004150F0 push ebp 004150F1 mov ebp,esp 004150F3 sub esp,0Ch 004150F6 push 00401476h 004150FB mov eax,fs:[00000000h] 00415101 push eax 00415102 mov fs:[00000000h],esp 00415109 sub esp,00000080h 0041510F push ebx 00415110 push esi 00415111 mov esi,[ebp+00000008h] 00415114 push edi 00415115 mov eax,esi 00415117 and esi,FFFFFFFEh 0041511A mov [ebp-0000000Ch],esp 0041511D and eax,01h 00415120 mov ecx,[esi] * Possible string reference 401278h "" | 00415122 mov dword ptr [ebp-00000008h],00401278h 00415129 push esi 0041512A mov [ebp-00000004h],eax 0041512D mov [ebp+00000008h],esi 00415130 call dword ptr [ecx+00000004h] 00415133 mov edx,[esi] 00415135 xor edi,edi 00415137 push esi 00415138 mov [ebp-00000018h],edi 0041513B mov [ebp-00000020h],edi 0041513E mov [ebp-00000024h],edi 00415141 mov [ebp-00000028h],edi 00415144 mov [ebp-0000002Ch],edi 00415147 mov [ebp-00000030h],edi 0041514A mov [ebp-00000034h],edi 0041514D mov [ebp-00000044h],edi 00415150 mov [ebp-00000054h],edi 00415153 mov [ebp-00000064h],edi 00415156 mov [ebp-00000074h],edi 00415159 mov [ebp-00000078h],edi 0041515C call dword ptr [edx+0000032Ch] * Reference to MSVBVM50.__vbaObjSet | 00415162 mov ebx,[0041F23Ch] 00415168 push eax 00415169 lea eax,[ebp-00000034h] 0041516C push eax 0041516D call ebx 0041516F mov eax,[ebp-00000034h] 00415172 lea ecx,[ebp-00000044h] 00415175 push 07h 00415177 lea edx,[ebp-00000054h] 0041517A push ecx 0041517B push edx 0041517C mov [ebp-00000034h],edi 0041517F mov [ebp-0000003Ch],eax 00415182 mov dword ptr [ebp-00000044h],00000009h * Reference to MSVBVM50.617 | 00415189 call dword ptr [0041F344h] 0041518F lea eax,[ebp-00000054h] 00415192 lea ecx,[ebp-00000074h] 00415195 push eax 00415196 push ecx * Possible string reference 40972Ch "http://" | 00415197 mov dword ptr [ebp-0000006Ch],0040972Ch 0041519E mov dword ptr [ebp-00000074h],00008008h * Reference to MSVBVM50.__vbaVarTstNe | 004151A5 call dword ptr [0041F320h] 004151AB lea ecx,[ebp-00000034h] 004151AE mov [ebp-00000080h],ax * Reference to MSVBVM50.__vbaFreeObj | 004151B2 call dword ptr [0041F36Ch] 004151B8 lea edx,[ebp-00000054h] 004151BB lea eax,[ebp-00000044h] 004151BE push edx 004151BF push eax 004151C0 push 02h * Reference to MSVBVM50.__vbaFreeVarList | 004151C2 call dword ptr [0041F1F0h] 004151C8 add esp,0Ch 004151CB cmp [ebp-00000080h],di 004151CF jz 0041522Bh 004151D1 mov ecx,[esi] 004151D3 push esi 004151D4 call dword ptr [ecx+0000032Ch] 004151DA lea edx,[ebp-00000034h] 004151DD push eax 004151DE push edx 004151DF call ebx 004151E1 mov ebx,eax 004151E3 lea ecx,[ebp-00000020h] 004151E6 push ecx 004151E7 push ebx 004151E8 mov eax,[ebx] 004151EA call dword ptr [eax+000000A0h] 004151F0 cmp eax,edi 004151F2 jnl 00415206h 004151F4 push 000000A0h * Possible string reference 409104h "" | 004151F9 push 00409104h 004151FE push ebx 004151FF push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 00415200 call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004151F2(C) | 00415206 mov edx,[ebp-00000020h] * Possible string reference 40972Ch "http://" | 00415209 push 0040972Ch 0041520E push edx * Reference to MSVBVM50.__vbaStrCat | 0041520F call dword ptr [0041F20Ch] 00415215 mov edx,eax 00415217 lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaStrMove | 0041521A call dword ptr [0041F34Ch] 00415220 lea ecx,[ebp-00000020h] * Reference to MSVBVM50.__vbaFreeStr | 00415223 call dword ptr [0041F368h] 00415229 jmp 0041526Fh * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004151CF(C) | 0041522B mov eax,[esi] 0041522D push esi 0041522E call dword ptr [eax+0000032Ch] 00415234 lea ecx,[ebp-00000034h] 00415237 push eax 00415238 push ecx 00415239 call ebx 0041523B mov ebx,eax 0041523D lea eax,[ebp-00000020h] 00415240 push eax 00415241 push ebx 00415242 mov edx,[ebx] 00415244 call dword ptr [edx+000000A0h] 0041524A cmp eax,edi 0041524C jnl 00415260h 0041524E push 000000A0h * Possible string reference 409104h "" | 00415253 push 00409104h 00415258 push ebx 00415259 push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 0041525A call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041524C(C) | 00415260 mov edx,[ebp-00000020h] 00415263 lea ecx,[ebp-00000018h] 00415266 mov [ebp-00000020h],edi * Reference to MSVBVM50.__vbaStrMove | 00415269 call dword ptr [0041F34Ch] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00415229(U) | 0041526F lea ecx,[ebp-00000034h] * Reference to MSVBVM50.__vbaFreeObj | 00415272 call dword ptr [0041F36Ch] 00415278 cmp [0041B02Ch],edi 0041527E jnz 00415290h 00415280 push 0041B02Ch * Possible string reference 40685Ch "" | 00415285 push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 0041528A call dword ptr [0041F2F0h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041527E(C) | 00415290 mov ebx,[0041B02Ch] 00415296 lea edx,[ebp-00000078h] 00415299 push edx 0041529A push ebx 0041529B mov ecx,[ebx] 0041529D call dword ptr [ecx+00000058h] 004152A0 cmp eax,edi 004152A2 jnl 004152B3h 004152A4 push 58h * Possible string reference 4081C8h "=" | 004152A6 push 004081C8h 004152AB push ebx 004152AC push eax * Reference to MSVBVM50.__vbaHresultCheckObj | 004152AD call dword ptr [0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004152A2(C) | 004152B3 mov eax,[esi] 004152B5 lea ecx,[ebp-00000020h] 004152B8 push ecx 004152B9 push esi 004152BA call dword ptr [eax+00000700h] * Reference to MSVBVM50.__vbaStrToAnsi | 004152C0 mov esi,[0041F334h] 004152C6 push 01h 004152C8 lea edx,[ebp-00000030h] * Possible string reference 409118h "" | 004152CB push 00409118h 004152D0 push edx 004152D1 call esi 004152D3 push eax 004152D4 mov eax,[ebp-00000018h] 004152D7 lea ecx,[ebp-0000002Ch] 004152DA push eax 004152DB push ecx 004152DC call esi 004152DE mov edx,[ebp-00000020h] 004152E1 push eax 004152E2 lea eax,[ebp-00000028h] 004152E5 push edx 004152E6 push eax 004152E7 call esi 004152E9 push eax 004152EA lea ecx,[ebp-00000024h] * Possible string reference 409674h "open" | 004152ED push 00409674h 004152F2 push ecx 004152F3 call esi 004152F5 mov edx,[ebp-00000078h] 004152F8 push eax 004152F9 push edx 004152FA call 0040867Ch * Reference to MSVBVM50.__vbaSetSystemError | 004152FF call dword ptr [0041F218h] 00415305 mov eax,[ebp-0000002Ch] 00415308 lea ecx,[ebp-00000018h] 0041530B push eax 0041530C push ecx * Reference to MSVBVM50.__vbaStrToUnicode | 0041530D call dword ptr [0041F2BCh] 00415313 lea edx,[ebp-00000030h] 00415316 lea eax,[ebp-0000002Ch] 00415319 push edx 0041531A lea ecx,[ebp-00000028h] 0041531D push eax 0041531E lea edx,[ebp-00000020h] 00415321 push ecx 00415322 lea eax,[ebp-00000024h] 00415325 push edx 00415326 push eax 00415327 push 05h * Reference to MSVBVM50.__vbaFreeStrList | 00415329 call dword ptr [0041F308h] 0041532F add esp,18h 00415332 mov [ebp-00000004h],edi * Possible string reference 415386h "" | 00415335 push 00415386h 0041533A jmp 0041537Ch 0041533C lea ecx,[ebp-00000030h] 0041533F lea edx,[ebp-0000002Ch] 00415342 push ecx 00415343 lea eax,[ebp-00000028h] 00415346 push edx 00415347 lea ecx,[ebp-00000024h] 0041534A push eax 0041534B lea edx,[ebp-00000020h] 0041534E push ecx 0041534F push edx 00415350 push 05h * Reference to MSVBVM50.__vbaFreeStrList | 00415352 call dword ptr [0041F308h] 00415358 add esp,18h 0041535B lea ecx,[ebp-00000034h] * Reference to MSVBVM50.__vbaFreeObj | 0041535E call dword ptr [0041F36Ch] 00415364 lea eax,[ebp-00000064h] 00415367 lea ecx,[ebp-00000054h] 0041536A push eax 0041536B lea edx,[ebp-00000044h] 0041536E push ecx 0041536F push edx 00415370 push 03h * Reference to MSVBVM50.__vbaFreeVarList | 00415372 call dword ptr [0041F1F0h] 00415378 add esp,10h 0041537B ret * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041533A(U) | 0041537C lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaFreeStr | 0041537F jmp dword ptr [0041F368h] 00415385 ret 00415386 mov eax,[ebp+00000008h] 00415389 push eax 0041538A mov ecx,[eax] 0041538C call dword ptr [ecx+00000008h] 0041538F mov ecx,[ebp-00000014h] 00415392 mov eax,[ebp-00000004h] 00415395 pop edi 00415396 pop esi 00415397 mov fs:[00000000h],ecx 0041539E pop ebx 0041539F mov esp,ebp 004153A1 pop ebp 004153A2 ret 0004h 004153A5 nop 004153A6 nop 004153A7 nop 004153A8 nop 004153A9 nop 004153AA nop 004153AB nop 004153AC nop 004153AD nop 004153AE nop 004153AF nop