00415010 push ebp 00415011 mov ebp,esp 00415013 sub esp,0Ch 00415016 push 00401476h 0041501B mov eax,fs:[00000000h] 00415021 push eax 00415022 mov fs:[00000000h],esp 00415029 sub esp,18h 0041502C push ebx 0041502D push esi 0041502E push edi 0041502F mov edi,[ebp+00000008h] 00415032 mov eax,edi 00415034 and edi,FFFFFFFEh 00415037 mov [ebp-0000000Ch],esp 0041503A and eax,01h 0041503D mov ecx,[edi] * Possible string reference 401268h "" | 0041503F mov dword ptr [ebp-00000008h],00401268h 00415046 push edi 00415047 mov [ebp-00000004h],eax 0041504A mov [ebp+00000008h],edi 0041504D call dword ptr [ecx+00000004h] 00415050 mov eax,[0041B60Ch] 00415055 mov dword ptr [ebp-00000018h],00000000h 0041505C test eax,eax 0041505E jnz 00415070h 00415060 push 0041B60Ch * Possible string reference 408AFCh "" | 00415065 push 00408AFCh * Reference to MSVBVM50.__vbaNew2 | 0041506A call dword ptr [0041F2F0h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041505E(C) | 00415070 mov esi,[0041B60Ch] 00415076 lea eax,[ebp-00000018h] 00415079 push edi 0041507A push eax 0041507B mov edx,[esi] 0041507D mov [ebp-0000002Ch],edx * Reference to MSVBVM50.__vbaObjSetAddref | 00415080 call dword ptr [0041F248h] 00415086 mov ecx,[ebp-0000002Ch] 00415089 push eax 0041508A push esi 0041508B call dword ptr [ecx+00000010h] 0041508E test eax,eax 00415090 jnl 004150A1h 00415092 push 10h * Possible string reference 408AECh "\"=" | 00415094 push 00408AECh 00415099 push esi 0041509A push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 0041509B call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00415090(C) | 004150A1 lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaFreeObj | 004150A4 call dword ptr [0041F36Ch] 004150AA mov dword ptr [ebp-00000004h],00000000h * Possible string reference 4150C3h "" | 004150B1 push 004150C3h 004150B6 jmp 004150C2h 004150B8 lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaFreeObj | 004150BB call dword ptr [0041F36Ch] 004150C1 ret * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004150B6(U) | 004150C2 ret 004150C3 mov eax,[ebp+00000008h] 004150C6 push eax 004150C7 mov edx,[eax] 004150C9 call dword ptr [edx+00000008h] 004150CC mov ecx,[ebp-00000014h] 004150CF mov eax,[ebp-00000004h] 004150D2 pop edi 004150D3 pop esi 004150D4 mov fs:[00000000h],ecx 004150DB pop ebx 004150DC mov esp,ebp 004150DE pop ebp 004150DF ret 0004h 004150E2 nop 004150E3 nop 004150E4 nop 004150E5 nop 004150E6 nop 004150E7 nop 004150E8 nop 004150E9 nop 004150EA nop 004150EB nop 004150EC nop 004150ED nop 004150EE nop 004150EF nop