00413400 push ebp 00413401 mov ebp,esp 00413403 sub esp,0Ch 00413406 push 00401476h 0041340B mov eax,fs:[00000000h] 00413411 push eax 00413412 mov fs:[00000000h],esp 00413419 sub esp,44h 0041341C push ebx 0041341D push esi 0041341E mov esi,[ebp+00000008h] 00413421 push edi 00413422 mov eax,esi 00413424 and esi,FFFFFFFEh 00413427 mov [ebp-0000000Ch],esp 0041342A and eax,01h 0041342D mov ecx,[esi] * Possible string reference 401228h "" | 0041342F mov dword ptr [ebp-00000008h],00401228h 00413436 push esi 00413437 mov [ebp-00000004h],eax 0041343A mov [ebp+00000008h],esi 0041343D call dword ptr [ecx+00000004h] 00413440 mov eax,[0041B02Ch] 00413445 xor ebx,ebx 00413447 cmp eax,ebx 00413449 mov [ebp-0000001Ch],ebx 0041344C mov [ebp-00000020h],ebx 0041344F mov [ebp-00000024h],ebx 00413452 mov [ebp-00000028h],ebx 00413455 mov [ebp-0000002Ch],ebx 00413458 mov [ebp-00000030h],ebx 0041345B mov [ebp-00000034h],ebx 0041345E mov [ebp-00000038h],ebx 00413461 mov [ebp-0000003Ch],ebx 00413464 jnz 00413476h 00413466 push 0041B02Ch * Possible string reference 40685Ch "" | 0041346B push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 00413470 call dword ptr [0041F2F0h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00413464(C) | 00413476 mov edi,[0041B02Ch] 0041347C lea eax,[ebp-0000003Ch] 0041347F push eax 00413480 push edi 00413481 mov edx,[edi] 00413483 call dword ptr [edx+00000058h] 00413486 cmp eax,ebx 00413488 jnl 00413499h 0041348A push 58h * Possible string reference 4081C8h "=" | 0041348C push 004081C8h 00413491 push edi 00413492 push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 00413493 call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00413488(C) | 00413499 mov ecx,[esi] 0041349B lea edx,[ebp-0000001Ch] 0041349E push edx 0041349F push esi 004134A0 call dword ptr [ecx+00000700h] 004134A6 mov eax,[esi] 004134A8 push esi 004134A9 call dword ptr [eax+00000330h] 004134AF lea ecx,[ebp-00000038h] 004134B2 push eax 004134B3 push ecx * Reference to MSVBVM50.__vbaObjSet | 004134B4 call dword ptr [0041F23Ch] 004134BA mov esi,eax 004134BC lea eax,[ebp-00000020h] 004134BF push eax 004134C0 push esi 004134C1 mov edx,[esi] 004134C3 call dword ptr [edx+000000A0h] 004134C9 cmp eax,ebx 004134CB jnl 004134DFh 004134CD push 000000A0h * Possible string reference 409104h "" | 004134D2 push 00409104h 004134D7 push esi 004134D8 push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 004134D9 call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004134CB(C) | * Reference to MSVBVM50.__vbaStrToAnsi | 004134DF mov esi,[0041F334h] 004134E5 push 01h 004134E7 lea ecx,[ebp-00000034h] * Possible string reference 409118h "" | 004134EA push 00409118h 004134EF push ecx 004134F0 call esi 004134F2 mov edx,[ebp-00000020h] 004134F5 push eax * Possible string reference 409684h "mailto:" | 004134F6 push 00409684h 004134FB push edx * Reference to MSVBVM50.__vbaStrCat | 004134FC call dword ptr [0041F20Ch] 00413502 mov edx,eax 00413504 lea ecx,[ebp-0000002Ch] * Reference to MSVBVM50.__vbaStrMove | 00413507 call dword ptr [0041F34Ch] 0041350D push eax 0041350E lea eax,[ebp-00000030h] 00413511 push eax 00413512 call esi 00413514 mov ecx,[ebp-0000001Ch] 00413517 push eax 00413518 lea edx,[ebp-00000028h] 0041351B push ecx 0041351C push edx 0041351D call esi 0041351F push eax 00413520 lea eax,[ebp-00000024h] * Possible string reference 409674h "open" | 00413523 push 00409674h 00413528 push eax 00413529 call esi 0041352B mov ecx,[ebp-0000003Ch] 0041352E push eax 0041352F push ecx 00413530 call 0040867Ch * Reference to MSVBVM50.__vbaSetSystemError | 00413535 call dword ptr [0041F218h] 0041353B lea edx,[ebp-00000034h] 0041353E lea eax,[ebp-00000030h] 00413541 push edx 00413542 lea ecx,[ebp-0000002Ch] 00413545 push eax 00413546 lea edx,[ebp-00000028h] 00413549 push ecx 0041354A lea eax,[ebp-0000001Ch] 0041354D push edx 0041354E lea ecx,[ebp-00000024h] 00413551 push eax 00413552 lea edx,[ebp-00000020h] 00413555 push ecx 00413556 push edx 00413557 push 07h * Reference to MSVBVM50.__vbaFreeStrList | 00413559 call dword ptr [0041F308h] 0041355F add esp,20h 00413562 lea ecx,[ebp-00000038h] * Reference to MSVBVM50.__vbaFreeObj | 00413565 call dword ptr [0041F36Ch] 0041356B mov [ebp-00000004h],ebx * Possible string reference 4135A7h "" | 0041356E push 004135A7h 00413573 jmp 004135A6h 00413575 lea eax,[ebp-00000034h] 00413578 lea ecx,[ebp-00000030h] 0041357B push eax 0041357C lea edx,[ebp-0000002Ch] 0041357F push ecx 00413580 lea eax,[ebp-00000028h] 00413583 push edx 00413584 lea ecx,[ebp-00000024h] 00413587 push eax 00413588 lea edx,[ebp-00000020h] 0041358B push ecx 0041358C lea eax,[ebp-0000001Ch] 0041358F push edx 00413590 push eax 00413591 push 07h * Reference to MSVBVM50.__vbaFreeStrList | 00413593 call dword ptr [0041F308h] 00413599 add esp,20h 0041359C lea ecx,[ebp-00000038h] * Reference to MSVBVM50.__vbaFreeObj | 0041359F call dword ptr [0041F36Ch] 004135A5 ret * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00413573(U) | 004135A6 ret 004135A7 mov eax,[ebp+00000008h] 004135AA push eax 004135AB mov ecx,[eax] 004135AD call dword ptr [ecx+00000008h] 004135B0 mov ecx,[ebp-00000014h] 004135B3 mov eax,[ebp-00000004h] 004135B6 pop edi 004135B7 pop esi 004135B8 mov fs:[00000000h],ecx 004135BF pop ebx 004135C0 mov esp,ebp 004135C2 pop ebp 004135C3 ret 0004h 004135C6 nop 004135C7 nop 004135C8 nop 004135C9 nop 004135CA nop 004135CB nop 004135CC nop 004135CD nop 004135CE nop 004135CF nop