x1e4]
push ecx
push 0x4547a4
push eax
call fcn.0042c6c5
add esp, 0xc
push ebx
push edi
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 5
call fcn.00409e20
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x188]
push eax
call fcn.004197da
pop ecx
pop ecx
test al, al
jne 0x41ac8a
mov esi, str.The_file_you_are_using_cant_be_opened_in_this_version_of_Microsoft_Excel._nPlease__make_sure_that_your_default_version_of_Excel_application_is_Excel_2007_or_higher_and_try_again.
push esi
call fcn.0042c211
pop ecx
push eax
push esi
jmp 0x41bcb2
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x182], bl
mov byte [ebp - 0x189], bl
call fcn.0041ef9a
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 8
call fcn.0041f10a
push str.LockXLSRuntime.Connect
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 9
call fcn.00408d40
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0xa
call fcn.0041f33a
cmp dword [eax], ebx
lea ecx, [ebp - 0x1a4]
setne byte [ebp - 0x181]
call fcn.0041ef62
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 9
call fcn.00409e20
cmp byte [ebp - 0x181], bl
je 0x41ad23
mov byte [ebp - 0x19a], 1
mov ecx, dword [ebp - 0x1e8]
xor eax, eax
cmp byte [ecx + 0x4c8], bl
lea ecx, [ebp - 0x1b0]
sete al
push eax
call fcn.0041eece
lea eax, [ebp - 0x164]
push eax
call fcn.0041a545
mov dword [ebp - 0x1c8], ebx
push ebx
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x188]
push str.Workbooks
push eax
mov byte [ebp - 4], 0xc
call fcn.004237db
add esp, 0x14
test al, al
je 0x41bb83
push edi
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], ebx
call fcn.004190c5
mov byte [ebp - 4], 0xd
cmp byte [ebp - 0x19a], bl
je 0x41adb0
mov byte [ebp - 0x182], 1
jmp 0x41b220
push dword [ebp - 0x1e4]
lea eax, [ebp - 0x110]
push dword [ebp - 0x190]
push eax
call fcn.0041a6a0
add esp, 0xc
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xe
call fcn.00408d90
push ebx
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xd
call fcn.00409e20
cmp dword [ebp - 0x138], ebx
jne 0x41ae12
mov esi, str.Loader_Add_In_can_not_be_extracted_from_the_executable.
push esi
call fcn.0042c211
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e10
jmp 0x41b220
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 0x181], bl
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push edi
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190c5
push 0x44c514
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
call fcn.00418cc1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x11
call fcn.00418d5f
mov ecx, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
cmp ecx, ebx
je 0x41ae7e
call fcn.00418def
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4d0
push eax
call fcn.00423c77
add esp, 0x14
test al, al
je 0x41aecc
push 0xb
pop eax
cmp ax, word [ebp - 0xe8]
jne 0x41aecc
lea ecx, [ebp - 0xe8]
call fcn.00418d0e
cmp al, 1
jne 0x41aecc
mov byte [ebp - 0x181], al
mov byte [ebp - 0x189], al
lea ecx, [ebp - 0x1c0]
call fcn.00418ffb
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0xd
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 0x182], 1
cmp byte [ebp - 0x181], bl
jne 0x41b220
cmp dword [ebp - 0x134], 8
mov eax, dword [ebp - 0x148]
jae 0x41af10
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00418cc1
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x12
call fcn.00418d5f
mov ecx, dword [ebp - 0x1a4]
cmp ecx, ebx
je 0x41af3b
call fcn.00418def
mov dword [ebp - 0x1a0], ebx
xor eax, eax
mov byte [ebp - 0x181], 1
mov dword [ebp - 0x118], 7
mov dword [ebp - 0x11c], ebx
mov word [ebp - 0x12c], ax
push ebx
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x188]
push str.Path
push eax
mov byte [ebp - 4], 0x14
call fcn.0042399a
mov esi, 0x44c4f0
push esi
call fcn.0042c211
add esp, 0x14
push eax
push esi
lea ecx, [ebp - 0x12c]
call fcn.0040d2f0
cmp dword [ebp - 0x118], 8
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x190], ebx
jae 0x41afb4
lea eax, [ebp - 0x12c]
lea ecx, [ebp - 0x190]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
test eax, eax
je 0x41afd5
cmp dword [ebp - 0x190], 6
jne 0x41afd5
mov byte [ebp - 0x181], bl
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1c8]
push str.Open
push eax
call fcn.00423cbc
add esp, 0x14
test al, al
je 0x41b1ff
push 3
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190c5
push 0x44c4b8
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x15
call fcn.00418cc1
mov ecx, dword [ebp - 0x1c0]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0x16
call fcn.00418d5f
mov ecx, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x41b059
call fcn.00418def
mov eax, dword [ebp - 0x198]
cmp byte [ebp - 0x181], bl
jne 0x41b06d
mov eax, dword [ebp - 0x194]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418cc1
mov ecx, dword [ebp - 0x1c0]
push eax
add ecx, 0x10
mov byte [ebp - 4], 0x17
call fcn.00418d5f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x41b09f
call fcn.00418def
cmp dword [ebp - 0x150], 8
mov eax, dword [ebp - 0x164]
jae 0x41b0b4
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418cc1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x18
call fcn.00418d5f
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b0df
call fcn.00418def
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x198], ebx
mov edi, str.Macro_can_not_be_executed._Please_make
mov esi, 0x454b68
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4d0
push eax
call fcn.00423c77
add esp, 0x14
test al, al
jne 0x41b1c8
push edi
mov byte [ebp - 0x182], bl
call fcn.0042c211
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push edi
call fcn.00408e10
xor eax, eax
mov dword [ebp - 0xfc], 7
mov dword [ebp - 0x100], ebx
mov word [ebp - 0x110], ax
lea eax, [ebp - 0x110]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00423a6c
push esi
call fcn.0042c211
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.0040d2f0
mov ecx, dword [ebp - 0x1a8]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x110]
push eax
call fcn.004057a0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x19
call fcn.00409e20
inc dword [ebp - 0x198]
cmp dword [ebp - 0x198], 0xa
jl 0x41b100
cmp dword [ebp - 0x198], 0xa
jge 0x41b1e4
lea eax, [ebp - 0x188]
push eax
call fcn.0041913e
pop ecx
mov byte [ebp - 0x182], al
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
call fcn.00418ffb
xor edi, edi
inc edi
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.00409e20
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41b220
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x1d0], ebx
cmp byte [ebp - 0x182], bl
je 0x41bb68
push ebx
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x188]
push str.HWND
push eax
call fcn.004236e4
add esp, 0x10
test al, al
jne 0x41b2ed
push ecx
mov dword [ebp - 0x194], esp
lea eax, [ebp - 0x189]
mov dword [ebp - 0x194], esp
push eax
lea ecx, [ebp - 0xe8]
call fcn.00417f60
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0041a366
pop ecx
cmp dword [ebp - 0xe0], ebx
je 0x41b2de
mov edi, dword [ebp - 0xe4]
mov esi, dword [edi]
mov dword [ebp - 0x190], esi
jmp 0x41b2cf
lea eax, [esi + 0xc]
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00417bb0
mov ecx, dword [ebp - 0x1f4]
cmp ecx, dword [eax]
je 0x41b2d5
lea ecx, [ebp - 0x190]
call fcn.00418020
mov esi, dword [ebp - 0x190]
cmp edi, esi
jne 0x41b29e
jmp 0x41b2de
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xd
call fcn.004172e0
cmp dword [ebp - 0x1d0], ebx
je 0x41b301
push dword [ebp - 0x1d0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x198], ebx
push ebx
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x188]
push str.Workbooks
push eax
mov byte [ebp - 4], 0x1d
call fcn.004237db
lea eax, [ebp - 0x198]
push eax
xor esi, esi
call fcn.0041eb71
mov edi, eax
add esp, 0x14
cmp edi, ebx
jle 0x41b422
lea eax, [ebp - 0x190]
push eax
inc esi
lea eax, [ebp - 0x198]
push esi
push eax
call fcn.0041ebb7
add esp, 0xc
test eax, eax
je 0x41b3ae
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0041ed61
cmp dword [eax + 0x14], 8
pop ecx
pop ecx
jb 0x41b37e
mov eax, dword [eax]
push eax
push dword [ebp - 0x1cc]
call fcn.0042c871
pop ecx
pop ecx
neg eax
sbb al, al
push ebx
inc al
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x181], al
call fcn.00409e20
cmp byte [ebp - 0x181], bl
jne 0x41b3b4
cmp esi, edi
jl 0x41b345
jmp 0x41b422
lea eax, [ebp - 0x188]
push str.Activate
push eax
mov byte [ebp - 0x182], bl
call fcn.00423c25
mov dword [ebp - 0x1a0], ebx
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x188]
push str.ActiveWindow
push eax
mov byte [ebp - 4], 0x1e
call fcn.004237db
add esp, 0x18
test al, al
je 0x41b40e
push 0xffffefd7
lea eax, [ebp - 0x1a0]
push str.WindowState
push eax
call fcn.004235c6
add esp, 0xc
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0x1d
cmp eax, ebx
je 0x41b422
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0x1c
cmp eax, ebx
je 0x41b436
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41b44a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [ebp - 0x182], bl
je 0x41bb68
cmp byte [ebp - 0x189], bl
jne 0x41b46b
lea eax, [ebp - 0x1b0]
push eax
call fcn.0041a4be
pop ecx
mov dword [ebp - 0x198], ebx
mov byte [ebp - 4], 0x1f
cmp byte [ebp - 0x19a], bl
je 0x41b5c0
push str.LockXLSRuntime.Connect
lea ecx, [ebp - 0x110]
call fcn.00408d40
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x20
call fcn.0041f33a
push ebx
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x22
call fcn.00409e20
cmp dword [ebp - 0x190], ebx
je 0x41b5ac
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x190]
call fcn.0041efb8
push eax
lea ecx, [ebp - 0x198]
call fcn.00419792
mov eax, dword [ebp - 0x194]
cmp eax, ebx
je 0x41b4fa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x198], ebx
je 0x41b593
lea eax, [ebp - 0x198]
push str.IsWorkbookProtected
push eax
call fcn.00423c25
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x1e0]
call fcn.004190c5
cmp dword [ebp - 0x150], 8
mov eax, dword [ebp - 0x164]
jae 0x41b53b
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x194]
call fcn.00418cc1
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x23
call fcn.00418d5f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x22
cmp ecx, ebx
je 0x41b56a
call fcn.00418def
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x198]
push str.PrepareWorkbook
push eax
call fcn.00423d23
lea eax, [ebp - 0x188]
push eax
call fcn.004193bc
add esp, 0x10
jmp 0x41b5ac
mov esi, str.File_cant_be_opened._Please_make_sure_that_LockXLS_Runtime_Add_in_is_not_disabled_on_your_PC.
push esi
call fcn.0042c211
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e10
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x1f
call fcn.0041ef62
jmp 0x41b67b
push 1
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190c5
push 0x44c300
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x24
call fcn.00418cc1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x25
call fcn.00418d5f
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b612
call fcn.00418def
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4d0
push eax
mov byte [ebp - 4], 0x26
call fcn.00423c77
add esp, 0x14
test al, al
je 0x41b65f
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x198]
push eax
call fcn.004237b2
pop ecx
pop ecx
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x1f
call fcn.00418ffb
cmp dword [ebp - 0x198], ebx
je 0x41b753
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x198]
push str.Arguments
push eax
mov byte [ebp - 4], 0x28
call fcn.00423cbc
add esp, 0x14
test al, al
je 0x41b734
push 1
lea ecx, [ebp - 0x1c0]
call fcn.004190c5
lea eax, [ebp - 0x190]
push eax
mov dword [ebp - 0x190], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
cmp edi, ebx
je 0x41b734
xor esi, esi
inc esi
cmp dword [ebp - 0x190], esi
jle 0x41b734
push dword [edi + esi*4]
mov ecx, dword [ebp - 0x1c0]
call fcn.004196e3
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1a0]
push 0x44c2e4
push eax
call fcn.00423d23
add esp, 0xc
inc esi
cmp esi, dword [ebp - 0x190]
jl 0x41b702
lea ecx, [ebp - 0x1c0]
call fcn.00418ffb
mov eax, dword [ebp - 0x1a0]
mov byte [ebp - 4], 0x1f
cmp eax, ebx
je 0x41b753
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a8]
cmp dword [eax + 0x10], ebx
jne 0x41bb52
push str.GoogleDesktop.OfficeAddin
lea ecx, [ebp - 0x110]
call fcn.00408d40
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x29
call fcn.0041f33a
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x2b
call fcn.00409e20
cmp dword [ebp - 0x1a0], ebx
je 0x41b7b7
push ebx
lea ecx, [ebp - 0x1a0]
call fcn.0041eeee
mov dword [ebp - 0x1a4], ebx
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1e0]
cmp byte [ebp - 0x199], bl
je 0x41b82a
push 3
call fcn.004190c5
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x194]
call fcn.00418cc1
mov ecx, dword [ebp - 0x1e0]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0x2d
call fcn.00418d5f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x2c
cmp ecx, ebx
je 0x41b80d
call fcn.00418def
mov ecx, dword [ebp - 0x1e0]
push edi
add ecx, 0x10
call fcn.00419728
mov ecx, dword [ebp - 0x1e0]
push edi
call fcn.00419728
jmp 0x41b864
push edi
call fcn.004190c5
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x194]
call fcn.00418cc1
mov ecx, dword [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x2e
call fcn.00418d5f
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x2c
cmp ecx, ebx
je 0x41b864
call fcn.00418def
push 0x20
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.0042c280
add esp, 0xc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x1e8]
cmp byte [esi + 0x4c8], bl
jne 0x41b89b
push edi
lea ecx, [ebp - 0x1b0]
call fcn.0041eece
mov dword [ebp - 0x190], ebx
push ebx
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x188]
push str.ActiveWindow
push eax
mov byte [ebp - 4], 0x2f
call fcn.004237db
add esp, 0x10
test al, al
je 0x41b8de
push 0xffffefd7
lea eax, [ebp - 0x190]
push str.WindowState
push eax
call fcn.004235c6
add esp, 0xc
lea eax, [ebp - 0x1c8]
push str.xl5galry.xls
push eax
call fcn.0041985b
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1c8]
push str.Open
push eax
call fcn.00423cbc
add esp, 0x1c
test al, al
je 0x41ba1c
cmp byte [esi + 0x4c8], bl
je 0x41b947
lea ecx, [ebp - 0x1b0]
call fcn.0041eead
test eax, eax
jne 0x41b947
lea ecx, [ebp - 0x1b0]
call fcn.0041ee9f
jmp 0x41bb1b
push edi
lea eax, [ebp - 0x188]
push str.EnableEvents
push eax
call fcn.00423609
add esp, 0xc
push edi
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.004190c5
push str.Auto_Open
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x30
call fcn.00418cc1
mov ecx, dword [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x31
call fcn.00418d5f
mov ecx, dword [ebp - 0x194]
cmp ecx, ebx
je 0x41b9ad
call fcn.00418def
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push 0x44b4d0
push eax
mov byte [ebp - 4], 0x32
call fcn.00423c77
push edi
lea eax, [ebp - 0x188]
push str.ScreenUpdating
push eax
call fcn.00423609
lea eax, [ebp - 0x1b0]
push eax
call fcn.0041a01c
add esp, 0x24
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1c0]
call fcn.00418ffb
jmp 0x41bb1b
push edi
push 3
lea ecx, [ebp - 0xb8]
call fcn.00404250
push str.Error_description:
push str._can_not_be_opened._n
push dword [ebp - 0x1cc]
lea eax, [ebp - 0xa8]
push str.File_
push eax
mov byte [ebp - 4], 0x33
call fcn.00406d00
pop ecx
pop ecx
push eax
call fcn.00406d00
pop ecx
pop ecx
push eax
call fcn.00406d00
pop ecx
pop ecx
push eax
call fcn.00406d00
pop ecx
pop ecx
cmp dword [ebp - 0x210], ebx
je 0x41bab6
push dword [ebp - 0x210]
lea ecx, [ebp - 0x194]
call fcn.00418cc1
mov eax, dword [eax]
mov byte [ebp - 4], 0x34
cmp eax, ebx
je 0x41ba90
mov eax, dword [eax]
jmp 0x41ba92
xor eax, eax
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.00406d00
pop ecx
pop ecx
mov ecx, dword [ebp - 0x194]
mov byte [ebp - 4], 0x33
cmp ecx, ebx
je 0x41bac9
call fcn.00418def
jmp 0x41bac9
lea eax, [ebp - 0xa8]
push str._not_available_
push eax
call fcn.00406d00
pop ecx
pop ecx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00404380
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x35
jb 0x41bae9
mov esi, dword [eax]
jmp 0x41baeb
mov esi, eax
push esi
call fcn.0042c211
pop ecx
mov ecx, dword [ebp - 0x1a8]
push eax
push esi
call fcn.00408e10
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.00409e20
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x2f
call fcn.00401310
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2c
cmp eax, ebx
je 0x41bb2f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a4]
mov byte [ebp - 4], 0x2b
cmp eax, ebx
je 0x41bb43
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x1f
call fcn.0041ef62
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x41bb75
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41bb75
push 1
lea ecx, [ebp - 0x1b0]
call fcn.0041eece
lea ecx, [ebp - 0x1e0]
call fcn.00418ffb
xor edi, edi
inc edi
mov eax, dword [ebp - 0x1c8]
mov byte [ebp - 4], 0xb
cmp eax, ebx
je 0x41bb97
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x164]
call fcn.00409e20
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 8
call fcn.0041ef62
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 5
call fcn.0041ef62
jmp 0x41bcbd
cmp esi, 0x800401f3
je 0x41bbdb
cmp esi, 0x80040154
jne 0x41bc89
push edi
push 3
lea ecx, [ebp - 0xb8]
call fcn.00404250
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xa8]
cmp byte [ebp - 0x1ac], bl
je 0x41bc02
push str.This_file_requires_Microsoft_Excel_2007_or_higher_to_be_installed_on_your_PC._n
jmp 0x41bc07
push str.This_file_requires_Microsoft_Excel_to_be_installed_on_your_PC._n
push eax
call fcn.00406d00
pop ecx
pop ecx
push str.______Excel_is_not_registered_as_COM_Server_on_your_PC
push str.______your_user_account_doesnt_have_enough_rights_to_run_Excel_application_n
push str.______you_doesnt_have_Microsoft_Excel_installed_n
lea eax, [ebp - 0xa8]
push str.Possible_reasons_of_this_error:_n_n
push eax
call fcn.00406d00
pop ecx
pop ecx
push eax
call fcn.00406d00
pop ecx
pop ecx
push eax
call fcn.00406d00
pop ecx
pop ecx
push eax
call fcn.00406d00
pop ecx
pop ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00404380
mov ecx, dword [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x37
call fcn.00408d90
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.00409e20
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.00401310
jmp 0x41bcbd
push esi
lea eax, [ebp - 0xd8]
push str.LockXLS_was_unable_to_launch_Excel_application._Error_code:_0x_LX
push eax
call fcn.0042d27b
lea eax, [ebp - 0xd8]
push eax
call fcn.0042c211
add esp, 0x10
push eax
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x1a8]
call fcn.00408e10
mov eax, dword [ebp - 0x1c4]
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x41bcd1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x180]
call fcn.00409e20
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
call fcn.004172e0
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x41bd01
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push edi
lea ecx, [ebp - 0x148]
call fcn.00409e20
call fcn.0042be83
ret