1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44
| Private sub Unknown_408400
loc_00408400: push ebp
loc_00408401: mov ebp, esp
loc_00408403: sub esp, 00000008h
loc_00408406: push 00401316h ; MSVBVM60.DLL.__vbaExceptHandler
loc_0040840B: mov eax, fs:[00h]
loc_00408411: push eax
loc_00408412: mov fs:[00000000h], esp
loc_00408419: sub esp, 0000004Ch
loc_0040841C: push ebx
loc_0040841D: push esi
loc_0040841E: push edi
loc_0040841F: mov var_08, esp
loc_00408422: mov var_04, 004012E0h
loc_00408429: xor edi, edi
loc_0040842B: lea edx, var_48
loc_0040842E: lea ecx, var_28
loc_00408431: mov var_14, edi
loc_00408434: mov var_18, edi
loc_00408437: mov var_28, edi
loc_0040843A: mov var_38, edi
loc_0040843D: mov var_4C, edi
loc_00408440: mov var_50, edi
loc_00408443: mov var_40, 00404A68h ; "Username"
loc_0040844A: mov var_48, 00000008h
loc_00408451: call MSVBVM60.DLL.__vbaVarDup
loc_00408457: lea eax, var_28
loc_0040845A: lea ecx, var_38
loc_0040845D: push eax
loc_0040845E: push ecx
loc_0040845F: call [00401054h] ; Environ
loc_00408465: lea edx, var_38
loc_00408468: push edx
loc_00408469: call MSVBVM60.DLL.__vbaStrVarMove
loc_0040846F: mov edx, eax
loc_00408471: lea ecx, var_14
loc_00408474: call MSVBVM60.DLL.__vbaStrMove
loc_0040847A: lea eax, var_38
loc_0040847D: lea ecx, var_28
loc_00408480: push eax
loc_00408481: push ecx
loc_00408482: push 00000002h
loc_00408484: call MSVBVM60.DLL.__vbaFreeVarList
loc_0040848A: mov eax, var_18 |
Partager