00414A20 push ebp 00414A21 mov ebp,esp 00414A23 sub esp,0Ch 00414A26 push 00401476h 00414A2B mov eax,fs:[00000000h] 00414A31 push eax 00414A32 mov fs:[00000000h],esp 00414A39 sub esp,30h 00414A3C mov eax,[ebp+00000008h] 00414A3F push ebx 00414A40 mov ecx,eax 00414A42 push esi 00414A43 and al,FEh 00414A45 push edi 00414A46 mov [ebp-0000000Ch],esp 00414A49 and ecx,01h 00414A4C mov edx,[eax] * Possible string reference 401250h "" | 00414A4E mov dword ptr [ebp-00000008h],00401250h 00414A55 push eax 00414A56 mov [ebp-00000004h],ecx 00414A59 mov [ebp+00000008h],eax 00414A5C call dword ptr [edx+00000004h] 00414A5F mov eax,[0041B0A4h] 00414A64 test eax,eax 00414A66 jnz 00414A78h 00414A68 push 0041B0A4h * Possible string reference 403BC0h "" | 00414A6D push 00403BC0h * Reference to MSVBVM50.__vbaNew2 | 00414A72 call dword ptr [0041F2F0h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00414A66(C) | 00414A78 sub esp,10h 00414A7B mov ecx,0000000Ah 00414A80 mov ebx,esp 00414A82 mov eax,80020004h 00414A87 sub esp,10h 00414A8A mov esi,[0041B0A4h] 00414A90 mov [ebx],ecx 00414A92 mov ecx,[ebp-00000030h] 00414A95 mov edi,[esi] 00414A97 mov edx,00000001h 00414A9C mov [ebx+00000004h],ecx 00414A9F mov ecx,esp 00414AA1 push esi 00414AA2 mov [ebx+00000008h],eax 00414AA5 mov eax,[ebp-00000028h] 00414AA8 mov [ebx+0000000Ch],eax 00414AAB mov eax,00000003h 00414AB0 mov [ecx],eax 00414AB2 mov eax,[ebp-00000020h] 00414AB5 mov [ecx+00000004h],eax 00414AB8 mov [ecx+00000008h],edx 00414ABB mov edx,[ebp-00000018h] 00414ABE mov [ecx+0000000Ch],edx 00414AC1 call dword ptr [edi+000002B0h] 00414AC7 test eax,eax 00414AC9 jnl 00414ADDh 00414ACB push 000002B0h * Possible string reference 409570h "" | 00414AD0 push 00409570h 00414AD5 push esi 00414AD6 push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 00414AD7 call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00414AC9(C) | 00414ADD mov esi,[ebp+00000008h] 00414AE0 push esi 00414AE1 mov eax,[esi] 00414AE3 call dword ptr [eax+000006F8h] 00414AE9 test eax,eax 00414AEB jnl 00414AFFh 00414AED push 000006F8h * Possible string reference 4081F8h "" | 00414AF2 push 004081F8h 00414AF7 push esi 00414AF8 push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 00414AF9 call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00414AEB(C) | 00414AFF mov dword ptr [ebp-00000004h],00000000h 00414B06 mov eax,[ebp+00000008h] 00414B09 push eax 00414B0A mov ecx,[eax] 00414B0C call dword ptr [ecx+00000008h] 00414B0F mov ecx,[ebp-00000014h] 00414B12 mov eax,[ebp-00000004h] 00414B15 pop edi 00414B16 pop esi 00414B17 mov fs:[00000000h],ecx 00414B1E pop ebx 00414B1F mov esp,ebp 00414B21 pop ebp 00414B22 ret 0004h 00414B25 nop 00414B26 nop 00414B27 nop 00414B28 nop 00414B29 nop 00414B2A nop 00414B2B nop 00414B2C nop 00414B2D nop 00414B2E nop 00414B2F nop