-
-
[旧帖] [分享]菜???注?? 0.00雪花
-
发表于: 2007-2-23 11:41
-
我??破解只有半年多.?算是有?成?.一些膣度不高的程序我也能?到注??了..呃彦是我第一次???注??成功的代瘁.拿出?斤一同??的菜??分享吧. 看一下呃彦的代瘁??能否?出注?????一下..?呀..
就?呃彦檫始吧....注?? / 爆破方法也可以..
-----------------------------------------------------
00436FC0 $ 55 push ebp
00436FC1 . 8BEC mov ebp, esp
00436FC3 . 83EC 0C sub esp, 0C
00436FC6 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
00436FCB . 64:A1 0000000>mov eax, fs:[0]
00436FD1 . 50 push eax
00436FD2 . 64:8925 00000>mov fs:[0], esp
00436FD9 . 81EC F4000000 sub esp, 0F4
00436FDF . 53 push ebx
00436FE0 . 56 push esi
00436FE1 . 57 push edi
00436FE2 . 8965 F4 mov [ebp-C], esp
00436FE5 . C745 F8 C8174>mov dword ptr [ebp-8], 004017C8
00436FEC . 8B55 08 mov edx, [ebp+8]
00436FEF . 33C0 xor eax, eax
00436FF1 . 8D4D E8 lea ecx, [ebp-18]
00436FF4 . 8945 E8 mov [ebp-18], eax
00436FF7 . 8945 E0 mov [ebp-20], eax
00436FFA . 8945 DC mov [ebp-24], eax
00436FFD . 8945 D8 mov [ebp-28], eax
00437000 . 8945 D4 mov [ebp-2C], eax
00437003 . 8945 D0 mov [ebp-30], eax
00437006 . 8945 CC mov [ebp-34], eax
00437009 . 8945 C8 mov [ebp-38], eax
0043700C . 8945 C4 mov [ebp-3C], eax
0043700F . 8945 C0 mov [ebp-40], eax
00437012 . 8945 BC mov [ebp-44], eax
00437015 . 8945 B8 mov [ebp-48], eax
00437018 . 8945 B4 mov [ebp-4C], eax
0043701B . 8945 B0 mov [ebp-50], eax
0043701E . 8945 AC mov [ebp-54], eax
00437021 . 8945 A8 mov [ebp-58], eax
00437024 . 8945 A4 mov [ebp-5C], eax
00437027 . 8945 A0 mov [ebp-60], eax
0043702A . 8945 9C mov [ebp-64], eax
0043702D . 8945 98 mov [ebp-68], eax
00437030 . 8945 94 mov [ebp-6C], eax
00437033 . 8945 90 mov [ebp-70], eax
00437036 . 8945 8C mov [ebp-74], eax
00437039 . 8945 88 mov [ebp-78], eax
0043703C . 8945 84 mov [ebp-7C], eax
0043703F . 8945 80 mov [ebp-80], eax
00437042 . 8985 70FFFFFF mov [ebp-90], eax
00437048 . 8985 60FFFFFF mov [ebp-A0], eax
0043704E . 8985 50FFFFFF mov [ebp-B0], eax
00437054 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
0043705A . 8B45 E8 mov eax, [ebp-18]
0043705D . 50 push eax
0043705E . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437064 . 8BC8 mov ecx, eax
00437066 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
0043706C . 8B3D 4C104000 mov edi, [<&MSVBVM60.rtcAnsiValueBst>; MSVBVM60.rtcAnsiValueBstr
00437072 . 8B1D 40104000 mov ebx, [<&MSVBVM60.__vbaFreeVarLis>; MSVBVM60.__vbaFreeVarList
00437078 . 8985 38FFFFFF mov [ebp-C8], eax
0043707E . BE 01000000 mov esi, 1
00437083 > 66:3BB5 38FFF>cmp si, [ebp-C8]
0043708A . 0F8F A5000000 jg 00437135
00437090 . B8 02000000 mov eax, 2
00437095 . 8D4D E8 lea ecx, [ebp-18]
00437098 . 8985 78FFFFFF mov [ebp-88], eax
0043709E . 8985 70FFFFFF mov [ebp-90], eax
004370A4 . 0FBFC6 movsx eax, si
004370A7 . 8D95 70FFFFFF lea edx, [ebp-90]
004370AD . 898D 58FFFFFF mov [ebp-A8], ecx
004370B3 . 52 push edx
004370B4 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
004370BA . 50 push eax
004370BB . 8D95 60FFFFFF lea edx, [ebp-A0]
004370C1 . 51 push ecx
004370C2 . 52 push edx
004370C3 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004370CD . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
004370D3 . 8D85 60FFFFFF lea eax, [ebp-A0]
004370D9 . 8D4D 94 lea ecx, [ebp-6C]
004370DC . 50 push eax
004370DD . 51 push ecx
004370DE . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
004370E4 . 50 push eax
004370E5 . FFD7 call edi
004370E7 . 66:6BC0 4F imul ax, ax, 4F
004370EB . 0F80 59120000 jo 0043834A
004370F1 . 0FBFD0 movsx edx, ax
004370F4 . 8B45 D8 mov eax, [ebp-28]
004370F7 . 8D4D 94 lea ecx, [ebp-6C]
004370FA . 03D0 add edx, eax
004370FC . 0F80 48120000 jo 0043834A
00437102 . 8955 D8 mov [ebp-28], edx
00437105 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0043710B . 8D85 60FFFFFF lea eax, [ebp-A0]
00437111 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437117 . 50 push eax
00437118 . 51 push ecx
00437119 . 6A 02 push 2
0043711B . FFD3 call ebx
0043711D . B8 01000000 mov eax, 1
00437122 . 83C4 0C add esp, 0C
00437125 . 66:03C6 add ax, si
00437128 . 0F80 1C120000 jo 0043834A
0043712E . 8BF0 mov esi, eax
00437130 .^ E9 4EFFFFFF jmp 00437083
00437135 > 8D85 50FFFFFF lea eax, [ebp-B0]
0043713B . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437141 . 8D55 E8 lea edx, [ebp-18]
00437144 . 50 push eax
00437145 . 51 push ecx
00437146 . 8995 58FFFFFF mov [ebp-A8], edx
0043714C . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437156 . FF15 5C104000 call [<&MSVBVM60.rtcLowerCaseVar>] ; MSVBVM60.rtcLowerCaseVar
0043715C . 8D95 70FFFFFF lea edx, [ebp-90]
00437162 . 52 push edx
00437163 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437169 . 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0043716F . 8BD0 mov edx, eax
00437171 . 8D4D E8 lea ecx, [ebp-18]
00437174 . FFD6 call esi ; <&MSVBVM60.__vbaStrMove>
00437176 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043717C . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437182 . 8B45 E8 mov eax, [ebp-18]
00437185 . 50 push eax
00437186 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043718C . 8BC8 mov ecx, eax
0043718E . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437194 . 8985 30FFFFFF mov [ebp-D0], eax
0043719A . B8 01000000 mov eax, 1
0043719F . 8945 E4 mov [ebp-1C], eax
004371A2 > 66:3B85 30FFF>cmp ax, [ebp-D0]
004371A9 . 0F8F AA000000 jg 00437259
004371AF . 8D4D E8 lea ecx, [ebp-18]
004371B2 . 8D95 70FFFFFF lea edx, [ebp-90]
004371B8 . 0FBFC0 movsx eax, ax
004371BB . 898D 58FFFFFF mov [ebp-A8], ecx
004371C1 . 52 push edx
004371C2 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
004371C8 . 50 push eax
004371C9 . 8D95 60FFFFFF lea edx, [ebp-A0]
004371CF . 51 push ecx
004371D0 . 52 push edx
004371D1 . C785 78FFFFFF>mov dword ptr [ebp-88], 4
004371DB . C785 70FFFFFF>mov dword ptr [ebp-90], 2
004371E5 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004371EF . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
004371F5 . 8D85 60FFFFFF lea eax, [ebp-A0]
004371FB . 8D4D 94 lea ecx, [ebp-6C]
004371FE . 50 push eax
004371FF . 51 push ecx
00437200 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00437206 . 50 push eax
00437207 . FFD7 call edi
00437209 . 66:6BC0 26 imul ax, ax, 26
0043720D . 0F80 37110000 jo 0043834A
00437213 . 0FBFD0 movsx edx, ax
00437216 . 8B45 D0 mov eax, [ebp-30]
00437219 . 8D4D 94 lea ecx, [ebp-6C]
0043721C . 03D0 add edx, eax
0043721E . 0F80 26110000 jo 0043834A
00437224 . 8955 D0 mov [ebp-30], edx
00437227 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0043722D . 8D85 60FFFFFF lea eax, [ebp-A0]
00437233 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437239 . 50 push eax
0043723A . 51 push ecx
0043723B . 6A 02 push 2
0043723D . FFD3 call ebx
0043723F . B8 01000000 mov eax, 1
00437244 . 83C4 0C add esp, 0C
00437247 . 66:0345 E4 add ax, [ebp-1C]
0043724B . 0F80 F9100000 jo 0043834A
00437251 . 8945 E4 mov [ebp-1C], eax
00437254 .^ E9 49FFFFFF jmp 004371A2
00437259 > 8D85 50FFFFFF lea eax, [ebp-B0]
0043725F . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437265 . 8D55 E8 lea edx, [ebp-18]
00437268 . 50 push eax
00437269 . 51 push ecx
0043726A . 8995 58FFFFFF mov [ebp-A8], edx
00437270 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043727A . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
00437280 . 8D95 70FFFFFF lea edx, [ebp-90]
00437286 . 52 push edx
00437287 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
0043728D . 8BD0 mov edx, eax
0043728F . 8D4D E8 lea ecx, [ebp-18]
00437292 . FFD6 call esi
00437294 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043729A . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004372A0 . 8B45 E8 mov eax, [ebp-18]
004372A3 . 50 push eax
004372A4 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
004372AA . 8BC8 mov ecx, eax
004372AC . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
004372B2 . 8985 28FFFFFF mov [ebp-D8], eax
004372B8 . B8 01000000 mov eax, 1
004372BD . 8945 E4 mov [ebp-1C], eax
004372C0 > 66:3B85 28FFF>cmp ax, [ebp-D8]
004372C7 . 0F8F A7000000 jg 00437374
004372CD . B9 02000000 mov ecx, 2
004372D2 . 8D95 70FFFFFF lea edx, [ebp-90]
004372D8 . 898D 78FFFFFF mov [ebp-88], ecx
004372DE . 898D 70FFFFFF mov [ebp-90], ecx
004372E4 . 8D4D E8 lea ecx, [ebp-18]
004372E7 . 52 push edx
004372E8 . 0FBFC0 movsx eax, ax
004372EB . 898D 58FFFFFF mov [ebp-A8], ecx
004372F1 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
004372F7 . 50 push eax
004372F8 . 8D95 60FFFFFF lea edx, [ebp-A0]
004372FE . 51 push ecx
004372FF . 52 push edx
00437300 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043730A . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
00437310 . 8D85 60FFFFFF lea eax, [ebp-A0]
00437316 . 8D4D 94 lea ecx, [ebp-6C]
00437319 . 50 push eax
0043731A . 51 push ecx
0043731B . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00437321 . 50 push eax
00437322 . FFD7 call edi
00437324 . 66:6BC0 39 imul ax, ax, 39
00437328 . 0F80 1C100000 jo 0043834A
0043732E . 0FBFD0 movsx edx, ax
00437331 . 8B45 C8 mov eax, [ebp-38]
00437334 . 8D4D 94 lea ecx, [ebp-6C]
00437337 . 03D0 add edx, eax
00437339 . 0F80 0B100000 jo 0043834A
0043733F . 8955 C8 mov [ebp-38], edx
00437342 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00437348 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043734E . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437354 . 50 push eax
00437355 . 51 push ecx
00437356 . 6A 02 push 2
00437358 . FFD3 call ebx
0043735A . B8 01000000 mov eax, 1
0043735F . 83C4 0C add esp, 0C
00437362 . 66:0345 E4 add ax, [ebp-1C]
00437366 . 0F80 DE0F0000 jo 0043834A
0043736C . 8945 E4 mov [ebp-1C], eax
0043736F .^ E9 4CFFFFFF jmp 004372C0
00437374 > 8D85 50FFFFFF lea eax, [ebp-B0]
0043737A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437380 . 8D55 E8 lea edx, [ebp-18]
00437383 . 50 push eax
00437384 . 51 push ecx
00437385 . 8995 58FFFFFF mov [ebp-A8], edx
0043738B . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437395 . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
0043739B . 8D95 70FFFFFF lea edx, [ebp-90]
004373A1 . 52 push edx
004373A2 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004373A8 . 8BD0 mov edx, eax
004373AA . 8D4D E8 lea ecx, [ebp-18]
004373AD . FFD6 call esi
004373AF . 8D8D 70FFFFFF lea ecx, [ebp-90]
004373B5 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004373BB . 8B45 E8 mov eax, [ebp-18]
004373BE . 50 push eax
004373BF . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
004373C5 . 8BC8 mov ecx, eax
004373C7 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
004373CD . 8985 20FFFFFF mov [ebp-E0], eax
004373D3 . B8 01000000 mov eax, 1
004373D8 . 8945 E4 mov [ebp-1C], eax
004373DB > 66:3B85 20FFF>cmp ax, [ebp-E0]
004373E2 . 0F8F AA000000 jg 00437492
004373E8 . 8D4D E8 lea ecx, [ebp-18]
004373EB . 8D95 70FFFFFF lea edx, [ebp-90]
004373F1 . 0FBFC0 movsx eax, ax
004373F4 . 898D 58FFFFFF mov [ebp-A8], ecx
004373FA . 52 push edx
004373FB . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437401 . 50 push eax
00437402 . 8D95 60FFFFFF lea edx, [ebp-A0]
00437408 . 51 push ecx
00437409 . 52 push edx
0043740A . C785 78FFFFFF>mov dword ptr [ebp-88], 3
00437414 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043741E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437428 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043742E . 8D85 60FFFFFF lea eax, [ebp-A0]
00437434 . 8D4D 94 lea ecx, [ebp-6C]
00437437 . 50 push eax
00437438 . 51 push ecx
00437439 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
0043743F . 50 push eax
00437440 . FFD7 call edi
00437442 . 66:6BC0 23 imul ax, ax, 23
00437446 . 0F80 FE0E0000 jo 0043834A
0043744C . 0FBFD0 movsx edx, ax
0043744F . 8B45 C0 mov eax, [ebp-40]
00437452 . 8D4D 94 lea ecx, [ebp-6C]
00437455 . 03D0 add edx, eax
00437457 . 0F80 ED0E0000 jo 0043834A
0043745D . 8955 C0 mov [ebp-40], edx
00437460 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00437466 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043746C . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437472 . 50 push eax
00437473 . 51 push ecx
00437474 . 6A 02 push 2
00437476 . FFD3 call ebx
00437478 . B8 01000000 mov eax, 1
0043747D . 83C4 0C add esp, 0C
00437480 . 66:0345 E4 add ax, [ebp-1C]
00437484 . 0F80 C00E0000 jo 0043834A
0043748A . 8945 E4 mov [ebp-1C], eax
0043748D .^ E9 49FFFFFF jmp 004373DB
00437492 > 8D85 50FFFFFF lea eax, [ebp-B0]
00437498 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043749E . 8D55 E8 lea edx, [ebp-18]
004374A1 . 50 push eax
004374A2 . 51 push ecx
004374A3 . 8995 58FFFFFF mov [ebp-A8], edx
004374A9 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004374B3 . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
004374B9 . 8D95 70FFFFFF lea edx, [ebp-90]
004374BF . 52 push edx
004374C0 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004374C6 . 8BD0 mov edx, eax
004374C8 . 8D4D E8 lea ecx, [ebp-18]
004374CB . FFD6 call esi
004374CD . 8D8D 70FFFFFF lea ecx, [ebp-90]
004374D3 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004374D9 . 8B45 E8 mov eax, [ebp-18]
004374DC . 50 push eax
004374DD . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
004374E3 . 8BC8 mov ecx, eax
004374E5 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
004374EB . 8985 18FFFFFF mov [ebp-E8], eax
004374F1 . B8 01000000 mov eax, 1
004374F6 . 8945 E4 mov [ebp-1C], eax
004374F9 > 66:3B85 18FFF>cmp ax, [ebp-E8]
00437500 . 0F8F AA000000 jg 004375B0
00437506 . 8D4D E8 lea ecx, [ebp-18]
00437509 . 8D95 70FFFFFF lea edx, [ebp-90]
0043750F . 0FBFC0 movsx eax, ax
00437512 . 898D 58FFFFFF mov [ebp-A8], ecx
00437518 . 52 push edx
00437519 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
0043751F . 50 push eax
00437520 . 8D95 60FFFFFF lea edx, [ebp-A0]
00437526 . 51 push ecx
00437527 . 52 push edx
00437528 . C785 78FFFFFF>mov dword ptr [ebp-88], 1
00437532 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043753C . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437546 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043754C . 8D85 60FFFFFF lea eax, [ebp-A0]
00437552 . 8D4D 94 lea ecx, [ebp-6C]
00437555 . 50 push eax
00437556 . 51 push ecx
00437557 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
0043755D . 50 push eax
0043755E . FFD7 call edi
00437560 . 66:6BC0 63 imul ax, ax, 63
00437564 . 0F80 E00D0000 jo 0043834A
0043756A . 0FBFD0 movsx edx, ax
0043756D . 8B45 B8 mov eax, [ebp-48]
00437570 . 8D4D 94 lea ecx, [ebp-6C]
00437573 . 03D0 add edx, eax
00437575 . 0F80 CF0D0000 jo 0043834A
0043757B . 8955 B8 mov [ebp-48], edx
0043757E . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00437584 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043758A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437590 . 50 push eax
00437591 . 51 push ecx
00437592 . 6A 02 push 2
00437594 . FFD3 call ebx
00437596 . B8 01000000 mov eax, 1
0043759B . 83C4 0C add esp, 0C
0043759E . 66:0345 E4 add ax, [ebp-1C]
004375A2 . 0F80 A20D0000 jo 0043834A
004375A8 . 8945 E4 mov [ebp-1C], eax
004375AB .^ E9 49FFFFFF jmp 004374F9
004375B0 > 8D85 50FFFFFF lea eax, [ebp-B0]
004375B6 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004375BC . 8D55 E8 lea edx, [ebp-18]
004375BF . 50 push eax
004375C0 . 51 push ecx
004375C1 . 8995 58FFFFFF mov [ebp-A8], edx
004375C7 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004375D1 . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
004375D7 . 8D95 70FFFFFF lea edx, [ebp-90]
004375DD . 52 push edx
004375DE . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004375E4 . 8BD0 mov edx, eax
004375E6 . 8D4D E8 lea ecx, [ebp-18]
004375E9 . FFD6 call esi
004375EB . 8D8D 70FFFFFF lea ecx, [ebp-90]
004375F1 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004375F7 . 8B45 E8 mov eax, [ebp-18]
004375FA . 50 push eax
004375FB . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437601 . 8BC8 mov ecx, eax
00437603 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437609 . 8985 10FFFFFF mov [ebp-F0], eax
0043760F . B8 01000000 mov eax, 1
00437614 . 8945 E4 mov [ebp-1C], eax
00437617 > 66:3B85 10FFF>cmp ax, [ebp-F0]
0043761E . 0F8F AA000000 jg 004376CE
00437624 . 8D4D E8 lea ecx, [ebp-18]
00437627 . 8D95 70FFFFFF lea edx, [ebp-90]
0043762D . 0FBFC0 movsx eax, ax
00437630 . 898D 58FFFFFF mov [ebp-A8], ecx
00437636 . 52 push edx
00437637 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
0043763D . 50 push eax
0043763E . 8D95 60FFFFFF lea edx, [ebp-A0]
00437644 . 51 push ecx
00437645 . 52 push edx
00437646 . C785 78FFFFFF>mov dword ptr [ebp-88], 5
00437650 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043765A . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437664 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043766A . 8D85 60FFFFFF lea eax, [ebp-A0]
00437670 . 8D4D 94 lea ecx, [ebp-6C]
00437673 . 50 push eax
00437674 . 51 push ecx
00437675 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
0043767B . 50 push eax
0043767C . FFD7 call edi
0043767E . 66:6BC0 24 imul ax, ax, 24
00437682 . 0F80 C20C0000 jo 0043834A
00437688 . 0FBFD0 movsx edx, ax
0043768B . 8B45 B0 mov eax, [ebp-50]
0043768E . 8D4D 94 lea ecx, [ebp-6C]
00437691 . 03D0 add edx, eax
00437693 . 0F80 B10C0000 jo 0043834A
00437699 . 8955 B0 mov [ebp-50], edx
0043769C . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004376A2 . 8D85 60FFFFFF lea eax, [ebp-A0]
004376A8 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004376AE . 50 push eax
004376AF . 51 push ecx
004376B0 . 6A 02 push 2
004376B2 . FFD3 call ebx
004376B4 . B8 01000000 mov eax, 1
004376B9 . 83C4 0C add esp, 0C
004376BC . 66:0345 E4 add ax, [ebp-1C]
004376C0 . 0F80 840C0000 jo 0043834A
004376C6 . 8945 E4 mov [ebp-1C], eax
004376C9 .^ E9 49FFFFFF jmp 00437617
004376CE > 8D85 50FFFFFF lea eax, [ebp-B0]
004376D4 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004376DA . 8D55 E8 lea edx, [ebp-18]
004376DD . 50 push eax
004376DE . 51 push ecx
004376DF . 8995 58FFFFFF mov [ebp-A8], edx
004376E5 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004376EF . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
004376F5 . 8D95 70FFFFFF lea edx, [ebp-90]
004376FB . 52 push edx
004376FC . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437702 . 8BD0 mov edx, eax
00437704 . 8D4D E8 lea ecx, [ebp-18]
00437707 . FFD6 call esi
00437709 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043770F . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437715 . 8B45 E8 mov eax, [ebp-18]
00437718 . 50 push eax
00437719 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043771F . 8BC8 mov ecx, eax
00437721 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437727 . 8985 08FFFFFF mov [ebp-F8], eax
0043772D . B8 01000000 mov eax, 1
00437732 . 8945 E4 mov [ebp-1C], eax
00437735 > 66:3B85 08FFF>cmp ax, [ebp-F8]
0043773C . 0F8F AA000000 jg 004377EC
00437742 . 8D4D E8 lea ecx, [ebp-18]
00437745 . 8D95 70FFFFFF lea edx, [ebp-90]
0043774B . 0FBFC0 movsx eax, ax
0043774E . 898D 58FFFFFF mov [ebp-A8], ecx
00437754 . 52 push edx
00437755 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
0043775B . 50 push eax
0043775C . 8D95 60FFFFFF lea edx, [ebp-A0]
00437762 . 51 push ecx
00437763 . 52 push edx
00437764 . C785 78FFFFFF>mov dword ptr [ebp-88], 1
0043776E . C785 70FFFFFF>mov dword ptr [ebp-90], 2
00437778 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437782 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
00437788 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043778E . 8D4D 94 lea ecx, [ebp-6C]
00437791 . 50 push eax
00437792 . 51 push ecx
00437793 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00437799 . 50 push eax
0043779A . FFD7 call edi
0043779C . 66:6BC0 1C imul ax, ax, 1C
004377A0 . 0F80 A40B0000 jo 0043834A
004377A6 . 0FBFD0 movsx edx, ax
004377A9 . 8B45 A4 mov eax, [ebp-5C]
004377AC . 8D4D 94 lea ecx, [ebp-6C]
004377AF . 03D0 add edx, eax
004377B1 . 0F80 930B0000 jo 0043834A
004377B7 . 8955 A4 mov [ebp-5C], edx
004377BA . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004377C0 . 8D85 60FFFFFF lea eax, [ebp-A0]
004377C6 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004377CC . 50 push eax
004377CD . 51 push ecx
004377CE . 6A 02 push 2
004377D0 . FFD3 call ebx
004377D2 . B8 01000000 mov eax, 1
004377D7 . 83C4 0C add esp, 0C
004377DA . 66:0345 E4 add ax, [ebp-1C]
004377DE . 0F80 660B0000 jo 0043834A
004377E4 . 8945 E4 mov [ebp-1C], eax
004377E7 .^ E9 49FFFFFF jmp 00437735
004377EC > 8D85 50FFFFFF lea eax, [ebp-B0]
004377F2 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004377F8 . 8D55 E8 lea edx, [ebp-18]
004377FB . 50 push eax
004377FC . 51 push ecx
004377FD . 8995 58FFFFFF mov [ebp-A8], edx
00437803 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043780D . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
00437813 . 8D95 70FFFFFF lea edx, [ebp-90]
00437819 . 52 push edx
0043781A . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437820 . 8BD0 mov edx, eax
00437822 . 8D4D E8 lea ecx, [ebp-18]
00437825 . FFD6 call esi
00437827 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043782D . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437833 . 8B45 E8 mov eax, [ebp-18]
00437836 . 50 push eax
00437837 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043783D . 8BC8 mov ecx, eax
0043783F . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437845 . 8985 00FFFFFF mov [ebp-100], eax
0043784B . B8 01000000 mov eax, 1
00437850 . 8945 E4 mov [ebp-1C], eax
00437853 > 66:3B85 00FFF>cmp ax, [ebp-100]
0043785A . 0F8F AA000000 jg 0043790A
00437860 . 8D4D E8 lea ecx, [ebp-18]
00437863 . 8D95 70FFFFFF lea edx, [ebp-90]
00437869 . 0FBFC0 movsx eax, ax
0043786C . 898D 58FFFFFF mov [ebp-A8], ecx
00437872 . 52 push edx
00437873 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437879 . 50 push eax
0043787A . 8D95 60FFFFFF lea edx, [ebp-A0]
00437880 . 51 push ecx
00437881 . 52 push edx
00437882 . C785 78FFFFFF>mov dword ptr [ebp-88], 5
0043788C . C785 70FFFFFF>mov dword ptr [ebp-90], 2
00437896 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004378A0 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
004378A6 . 8D85 60FFFFFF lea eax, [ebp-A0]
004378AC . 8D4D 94 lea ecx, [ebp-6C]
004378AF . 50 push eax
004378B0 . 51 push ecx
004378B1 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
004378B7 . 50 push eax
004378B8 . FFD7 call edi
004378BA . 66:6BC0 4A imul ax, ax, 4A
004378BE . 0F80 860A0000 jo 0043834A
004378C4 . 0FBFD0 movsx edx, ax
004378C7 . 8B45 9C mov eax, [ebp-64]
004378CA . 8D4D 94 lea ecx, [ebp-6C]
004378CD . 03D0 add edx, eax
004378CF . 0F80 750A0000 jo 0043834A
004378D5 . 8955 9C mov [ebp-64], edx
004378D8 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004378DE . 8D85 60FFFFFF lea eax, [ebp-A0]
004378E4 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004378EA . 50 push eax
004378EB . 51 push ecx
004378EC . 6A 02 push 2
004378EE . FFD3 call ebx
004378F0 . B8 01000000 mov eax, 1
004378F5 . 83C4 0C add esp, 0C
004378F8 . 66:0345 E4 add ax, [ebp-1C]
004378FC . 0F80 480A0000 jo 0043834A
00437902 . 8945 E4 mov [ebp-1C], eax
00437905 .^ E9 49FFFFFF jmp 00437853
0043790A > 8B3D E4114000 mov edi, [<&MSVBVM60.rtcHexVarFromVa>; MSVBVM60.rtcHexVarFromVar
00437910 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437916 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043791C . 8D55 D8 lea edx, [ebp-28]
0043791F . 50 push eax
00437920 . 51 push ecx
00437921 . 8995 58FFFFFF mov [ebp-A8], edx
00437927 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437931 . FFD7 call edi ; <&MSVBVM60.rtcHexVarFromVar>
00437933 . 8D95 70FFFFFF lea edx, [ebp-90]
00437939 . 52 push edx
0043793A . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437940 . 8BD0 mov edx, eax
00437942 . 8D4D E0 lea ecx, [ebp-20]
00437945 . FFD6 call esi
00437947 . 8D85 70FFFFFF lea eax, [ebp-90]
0043794D . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437953 . 50 push eax
00437954 . 51 push ecx
00437955 . 6A 02 push 2
00437957 . FFD3 call ebx
00437959 . 83C4 0C add esp, 0C
0043795C . 8D85 50FFFFFF lea eax, [ebp-B0]
00437962 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437968 . 8D55 D0 lea edx, [ebp-30]
0043796B . 50 push eax
0043796C . 51 push ecx
0043796D . 8995 58FFFFFF mov [ebp-A8], edx
00437973 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
0043797D . FFD7 call edi
0043797F . 8D95 70FFFFFF lea edx, [ebp-90]
00437985 . 52 push edx
00437986 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
0043798C . 8BD0 mov edx, eax
0043798E . 8D4D DC lea ecx, [ebp-24]
00437991 . FFD6 call esi
00437993 . 8D85 70FFFFFF lea eax, [ebp-90]
00437999 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043799F . 50 push eax
004379A0 . 51 push ecx
004379A1 . 6A 02 push 2
004379A3 . FFD3 call ebx
004379A5 . 83C4 0C add esp, 0C
004379A8 . 8D85 50FFFFFF lea eax, [ebp-B0]
004379AE . 8D8D 70FFFFFF lea ecx, [ebp-90]
004379B4 . 8D55 C8 lea edx, [ebp-38]
004379B7 . 50 push eax
004379B8 . 51 push ecx
004379B9 . 8995 58FFFFFF mov [ebp-A8], edx
004379BF . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
004379C9 . FFD7 call edi
004379CB . 8D95 70FFFFFF lea edx, [ebp-90]
004379D1 . 52 push edx
004379D2 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
004379D8 . 8BD0 mov edx, eax
004379DA . 8D4D D4 lea ecx, [ebp-2C]
004379DD . FFD6 call esi
004379DF . 8D85 70FFFFFF lea eax, [ebp-90]
004379E5 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004379EB . 50 push eax
004379EC . 51 push ecx
004379ED . 6A 02 push 2
004379EF . FFD3 call ebx
004379F1 . 83C4 0C add esp, 0C
004379F4 . 8D85 50FFFFFF lea eax, [ebp-B0]
004379FA . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A00 . 8D55 C0 lea edx, [ebp-40]
00437A03 . 50 push eax
00437A04 . 51 push ecx
00437A05 . 8995 58FFFFFF mov [ebp-A8], edx
00437A0B . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437A15 . FFD7 call edi
00437A17 . 8D95 70FFFFFF lea edx, [ebp-90]
00437A1D . 52 push edx
00437A1E . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437A24 . 8BD0 mov edx, eax
00437A26 . 8D4D CC lea ecx, [ebp-34]
00437A29 . FFD6 call esi
00437A2B . 8D85 70FFFFFF lea eax, [ebp-90]
00437A31 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A37 . 50 push eax
00437A38 . 51 push ecx
00437A39 . 6A 02 push 2
00437A3B . FFD3 call ebx
00437A3D . 83C4 0C add esp, 0C
00437A40 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437A46 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A4C . 8D55 B8 lea edx, [ebp-48]
00437A4F . 50 push eax
00437A50 . 51 push ecx
00437A51 . 8995 58FFFFFF mov [ebp-A8], edx
00437A57 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437A61 . FFD7 call edi
00437A63 . 8D95 70FFFFFF lea edx, [ebp-90]
00437A69 . 52 push edx
00437A6A . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437A70 . 8BD0 mov edx, eax
00437A72 . 8D4D C4 lea ecx, [ebp-3C]
00437A75 . FFD6 call esi
00437A77 . 8D85 70FFFFFF lea eax, [ebp-90]
00437A7D . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A83 . 50 push eax
00437A84 . 51 push ecx
00437A85 . 6A 02 push 2
00437A87 . FFD3 call ebx
00437A89 . 83C4 0C add esp, 0C
00437A8C . 8D85 50FFFFFF lea eax, [ebp-B0]
00437A92 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A98 . 8D55 B0 lea edx, [ebp-50]
00437A9B . 50 push eax
00437A9C . 51 push ecx
00437A9D . 8995 58FFFFFF mov [ebp-A8], edx
00437AA3 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437AAD . FFD7 call edi
00437AAF . 8D95 70FFFFFF lea edx, [ebp-90]
00437AB5 . 52 push edx
00437AB6 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437ABC . 8BD0 mov edx, eax
00437ABE . 8D4D BC lea ecx, [ebp-44]
00437AC1 . FFD6 call esi
00437AC3 . 8D85 70FFFFFF lea eax, [ebp-90]
00437AC9 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437ACF . 50 push eax
00437AD0 . 51 push ecx
00437AD1 . 6A 02 push 2
00437AD3 . FFD3 call ebx
00437AD5 . 83C4 0C add esp, 0C
00437AD8 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437ADE . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437AE4 . 8D55 A4 lea edx, [ebp-5C]
00437AE7 . 50 push eax
00437AE8 . 51 push ecx
00437AE9 . 8995 58FFFFFF mov [ebp-A8], edx
00437AEF . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437AF9 . FFD7 call edi
00437AFB . 8D95 70FFFFFF lea edx, [ebp-90]
00437B01 . 52 push edx
00437B02 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437B08 . 8BD0 mov edx, eax
00437B0A . 8D4D B4 lea ecx, [ebp-4C]
00437B0D . FFD6 call esi
00437B0F . 8D85 70FFFFFF lea eax, [ebp-90]
00437B15 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437B1B . 50 push eax
00437B1C . 51 push ecx
00437B1D . 6A 02 push 2
00437B1F . FFD3 call ebx
00437B21 . 83C4 0C add esp, 0C
00437B24 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437B2A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437B30 . 8D55 9C lea edx, [ebp-64]
00437B33 . 50 push eax
00437B34 . 51 push ecx
00437B35 . 8995 58FFFFFF mov [ebp-A8], edx
00437B3B . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437B45 . FFD7 call edi
00437B47 . 8D95 70FFFFFF lea edx, [ebp-90]
00437B4D . 52 push edx
00437B4E . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437B54 . 8BD0 mov edx, eax
00437B56 . 8D4D A8 lea ecx, [ebp-58]
00437B59 . FFD6 call esi
00437B5B . 8D85 70FFFFFF lea eax, [ebp-90]
00437B61 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437B67 . 50 push eax
00437B68 . 51 push ecx
00437B69 . 6A 02 push 2
00437B6B . FFD3 call ebx
00437B6D . 8B55 E0 mov edx, [ebp-20]
00437B70 . 83C4 0C add esp, 0C
00437B73 . 52 push edx
00437B74 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437B7A . 83F8 05 cmp eax, 5
00437B7D . 7E 4D jle short 00437BCC
00437B7F . 8B3D 34124000 mov edi, [<&MSVBVM60.rtcLeftCharVar>>; MSVBVM60.rtcLeftCharVar
00437B85 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437B8B . 6A 05 push 5
00437B8D . 8D95 70FFFFFF lea edx, [ebp-90]
00437B93 . 8D45 E0 lea eax, [ebp-20]
00437B96 . 51 push ecx
00437B97 . 52 push edx
00437B98 . 8985 58FFFFFF mov [ebp-A8], eax
00437B9E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437BA8 . FFD7 call edi ; <&MSVBVM60.rtcLeftCharVar>
00437BAA . 8D85 70FFFFFF lea eax, [ebp-90]
00437BB0 . 50 push eax
00437BB1 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437BB7 . 8BD0 mov edx, eax
00437BB9 . 8D4D E0 lea ecx, [ebp-20]
00437BBC . FFD6 call esi
00437BBE . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437BC4 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437BCA . EB 06 jmp short 00437BD2
00437BCC > 8B3D 34124000 mov edi, [<&MSVBVM60.rtcLeftCharVar>>; MSVBVM60.rtcLeftCharVar
00437BD2 > 8B4D DC mov ecx, [ebp-24]
00437BD5 . 51 push ecx
00437BD6 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437BDC . 83F8 06 cmp eax, 6
00437BDF . 7E 45 jle short 00437C26
00437BE1 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437BE7 . 6A 06 push 6
00437BE9 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437BEF . 8D55 DC lea edx, [ebp-24]
00437BF2 . 50 push eax
00437BF3 . 51 push ecx
00437BF4 . 8995 58FFFFFF mov [ebp-A8], edx
00437BFA . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437C04 . FFD7 call edi
00437C06 . 8D95 70FFFFFF lea edx, [ebp-90]
00437C0C . 52 push edx
00437C0D . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437C13 . 8BD0 mov edx, eax
00437C15 . 8D4D DC lea ecx, [ebp-24]
00437C18 . FFD6 call esi
00437C1A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437C20 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437C26 > 8B45 D4 mov eax, [ebp-2C]
00437C29 . 50 push eax
00437C2A . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437C30 . 83F8 04 cmp eax, 4
00437C33 . 7E 45 jle short 00437C7A
00437C35 . 8D95 50FFFFFF lea edx, [ebp-B0]
00437C3B . 6A 04 push 4
00437C3D . 8D85 70FFFFFF lea eax, [ebp-90]
00437C43 . 8D4D D4 lea ecx, [ebp-2C]
00437C46 . 52 push edx
00437C47 . 50 push eax
00437C48 . 898D 58FFFFFF mov [ebp-A8], ecx
00437C4E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437C58 . FFD7 call edi
00437C5A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437C60 . 51 push ecx
00437C61 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437C67 . 8BD0 mov edx, eax
00437C69 . 8D4D D4 lea ecx, [ebp-2C]
00437C6C . FFD6 call esi
00437C6E . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437C74 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437C7A > 8B55 CC mov edx, [ebp-34]
00437C7D . 52 push edx
00437C7E . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437C84 . 83F8 04 cmp eax, 4
00437C87 . 7E 45 jle short 00437CCE
00437C89 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437C8F . 6A 04 push 4
00437C91 . 8D95 70FFFFFF lea edx, [ebp-90]
00437C97 . 8D45 CC lea eax, [ebp-34]
00437C9A . 51 push ecx
00437C9B . 52 push edx
00437C9C . 8985 58FFFFFF mov [ebp-A8], eax
00437CA2 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437CAC . FFD7 call edi
00437CAE . 8D85 70FFFFFF lea eax, [ebp-90]
00437CB4 . 50 push eax
00437CB5 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437CBB . 8BD0 mov edx, eax
00437CBD . 8D4D CC lea ecx, [ebp-34]
00437CC0 . FFD6 call esi
00437CC2 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437CC8 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437CCE > 8B4D C4 mov ecx, [ebp-3C]
00437CD1 . 51 push ecx
00437CD2 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437CD8 . 83F8 05 cmp eax, 5
00437CDB . 7E 45 jle short 00437D22
00437CDD . 8D85 50FFFFFF lea eax, [ebp-B0]
00437CE3 . 6A 05 push 5
00437CE5 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437CEB . 8D55 C4 lea edx, [ebp-3C]
00437CEE . 50 push eax
00437CEF . 51 push ecx
00437CF0 . 8995 58FFFFFF mov [ebp-A8], edx
00437CF6 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437D00 . FFD7 call edi
00437D02 . 8D95 70FFFFFF lea edx, [ebp-90]
00437D08 . 52 push edx
00437D09 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437D0F . 8BD0 mov edx, eax
00437D11 . 8D4D C4 lea ecx, [ebp-3C]
00437D14 . FFD6 call esi
00437D16 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437D1C . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437D22 > 8B45 BC mov eax, [ebp-44]
00437D25 . 50 push eax
00437D26 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437D2C . 83F8 04 cmp eax, 4
00437D2F . 7E 45 jle short 00437D76
00437D31 . 8D95 50FFFFFF lea edx, [ebp-B0]
00437D37 . 6A 04 push 4
00437D39 . 8D85 70FFFFFF lea eax, [ebp-90]
00437D3F . 8D4D BC lea ecx, [ebp-44]
00437D42 . 52 push edx
00437D43 . 50 push eax
00437D44 . 898D 58FFFFFF mov [ebp-A8], ecx
00437D4A . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437D54 . FFD7 call edi
00437D56 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437D5C . 51 push ecx
00437D5D . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437D63 . 8BD0 mov edx, eax
00437D65 . 8D4D BC lea ecx, [ebp-44]
00437D68 . FFD6 call esi
00437D6A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437D70 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437D76 > 8B55 C4 mov edx, [ebp-3C]
00437D79 . 52 push edx
00437D7A . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437D80 . 83F8 05 cmp eax, 5
00437D83 . 7E 45 jle short 00437DCA
00437D85 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437D8B . 6A 05 push 5
00437D8D . 8D95 70FFFFFF lea edx, [ebp-90]
00437D93 . 8D45 C4 lea eax, [ebp-3C]
00437D96 . 51 push ecx
00437D97 . 52 push edx
00437D98 . 8985 58FFFFFF mov [ebp-A8], eax
00437D9E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437DA8 . FFD7 call edi
00437DAA . 8D85 70FFFFFF lea eax, [ebp-90]
00437DB0 . 50 push eax
00437DB1 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437DB7 . 8BD0 mov edx, eax
00437DB9 . 8D4D C4 lea ecx, [ebp-3C]
00437DBC . FFD6 call esi
00437DBE . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437DC4 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437DCA > 8B4D BC mov ecx, [ebp-44]
00437DCD . 51 push ecx
00437DCE . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437DD4 . 83F8 04 cmp eax, 4
00437DD7 . 7E 45 jle short 00437E1E
00437DD9 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437DDF . 6A 04 push 4
00437DE1 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437DE7 . 8D55 BC lea edx, [ebp-44]
00437DEA . 50 push eax
00437DEB . 51 push ecx
00437DEC . 8995 58FFFFFF mov [ebp-A8], edx
00437DF2 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437DFC . FFD7 call edi
00437DFE . 8D95 70FFFFFF lea edx, [ebp-90]
00437E04 . 52 push edx
00437E05 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437E0B . 8BD0 mov edx, eax
00437E0D . 8D4D BC lea ecx, [ebp-44]
00437E10 . FFD6 call esi
00437E12 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437E18 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437E1E > 8B45 E0 mov eax, [ebp-20]
00437E21 . 8B4D DC mov ecx, [ebp-24]
00437E24 . 8B3D 68104000 mov edi, [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
00437E2A . 50 push eax
00437E2B . 51 push ecx
00437E2C . FFD7 call edi ; <&MSVBVM60.__vbaStrCat>
00437E2E . 8BD0 mov edx, eax
00437E30 . 8D4D 94 lea ecx, [ebp-6C]
00437E33 . FFD6 call esi
00437E35 . 8B55 D4 mov edx, [ebp-2C]
00437E38 . 50 push eax
00437E39 . 52 push edx
00437E3A . FFD7 call edi
00437E3C . 8BD0 mov edx, eax
00437E3E . 8D4D 90 lea ecx, [ebp-70]
00437E41 . FFD6 call esi
00437E43 . 50 push eax
00437E44 . 8B45 CC mov eax, [ebp-34]
00437E47 . 50 push eax
00437E48 . FFD7 call edi
00437E4A . 8BD0 mov edx, eax
00437E4C . 8D4D 8C lea ecx, [ebp-74]
00437E4F . FFD6 call esi
00437E51 . 8B4D C4 mov ecx, [ebp-3C]
00437E54 . 50 push eax
00437E55 . 51 push ecx
00437E56 . FFD7 call edi
00437E58 . 8BD0 mov edx, eax
00437E5A . 8D4D 88 lea ecx, [ebp-78]
00437E5D . FFD6 call esi
00437E5F . 8B55 BC mov edx, [ebp-44]
00437E62 . 50 push eax
00437E63 . 52 push edx
00437E64 . FFD7 call edi
00437E66 . 8BD0 mov edx, eax
00437E68 . 8D4D 84 lea ecx, [ebp-7C]
00437E6B . FFD6 call esi
00437E6D . 50 push eax
00437E6E . 8B45 B4 mov eax, [ebp-4C]
00437E71 . 50 push eax
00437E72 . FFD7 call edi
00437E74 . 8BD0 mov edx, eax
00437E76 . 8D4D 80 lea ecx, [ebp-80]
00437E79 . FFD6 call esi
00437E7B . 8B4D A8 mov ecx, [ebp-58]
00437E7E . 50 push eax
00437E7F . 51 push ecx
00437E80 . FFD7 call edi
00437E82 . 8BD0 mov edx, eax
00437E84 . 8D4D A0 lea ecx, [ebp-60]
00437E87 . FFD6 call esi
00437E89 . 8D55 80 lea edx, [ebp-80]
00437E8C . 8D45 84 lea eax, [ebp-7C]
00437E8F . 52 push edx
00437E90 . 8D4D 88 lea ecx, [ebp-78]
00437E93 . 50 push eax
00437E94 . 8D55 8C lea edx, [ebp-74]
00437E97 . 51 push ecx
00437E98 . 8D45 90 lea eax, [ebp-70]
00437E9B . 52 push edx
00437E9C . 8D4D 94 lea ecx, [ebp-6C]
00437E9F . 50 push eax
00437EA0 . 51 push ecx
00437EA1 . 6A 06 push 6
00437EA3 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00437EA9 . 83C4 1C add esp, 1C
00437EAC . 8D55 A0 lea edx, [ebp-60]
00437EAF . 8D45 A0 lea eax, [ebp-60]
00437EB2 . 52 push edx
00437EB3 . 50 push eax
00437EB4 . E8 47EFFFFF call 00436E00
00437EB9 . 8BD0 mov edx, eax
00437EBB . 8D4D A0 lea ecx, [ebp-60]
00437EBE . FFD6 call esi
00437EC0 . 8D4D A0 lea ecx, [ebp-60]
00437EC3 . 8D95 70FFFFFF lea edx, [ebp-90]
00437EC9 . C785 78FFFFFF>mov dword ptr [ebp-88], 0E
00437ED3 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
00437EDD . 898D 58FFFFFF mov [ebp-A8], ecx
00437EE3 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437EED . 52 push edx
00437EEE . 8D85 50FFFFFF lea eax, [ebp-B0]
00437EF4 . 6A 08 push 8
00437EF6 . 8D8D 60FFFFFF lea ecx, [ebp-A0]
00437EFC . 50 push eax
00437EFD . 51 push ecx
00437EFE . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
00437F04 . 8D95 60FFFFFF lea edx, [ebp-A0]
00437F0A . 52 push edx
00437F0B . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437F11 . 8BD0 mov edx, eax
00437F13 . 8D4D A0 lea ecx, [ebp-60]
00437F16 . FFD6 call esi
00437F18 . 8D85 60FFFFFF lea eax, [ebp-A0]
00437F1E . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437F24 . 50 push eax
00437F25 . 51 push ecx
00437F26 . 6A 02 push 2
00437F28 . FFD3 call ebx
00437F2A . 83C4 0C add esp, 0C
00437F2D . 8D55 A0 lea edx, [ebp-60]
00437F30 . 8D45 A0 lea eax, [ebp-60]
00437F33 . 52 push edx
00437F34 . 50 push eax
00437F35 . E8 C6EEFFFF call 00436E00
00437F3A . 8BD0 mov edx, eax
00437F3C . 8D4D 98 lea ecx, [ebp-68]
00437F3F . FFD6 call esi
00437F41 . 8B4D 98 mov ecx, [ebp-68]
00437F44 . 8B3D 68114000 mov edi, [<&MSVBVM60.rtcReplace>] ; MSVBVM60.rtcReplace
00437F4A . 6A 00 push 0
00437F4C . 6A FF push -1
00437F4E . 6A 01 push 1
00437F50 . 68 B01A4100 push 00411AB0
00437F55 . 68 A81A4100 push 00411AA8
00437F5A . 51 push ecx
00437F5B . FFD7 call edi ; <&MSVBVM60.rtcReplace>
00437F5D . 8BD0 mov edx, eax
00437F5F . 8D4D 98 lea ecx, [ebp-68]
00437F62 . FFD6 call esi
00437F64 . 8B55 98 mov edx, [ebp-68]
00437F67 . 6A 00 push 0
00437F69 . 6A FF push -1
00437F6B . 6A 01 push 1
00437F6D . 68 C01A4100 push 00411AC0
00437F72 . 68 B81A4100 push 00411AB8
00437F77 . 52 push edx
00437F78 . FFD7 call edi
00437F7A . 8BD0 mov edx, eax
00437F7C . 8D4D 98 lea ecx, [ebp-68]
00437F7F . FFD6 call esi
00437F81 . 8B45 98 mov eax, [ebp-68]
00437F84 . 6A 00 push 0
00437F86 . 6A FF push -1
00437F88 . 6A 01 push 1
00437F8A . 68 B01A4100 push 00411AB0
00437F8F . 68 C81A4100 push 00411AC8
00437F94 . 50 push eax
00437F95 . FFD7 call edi
00437F97 . 8BD0 mov edx, eax
00437F99 . 8D4D 98 lea ecx, [ebp-68]
00437F9C . FFD6 call esi
00437F9E . 8B4D 98 mov ecx, [ebp-68]
00437FA1 . 6A 00 push 0
00437FA3 . 6A FF push -1
00437FA5 . 6A 01 push 1
00437FA7 . 68 D81A4100 push 00411AD8
00437FAC . 68 D01A4100 push 00411AD0
00437FB1 . 51 push ecx
00437FB2 . FFD7 call edi
00437FB4 . 8BD0 mov edx, eax
00437FB6 . 8D4D 98 lea ecx, [ebp-68]
00437FB9 . FFD6 call esi
00437FBB . 8B55 98 mov edx, [ebp-68]
00437FBE . 6A 00 push 0
00437FC0 . 6A FF push -1
00437FC2 . 6A 01 push 1
00437FC4 . 68 E81A4100 push 00411AE8
00437FC9 . 68 E01A4100 push 00411AE0
00437FCE . 52 push edx
00437FCF . FFD7 call edi
00437FD1 . 8BD0 mov edx, eax
00437FD3 . 8D4D 98 lea ecx, [ebp-68]
00437FD6 . FFD6 call esi
00437FD8 . 8B45 98 mov eax, [ebp-68]
00437FDB . 6A 00 push 0
00437FDD . 6A FF push -1
00437FDF . 6A 01 push 1
00437FE1 . 68 20064100 push 00410620
00437FE6 . 68 F01A4100 push 00411AF0
00437FEB . 50 push eax
00437FEC . FFD7 call edi
00437FEE . 8BD0 mov edx, eax
00437FF0 . 8D4D 98 lea ecx, [ebp-68]
00437FF3 . FFD6 call esi
00437FF5 . 8B4D 98 mov ecx, [ebp-68]
00437FF8 . 6A 00 push 0
00437FFA . 6A FF push -1
00437FFC . 6A 01 push 1
00437FFE . 68 001B4100 push 00411B00
00438003 . 68 F81A4100 push 00411AF8
00438008 . 51 push ecx
00438009 . FFD7 call edi
0043800B . 8BD0 mov edx, eax
0043800D . 8D4D 98 lea ecx, [ebp-68]
00438010 . FFD6 call esi
00438012 . 8B55 98 mov edx, [ebp-68]
00438015 . 6A 00 push 0
00438017 . 6A FF push -1
00438019 . 6A 01 push 1
0043801B . 68 001B4100 push 00411B00
00438020 . 68 081B4100 push 00411B08
00438025 . 52 push edx
00438026 . FFD7 call edi
00438028 . 8BD0 mov edx, eax
0043802A . 8D4D 98 lea ecx, [ebp-68]
0043802D . FFD6 call esi
0043802F . 8B45 98 mov eax, [ebp-68]
00438032 . 6A 00 push 0
00438034 . 6A FF push -1
00438036 . 6A 01 push 1
00438038 . 68 181B4100 push 00411B18
0043803D . 68 101B4100 push 00411B10
00438042 . 50 push eax
00438043 . FFD7 call edi
00438045 . 8BD0 mov edx, eax
00438047 . 8D4D 98 lea ecx, [ebp-68]
0043804A . FFD6 call esi
0043804C . 8B4D 98 mov ecx, [ebp-68]
0043804F . 6A 00 push 0
00438051 . 6A FF push -1
00438053 . 6A 01 push 1
00438055 . 68 E81A4100 push 00411AE8
0043805A . 68 201B4100 push 00411B20
0043805F . 51 push ecx
00438060 . FFD7 call edi
00438062 . 8BD0 mov edx, eax
00438064 . 8D4D 98 lea ecx, [ebp-68]
00438067 . FFD6 call esi
00438069 . 8B55 98 mov edx, [ebp-68]
0043806C . 6A 00 push 0
0043806E . 6A FF push -1
00438070 . 6A 01 push 1
00438072 . 68 301B4100 push 00411B30
00438077 . 68 281B4100 push 00411B28
0043807C . 52 push edx
0043807D . FFD7 call edi
0043807F . 8BD0 mov edx, eax
00438081 . 8D4D 98 lea ecx, [ebp-68]
00438084 . FFD6 call esi
00438086 . 8B45 98 mov eax, [ebp-68]
00438089 . 6A 00 push 0
0043808B . 6A FF push -1
0043808D . 6A 01 push 1
0043808F . 68 401B4100 push 00411B40
00438094 . 68 381B4100 push 00411B38
00438099 . 50 push eax
0043809A . FFD7 call edi
0043809C . 8BD0 mov edx, eax
0043809E . 8D4D 98 lea ecx, [ebp-68]
004380A1 . FFD6 call esi
004380A3 . 6A 00 push 0
004380A5 . 6A FF push -1
004380A7 . 8B4D 98 mov ecx, [ebp-68]
004380AA . 6A 01 push 1
004380AC . 68 501B4100 push 00411B50
004380B1 . 68 481B4100 push 00411B48
004380B6 . 51 push ecx
004380B7 . FFD7 call edi
004380B9 . 8BD0 mov edx, eax
004380BB . 8D4D 98 lea ecx, [ebp-68]
004380BE . FFD6 call esi
004380C0 . 8B55 98 mov edx, [ebp-68]
004380C3 . 6A 00 push 0
004380C5 . 6A FF push -1
004380C7 . 6A 01 push 1
004380C9 . 68 C01A4100 push 00411AC0
004380CE . 68 581B4100 push 00411B58
004380D3 . 52 push edx
004380D4 . FFD7 call edi
004380D6 . 8BD0 mov edx, eax
004380D8 . 8D4D 98 lea ecx, [ebp-68]
004380DB . FFD6 call esi
004380DD . 8B45 98 mov eax, [ebp-68]
004380E0 . 6A 00 push 0
004380E2 . 6A FF push -1
004380E4 . 6A 01 push 1
004380E6 . 68 301B4100 push 00411B30
004380EB . 68 601B4100 push 00411B60
004380F0 . 50 push eax
004380F1 . FFD7 call edi
004380F3 . 8BD0 mov edx, eax
004380F5 . 8D4D 98 lea ecx, [ebp-68]
004380F8 . FFD6 call esi
004380FA . 8B4D 98 mov ecx, [ebp-68]
004380FD . 6A 00 push 0
004380FF . 6A FF push -1
00438101 . 6A 01 push 1
00438103 . 68 E81A4100 push 00411AE8
00438108 . 68 681B4100 push 00411B68
0043810D . 51 push ecx
0043810E . FFD7 call edi
00438110 . 8BD0 mov edx, eax
00438112 . 8D4D 98 lea ecx, [ebp-68]
00438115 . FFD6 call esi
00438117 . 8B55 98 mov edx, [ebp-68]
0043811A . 6A 00 push 0
0043811C . 6A FF push -1
0043811E . 6A 01 push 1
00438120 . 68 20064100 push 00410620
00438125 . 68 701B4100 push 00411B70
0043812A . 52 push edx
0043812B . FFD7 call edi
0043812D . 8BD0 mov edx, eax
0043812F . 8D4D 98 lea ecx, [ebp-68]
00438132 . FFD6 call esi
00438134 . 8B45 98 mov eax, [ebp-68]
00438137 . 6A 00 push 0
00438139 . 6A FF push -1
0043813B . 6A 01 push 1
0043813D . 68 D81A4100 push 00411AD8
00438142 . 68 781B4100 push 00411B78
00438147 . 50 push eax
00438148 . FFD7 call edi
0043814A . 8BD0 mov edx, eax
0043814C . 8D4D 98 lea ecx, [ebp-68]
0043814F . FFD6 call esi
00438151 . 8B4D 98 mov ecx, [ebp-68]
00438154 . 6A 00 push 0
00438156 . 6A FF push -1
00438158 . 6A 01 push 1
0043815A . 68 C01A4100 push 00411AC0
0043815F . 68 801B4100 push 00411B80
00438164 . 51 push ecx
00438165 . FFD7 call edi
00438167 . 8BD0 mov edx, eax
00438169 . 8D4D 98 lea ecx, [ebp-68]
0043816C . FFD6 call esi
0043816E . 8B55 98 mov edx, [ebp-68]
00438171 . 6A 00 push 0
00438173 . 6A FF push -1
00438175 . 6A 01 push 1
00438177 . 68 B01A4100 push 00411AB0
0043817C . 68 881B4100 push 00411B88
00438181 . 52 push edx
00438182 . FFD7 call edi
00438184 . 8BD0 mov edx, eax
00438186 . 8D4D 98 lea ecx, [ebp-68]
00438189 . FFD6 call esi
0043818B . 8B45 98 mov eax, [ebp-68]
0043818E . 6A 00 push 0
00438190 . 6A FF push -1
00438192 . 6A 01 push 1
00438194 . 68 001B4100 push 00411B00
00438199 . 68 901B4100 push 00411B90
0043819E . 50 push eax
0043819F . FFD7 call edi
004381A1 . 8BD0 mov edx, eax
004381A3 . 8D4D 98 lea ecx, [ebp-68]
004381A6 . FFD6 call esi
004381A8 . 8B4D 98 mov ecx, [ebp-68]
004381AB . 6A 00 push 0
004381AD . 6A FF push -1
004381AF . 6A 01 push 1
004381B1 . 68 C01A4100 push 00411AC0
004381B6 . 68 981B4100 push 00411B98
004381BB . 51 push ecx
004381BC . FFD7 call edi
004381BE . 8BD0 mov edx, eax
004381C0 . 8D4D 98 lea ecx, [ebp-68]
004381C3 . FFD6 call esi
004381C5 . 8B55 98 mov edx, [ebp-68]
004381C8 . 6A 00 push 0
004381CA . 6A FF push -1
004381CC . 6A 01 push 1
004381CE . 68 B01A4100 push 00411AB0
004381D3 . 68 A01B4100 push 00411BA0
004381D8 . 52 push edx
004381D9 . FFD7 call edi
004381DB . 8BD0 mov edx, eax
004381DD . 8D4D 98 lea ecx, [ebp-68]
004381E0 . FFD6 call esi
004381E2 . 8B45 98 mov eax, [ebp-68]
004381E5 . 6A 00 push 0
004381E7 . 6A FF push -1
004381E9 . 6A 01 push 1
004381EB . 68 C01A4100 push 00411AC0
004381F0 . 68 A81B4100 push 00411BA8
004381F5 . 50 push eax
004381F6 . FFD7 call edi
004381F8 . 8BD0 mov edx, eax
004381FA . 8D4D 98 lea ecx, [ebp-68]
004381FD . FFD6 call esi
004381FF . 8B4D 98 mov ecx, [ebp-68]
00438202 . 6A 00 push 0
00438204 . 6A FF push -1
00438206 . 6A 01 push 1
00438208 . 68 301B4100 push 00411B30
0043820D . 68 841A4100 push 00411A84
00438212 . 51 push ecx
00438213 . FFD7 call edi
00438215 . 8BD0 mov edx, eax
00438217 . 8D4D 98 lea ecx, [ebp-68]
0043821A . FFD6 call esi
0043821C . 8B55 98 mov edx, [ebp-68]
0043821F . 6A 00 push 0
00438221 . 6A FF push -1
00438223 . 6A 01 push 1
00438225 . 68 401B4100 push 00411B40
0043822A . 68 8C1A4100 push 00411A8C
0043822F . 52 push edx
00438230 . FFD7 call edi
00438232 . 8BD0 mov edx, eax
00438234 . 8D4D 98 lea ecx, [ebp-68]
00438237 . FFD6 call esi
00438239 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043823F . 8D45 98 lea eax, [ebp-68]
00438242 . 51 push ecx
00438243 . 8D95 50FFFFFF lea edx, [ebp-B0]
00438249 . 6A 10 push 10
0043824B . C785 78FFFFFF>mov dword ptr [ebp-88], 0E
00438255 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043825F . 8985 58FFFFFF mov [ebp-A8], eax
00438265 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043826F . 52 push edx
00438270 . 8D85 60FFFFFF lea eax, [ebp-A0]
00438276 . 50 push eax
00438277 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043827D . 8D8D 60FFFFFF lea ecx, [ebp-A0]
00438283 . 51 push ecx
00438284 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
0043828A . 8BD0 mov edx, eax
0043828C . 8D4D AC lea ecx, [ebp-54]
0043828F . FFD6 call esi
00438291 . 8D95 60FFFFFF lea edx, [ebp-A0]
00438297 . 8D85 70FFFFFF lea eax, [ebp-90]
0043829D . 52 push edx
0043829E . 50 push eax
0043829F . 6A 02 push 2
004382A1 . FFD3 call ebx
004382A3 . 83C4 0C add esp, 0C
004382A6 . 68 34834300 push 00438334
004382AB . EB 49 jmp short 004382F6
004382AD . F645 FC 04 test byte ptr [ebp-4], 4
004382B1 . 74 09 je short 004382BC
004382B3 . 8D4D AC lea ecx, [ebp-54]
004382B6 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004382BC > 8D4D 80 lea ecx, [ebp-80]
004382BF . 8D55 84 lea edx, [ebp-7C]
004382C2 . 51 push ecx
004382C3 . 8D45 88 lea eax, [ebp-78]
004382C6 . 52 push edx
004382C7 . 8D4D 8C lea ecx, [ebp-74]
004382CA . 50 push eax
004382CB . 8D55 90 lea edx, [ebp-70]
004382CE . 51 push ecx
004382CF . 8D45 94 lea eax, [ebp-6C]
004382D2 . 52 push edx
004382D3 . 50 push eax
004382D4 . 6A 06 push 6
004382D6 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004382DC . 8D8D 60FFFFFF lea ecx, [ebp-A0]
004382E2 . 8D95 70FFFFFF lea edx, [ebp-90]
004382E8 . 51 push ecx
004382E9 . 52 push edx
004382EA . 6A 02 push 2
004382EC . FF15 40104000 call [<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
004382F2 . 83C4 28 add esp, 28
004382F5 . C3 retn
004382F6 > 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004382FC . 8D4D E8 lea ecx, [ebp-18]
004382FF . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
00438301 . 8D4D E0 lea ecx, [ebp-20]
00438304 . FFD6 call esi
00438306 . 8D4D DC lea ecx, [ebp-24]
00438309 . FFD6 call esi
0043830B . 8D4D D4 lea ecx, [ebp-2C]
0043830E . FFD6 call esi
00438310 . 8D4D CC lea ecx, [ebp-34]
00438313 . FFD6 call esi
00438315 . 8D4D C4 lea ecx, [ebp-3C]
00438318 . FFD6 call esi
0043831A . 8D4D BC lea ecx, [ebp-44]
0043831D . FFD6 call esi
0043831F . 8D4D B4 lea ecx, [ebp-4C]
00438322 . FFD6 call esi
00438324 . 8D4D A8 lea ecx, [ebp-58]
00438327 . FFD6 call esi
00438329 . 8D4D A0 lea ecx, [ebp-60]
0043832C . FFD6 call esi
0043832E . 8D4D 98 lea ecx, [ebp-68]
00438331 . FFD6 call esi
00438333 . C3 retn
00438334 . 8B4D EC mov ecx, [ebp-14]
00438337 . 8B45 AC mov eax, [ebp-54]
0043833A . 5F pop edi
0043833B . 5E pop esi
0043833C . 64:890D 00000>mov fs:[0], ecx
00438343 . 5B pop ebx
00438344 . 8BE5 mov esp, ebp
00438346 . 5D pop ebp
00438347 . C2 0400 retn 4
0043834A > FF15 BC114000 call [<&MSVBVM60.__vbaErrorOverflow>] ; MSVBVM60.__vbaErrorOverflow
00438350 $ 55 push ebp
00438351 . 8BEC mov ebp, esp
00438353 . 83EC 0C sub esp, 0C
00438356 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
0043835B . 64:A1 0000000>mov eax, fs:[0]
00438361 . 50 push eax
00438362 . 64:8925 00000>mov fs:[0], esp
00438369 . 83EC 48 sub esp, 48
0043836C . 53 push ebx
0043836D . 56 push esi
0043836E . 57 push edi
0043836F . 8965 F4 mov [ebp-C], esp
00438372 . C745 F8 D8174>mov dword ptr [ebp-8], 004017D8
00438379 . 8B55 0C mov edx, [ebp+C]
0043837C . 33C0 xor eax, eax
0043837E . 8945 D8 mov [ebp-28], eax
00438381 . 33F6 xor esi, esi
00438383 . 8945 DC mov [ebp-24], eax
00438386 . 8D4D D0 lea ecx, [ebp-30]
00438389 . 8975 E8 mov [ebp-18], esi
0043838C . 8975 E4 mov [ebp-1C], esi
0043838F . 8945 E0 mov [ebp-20], eax
00438392 . 8975 D0 mov [ebp-30], esi
00438395 . 8975 CC mov [ebp-34], esi
00438398 . 8975 BC mov [ebp-44], esi
0043839B . 8975 B8 mov [ebp-48], esi
0043839E . 8975 B4 mov [ebp-4C], esi
004383A1 . 8975 B0 mov [ebp-50], esi
004383A4 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
004383AA . 8D4D CC lea ecx, [ebp-34]
004383AD . 8D55 E8 lea edx, [ebp-18]
004383B0 . 51 push ecx
004383B1 . 8D45 D8 lea eax, [ebp-28]
004383B4 . 8B3D 20124000 mov edi, [<&MSVBVM60.__vbaStrToAnsi>>; MSVBVM60.__vbaStrToAnsi
004383BA . 52 push edx
004383BB . 50 push eax
004383BC . 68 3F000F00 push 0F003F
004383C1 . 56 push esi
004383C2 . 56 push esi
004383C3 . 56 push esi
004383C4 . 8D4D B8 lea ecx, [ebp-48]
004383C7 . 68 B41B4100 push 00411BB4 ; UNICODE "Software\pro edit\registration"
004383CC . 51 push ecx
004383CD . FFD7 call edi ; <&MSVBVM60.__vbaStrToAnsi>
004383CF . 50 push eax
004383D0 . 68 02000080 push 80000002
004383D5 . E8 BA6AFDFF call 0040EE94
004383DA . 8B1D 74104000 mov ebx, [<&MSVBVM60.__vbaSetSystemE>; MSVBVM60.__vbaSetSystemError
004383E0 . 8945 AC mov [ebp-54], eax
004383E3 . FFD3 call ebx ; <&MSVBVM60.__vbaSetSystemError>
004383E5 . 8D4D B8 lea ecx, [ebp-48]
004383E8 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004383EE . 3975 AC cmp [ebp-54], esi
004383F1 . 0F85 84000000 jnz 0043847B
004383F7 . BA 081C4100 mov edx, 00411C08 ; UNICODE "RegCode"
004383FC . 8D4D E4 lea ecx, [ebp-1C]
004383FF . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
00438405 . 8B55 D0 mov edx, [ebp-30]
00438408 . 52 push edx
00438409 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043840F . 50 push eax
00438410 . 8B45 D0 mov eax, [ebp-30]
00438413 . 50 push eax
00438414 . 68 1C1C4100 push 00411C1C
00438419 . FF15 68104000 call [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
0043841F . 8BD0 mov edx, eax
00438421 . 8D4D B4 lea ecx, [ebp-4C]
00438424 . FF15 44124000 call [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0043842A . 8D4D B0 lea ecx, [ebp-50]
0043842D . 50 push eax
0043842E . 51 push ecx
0043842F . FFD7 call edi
00438431 . 8B55 E4 mov edx, [ebp-1C]
00438434 . 50 push eax
00438435 . 6A 01 push 1
00438437 . 56 push esi
00438438 . 8D45 B8 lea eax, [ebp-48]
0043843B . 52 push edx
0043843C . 50 push eax
0043843D . FFD7 call edi
0043843F . 8B4D E8 mov ecx, [ebp-18]
00438442 . 50 push eax
00438443 . 51 push ecx
00438444 . E8 176CFDFF call 0040F060
00438449 . FFD3 call ebx
0043844B . 8B55 B8 mov edx, [ebp-48]
0043844E . 8D45 E4 lea eax, [ebp-1C]
00438451 . 52 push edx
00438452 . 50 push eax
00438453 . FF15 64114000 call [<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
00438459 . 8D4D B0 lea ecx, [ebp-50]
0043845C . 8D55 B4 lea edx, [ebp-4C]
0043845F . 51 push ecx
00438460 . 8D45 B8 lea eax, [ebp-48]
00438463 . 52 push edx
00438464 . 50 push eax
00438465 . 6A 03 push 3
00438467 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
0043846D . 8B4D E8 mov ecx, [ebp-18]
00438470 . 83C4 10 add esp, 10
00438473 . 51 push ecx
00438474 . E8 B367FDFF call 0040EC2C
00438479 . FFD3 call ebx
0043847B > 68 BA844300 push 004384BA
00438480 . EB 27 jmp short 004384A9
00438482 . F645 FC 04 test byte ptr [ebp-4], 4
00438486 . 74 09 je short 00438491
00438488 . 8D4D BC lea ecx, [ebp-44]
0043848B . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438491 > 8D55 B0 lea edx, [ebp-50]
00438494 . 8D45 B4 lea eax, [ebp-4C]
00438497 . 52 push edx
00438498 . 8D4D B8 lea ecx, [ebp-48]
0043849B . 50 push eax
0043849C . 51 push ecx
0043849D . 6A 03 push 3
0043849F . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004384A5 . 83C4 10 add esp, 10
004384A8 . C3 retn
004384A9 > 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004384AF . 8D4D E4 lea ecx, [ebp-1C]
004384B2 . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
004384B4 . 8D4D D0 lea ecx, [ebp-30]
004384B7 . FFD6 call esi
004384B9 . C3 retn
004384BA . 8B45 08 mov eax, [ebp+8]
004384BD . 8B4D BC mov ecx, [ebp-44]
004384C0 . 8BD0 mov edx, eax
004384C2 . 5F pop edi
004384C3 . 5E pop esi
004384C4 . 5B pop ebx
004384C5 . 890A mov [edx], ecx
004384C7 . 8B4D C0 mov ecx, [ebp-40]
004384CA . 894A 04 mov [edx+4], ecx
004384CD . 8B4D C4 mov ecx, [ebp-3C]
004384D0 . 894A 08 mov [edx+8], ecx
004384D3 . 8B4D C8 mov ecx, [ebp-38]
004384D6 . 894A 0C mov [edx+C], ecx
004384D9 . 8B4D EC mov ecx, [ebp-14]
004384DC . 64:890D 00000>mov fs:[0], ecx
004384E3 . 8BE5 mov esp, ebp
004384E5 . 5D pop ebp
004384E6 . C2 0800 retn 8
004384E9 90 nop
004384EA 90 nop
004384EB 90 nop
004384EC 90 nop
004384ED 90 nop
004384EE 90 nop
004384EF 90 nop
004384F0 $ 55 push ebp
004384F1 . 8BEC mov ebp, esp
004384F3 . 83EC 08 sub esp, 8
004384F6 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
004384FB . 64:A1 0000000>mov eax, fs:[0]
00438501 . 50 push eax
00438502 . 64:8925 00000>mov fs:[0], esp
00438509 . 83EC 50 sub esp, 50
0043850C . 53 push ebx
0043850D . 56 push esi
0043850E . 57 push edi
0043850F . 8965 F8 mov [ebp-8], esp
00438512 . C745 FC E8174>mov dword ptr [ebp-4], 004017E8
00438519 . 8B3D E8114000 mov edi, [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
0043851F . 33F6 xor esi, esi
00438521 . BA 081C4100 mov edx, 00411C08 ; UNICODE "RegCode"
00438526 . 8D4D E8 lea ecx, [ebp-18]
00438529 . 8975 EC mov [ebp-14], esi
0043852C . 8975 E8 mov [ebp-18], esi
0043852F . 8975 E4 mov [ebp-1C], esi
00438532 . 8975 E0 mov [ebp-20], esi
00438535 . 8975 D4 mov [ebp-2C], esi
00438538 . 8975 D0 mov [ebp-30], esi
0043853B . 8975 C0 mov [ebp-40], esi
0043853E . 8975 B0 mov [ebp-50], esi
00438541 . 8975 AC mov [ebp-54], esi
00438544 . FFD7 call edi ; <&MSVBVM60.__vbaStrCopy>
00438546 . BA 2CEA4000 mov edx, 0040EA2C
0043854B . 8D4D E0 lea ecx, [ebp-20]
0043854E . FFD7 call edi
00438550 . 8B3D 20124000 mov edi, [<&MSVBVM60.__vbaStrToAnsi>>; MSVBVM60.__vbaStrToAnsi
00438556 . 8D45 EC lea eax, [ebp-14]
00438559 . 50 push eax
0043855A . 68 19000200 push 20019
0043855F . 56 push esi
00438560 . 8D4D D4 lea ecx, [ebp-2C]
00438563 . 68 B41B4100 push 00411BB4 ; UNICODE "Software\pro edit\Registration"
00438568 . 51 push ecx
00438569 . FFD7 call edi ; <&MSVBVM60.__vbaStrToAnsi>
0043856B . 50 push eax
0043856C . 68 02000080 push 80000002
00438571 . E8 6669FDFF call 0040EEDC
00438576 . 8B1D 74104000 mov ebx, [<&MSVBVM60.__vbaSetSystemE>; MSVBVM60.__vbaSetSystemError
0043857C . 8945 AC mov [ebp-54], eax
0043857F . FFD3 call ebx ; <&MSVBVM60.__vbaSetSystemError>
00438581 . 8B55 AC mov edx, [ebp-54]
00438584 . 8D4D D4 lea ecx, [ebp-2C]
00438587 . 8955 DC mov [ebp-24], edx
0043858A . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00438590 . 3975 DC cmp [ebp-24], esi
00438593 . E9 FD000000 jmp 00438695
00438598 90 nop
00438599 . 8B45 E8 mov eax, [ebp-18]
0043859C . C745 E4 FF000>mov dword ptr [ebp-1C], 0FF
004385A3 . 50 push eax
004385A4 . 68 1C1C4100 push 00411C1C
004385A9 . FF15 68104000 call [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
004385AF . 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
004385B5 . 8BD0 mov edx, eax
004385B7 . 8D4D E8 lea ecx, [ebp-18]
004385BA . FFD6 call esi ; <&MSVBVM60.__vbaStrMove>
004385BC . 8B4D E4 mov ecx, [ebp-1C]
004385BF . 8D55 C0 lea edx, [ebp-40]
004385C2 . 51 push ecx
004385C3 . 52 push edx
004385C4 . FF15 E8104000 call [<&MSVBVM60.rtcSpaceVar>] ; MSVBVM60.rtcSpaceVar
004385CA . 8D45 C0 lea eax, [ebp-40]
004385CD . 50 push eax
004385CE . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004385D4 . 8BD0 mov edx, eax
004385D6 . 8D4D E0 lea ecx, [ebp-20]
004385D9 . FFD6 call esi
004385DB . 8D4D C0 lea ecx, [ebp-40]
004385DE . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004385E4 . 8B55 E0 mov edx, [ebp-20]
004385E7 . 8D4D E4 lea ecx, [ebp-1C]
004385EA . 51 push ecx
004385EB . 8D45 D0 lea eax, [ebp-30]
004385EE . 52 push edx
004385EF . 50 push eax
004385F0 . C745 AC 01000>mov dword ptr [ebp-54], 1
004385F7 . FFD7 call edi
004385F9 . 8B55 E8 mov edx, [ebp-18]
004385FC . 8D4D AC lea ecx, [ebp-54]
004385FF . 50 push eax
00438600 . 51 push ecx
00438601 . 6A 00 push 0
00438603 . 8D45 D4 lea eax, [ebp-2C]
00438606 . 52 push edx
00438607 . 50 push eax
00438608 . FFD7 call edi
0043860A . 8B4D EC mov ecx, [ebp-14]
0043860D . 50 push eax
0043860E . 51 push ecx
0043860F . E8 A869FDFF call 0040EFBC
00438614 . FFD3 call ebx
00438616 . 8B55 D4 mov edx, [ebp-2C]
00438619 . 8B3D 64114000 mov edi, [<&MSVBVM60.__vbaStrToUnico>; MSVBVM60.__vbaStrToUnicode
0043861F . 8D45 E8 lea eax, [ebp-18]
00438622 . 52 push edx
00438623 . 50 push eax
00438624 . FFD7 call edi ; <&MSVBVM60.__vbaStrToUnicode>
00438626 . 8B4D D0 mov ecx, [ebp-30]
00438629 . 8D55 E0 lea edx, [ebp-20]
0043862C . 51 push ecx
0043862D . 52 push edx
0043862E . FFD7 call edi
00438630 . 8D45 D0 lea eax, [ebp-30]
00438633 . 8D4D D4 lea ecx, [ebp-2C]
00438636 . 50 push eax
00438637 . 51 push ecx
00438638 . 6A 02 push 2
0043863A . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00438640 . 8B55 EC mov edx, [ebp-14]
00438643 . 83C4 0C add esp, 0C
00438646 . 52 push edx
00438647 . E8 E065FDFF call 0040EC2C
0043864C . 8945 AC mov [ebp-54], eax
0043864F . FFD3 call ebx
00438651 . 8B4D E4 mov ecx, [ebp-1C]
00438654 . 8D45 E0 lea eax, [ebp-20]
00438657 . 83E9 01 sub ecx, 1
0043865A . 8945 B8 mov [ebp-48], eax
0043865D . 0F80 E9000000 jo 0043874C
00438663 . 8D55 B0 lea edx, [ebp-50]
00438666 . 51 push ecx
00438667 . 8D45 C0 lea eax, [ebp-40]
0043866A . 52 push edx
0043866B . 50 push eax
0043866C . C745 B0 08400>mov dword ptr [ebp-50], 4008
00438673 . FF15 34124000 call [<&MSVBVM60.rtcLeftCharVar>] ; MSVBVM60.rtcLeftCharVar
00438679 . 8D4D C0 lea ecx, [ebp-40]
0043867C . 51 push ecx
0043867D . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00438683 . 8BD0 mov edx, eax
00438685 . 8D4D E0 lea ecx, [ebp-20]
00438688 . FFD6 call esi
0043868A . 8D4D C0 lea ecx, [ebp-40]
0043868D . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438693 . EB 06 jmp short 0043869B
00438695 > 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0043869B > 8B55 E0 mov edx, [ebp-20]
0043869E . 8B3D 04114000 mov edi, [<&MSVBVM60.__vbaStrCmp>] ; MSVBVM60.__vbaStrCmp
004386A4 . 52 push edx
004386A5 . 68 2CEA4000 push 0040EA2C
004386AA . FFD7 call edi ; <&MSVBVM60.__vbaStrCmp>
004386AC . 85C0 test eax, eax
004386AE 75 0A jnz short 004386BA
004386B0 . 8945 D8 mov [ebp-28], eax
004386B3 . 68 37874300 push 00438737
004386B8 . EB 6C jmp short 00438726
004386BA > E8 B1000000 call 00438770
004386BF . 8BD0 mov edx, eax
004386C1 . 8D4D D4 lea ecx, [ebp-2C]
004386C4 . FFD6 call esi
004386C6 . 50 push eax
004386C7 . E8 F4E8FFFF call 00436FC0
004386CC . 8BD0 mov edx, eax
004386CE . 8D4D D0 lea ecx, [ebp-30]
004386D1 . FFD6 call esi
004386D3 . 50 push eax
004386D4 . 8B45 E0 mov eax, [ebp-20]
004386D7 . 50 push eax
004386D8 . FFD7 call edi
004386DA . 8BF0 mov esi, eax
004386DC . 8D4D D0 lea ecx, [ebp-30]
004386DF . F7DE neg esi
004386E1 . 1BF6 sbb esi, esi
004386E3 . 8D55 D4 lea edx, [ebp-2C]
004386E6 . 51 push ecx
004386E7 . 52 push edx
004386E8 . F7DE neg esi
004386EA . 6A 02 push 2
004386EC . F7DE neg esi
004386EE . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004386F4 . 83C4 0C add esp, 0C
004386F7 . 66:F7DE neg si
004386FA . 1BF6 sbb esi, esi
004386FC . 68 37874300 push 00438737
00438701 . F7DE neg esi
00438703 . 4E dec esi
00438704 . 8975 D8 mov [ebp-28], esi
00438707 . EB 1D jmp short 00438726
00438709 . 8D45 D0 lea eax, [ebp-30]
0043870C . 8D4D D4 lea ecx, [ebp-2C]
0043870F . 50 push eax
00438710 . 51 push ecx
00438711 . 6A 02 push 2
00438713 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00438719 . 83C4 0C add esp, 0C
0043871C . 8D4D C0 lea ecx, [ebp-40]
0043871F . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438725 . C3 retn
00438726 > 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0043872C . 8D4D E8 lea ecx, [ebp-18]
0043872F . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
00438731 . 8D4D E0 lea ecx, [ebp-20]
00438734 . FFD6 call esi
00438736 . C3 retn
00438737 . 8B4D F0 mov ecx, [ebp-10]
0043873A . 66:8B45 D8 mov ax, [ebp-28]
0043873E . 5F pop edi
0043873F . 5E pop esi
00438740 . 64:890D 00000>mov fs:[0], ecx
00438747 . 5B pop ebx
00438748 . 8BE5 mov esp, ebp
0043874A . 5D pop ebp
0043874B . C3 retn
0043874C > FF15 BC114000 call [<&MSVBVM60.__vbaErrorOverflow>] ; MSVBVM60.__vbaErrorOverflow
00438752 . 90 nop
00438753 . 90 nop
00438754 . 90 nop
00438755 . 90 nop
00438756 . 90 nop
00438757 . 90 nop
00438758 . 90 nop
00438759 . 90 nop
0043875A . 90 nop
0043875B . 90 nop
0043875C . 90 nop
0043875D . 90 nop
0043875E . 90 nop
0043875F . 90 nop
00438760 /$ 66:33C0 xor ax, ax
00438763 \. C3 retn
00438764 90 nop
00438765 90 nop
00438766 90 nop
00438767 90 nop
00438768 90 nop
00438769 90 nop
0043876A 90 nop
0043876B 90 nop
0043876C 90 nop
0043876D 90 nop
0043876E 90 nop
0043876F 90 nop
00438770 $ 55 push ebp
00438771 . 8BEC mov ebp, esp
00438773 . 83EC 14 sub esp, 14
00438776 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
0043877B . 64:A1 0000000>mov eax, fs:[0]
00438781 . 50 push eax
00438782 . 64:8925 00000>mov fs:[0], esp
00438789 . 81EC C0000000 sub esp, 0C0
0043878F . 53 push ebx
00438790 . 56 push esi
00438791 . 57 push edi
00438792 . 8965 EC mov [ebp-14], esp
00438795 . C745 F0 F8174>mov dword ptr [ebp-10], 004017F8
0043879C . 33FF xor edi, edi
0043879E . 897D F4 mov [ebp-C], edi
004387A1 . 897D F8 mov [ebp-8], edi
004387A4 . 897D E0 mov [ebp-20], edi
004387A7 . 897D DC mov [ebp-24], edi
004387AA . 897D D4 mov [ebp-2C], edi
004387AD . 897D D0 mov [ebp-30], edi
004387B0 . 897D CC mov [ebp-34], edi
004387B3 . 897D C8 mov [ebp-38], edi
004387B6 . 897D C4 mov [ebp-3C], edi
004387B9 . 897D C0 mov [ebp-40], edi
004387BC . 897D BC mov [ebp-44], edi
004387BF . 897D B8 mov [ebp-48], edi
004387C2 . 897D A8 mov [ebp-58], edi
004387C5 . 897D 98 mov [ebp-68], edi
004387C8 . 897D 88 mov [ebp-78], edi
004387CB . 89BD 78FFFFFF mov [ebp-88], edi
004387D1 . 89BD 44FFFFFF mov [ebp-BC], edi
004387D7 . 6A 01 push 1
004387D9 . FF15 A0104000 call [<&MSVBVM60.__vbaOnError>] ; MSVBVM60.__vbaOnError
004387DF . BA 2CEA4000 mov edx, 0040EA2C
004387E4 . 8D4D CC lea ecx, [ebp-34]
004387E7 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
004387ED . C745 D0 32000>mov dword ptr [ebp-30], 32
004387F4 . 897D B0 mov [ebp-50], edi
004387F7 . C745 A8 02000>mov dword ptr [ebp-58], 2
004387FE . 8D45 A8 lea eax, [ebp-58]
00438801 . 50 push eax
00438802 . 6A 32 push 32
00438804 . FF15 74114000 call [<&MSVBVM60.rtcStringBstr>] ; MSVBVM60.rtcStringBstr
0043880A . 8BD0 mov edx, eax
0043880C . 8D4D D4 lea ecx, [ebp-2C]
0043880F . 8B1D 44124000 mov ebx, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00438815 . FFD3 call ebx ; <&MSVBVM60.__vbaStrMove>
00438817 . 8D4D A8 lea ecx, [ebp-58]
0043881A . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438820 . 8B4D D4 mov ecx, [ebp-2C]
00438823 . 51 push ecx
00438824 . 8D55 C8 lea edx, [ebp-38]
00438827 . 52 push edx
00438828 . FF15 20124000 call [<&MSVBVM60.__vbaStrToAnsi>] ; MSVBVM60.__vbaStrToAnsi
0043882E . 50 push eax
0043882F . 8D45 D0 lea eax, [ebp-30]
00438832 . 50 push eax
00438833 . E8 8868FDFF call 0040F0C0
00438838 . 8985 44FFFFFF mov [ebp-BC], eax
0043883E . FF15 74104000 call [<&MSVBVM60.__vbaSetSystemError>>; MSVBVM60.__vbaSetSystemError
00438844 . 8B4D C8 mov ecx, [ebp-38]
00438847 . 51 push ecx
00438848 . 8D55 D4 lea edx, [ebp-2C]
0043884B . 52 push edx
0043884C . FF15 64114000 call [<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
00438852 . 8BB5 44FFFFFF mov esi, [ebp-BC]
00438858 . 8D4D C8 lea ecx, [ebp-38]
0043885B . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00438861 . 3BF7 cmp esi, edi
00438863 . 75 17 jnz short 0043887C
00438865 . 8B45 D0 mov eax, [ebp-30]
00438868 . 50 push eax
00438869 . 8B4D D4 mov ecx, [ebp-2C]
0043886C . 51 push ecx
0043886D . FF15 28124000 call [<&MSVBVM60.rtcLeftCharBstr>] ; MSVBVM60.rtcLeftCharBstr
00438873 . 8BD0 mov edx, eax
00438875 . 8D4D DC lea ecx, [ebp-24]
00438878 . FFD3 call ebx
0043887A . EB 0E jmp short 0043888A
0043887C > BA 0CEA4000 mov edx, 0040EA0C ; UNICODE "ERROR"
00438881 . 8D4D DC lea ecx, [ebp-24]
00438884 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
0043888A > 8D55 DC lea edx, [ebp-24]
0043888D . 52 push edx
0043888E . 8D45 DC lea eax, [ebp-24]
00438891 . 50 push eax
00438892 . E8 69E5FFFF call 00436E00
00438897 . 8BD0 mov edx, eax
00438899 . 8D4D E0 lea ecx, [ebp-20]
0043889C . FFD3 call ebx
0043889E . FF15 98104000 call [<&MSVBVM60.__vbaExitProc>] ; MSVBVM60.__vbaExitProc
004388A4 . 68 428A4300 push 00438A42
004388A9 . E9 7E010000 jmp 00438A2C
004388AE . B9 04000280 mov ecx, 80020004
004388B3 . 894D 80 mov [ebp-80], ecx
004388B6 . B8 0A000000 mov eax, 0A
004388BB . 8985 78FFFFFF mov [ebp-88], eax
004388C1 . 894D 90 mov [ebp-70], ecx
004388C4 . 8945 88 mov [ebp-78], eax
004388C7 . 894D A0 mov [ebp-60], ecx
004388CA . 8945 98 mov [ebp-68], eax
004388CD . 8B3D 04124000 mov edi, [<&MSVBVM60.rtcErrObj>] ; MSVBVM60.rtcErrObj
004388D3 . FFD7 call edi ; <&MSVBVM60.rtcErrObj>
004388D5 . 50 push eax
004388D6 . 8D4D BC lea ecx, [ebp-44]
004388D9 . 51 push ecx
004388DA . 8B1D 9C104000 mov ebx, [<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
004388E0 . FFD3 call ebx ; <&MSVBVM60.__vbaObjSet>
004388E2 . 8BF0 mov esi, eax
004388E4 . 8B16 mov edx, [esi]
004388E6 . 8D85 44FFFFFF lea eax, [ebp-BC]
004388EC . 50 push eax
004388ED . 56 push esi
004388EE . FF52 1C call [edx+1C]
004388F1 . DBE2 fclex
004388F3 . 85C0 test eax, eax
004388F5 . 7D 0F jge short 00438906
004388F7 . 6A 1C push 1C
004388F9 . 68 64FD4000 push 0040FD64
004388FE . 56 push esi
004388FF . 50 push eax
00438900 . FF15 78104000 call [<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00438906 > FFD7 call edi
00438908 . 50 push eax
00438909 . 8D4D B8 lea ecx, [ebp-48]
0043890C . 51 push ecx
0043890D . FFD3 call ebx
0043890F . 8BF0 mov esi, eax
00438911 . 8B16 mov edx, [esi]
00438913 . 8D45 C4 lea eax, [ebp-3C]
00438916 . 50 push eax
00438917 . 56 push esi
00438918 . FF52 2C call [edx+2C]
0043891B . DBE2 fclex
0043891D . 85C0 test eax, eax
0043891F . 7D 0F jge short 00438930
00438921 . 6A 2C push 2C
00438923 . 68 64FD4000 push 0040FD64
00438928 . 56 push esi
00438929 . 50 push eax
0043892A . FF15 78104000 call [<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00438930 > 8B8D 44FFFFFF mov ecx, [ebp-BC]
00438936 . 51 push ecx
00438937 . FF15 14104000 call [<&MSVBVM60.__vbaStrI4>] ; MSVBVM60.__vbaStrI4
0043893D . 8BD0 mov edx, eax
0043893F . 8D4D C8 lea ecx, [ebp-38]
00438942 . 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00438948 . FFD6 call esi ; <&MSVBVM60.__vbaStrMove>
0043894A . 50 push eax
0043894B . 68 08054100 push 00410508 ; UNICODE CR,LF
00438950 . 8B3D 68104000 mov edi, [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
00438956 . FFD7 call edi ; <&MSVBVM60.__vbaStrCat>
00438958 . 8BD0 mov edx, eax
0043895A . 8D4D C0 lea ecx, [ebp-40]
0043895D . FFD6 call esi
0043895F . 50 push eax
00438960 . 8B55 C4 mov edx, [ebp-3C]
00438963 . 52 push edx
00438964 . FFD7 call edi
00438966 . 8945 B0 mov [ebp-50], eax
00438969 . C745 A8 08000>mov dword ptr [ebp-58], 8
00438970 . 8D85 78FFFFFF lea eax, [ebp-88]
00438976 . 50 push eax
00438977 . 8D4D 88 lea ecx, [ebp-78]
0043897A . 51 push ecx
0043897B . 8D55 98 lea edx, [ebp-68]
0043897E . 52 push edx
0043897F . 6A 00 push 0
00438981 . 8D45 A8 lea eax, [ebp-58]
00438984 . 50 push eax
00438985 . FF15 A4104000 call [<&MSVBVM60.rtcMsgBox>] ; MSVBVM60.rtcMsgBox
0043898B . 8D4D C4 lea ecx, [ebp-3C]
0043898E . 51 push ecx
0043898F . 8D55 C0 lea edx, [ebp-40]
00438992 . 52 push edx
00438993 . 8D45 C8 lea eax, [ebp-38]
00438996 . 50 push eax
00438997 . 6A 03 push 3
00438999 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
0043899F . 8D4D B8 lea ecx, [ebp-48]
004389A2 . 51 push ecx
004389A3 . 8D55 BC lea edx, [ebp-44]
004389A6 . 52 push edx
004389A7 . 6A 02 push 2
004389A9 . FF15 48104000 call [<&MSVBVM60.__vbaFreeObjList>] ; MSVBVM60.__vbaFreeObjList
004389AF . 8D85 78FFFFFF lea eax, [ebp-88]
004389B5 . 50 push eax
004389B6 . 8D4D 88 lea ecx, [ebp-78]
004389B9 . 51 push ecx
004389BA . 8D55 98 lea edx, [ebp-68]
004389BD . 52 push edx
004389BE . 8D45 A8 lea eax, [ebp-58]
004389C1 . 50 push eax
004389C2 . 6A 04 push 4
004389C4 . FF15 40104000 call [<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
004389CA . 83C4 30 add esp, 30
004389CD . FF15 98104000 call [<&MSVBVM60.__vbaExitProc>] ; MSVBVM60.__vbaExitProc
004389D3 . 68 428A4300 push 00438A42
004389D8 . EB 52 jmp short 00438A2C
004389DA . F645 F4 04 test byte ptr [ebp-C], 4
004389DE . 74 09 je short 004389E9
004389E0 . 8D4D E0 lea ecx, [ebp-20]
004389E3 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004389E9 > 8D4D C0 lea ecx, [ebp-40]
004389EC . 51 push ecx
004389ED . 8D55 C4 lea edx, [ebp-3C]
004389F0 . 52 push edx
004389F1 . 8D45 C8 lea eax, [ebp-38]
004389F4 . 50 push eax
004389F5 . 6A 03 push 3
004389F7 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004389FD . 8D4D B8 lea ecx, [ebp-48]
00438A00 . 51 push ecx
00438A01 . 8D55 BC lea edx, [ebp-44]
00438A04 . 52 push edx
00438A05 . 6A 02 push 2
00438A07 . FF15 48104000 call [<&MSVBVM60.__vbaFreeObjList>] ; MSVBVM60.__vbaFreeObjList
00438A0D . 8D85 78FFFFFF lea eax, [ebp-88]
00438A13 . 50 push eax
00438A14 . 8D4D 88 lea ecx, [ebp-78]
00438A17 . 51 push ecx
00438A18 . 8D55 98 lea edx, [ebp-68]
00438A1B . 52 push edx
00438A1C . 8D45 A8 lea eax, [ebp-58]
00438A1F . 50 push eax
00438A20 . 6A 04 push 4
00438A22 . FF15 40104000 call [<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
00438A28 . 83C4 30 add esp, 30
00438A2B . C3 retn
00438A2C > 8D4D DC lea ecx, [ebp-24]
00438A2F . 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00438A35 . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
00438A37 . 8D4D D4 lea ecx, [ebp-2C]
00438A3A . FFD6 call esi
00438A3C . 8D4D CC lea ecx, [ebp-34]
00438A3F . FFD6 call esi
00438A41 . C3 retn
00438A42 . 8B45 E0 mov eax, [ebp-20]
00438A45 . 8B4D E4 mov ecx, [ebp-1C]
00438A48 . 64:890D 00000>mov fs:[0], ecx
00438A4F . 5F pop edi
00438A50 . 5E pop esi
00438A51 . 5B pop ebx
00438A52 . 8BE5 mov esp, ebp
00438A54 . 5D pop ebp
00438A55 . C3 retn
就?呃彦檫始吧....注?? / 爆破方法也可以..
-----------------------------------------------------
00436FC0 $ 55 push ebp
00436FC1 . 8BEC mov ebp, esp
00436FC3 . 83EC 0C sub esp, 0C
00436FC6 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
00436FCB . 64:A1 0000000>mov eax, fs:[0]
00436FD1 . 50 push eax
00436FD2 . 64:8925 00000>mov fs:[0], esp
00436FD9 . 81EC F4000000 sub esp, 0F4
00436FDF . 53 push ebx
00436FE0 . 56 push esi
00436FE1 . 57 push edi
00436FE2 . 8965 F4 mov [ebp-C], esp
00436FE5 . C745 F8 C8174>mov dword ptr [ebp-8], 004017C8
00436FEC . 8B55 08 mov edx, [ebp+8]
00436FEF . 33C0 xor eax, eax
00436FF1 . 8D4D E8 lea ecx, [ebp-18]
00436FF4 . 8945 E8 mov [ebp-18], eax
00436FF7 . 8945 E0 mov [ebp-20], eax
00436FFA . 8945 DC mov [ebp-24], eax
00436FFD . 8945 D8 mov [ebp-28], eax
00437000 . 8945 D4 mov [ebp-2C], eax
00437003 . 8945 D0 mov [ebp-30], eax
00437006 . 8945 CC mov [ebp-34], eax
00437009 . 8945 C8 mov [ebp-38], eax
0043700C . 8945 C4 mov [ebp-3C], eax
0043700F . 8945 C0 mov [ebp-40], eax
00437012 . 8945 BC mov [ebp-44], eax
00437015 . 8945 B8 mov [ebp-48], eax
00437018 . 8945 B4 mov [ebp-4C], eax
0043701B . 8945 B0 mov [ebp-50], eax
0043701E . 8945 AC mov [ebp-54], eax
00437021 . 8945 A8 mov [ebp-58], eax
00437024 . 8945 A4 mov [ebp-5C], eax
00437027 . 8945 A0 mov [ebp-60], eax
0043702A . 8945 9C mov [ebp-64], eax
0043702D . 8945 98 mov [ebp-68], eax
00437030 . 8945 94 mov [ebp-6C], eax
00437033 . 8945 90 mov [ebp-70], eax
00437036 . 8945 8C mov [ebp-74], eax
00437039 . 8945 88 mov [ebp-78], eax
0043703C . 8945 84 mov [ebp-7C], eax
0043703F . 8945 80 mov [ebp-80], eax
00437042 . 8985 70FFFFFF mov [ebp-90], eax
00437048 . 8985 60FFFFFF mov [ebp-A0], eax
0043704E . 8985 50FFFFFF mov [ebp-B0], eax
00437054 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
0043705A . 8B45 E8 mov eax, [ebp-18]
0043705D . 50 push eax
0043705E . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437064 . 8BC8 mov ecx, eax
00437066 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
0043706C . 8B3D 4C104000 mov edi, [<&MSVBVM60.rtcAnsiValueBst>; MSVBVM60.rtcAnsiValueBstr
00437072 . 8B1D 40104000 mov ebx, [<&MSVBVM60.__vbaFreeVarLis>; MSVBVM60.__vbaFreeVarList
00437078 . 8985 38FFFFFF mov [ebp-C8], eax
0043707E . BE 01000000 mov esi, 1
00437083 > 66:3BB5 38FFF>cmp si, [ebp-C8]
0043708A . 0F8F A5000000 jg 00437135
00437090 . B8 02000000 mov eax, 2
00437095 . 8D4D E8 lea ecx, [ebp-18]
00437098 . 8985 78FFFFFF mov [ebp-88], eax
0043709E . 8985 70FFFFFF mov [ebp-90], eax
004370A4 . 0FBFC6 movsx eax, si
004370A7 . 8D95 70FFFFFF lea edx, [ebp-90]
004370AD . 898D 58FFFFFF mov [ebp-A8], ecx
004370B3 . 52 push edx
004370B4 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
004370BA . 50 push eax
004370BB . 8D95 60FFFFFF lea edx, [ebp-A0]
004370C1 . 51 push ecx
004370C2 . 52 push edx
004370C3 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004370CD . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
004370D3 . 8D85 60FFFFFF lea eax, [ebp-A0]
004370D9 . 8D4D 94 lea ecx, [ebp-6C]
004370DC . 50 push eax
004370DD . 51 push ecx
004370DE . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
004370E4 . 50 push eax
004370E5 . FFD7 call edi
004370E7 . 66:6BC0 4F imul ax, ax, 4F
004370EB . 0F80 59120000 jo 0043834A
004370F1 . 0FBFD0 movsx edx, ax
004370F4 . 8B45 D8 mov eax, [ebp-28]
004370F7 . 8D4D 94 lea ecx, [ebp-6C]
004370FA . 03D0 add edx, eax
004370FC . 0F80 48120000 jo 0043834A
00437102 . 8955 D8 mov [ebp-28], edx
00437105 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0043710B . 8D85 60FFFFFF lea eax, [ebp-A0]
00437111 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437117 . 50 push eax
00437118 . 51 push ecx
00437119 . 6A 02 push 2
0043711B . FFD3 call ebx
0043711D . B8 01000000 mov eax, 1
00437122 . 83C4 0C add esp, 0C
00437125 . 66:03C6 add ax, si
00437128 . 0F80 1C120000 jo 0043834A
0043712E . 8BF0 mov esi, eax
00437130 .^ E9 4EFFFFFF jmp 00437083
00437135 > 8D85 50FFFFFF lea eax, [ebp-B0]
0043713B . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437141 . 8D55 E8 lea edx, [ebp-18]
00437144 . 50 push eax
00437145 . 51 push ecx
00437146 . 8995 58FFFFFF mov [ebp-A8], edx
0043714C . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437156 . FF15 5C104000 call [<&MSVBVM60.rtcLowerCaseVar>] ; MSVBVM60.rtcLowerCaseVar
0043715C . 8D95 70FFFFFF lea edx, [ebp-90]
00437162 . 52 push edx
00437163 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437169 . 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0043716F . 8BD0 mov edx, eax
00437171 . 8D4D E8 lea ecx, [ebp-18]
00437174 . FFD6 call esi ; <&MSVBVM60.__vbaStrMove>
00437176 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043717C . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437182 . 8B45 E8 mov eax, [ebp-18]
00437185 . 50 push eax
00437186 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043718C . 8BC8 mov ecx, eax
0043718E . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437194 . 8985 30FFFFFF mov [ebp-D0], eax
0043719A . B8 01000000 mov eax, 1
0043719F . 8945 E4 mov [ebp-1C], eax
004371A2 > 66:3B85 30FFF>cmp ax, [ebp-D0]
004371A9 . 0F8F AA000000 jg 00437259
004371AF . 8D4D E8 lea ecx, [ebp-18]
004371B2 . 8D95 70FFFFFF lea edx, [ebp-90]
004371B8 . 0FBFC0 movsx eax, ax
004371BB . 898D 58FFFFFF mov [ebp-A8], ecx
004371C1 . 52 push edx
004371C2 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
004371C8 . 50 push eax
004371C9 . 8D95 60FFFFFF lea edx, [ebp-A0]
004371CF . 51 push ecx
004371D0 . 52 push edx
004371D1 . C785 78FFFFFF>mov dword ptr [ebp-88], 4
004371DB . C785 70FFFFFF>mov dword ptr [ebp-90], 2
004371E5 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004371EF . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
004371F5 . 8D85 60FFFFFF lea eax, [ebp-A0]
004371FB . 8D4D 94 lea ecx, [ebp-6C]
004371FE . 50 push eax
004371FF . 51 push ecx
00437200 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00437206 . 50 push eax
00437207 . FFD7 call edi
00437209 . 66:6BC0 26 imul ax, ax, 26
0043720D . 0F80 37110000 jo 0043834A
00437213 . 0FBFD0 movsx edx, ax
00437216 . 8B45 D0 mov eax, [ebp-30]
00437219 . 8D4D 94 lea ecx, [ebp-6C]
0043721C . 03D0 add edx, eax
0043721E . 0F80 26110000 jo 0043834A
00437224 . 8955 D0 mov [ebp-30], edx
00437227 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0043722D . 8D85 60FFFFFF lea eax, [ebp-A0]
00437233 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437239 . 50 push eax
0043723A . 51 push ecx
0043723B . 6A 02 push 2
0043723D . FFD3 call ebx
0043723F . B8 01000000 mov eax, 1
00437244 . 83C4 0C add esp, 0C
00437247 . 66:0345 E4 add ax, [ebp-1C]
0043724B . 0F80 F9100000 jo 0043834A
00437251 . 8945 E4 mov [ebp-1C], eax
00437254 .^ E9 49FFFFFF jmp 004371A2
00437259 > 8D85 50FFFFFF lea eax, [ebp-B0]
0043725F . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437265 . 8D55 E8 lea edx, [ebp-18]
00437268 . 50 push eax
00437269 . 51 push ecx
0043726A . 8995 58FFFFFF mov [ebp-A8], edx
00437270 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043727A . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
00437280 . 8D95 70FFFFFF lea edx, [ebp-90]
00437286 . 52 push edx
00437287 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
0043728D . 8BD0 mov edx, eax
0043728F . 8D4D E8 lea ecx, [ebp-18]
00437292 . FFD6 call esi
00437294 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043729A . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004372A0 . 8B45 E8 mov eax, [ebp-18]
004372A3 . 50 push eax
004372A4 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
004372AA . 8BC8 mov ecx, eax
004372AC . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
004372B2 . 8985 28FFFFFF mov [ebp-D8], eax
004372B8 . B8 01000000 mov eax, 1
004372BD . 8945 E4 mov [ebp-1C], eax
004372C0 > 66:3B85 28FFF>cmp ax, [ebp-D8]
004372C7 . 0F8F A7000000 jg 00437374
004372CD . B9 02000000 mov ecx, 2
004372D2 . 8D95 70FFFFFF lea edx, [ebp-90]
004372D8 . 898D 78FFFFFF mov [ebp-88], ecx
004372DE . 898D 70FFFFFF mov [ebp-90], ecx
004372E4 . 8D4D E8 lea ecx, [ebp-18]
004372E7 . 52 push edx
004372E8 . 0FBFC0 movsx eax, ax
004372EB . 898D 58FFFFFF mov [ebp-A8], ecx
004372F1 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
004372F7 . 50 push eax
004372F8 . 8D95 60FFFFFF lea edx, [ebp-A0]
004372FE . 51 push ecx
004372FF . 52 push edx
00437300 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043730A . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
00437310 . 8D85 60FFFFFF lea eax, [ebp-A0]
00437316 . 8D4D 94 lea ecx, [ebp-6C]
00437319 . 50 push eax
0043731A . 51 push ecx
0043731B . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00437321 . 50 push eax
00437322 . FFD7 call edi
00437324 . 66:6BC0 39 imul ax, ax, 39
00437328 . 0F80 1C100000 jo 0043834A
0043732E . 0FBFD0 movsx edx, ax
00437331 . 8B45 C8 mov eax, [ebp-38]
00437334 . 8D4D 94 lea ecx, [ebp-6C]
00437337 . 03D0 add edx, eax
00437339 . 0F80 0B100000 jo 0043834A
0043733F . 8955 C8 mov [ebp-38], edx
00437342 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00437348 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043734E . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437354 . 50 push eax
00437355 . 51 push ecx
00437356 . 6A 02 push 2
00437358 . FFD3 call ebx
0043735A . B8 01000000 mov eax, 1
0043735F . 83C4 0C add esp, 0C
00437362 . 66:0345 E4 add ax, [ebp-1C]
00437366 . 0F80 DE0F0000 jo 0043834A
0043736C . 8945 E4 mov [ebp-1C], eax
0043736F .^ E9 4CFFFFFF jmp 004372C0
00437374 > 8D85 50FFFFFF lea eax, [ebp-B0]
0043737A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437380 . 8D55 E8 lea edx, [ebp-18]
00437383 . 50 push eax
00437384 . 51 push ecx
00437385 . 8995 58FFFFFF mov [ebp-A8], edx
0043738B . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437395 . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
0043739B . 8D95 70FFFFFF lea edx, [ebp-90]
004373A1 . 52 push edx
004373A2 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004373A8 . 8BD0 mov edx, eax
004373AA . 8D4D E8 lea ecx, [ebp-18]
004373AD . FFD6 call esi
004373AF . 8D8D 70FFFFFF lea ecx, [ebp-90]
004373B5 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004373BB . 8B45 E8 mov eax, [ebp-18]
004373BE . 50 push eax
004373BF . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
004373C5 . 8BC8 mov ecx, eax
004373C7 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
004373CD . 8985 20FFFFFF mov [ebp-E0], eax
004373D3 . B8 01000000 mov eax, 1
004373D8 . 8945 E4 mov [ebp-1C], eax
004373DB > 66:3B85 20FFF>cmp ax, [ebp-E0]
004373E2 . 0F8F AA000000 jg 00437492
004373E8 . 8D4D E8 lea ecx, [ebp-18]
004373EB . 8D95 70FFFFFF lea edx, [ebp-90]
004373F1 . 0FBFC0 movsx eax, ax
004373F4 . 898D 58FFFFFF mov [ebp-A8], ecx
004373FA . 52 push edx
004373FB . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437401 . 50 push eax
00437402 . 8D95 60FFFFFF lea edx, [ebp-A0]
00437408 . 51 push ecx
00437409 . 52 push edx
0043740A . C785 78FFFFFF>mov dword ptr [ebp-88], 3
00437414 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043741E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437428 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043742E . 8D85 60FFFFFF lea eax, [ebp-A0]
00437434 . 8D4D 94 lea ecx, [ebp-6C]
00437437 . 50 push eax
00437438 . 51 push ecx
00437439 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
0043743F . 50 push eax
00437440 . FFD7 call edi
00437442 . 66:6BC0 23 imul ax, ax, 23
00437446 . 0F80 FE0E0000 jo 0043834A
0043744C . 0FBFD0 movsx edx, ax
0043744F . 8B45 C0 mov eax, [ebp-40]
00437452 . 8D4D 94 lea ecx, [ebp-6C]
00437455 . 03D0 add edx, eax
00437457 . 0F80 ED0E0000 jo 0043834A
0043745D . 8955 C0 mov [ebp-40], edx
00437460 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00437466 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043746C . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437472 . 50 push eax
00437473 . 51 push ecx
00437474 . 6A 02 push 2
00437476 . FFD3 call ebx
00437478 . B8 01000000 mov eax, 1
0043747D . 83C4 0C add esp, 0C
00437480 . 66:0345 E4 add ax, [ebp-1C]
00437484 . 0F80 C00E0000 jo 0043834A
0043748A . 8945 E4 mov [ebp-1C], eax
0043748D .^ E9 49FFFFFF jmp 004373DB
00437492 > 8D85 50FFFFFF lea eax, [ebp-B0]
00437498 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043749E . 8D55 E8 lea edx, [ebp-18]
004374A1 . 50 push eax
004374A2 . 51 push ecx
004374A3 . 8995 58FFFFFF mov [ebp-A8], edx
004374A9 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004374B3 . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
004374B9 . 8D95 70FFFFFF lea edx, [ebp-90]
004374BF . 52 push edx
004374C0 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004374C6 . 8BD0 mov edx, eax
004374C8 . 8D4D E8 lea ecx, [ebp-18]
004374CB . FFD6 call esi
004374CD . 8D8D 70FFFFFF lea ecx, [ebp-90]
004374D3 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004374D9 . 8B45 E8 mov eax, [ebp-18]
004374DC . 50 push eax
004374DD . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
004374E3 . 8BC8 mov ecx, eax
004374E5 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
004374EB . 8985 18FFFFFF mov [ebp-E8], eax
004374F1 . B8 01000000 mov eax, 1
004374F6 . 8945 E4 mov [ebp-1C], eax
004374F9 > 66:3B85 18FFF>cmp ax, [ebp-E8]
00437500 . 0F8F AA000000 jg 004375B0
00437506 . 8D4D E8 lea ecx, [ebp-18]
00437509 . 8D95 70FFFFFF lea edx, [ebp-90]
0043750F . 0FBFC0 movsx eax, ax
00437512 . 898D 58FFFFFF mov [ebp-A8], ecx
00437518 . 52 push edx
00437519 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
0043751F . 50 push eax
00437520 . 8D95 60FFFFFF lea edx, [ebp-A0]
00437526 . 51 push ecx
00437527 . 52 push edx
00437528 . C785 78FFFFFF>mov dword ptr [ebp-88], 1
00437532 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043753C . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437546 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043754C . 8D85 60FFFFFF lea eax, [ebp-A0]
00437552 . 8D4D 94 lea ecx, [ebp-6C]
00437555 . 50 push eax
00437556 . 51 push ecx
00437557 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
0043755D . 50 push eax
0043755E . FFD7 call edi
00437560 . 66:6BC0 63 imul ax, ax, 63
00437564 . 0F80 E00D0000 jo 0043834A
0043756A . 0FBFD0 movsx edx, ax
0043756D . 8B45 B8 mov eax, [ebp-48]
00437570 . 8D4D 94 lea ecx, [ebp-6C]
00437573 . 03D0 add edx, eax
00437575 . 0F80 CF0D0000 jo 0043834A
0043757B . 8955 B8 mov [ebp-48], edx
0043757E . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00437584 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043758A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437590 . 50 push eax
00437591 . 51 push ecx
00437592 . 6A 02 push 2
00437594 . FFD3 call ebx
00437596 . B8 01000000 mov eax, 1
0043759B . 83C4 0C add esp, 0C
0043759E . 66:0345 E4 add ax, [ebp-1C]
004375A2 . 0F80 A20D0000 jo 0043834A
004375A8 . 8945 E4 mov [ebp-1C], eax
004375AB .^ E9 49FFFFFF jmp 004374F9
004375B0 > 8D85 50FFFFFF lea eax, [ebp-B0]
004375B6 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004375BC . 8D55 E8 lea edx, [ebp-18]
004375BF . 50 push eax
004375C0 . 51 push ecx
004375C1 . 8995 58FFFFFF mov [ebp-A8], edx
004375C7 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004375D1 . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
004375D7 . 8D95 70FFFFFF lea edx, [ebp-90]
004375DD . 52 push edx
004375DE . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004375E4 . 8BD0 mov edx, eax
004375E6 . 8D4D E8 lea ecx, [ebp-18]
004375E9 . FFD6 call esi
004375EB . 8D8D 70FFFFFF lea ecx, [ebp-90]
004375F1 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004375F7 . 8B45 E8 mov eax, [ebp-18]
004375FA . 50 push eax
004375FB . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437601 . 8BC8 mov ecx, eax
00437603 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437609 . 8985 10FFFFFF mov [ebp-F0], eax
0043760F . B8 01000000 mov eax, 1
00437614 . 8945 E4 mov [ebp-1C], eax
00437617 > 66:3B85 10FFF>cmp ax, [ebp-F0]
0043761E . 0F8F AA000000 jg 004376CE
00437624 . 8D4D E8 lea ecx, [ebp-18]
00437627 . 8D95 70FFFFFF lea edx, [ebp-90]
0043762D . 0FBFC0 movsx eax, ax
00437630 . 898D 58FFFFFF mov [ebp-A8], ecx
00437636 . 52 push edx
00437637 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
0043763D . 50 push eax
0043763E . 8D95 60FFFFFF lea edx, [ebp-A0]
00437644 . 51 push ecx
00437645 . 52 push edx
00437646 . C785 78FFFFFF>mov dword ptr [ebp-88], 5
00437650 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043765A . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437664 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043766A . 8D85 60FFFFFF lea eax, [ebp-A0]
00437670 . 8D4D 94 lea ecx, [ebp-6C]
00437673 . 50 push eax
00437674 . 51 push ecx
00437675 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
0043767B . 50 push eax
0043767C . FFD7 call edi
0043767E . 66:6BC0 24 imul ax, ax, 24
00437682 . 0F80 C20C0000 jo 0043834A
00437688 . 0FBFD0 movsx edx, ax
0043768B . 8B45 B0 mov eax, [ebp-50]
0043768E . 8D4D 94 lea ecx, [ebp-6C]
00437691 . 03D0 add edx, eax
00437693 . 0F80 B10C0000 jo 0043834A
00437699 . 8955 B0 mov [ebp-50], edx
0043769C . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004376A2 . 8D85 60FFFFFF lea eax, [ebp-A0]
004376A8 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004376AE . 50 push eax
004376AF . 51 push ecx
004376B0 . 6A 02 push 2
004376B2 . FFD3 call ebx
004376B4 . B8 01000000 mov eax, 1
004376B9 . 83C4 0C add esp, 0C
004376BC . 66:0345 E4 add ax, [ebp-1C]
004376C0 . 0F80 840C0000 jo 0043834A
004376C6 . 8945 E4 mov [ebp-1C], eax
004376C9 .^ E9 49FFFFFF jmp 00437617
004376CE > 8D85 50FFFFFF lea eax, [ebp-B0]
004376D4 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004376DA . 8D55 E8 lea edx, [ebp-18]
004376DD . 50 push eax
004376DE . 51 push ecx
004376DF . 8995 58FFFFFF mov [ebp-A8], edx
004376E5 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004376EF . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
004376F5 . 8D95 70FFFFFF lea edx, [ebp-90]
004376FB . 52 push edx
004376FC . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437702 . 8BD0 mov edx, eax
00437704 . 8D4D E8 lea ecx, [ebp-18]
00437707 . FFD6 call esi
00437709 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043770F . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437715 . 8B45 E8 mov eax, [ebp-18]
00437718 . 50 push eax
00437719 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043771F . 8BC8 mov ecx, eax
00437721 . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437727 . 8985 08FFFFFF mov [ebp-F8], eax
0043772D . B8 01000000 mov eax, 1
00437732 . 8945 E4 mov [ebp-1C], eax
00437735 > 66:3B85 08FFF>cmp ax, [ebp-F8]
0043773C . 0F8F AA000000 jg 004377EC
00437742 . 8D4D E8 lea ecx, [ebp-18]
00437745 . 8D95 70FFFFFF lea edx, [ebp-90]
0043774B . 0FBFC0 movsx eax, ax
0043774E . 898D 58FFFFFF mov [ebp-A8], ecx
00437754 . 52 push edx
00437755 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
0043775B . 50 push eax
0043775C . 8D95 60FFFFFF lea edx, [ebp-A0]
00437762 . 51 push ecx
00437763 . 52 push edx
00437764 . C785 78FFFFFF>mov dword ptr [ebp-88], 1
0043776E . C785 70FFFFFF>mov dword ptr [ebp-90], 2
00437778 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437782 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
00437788 . 8D85 60FFFFFF lea eax, [ebp-A0]
0043778E . 8D4D 94 lea ecx, [ebp-6C]
00437791 . 50 push eax
00437792 . 51 push ecx
00437793 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00437799 . 50 push eax
0043779A . FFD7 call edi
0043779C . 66:6BC0 1C imul ax, ax, 1C
004377A0 . 0F80 A40B0000 jo 0043834A
004377A6 . 0FBFD0 movsx edx, ax
004377A9 . 8B45 A4 mov eax, [ebp-5C]
004377AC . 8D4D 94 lea ecx, [ebp-6C]
004377AF . 03D0 add edx, eax
004377B1 . 0F80 930B0000 jo 0043834A
004377B7 . 8955 A4 mov [ebp-5C], edx
004377BA . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004377C0 . 8D85 60FFFFFF lea eax, [ebp-A0]
004377C6 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004377CC . 50 push eax
004377CD . 51 push ecx
004377CE . 6A 02 push 2
004377D0 . FFD3 call ebx
004377D2 . B8 01000000 mov eax, 1
004377D7 . 83C4 0C add esp, 0C
004377DA . 66:0345 E4 add ax, [ebp-1C]
004377DE . 0F80 660B0000 jo 0043834A
004377E4 . 8945 E4 mov [ebp-1C], eax
004377E7 .^ E9 49FFFFFF jmp 00437735
004377EC > 8D85 50FFFFFF lea eax, [ebp-B0]
004377F2 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004377F8 . 8D55 E8 lea edx, [ebp-18]
004377FB . 50 push eax
004377FC . 51 push ecx
004377FD . 8995 58FFFFFF mov [ebp-A8], edx
00437803 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043780D . FF15 F8104000 call [<&MSVBVM60.rtcUpperCaseVar>] ; MSVBVM60.rtcUpperCaseVar
00437813 . 8D95 70FFFFFF lea edx, [ebp-90]
00437819 . 52 push edx
0043781A . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437820 . 8BD0 mov edx, eax
00437822 . 8D4D E8 lea ecx, [ebp-18]
00437825 . FFD6 call esi
00437827 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043782D . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437833 . 8B45 E8 mov eax, [ebp-18]
00437836 . 50 push eax
00437837 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043783D . 8BC8 mov ecx, eax
0043783F . FF15 1C114000 call [<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4
00437845 . 8985 00FFFFFF mov [ebp-100], eax
0043784B . B8 01000000 mov eax, 1
00437850 . 8945 E4 mov [ebp-1C], eax
00437853 > 66:3B85 00FFF>cmp ax, [ebp-100]
0043785A . 0F8F AA000000 jg 0043790A
00437860 . 8D4D E8 lea ecx, [ebp-18]
00437863 . 8D95 70FFFFFF lea edx, [ebp-90]
00437869 . 0FBFC0 movsx eax, ax
0043786C . 898D 58FFFFFF mov [ebp-A8], ecx
00437872 . 52 push edx
00437873 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437879 . 50 push eax
0043787A . 8D95 60FFFFFF lea edx, [ebp-A0]
00437880 . 51 push ecx
00437881 . 52 push edx
00437882 . C785 78FFFFFF>mov dword ptr [ebp-88], 5
0043788C . C785 70FFFFFF>mov dword ptr [ebp-90], 2
00437896 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
004378A0 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
004378A6 . 8D85 60FFFFFF lea eax, [ebp-A0]
004378AC . 8D4D 94 lea ecx, [ebp-6C]
004378AF . 50 push eax
004378B0 . 51 push ecx
004378B1 . FF15 A4114000 call [<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
004378B7 . 50 push eax
004378B8 . FFD7 call edi
004378BA . 66:6BC0 4A imul ax, ax, 4A
004378BE . 0F80 860A0000 jo 0043834A
004378C4 . 0FBFD0 movsx edx, ax
004378C7 . 8B45 9C mov eax, [ebp-64]
004378CA . 8D4D 94 lea ecx, [ebp-6C]
004378CD . 03D0 add edx, eax
004378CF . 0F80 750A0000 jo 0043834A
004378D5 . 8955 9C mov [ebp-64], edx
004378D8 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004378DE . 8D85 60FFFFFF lea eax, [ebp-A0]
004378E4 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004378EA . 50 push eax
004378EB . 51 push ecx
004378EC . 6A 02 push 2
004378EE . FFD3 call ebx
004378F0 . B8 01000000 mov eax, 1
004378F5 . 83C4 0C add esp, 0C
004378F8 . 66:0345 E4 add ax, [ebp-1C]
004378FC . 0F80 480A0000 jo 0043834A
00437902 . 8945 E4 mov [ebp-1C], eax
00437905 .^ E9 49FFFFFF jmp 00437853
0043790A > 8B3D E4114000 mov edi, [<&MSVBVM60.rtcHexVarFromVa>; MSVBVM60.rtcHexVarFromVar
00437910 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437916 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043791C . 8D55 D8 lea edx, [ebp-28]
0043791F . 50 push eax
00437920 . 51 push ecx
00437921 . 8995 58FFFFFF mov [ebp-A8], edx
00437927 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437931 . FFD7 call edi ; <&MSVBVM60.rtcHexVarFromVar>
00437933 . 8D95 70FFFFFF lea edx, [ebp-90]
00437939 . 52 push edx
0043793A . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437940 . 8BD0 mov edx, eax
00437942 . 8D4D E0 lea ecx, [ebp-20]
00437945 . FFD6 call esi
00437947 . 8D85 70FFFFFF lea eax, [ebp-90]
0043794D . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437953 . 50 push eax
00437954 . 51 push ecx
00437955 . 6A 02 push 2
00437957 . FFD3 call ebx
00437959 . 83C4 0C add esp, 0C
0043795C . 8D85 50FFFFFF lea eax, [ebp-B0]
00437962 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437968 . 8D55 D0 lea edx, [ebp-30]
0043796B . 50 push eax
0043796C . 51 push ecx
0043796D . 8995 58FFFFFF mov [ebp-A8], edx
00437973 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
0043797D . FFD7 call edi
0043797F . 8D95 70FFFFFF lea edx, [ebp-90]
00437985 . 52 push edx
00437986 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
0043798C . 8BD0 mov edx, eax
0043798E . 8D4D DC lea ecx, [ebp-24]
00437991 . FFD6 call esi
00437993 . 8D85 70FFFFFF lea eax, [ebp-90]
00437999 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043799F . 50 push eax
004379A0 . 51 push ecx
004379A1 . 6A 02 push 2
004379A3 . FFD3 call ebx
004379A5 . 83C4 0C add esp, 0C
004379A8 . 8D85 50FFFFFF lea eax, [ebp-B0]
004379AE . 8D8D 70FFFFFF lea ecx, [ebp-90]
004379B4 . 8D55 C8 lea edx, [ebp-38]
004379B7 . 50 push eax
004379B8 . 51 push ecx
004379B9 . 8995 58FFFFFF mov [ebp-A8], edx
004379BF . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
004379C9 . FFD7 call edi
004379CB . 8D95 70FFFFFF lea edx, [ebp-90]
004379D1 . 52 push edx
004379D2 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
004379D8 . 8BD0 mov edx, eax
004379DA . 8D4D D4 lea ecx, [ebp-2C]
004379DD . FFD6 call esi
004379DF . 8D85 70FFFFFF lea eax, [ebp-90]
004379E5 . 8D8D 70FFFFFF lea ecx, [ebp-90]
004379EB . 50 push eax
004379EC . 51 push ecx
004379ED . 6A 02 push 2
004379EF . FFD3 call ebx
004379F1 . 83C4 0C add esp, 0C
004379F4 . 8D85 50FFFFFF lea eax, [ebp-B0]
004379FA . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A00 . 8D55 C0 lea edx, [ebp-40]
00437A03 . 50 push eax
00437A04 . 51 push ecx
00437A05 . 8995 58FFFFFF mov [ebp-A8], edx
00437A0B . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437A15 . FFD7 call edi
00437A17 . 8D95 70FFFFFF lea edx, [ebp-90]
00437A1D . 52 push edx
00437A1E . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437A24 . 8BD0 mov edx, eax
00437A26 . 8D4D CC lea ecx, [ebp-34]
00437A29 . FFD6 call esi
00437A2B . 8D85 70FFFFFF lea eax, [ebp-90]
00437A31 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A37 . 50 push eax
00437A38 . 51 push ecx
00437A39 . 6A 02 push 2
00437A3B . FFD3 call ebx
00437A3D . 83C4 0C add esp, 0C
00437A40 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437A46 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A4C . 8D55 B8 lea edx, [ebp-48]
00437A4F . 50 push eax
00437A50 . 51 push ecx
00437A51 . 8995 58FFFFFF mov [ebp-A8], edx
00437A57 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437A61 . FFD7 call edi
00437A63 . 8D95 70FFFFFF lea edx, [ebp-90]
00437A69 . 52 push edx
00437A6A . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437A70 . 8BD0 mov edx, eax
00437A72 . 8D4D C4 lea ecx, [ebp-3C]
00437A75 . FFD6 call esi
00437A77 . 8D85 70FFFFFF lea eax, [ebp-90]
00437A7D . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A83 . 50 push eax
00437A84 . 51 push ecx
00437A85 . 6A 02 push 2
00437A87 . FFD3 call ebx
00437A89 . 83C4 0C add esp, 0C
00437A8C . 8D85 50FFFFFF lea eax, [ebp-B0]
00437A92 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437A98 . 8D55 B0 lea edx, [ebp-50]
00437A9B . 50 push eax
00437A9C . 51 push ecx
00437A9D . 8995 58FFFFFF mov [ebp-A8], edx
00437AA3 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437AAD . FFD7 call edi
00437AAF . 8D95 70FFFFFF lea edx, [ebp-90]
00437AB5 . 52 push edx
00437AB6 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437ABC . 8BD0 mov edx, eax
00437ABE . 8D4D BC lea ecx, [ebp-44]
00437AC1 . FFD6 call esi
00437AC3 . 8D85 70FFFFFF lea eax, [ebp-90]
00437AC9 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437ACF . 50 push eax
00437AD0 . 51 push ecx
00437AD1 . 6A 02 push 2
00437AD3 . FFD3 call ebx
00437AD5 . 83C4 0C add esp, 0C
00437AD8 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437ADE . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437AE4 . 8D55 A4 lea edx, [ebp-5C]
00437AE7 . 50 push eax
00437AE8 . 51 push ecx
00437AE9 . 8995 58FFFFFF mov [ebp-A8], edx
00437AEF . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437AF9 . FFD7 call edi
00437AFB . 8D95 70FFFFFF lea edx, [ebp-90]
00437B01 . 52 push edx
00437B02 . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437B08 . 8BD0 mov edx, eax
00437B0A . 8D4D B4 lea ecx, [ebp-4C]
00437B0D . FFD6 call esi
00437B0F . 8D85 70FFFFFF lea eax, [ebp-90]
00437B15 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437B1B . 50 push eax
00437B1C . 51 push ecx
00437B1D . 6A 02 push 2
00437B1F . FFD3 call ebx
00437B21 . 83C4 0C add esp, 0C
00437B24 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437B2A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437B30 . 8D55 9C lea edx, [ebp-64]
00437B33 . 50 push eax
00437B34 . 51 push ecx
00437B35 . 8995 58FFFFFF mov [ebp-A8], edx
00437B3B . C785 50FFFFFF>mov dword ptr [ebp-B0], 4003
00437B45 . FFD7 call edi
00437B47 . 8D95 70FFFFFF lea edx, [ebp-90]
00437B4D . 52 push edx
00437B4E . FF15 50104000 call [<&MSVBVM60.__vbaStrErrVarCopy>] ; MSVBVM60.__vbaStrErrVarCopy
00437B54 . 8BD0 mov edx, eax
00437B56 . 8D4D A8 lea ecx, [ebp-58]
00437B59 . FFD6 call esi
00437B5B . 8D85 70FFFFFF lea eax, [ebp-90]
00437B61 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437B67 . 50 push eax
00437B68 . 51 push ecx
00437B69 . 6A 02 push 2
00437B6B . FFD3 call ebx
00437B6D . 8B55 E0 mov edx, [ebp-20]
00437B70 . 83C4 0C add esp, 0C
00437B73 . 52 push edx
00437B74 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437B7A . 83F8 05 cmp eax, 5
00437B7D . 7E 4D jle short 00437BCC
00437B7F . 8B3D 34124000 mov edi, [<&MSVBVM60.rtcLeftCharVar>>; MSVBVM60.rtcLeftCharVar
00437B85 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437B8B . 6A 05 push 5
00437B8D . 8D95 70FFFFFF lea edx, [ebp-90]
00437B93 . 8D45 E0 lea eax, [ebp-20]
00437B96 . 51 push ecx
00437B97 . 52 push edx
00437B98 . 8985 58FFFFFF mov [ebp-A8], eax
00437B9E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437BA8 . FFD7 call edi ; <&MSVBVM60.rtcLeftCharVar>
00437BAA . 8D85 70FFFFFF lea eax, [ebp-90]
00437BB0 . 50 push eax
00437BB1 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437BB7 . 8BD0 mov edx, eax
00437BB9 . 8D4D E0 lea ecx, [ebp-20]
00437BBC . FFD6 call esi
00437BBE . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437BC4 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437BCA . EB 06 jmp short 00437BD2
00437BCC > 8B3D 34124000 mov edi, [<&MSVBVM60.rtcLeftCharVar>>; MSVBVM60.rtcLeftCharVar
00437BD2 > 8B4D DC mov ecx, [ebp-24]
00437BD5 . 51 push ecx
00437BD6 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437BDC . 83F8 06 cmp eax, 6
00437BDF . 7E 45 jle short 00437C26
00437BE1 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437BE7 . 6A 06 push 6
00437BE9 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437BEF . 8D55 DC lea edx, [ebp-24]
00437BF2 . 50 push eax
00437BF3 . 51 push ecx
00437BF4 . 8995 58FFFFFF mov [ebp-A8], edx
00437BFA . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437C04 . FFD7 call edi
00437C06 . 8D95 70FFFFFF lea edx, [ebp-90]
00437C0C . 52 push edx
00437C0D . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437C13 . 8BD0 mov edx, eax
00437C15 . 8D4D DC lea ecx, [ebp-24]
00437C18 . FFD6 call esi
00437C1A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437C20 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437C26 > 8B45 D4 mov eax, [ebp-2C]
00437C29 . 50 push eax
00437C2A . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437C30 . 83F8 04 cmp eax, 4
00437C33 . 7E 45 jle short 00437C7A
00437C35 . 8D95 50FFFFFF lea edx, [ebp-B0]
00437C3B . 6A 04 push 4
00437C3D . 8D85 70FFFFFF lea eax, [ebp-90]
00437C43 . 8D4D D4 lea ecx, [ebp-2C]
00437C46 . 52 push edx
00437C47 . 50 push eax
00437C48 . 898D 58FFFFFF mov [ebp-A8], ecx
00437C4E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437C58 . FFD7 call edi
00437C5A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437C60 . 51 push ecx
00437C61 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437C67 . 8BD0 mov edx, eax
00437C69 . 8D4D D4 lea ecx, [ebp-2C]
00437C6C . FFD6 call esi
00437C6E . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437C74 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437C7A > 8B55 CC mov edx, [ebp-34]
00437C7D . 52 push edx
00437C7E . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437C84 . 83F8 04 cmp eax, 4
00437C87 . 7E 45 jle short 00437CCE
00437C89 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437C8F . 6A 04 push 4
00437C91 . 8D95 70FFFFFF lea edx, [ebp-90]
00437C97 . 8D45 CC lea eax, [ebp-34]
00437C9A . 51 push ecx
00437C9B . 52 push edx
00437C9C . 8985 58FFFFFF mov [ebp-A8], eax
00437CA2 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437CAC . FFD7 call edi
00437CAE . 8D85 70FFFFFF lea eax, [ebp-90]
00437CB4 . 50 push eax
00437CB5 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437CBB . 8BD0 mov edx, eax
00437CBD . 8D4D CC lea ecx, [ebp-34]
00437CC0 . FFD6 call esi
00437CC2 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437CC8 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437CCE > 8B4D C4 mov ecx, [ebp-3C]
00437CD1 . 51 push ecx
00437CD2 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437CD8 . 83F8 05 cmp eax, 5
00437CDB . 7E 45 jle short 00437D22
00437CDD . 8D85 50FFFFFF lea eax, [ebp-B0]
00437CE3 . 6A 05 push 5
00437CE5 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437CEB . 8D55 C4 lea edx, [ebp-3C]
00437CEE . 50 push eax
00437CEF . 51 push ecx
00437CF0 . 8995 58FFFFFF mov [ebp-A8], edx
00437CF6 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437D00 . FFD7 call edi
00437D02 . 8D95 70FFFFFF lea edx, [ebp-90]
00437D08 . 52 push edx
00437D09 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437D0F . 8BD0 mov edx, eax
00437D11 . 8D4D C4 lea ecx, [ebp-3C]
00437D14 . FFD6 call esi
00437D16 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437D1C . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437D22 > 8B45 BC mov eax, [ebp-44]
00437D25 . 50 push eax
00437D26 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437D2C . 83F8 04 cmp eax, 4
00437D2F . 7E 45 jle short 00437D76
00437D31 . 8D95 50FFFFFF lea edx, [ebp-B0]
00437D37 . 6A 04 push 4
00437D39 . 8D85 70FFFFFF lea eax, [ebp-90]
00437D3F . 8D4D BC lea ecx, [ebp-44]
00437D42 . 52 push edx
00437D43 . 50 push eax
00437D44 . 898D 58FFFFFF mov [ebp-A8], ecx
00437D4A . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437D54 . FFD7 call edi
00437D56 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437D5C . 51 push ecx
00437D5D . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437D63 . 8BD0 mov edx, eax
00437D65 . 8D4D BC lea ecx, [ebp-44]
00437D68 . FFD6 call esi
00437D6A . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437D70 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437D76 > 8B55 C4 mov edx, [ebp-3C]
00437D79 . 52 push edx
00437D7A . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437D80 . 83F8 05 cmp eax, 5
00437D83 . 7E 45 jle short 00437DCA
00437D85 . 8D8D 50FFFFFF lea ecx, [ebp-B0]
00437D8B . 6A 05 push 5
00437D8D . 8D95 70FFFFFF lea edx, [ebp-90]
00437D93 . 8D45 C4 lea eax, [ebp-3C]
00437D96 . 51 push ecx
00437D97 . 52 push edx
00437D98 . 8985 58FFFFFF mov [ebp-A8], eax
00437D9E . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437DA8 . FFD7 call edi
00437DAA . 8D85 70FFFFFF lea eax, [ebp-90]
00437DB0 . 50 push eax
00437DB1 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437DB7 . 8BD0 mov edx, eax
00437DB9 . 8D4D C4 lea ecx, [ebp-3C]
00437DBC . FFD6 call esi
00437DBE . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437DC4 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437DCA > 8B4D BC mov ecx, [ebp-44]
00437DCD . 51 push ecx
00437DCE . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00437DD4 . 83F8 04 cmp eax, 4
00437DD7 . 7E 45 jle short 00437E1E
00437DD9 . 8D85 50FFFFFF lea eax, [ebp-B0]
00437DDF . 6A 04 push 4
00437DE1 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437DE7 . 8D55 BC lea edx, [ebp-44]
00437DEA . 50 push eax
00437DEB . 51 push ecx
00437DEC . 8995 58FFFFFF mov [ebp-A8], edx
00437DF2 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437DFC . FFD7 call edi
00437DFE . 8D95 70FFFFFF lea edx, [ebp-90]
00437E04 . 52 push edx
00437E05 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437E0B . 8BD0 mov edx, eax
00437E0D . 8D4D BC lea ecx, [ebp-44]
00437E10 . FFD6 call esi
00437E12 . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437E18 . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00437E1E > 8B45 E0 mov eax, [ebp-20]
00437E21 . 8B4D DC mov ecx, [ebp-24]
00437E24 . 8B3D 68104000 mov edi, [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
00437E2A . 50 push eax
00437E2B . 51 push ecx
00437E2C . FFD7 call edi ; <&MSVBVM60.__vbaStrCat>
00437E2E . 8BD0 mov edx, eax
00437E30 . 8D4D 94 lea ecx, [ebp-6C]
00437E33 . FFD6 call esi
00437E35 . 8B55 D4 mov edx, [ebp-2C]
00437E38 . 50 push eax
00437E39 . 52 push edx
00437E3A . FFD7 call edi
00437E3C . 8BD0 mov edx, eax
00437E3E . 8D4D 90 lea ecx, [ebp-70]
00437E41 . FFD6 call esi
00437E43 . 50 push eax
00437E44 . 8B45 CC mov eax, [ebp-34]
00437E47 . 50 push eax
00437E48 . FFD7 call edi
00437E4A . 8BD0 mov edx, eax
00437E4C . 8D4D 8C lea ecx, [ebp-74]
00437E4F . FFD6 call esi
00437E51 . 8B4D C4 mov ecx, [ebp-3C]
00437E54 . 50 push eax
00437E55 . 51 push ecx
00437E56 . FFD7 call edi
00437E58 . 8BD0 mov edx, eax
00437E5A . 8D4D 88 lea ecx, [ebp-78]
00437E5D . FFD6 call esi
00437E5F . 8B55 BC mov edx, [ebp-44]
00437E62 . 50 push eax
00437E63 . 52 push edx
00437E64 . FFD7 call edi
00437E66 . 8BD0 mov edx, eax
00437E68 . 8D4D 84 lea ecx, [ebp-7C]
00437E6B . FFD6 call esi
00437E6D . 50 push eax
00437E6E . 8B45 B4 mov eax, [ebp-4C]
00437E71 . 50 push eax
00437E72 . FFD7 call edi
00437E74 . 8BD0 mov edx, eax
00437E76 . 8D4D 80 lea ecx, [ebp-80]
00437E79 . FFD6 call esi
00437E7B . 8B4D A8 mov ecx, [ebp-58]
00437E7E . 50 push eax
00437E7F . 51 push ecx
00437E80 . FFD7 call edi
00437E82 . 8BD0 mov edx, eax
00437E84 . 8D4D A0 lea ecx, [ebp-60]
00437E87 . FFD6 call esi
00437E89 . 8D55 80 lea edx, [ebp-80]
00437E8C . 8D45 84 lea eax, [ebp-7C]
00437E8F . 52 push edx
00437E90 . 8D4D 88 lea ecx, [ebp-78]
00437E93 . 50 push eax
00437E94 . 8D55 8C lea edx, [ebp-74]
00437E97 . 51 push ecx
00437E98 . 8D45 90 lea eax, [ebp-70]
00437E9B . 52 push edx
00437E9C . 8D4D 94 lea ecx, [ebp-6C]
00437E9F . 50 push eax
00437EA0 . 51 push ecx
00437EA1 . 6A 06 push 6
00437EA3 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00437EA9 . 83C4 1C add esp, 1C
00437EAC . 8D55 A0 lea edx, [ebp-60]
00437EAF . 8D45 A0 lea eax, [ebp-60]
00437EB2 . 52 push edx
00437EB3 . 50 push eax
00437EB4 . E8 47EFFFFF call 00436E00
00437EB9 . 8BD0 mov edx, eax
00437EBB . 8D4D A0 lea ecx, [ebp-60]
00437EBE . FFD6 call esi
00437EC0 . 8D4D A0 lea ecx, [ebp-60]
00437EC3 . 8D95 70FFFFFF lea edx, [ebp-90]
00437EC9 . C785 78FFFFFF>mov dword ptr [ebp-88], 0E
00437ED3 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
00437EDD . 898D 58FFFFFF mov [ebp-A8], ecx
00437EE3 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
00437EED . 52 push edx
00437EEE . 8D85 50FFFFFF lea eax, [ebp-B0]
00437EF4 . 6A 08 push 8
00437EF6 . 8D8D 60FFFFFF lea ecx, [ebp-A0]
00437EFC . 50 push eax
00437EFD . 51 push ecx
00437EFE . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
00437F04 . 8D95 60FFFFFF lea edx, [ebp-A0]
00437F0A . 52 push edx
00437F0B . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00437F11 . 8BD0 mov edx, eax
00437F13 . 8D4D A0 lea ecx, [ebp-60]
00437F16 . FFD6 call esi
00437F18 . 8D85 60FFFFFF lea eax, [ebp-A0]
00437F1E . 8D8D 70FFFFFF lea ecx, [ebp-90]
00437F24 . 50 push eax
00437F25 . 51 push ecx
00437F26 . 6A 02 push 2
00437F28 . FFD3 call ebx
00437F2A . 83C4 0C add esp, 0C
00437F2D . 8D55 A0 lea edx, [ebp-60]
00437F30 . 8D45 A0 lea eax, [ebp-60]
00437F33 . 52 push edx
00437F34 . 50 push eax
00437F35 . E8 C6EEFFFF call 00436E00
00437F3A . 8BD0 mov edx, eax
00437F3C . 8D4D 98 lea ecx, [ebp-68]
00437F3F . FFD6 call esi
00437F41 . 8B4D 98 mov ecx, [ebp-68]
00437F44 . 8B3D 68114000 mov edi, [<&MSVBVM60.rtcReplace>] ; MSVBVM60.rtcReplace
00437F4A . 6A 00 push 0
00437F4C . 6A FF push -1
00437F4E . 6A 01 push 1
00437F50 . 68 B01A4100 push 00411AB0
00437F55 . 68 A81A4100 push 00411AA8
00437F5A . 51 push ecx
00437F5B . FFD7 call edi ; <&MSVBVM60.rtcReplace>
00437F5D . 8BD0 mov edx, eax
00437F5F . 8D4D 98 lea ecx, [ebp-68]
00437F62 . FFD6 call esi
00437F64 . 8B55 98 mov edx, [ebp-68]
00437F67 . 6A 00 push 0
00437F69 . 6A FF push -1
00437F6B . 6A 01 push 1
00437F6D . 68 C01A4100 push 00411AC0
00437F72 . 68 B81A4100 push 00411AB8
00437F77 . 52 push edx
00437F78 . FFD7 call edi
00437F7A . 8BD0 mov edx, eax
00437F7C . 8D4D 98 lea ecx, [ebp-68]
00437F7F . FFD6 call esi
00437F81 . 8B45 98 mov eax, [ebp-68]
00437F84 . 6A 00 push 0
00437F86 . 6A FF push -1
00437F88 . 6A 01 push 1
00437F8A . 68 B01A4100 push 00411AB0
00437F8F . 68 C81A4100 push 00411AC8
00437F94 . 50 push eax
00437F95 . FFD7 call edi
00437F97 . 8BD0 mov edx, eax
00437F99 . 8D4D 98 lea ecx, [ebp-68]
00437F9C . FFD6 call esi
00437F9E . 8B4D 98 mov ecx, [ebp-68]
00437FA1 . 6A 00 push 0
00437FA3 . 6A FF push -1
00437FA5 . 6A 01 push 1
00437FA7 . 68 D81A4100 push 00411AD8
00437FAC . 68 D01A4100 push 00411AD0
00437FB1 . 51 push ecx
00437FB2 . FFD7 call edi
00437FB4 . 8BD0 mov edx, eax
00437FB6 . 8D4D 98 lea ecx, [ebp-68]
00437FB9 . FFD6 call esi
00437FBB . 8B55 98 mov edx, [ebp-68]
00437FBE . 6A 00 push 0
00437FC0 . 6A FF push -1
00437FC2 . 6A 01 push 1
00437FC4 . 68 E81A4100 push 00411AE8
00437FC9 . 68 E01A4100 push 00411AE0
00437FCE . 52 push edx
00437FCF . FFD7 call edi
00437FD1 . 8BD0 mov edx, eax
00437FD3 . 8D4D 98 lea ecx, [ebp-68]
00437FD6 . FFD6 call esi
00437FD8 . 8B45 98 mov eax, [ebp-68]
00437FDB . 6A 00 push 0
00437FDD . 6A FF push -1
00437FDF . 6A 01 push 1
00437FE1 . 68 20064100 push 00410620
00437FE6 . 68 F01A4100 push 00411AF0
00437FEB . 50 push eax
00437FEC . FFD7 call edi
00437FEE . 8BD0 mov edx, eax
00437FF0 . 8D4D 98 lea ecx, [ebp-68]
00437FF3 . FFD6 call esi
00437FF5 . 8B4D 98 mov ecx, [ebp-68]
00437FF8 . 6A 00 push 0
00437FFA . 6A FF push -1
00437FFC . 6A 01 push 1
00437FFE . 68 001B4100 push 00411B00
00438003 . 68 F81A4100 push 00411AF8
00438008 . 51 push ecx
00438009 . FFD7 call edi
0043800B . 8BD0 mov edx, eax
0043800D . 8D4D 98 lea ecx, [ebp-68]
00438010 . FFD6 call esi
00438012 . 8B55 98 mov edx, [ebp-68]
00438015 . 6A 00 push 0
00438017 . 6A FF push -1
00438019 . 6A 01 push 1
0043801B . 68 001B4100 push 00411B00
00438020 . 68 081B4100 push 00411B08
00438025 . 52 push edx
00438026 . FFD7 call edi
00438028 . 8BD0 mov edx, eax
0043802A . 8D4D 98 lea ecx, [ebp-68]
0043802D . FFD6 call esi
0043802F . 8B45 98 mov eax, [ebp-68]
00438032 . 6A 00 push 0
00438034 . 6A FF push -1
00438036 . 6A 01 push 1
00438038 . 68 181B4100 push 00411B18
0043803D . 68 101B4100 push 00411B10
00438042 . 50 push eax
00438043 . FFD7 call edi
00438045 . 8BD0 mov edx, eax
00438047 . 8D4D 98 lea ecx, [ebp-68]
0043804A . FFD6 call esi
0043804C . 8B4D 98 mov ecx, [ebp-68]
0043804F . 6A 00 push 0
00438051 . 6A FF push -1
00438053 . 6A 01 push 1
00438055 . 68 E81A4100 push 00411AE8
0043805A . 68 201B4100 push 00411B20
0043805F . 51 push ecx
00438060 . FFD7 call edi
00438062 . 8BD0 mov edx, eax
00438064 . 8D4D 98 lea ecx, [ebp-68]
00438067 . FFD6 call esi
00438069 . 8B55 98 mov edx, [ebp-68]
0043806C . 6A 00 push 0
0043806E . 6A FF push -1
00438070 . 6A 01 push 1
00438072 . 68 301B4100 push 00411B30
00438077 . 68 281B4100 push 00411B28
0043807C . 52 push edx
0043807D . FFD7 call edi
0043807F . 8BD0 mov edx, eax
00438081 . 8D4D 98 lea ecx, [ebp-68]
00438084 . FFD6 call esi
00438086 . 8B45 98 mov eax, [ebp-68]
00438089 . 6A 00 push 0
0043808B . 6A FF push -1
0043808D . 6A 01 push 1
0043808F . 68 401B4100 push 00411B40
00438094 . 68 381B4100 push 00411B38
00438099 . 50 push eax
0043809A . FFD7 call edi
0043809C . 8BD0 mov edx, eax
0043809E . 8D4D 98 lea ecx, [ebp-68]
004380A1 . FFD6 call esi
004380A3 . 6A 00 push 0
004380A5 . 6A FF push -1
004380A7 . 8B4D 98 mov ecx, [ebp-68]
004380AA . 6A 01 push 1
004380AC . 68 501B4100 push 00411B50
004380B1 . 68 481B4100 push 00411B48
004380B6 . 51 push ecx
004380B7 . FFD7 call edi
004380B9 . 8BD0 mov edx, eax
004380BB . 8D4D 98 lea ecx, [ebp-68]
004380BE . FFD6 call esi
004380C0 . 8B55 98 mov edx, [ebp-68]
004380C3 . 6A 00 push 0
004380C5 . 6A FF push -1
004380C7 . 6A 01 push 1
004380C9 . 68 C01A4100 push 00411AC0
004380CE . 68 581B4100 push 00411B58
004380D3 . 52 push edx
004380D4 . FFD7 call edi
004380D6 . 8BD0 mov edx, eax
004380D8 . 8D4D 98 lea ecx, [ebp-68]
004380DB . FFD6 call esi
004380DD . 8B45 98 mov eax, [ebp-68]
004380E0 . 6A 00 push 0
004380E2 . 6A FF push -1
004380E4 . 6A 01 push 1
004380E6 . 68 301B4100 push 00411B30
004380EB . 68 601B4100 push 00411B60
004380F0 . 50 push eax
004380F1 . FFD7 call edi
004380F3 . 8BD0 mov edx, eax
004380F5 . 8D4D 98 lea ecx, [ebp-68]
004380F8 . FFD6 call esi
004380FA . 8B4D 98 mov ecx, [ebp-68]
004380FD . 6A 00 push 0
004380FF . 6A FF push -1
00438101 . 6A 01 push 1
00438103 . 68 E81A4100 push 00411AE8
00438108 . 68 681B4100 push 00411B68
0043810D . 51 push ecx
0043810E . FFD7 call edi
00438110 . 8BD0 mov edx, eax
00438112 . 8D4D 98 lea ecx, [ebp-68]
00438115 . FFD6 call esi
00438117 . 8B55 98 mov edx, [ebp-68]
0043811A . 6A 00 push 0
0043811C . 6A FF push -1
0043811E . 6A 01 push 1
00438120 . 68 20064100 push 00410620
00438125 . 68 701B4100 push 00411B70
0043812A . 52 push edx
0043812B . FFD7 call edi
0043812D . 8BD0 mov edx, eax
0043812F . 8D4D 98 lea ecx, [ebp-68]
00438132 . FFD6 call esi
00438134 . 8B45 98 mov eax, [ebp-68]
00438137 . 6A 00 push 0
00438139 . 6A FF push -1
0043813B . 6A 01 push 1
0043813D . 68 D81A4100 push 00411AD8
00438142 . 68 781B4100 push 00411B78
00438147 . 50 push eax
00438148 . FFD7 call edi
0043814A . 8BD0 mov edx, eax
0043814C . 8D4D 98 lea ecx, [ebp-68]
0043814F . FFD6 call esi
00438151 . 8B4D 98 mov ecx, [ebp-68]
00438154 . 6A 00 push 0
00438156 . 6A FF push -1
00438158 . 6A 01 push 1
0043815A . 68 C01A4100 push 00411AC0
0043815F . 68 801B4100 push 00411B80
00438164 . 51 push ecx
00438165 . FFD7 call edi
00438167 . 8BD0 mov edx, eax
00438169 . 8D4D 98 lea ecx, [ebp-68]
0043816C . FFD6 call esi
0043816E . 8B55 98 mov edx, [ebp-68]
00438171 . 6A 00 push 0
00438173 . 6A FF push -1
00438175 . 6A 01 push 1
00438177 . 68 B01A4100 push 00411AB0
0043817C . 68 881B4100 push 00411B88
00438181 . 52 push edx
00438182 . FFD7 call edi
00438184 . 8BD0 mov edx, eax
00438186 . 8D4D 98 lea ecx, [ebp-68]
00438189 . FFD6 call esi
0043818B . 8B45 98 mov eax, [ebp-68]
0043818E . 6A 00 push 0
00438190 . 6A FF push -1
00438192 . 6A 01 push 1
00438194 . 68 001B4100 push 00411B00
00438199 . 68 901B4100 push 00411B90
0043819E . 50 push eax
0043819F . FFD7 call edi
004381A1 . 8BD0 mov edx, eax
004381A3 . 8D4D 98 lea ecx, [ebp-68]
004381A6 . FFD6 call esi
004381A8 . 8B4D 98 mov ecx, [ebp-68]
004381AB . 6A 00 push 0
004381AD . 6A FF push -1
004381AF . 6A 01 push 1
004381B1 . 68 C01A4100 push 00411AC0
004381B6 . 68 981B4100 push 00411B98
004381BB . 51 push ecx
004381BC . FFD7 call edi
004381BE . 8BD0 mov edx, eax
004381C0 . 8D4D 98 lea ecx, [ebp-68]
004381C3 . FFD6 call esi
004381C5 . 8B55 98 mov edx, [ebp-68]
004381C8 . 6A 00 push 0
004381CA . 6A FF push -1
004381CC . 6A 01 push 1
004381CE . 68 B01A4100 push 00411AB0
004381D3 . 68 A01B4100 push 00411BA0
004381D8 . 52 push edx
004381D9 . FFD7 call edi
004381DB . 8BD0 mov edx, eax
004381DD . 8D4D 98 lea ecx, [ebp-68]
004381E0 . FFD6 call esi
004381E2 . 8B45 98 mov eax, [ebp-68]
004381E5 . 6A 00 push 0
004381E7 . 6A FF push -1
004381E9 . 6A 01 push 1
004381EB . 68 C01A4100 push 00411AC0
004381F0 . 68 A81B4100 push 00411BA8
004381F5 . 50 push eax
004381F6 . FFD7 call edi
004381F8 . 8BD0 mov edx, eax
004381FA . 8D4D 98 lea ecx, [ebp-68]
004381FD . FFD6 call esi
004381FF . 8B4D 98 mov ecx, [ebp-68]
00438202 . 6A 00 push 0
00438204 . 6A FF push -1
00438206 . 6A 01 push 1
00438208 . 68 301B4100 push 00411B30
0043820D . 68 841A4100 push 00411A84
00438212 . 51 push ecx
00438213 . FFD7 call edi
00438215 . 8BD0 mov edx, eax
00438217 . 8D4D 98 lea ecx, [ebp-68]
0043821A . FFD6 call esi
0043821C . 8B55 98 mov edx, [ebp-68]
0043821F . 6A 00 push 0
00438221 . 6A FF push -1
00438223 . 6A 01 push 1
00438225 . 68 401B4100 push 00411B40
0043822A . 68 8C1A4100 push 00411A8C
0043822F . 52 push edx
00438230 . FFD7 call edi
00438232 . 8BD0 mov edx, eax
00438234 . 8D4D 98 lea ecx, [ebp-68]
00438237 . FFD6 call esi
00438239 . 8D8D 70FFFFFF lea ecx, [ebp-90]
0043823F . 8D45 98 lea eax, [ebp-68]
00438242 . 51 push ecx
00438243 . 8D95 50FFFFFF lea edx, [ebp-B0]
00438249 . 6A 10 push 10
0043824B . C785 78FFFFFF>mov dword ptr [ebp-88], 0E
00438255 . C785 70FFFFFF>mov dword ptr [ebp-90], 2
0043825F . 8985 58FFFFFF mov [ebp-A8], eax
00438265 . C785 50FFFFFF>mov dword ptr [ebp-B0], 4008
0043826F . 52 push edx
00438270 . 8D85 60FFFFFF lea eax, [ebp-A0]
00438276 . 50 push eax
00438277 . FF15 E0104000 call [<&MSVBVM60.rtcMidCharVar>] ; MSVBVM60.rtcMidCharVar
0043827D . 8D8D 60FFFFFF lea ecx, [ebp-A0]
00438283 . 51 push ecx
00438284 . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
0043828A . 8BD0 mov edx, eax
0043828C . 8D4D AC lea ecx, [ebp-54]
0043828F . FFD6 call esi
00438291 . 8D95 60FFFFFF lea edx, [ebp-A0]
00438297 . 8D85 70FFFFFF lea eax, [ebp-90]
0043829D . 52 push edx
0043829E . 50 push eax
0043829F . 6A 02 push 2
004382A1 . FFD3 call ebx
004382A3 . 83C4 0C add esp, 0C
004382A6 . 68 34834300 push 00438334
004382AB . EB 49 jmp short 004382F6
004382AD . F645 FC 04 test byte ptr [ebp-4], 4
004382B1 . 74 09 je short 004382BC
004382B3 . 8D4D AC lea ecx, [ebp-54]
004382B6 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004382BC > 8D4D 80 lea ecx, [ebp-80]
004382BF . 8D55 84 lea edx, [ebp-7C]
004382C2 . 51 push ecx
004382C3 . 8D45 88 lea eax, [ebp-78]
004382C6 . 52 push edx
004382C7 . 8D4D 8C lea ecx, [ebp-74]
004382CA . 50 push eax
004382CB . 8D55 90 lea edx, [ebp-70]
004382CE . 51 push ecx
004382CF . 8D45 94 lea eax, [ebp-6C]
004382D2 . 52 push edx
004382D3 . 50 push eax
004382D4 . 6A 06 push 6
004382D6 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004382DC . 8D8D 60FFFFFF lea ecx, [ebp-A0]
004382E2 . 8D95 70FFFFFF lea edx, [ebp-90]
004382E8 . 51 push ecx
004382E9 . 52 push edx
004382EA . 6A 02 push 2
004382EC . FF15 40104000 call [<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
004382F2 . 83C4 28 add esp, 28
004382F5 . C3 retn
004382F6 > 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004382FC . 8D4D E8 lea ecx, [ebp-18]
004382FF . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
00438301 . 8D4D E0 lea ecx, [ebp-20]
00438304 . FFD6 call esi
00438306 . 8D4D DC lea ecx, [ebp-24]
00438309 . FFD6 call esi
0043830B . 8D4D D4 lea ecx, [ebp-2C]
0043830E . FFD6 call esi
00438310 . 8D4D CC lea ecx, [ebp-34]
00438313 . FFD6 call esi
00438315 . 8D4D C4 lea ecx, [ebp-3C]
00438318 . FFD6 call esi
0043831A . 8D4D BC lea ecx, [ebp-44]
0043831D . FFD6 call esi
0043831F . 8D4D B4 lea ecx, [ebp-4C]
00438322 . FFD6 call esi
00438324 . 8D4D A8 lea ecx, [ebp-58]
00438327 . FFD6 call esi
00438329 . 8D4D A0 lea ecx, [ebp-60]
0043832C . FFD6 call esi
0043832E . 8D4D 98 lea ecx, [ebp-68]
00438331 . FFD6 call esi
00438333 . C3 retn
00438334 . 8B4D EC mov ecx, [ebp-14]
00438337 . 8B45 AC mov eax, [ebp-54]
0043833A . 5F pop edi
0043833B . 5E pop esi
0043833C . 64:890D 00000>mov fs:[0], ecx
00438343 . 5B pop ebx
00438344 . 8BE5 mov esp, ebp
00438346 . 5D pop ebp
00438347 . C2 0400 retn 4
0043834A > FF15 BC114000 call [<&MSVBVM60.__vbaErrorOverflow>] ; MSVBVM60.__vbaErrorOverflow
00438350 $ 55 push ebp
00438351 . 8BEC mov ebp, esp
00438353 . 83EC 0C sub esp, 0C
00438356 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
0043835B . 64:A1 0000000>mov eax, fs:[0]
00438361 . 50 push eax
00438362 . 64:8925 00000>mov fs:[0], esp
00438369 . 83EC 48 sub esp, 48
0043836C . 53 push ebx
0043836D . 56 push esi
0043836E . 57 push edi
0043836F . 8965 F4 mov [ebp-C], esp
00438372 . C745 F8 D8174>mov dword ptr [ebp-8], 004017D8
00438379 . 8B55 0C mov edx, [ebp+C]
0043837C . 33C0 xor eax, eax
0043837E . 8945 D8 mov [ebp-28], eax
00438381 . 33F6 xor esi, esi
00438383 . 8945 DC mov [ebp-24], eax
00438386 . 8D4D D0 lea ecx, [ebp-30]
00438389 . 8975 E8 mov [ebp-18], esi
0043838C . 8975 E4 mov [ebp-1C], esi
0043838F . 8945 E0 mov [ebp-20], eax
00438392 . 8975 D0 mov [ebp-30], esi
00438395 . 8975 CC mov [ebp-34], esi
00438398 . 8975 BC mov [ebp-44], esi
0043839B . 8975 B8 mov [ebp-48], esi
0043839E . 8975 B4 mov [ebp-4C], esi
004383A1 . 8975 B0 mov [ebp-50], esi
004383A4 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
004383AA . 8D4D CC lea ecx, [ebp-34]
004383AD . 8D55 E8 lea edx, [ebp-18]
004383B0 . 51 push ecx
004383B1 . 8D45 D8 lea eax, [ebp-28]
004383B4 . 8B3D 20124000 mov edi, [<&MSVBVM60.__vbaStrToAnsi>>; MSVBVM60.__vbaStrToAnsi
004383BA . 52 push edx
004383BB . 50 push eax
004383BC . 68 3F000F00 push 0F003F
004383C1 . 56 push esi
004383C2 . 56 push esi
004383C3 . 56 push esi
004383C4 . 8D4D B8 lea ecx, [ebp-48]
004383C7 . 68 B41B4100 push 00411BB4 ; UNICODE "Software\pro edit\registration"
004383CC . 51 push ecx
004383CD . FFD7 call edi ; <&MSVBVM60.__vbaStrToAnsi>
004383CF . 50 push eax
004383D0 . 68 02000080 push 80000002
004383D5 . E8 BA6AFDFF call 0040EE94
004383DA . 8B1D 74104000 mov ebx, [<&MSVBVM60.__vbaSetSystemE>; MSVBVM60.__vbaSetSystemError
004383E0 . 8945 AC mov [ebp-54], eax
004383E3 . FFD3 call ebx ; <&MSVBVM60.__vbaSetSystemError>
004383E5 . 8D4D B8 lea ecx, [ebp-48]
004383E8 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004383EE . 3975 AC cmp [ebp-54], esi
004383F1 . 0F85 84000000 jnz 0043847B
004383F7 . BA 081C4100 mov edx, 00411C08 ; UNICODE "RegCode"
004383FC . 8D4D E4 lea ecx, [ebp-1C]
004383FF . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
00438405 . 8B55 D0 mov edx, [ebp-30]
00438408 . 52 push edx
00438409 . FF15 28104000 call [<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
0043840F . 50 push eax
00438410 . 8B45 D0 mov eax, [ebp-30]
00438413 . 50 push eax
00438414 . 68 1C1C4100 push 00411C1C
00438419 . FF15 68104000 call [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
0043841F . 8BD0 mov edx, eax
00438421 . 8D4D B4 lea ecx, [ebp-4C]
00438424 . FF15 44124000 call [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0043842A . 8D4D B0 lea ecx, [ebp-50]
0043842D . 50 push eax
0043842E . 51 push ecx
0043842F . FFD7 call edi
00438431 . 8B55 E4 mov edx, [ebp-1C]
00438434 . 50 push eax
00438435 . 6A 01 push 1
00438437 . 56 push esi
00438438 . 8D45 B8 lea eax, [ebp-48]
0043843B . 52 push edx
0043843C . 50 push eax
0043843D . FFD7 call edi
0043843F . 8B4D E8 mov ecx, [ebp-18]
00438442 . 50 push eax
00438443 . 51 push ecx
00438444 . E8 176CFDFF call 0040F060
00438449 . FFD3 call ebx
0043844B . 8B55 B8 mov edx, [ebp-48]
0043844E . 8D45 E4 lea eax, [ebp-1C]
00438451 . 52 push edx
00438452 . 50 push eax
00438453 . FF15 64114000 call [<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
00438459 . 8D4D B0 lea ecx, [ebp-50]
0043845C . 8D55 B4 lea edx, [ebp-4C]
0043845F . 51 push ecx
00438460 . 8D45 B8 lea eax, [ebp-48]
00438463 . 52 push edx
00438464 . 50 push eax
00438465 . 6A 03 push 3
00438467 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
0043846D . 8B4D E8 mov ecx, [ebp-18]
00438470 . 83C4 10 add esp, 10
00438473 . 51 push ecx
00438474 . E8 B367FDFF call 0040EC2C
00438479 . FFD3 call ebx
0043847B > 68 BA844300 push 004384BA
00438480 . EB 27 jmp short 004384A9
00438482 . F645 FC 04 test byte ptr [ebp-4], 4
00438486 . 74 09 je short 00438491
00438488 . 8D4D BC lea ecx, [ebp-44]
0043848B . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438491 > 8D55 B0 lea edx, [ebp-50]
00438494 . 8D45 B4 lea eax, [ebp-4C]
00438497 . 52 push edx
00438498 . 8D4D B8 lea ecx, [ebp-48]
0043849B . 50 push eax
0043849C . 51 push ecx
0043849D . 6A 03 push 3
0043849F . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004384A5 . 83C4 10 add esp, 10
004384A8 . C3 retn
004384A9 > 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004384AF . 8D4D E4 lea ecx, [ebp-1C]
004384B2 . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
004384B4 . 8D4D D0 lea ecx, [ebp-30]
004384B7 . FFD6 call esi
004384B9 . C3 retn
004384BA . 8B45 08 mov eax, [ebp+8]
004384BD . 8B4D BC mov ecx, [ebp-44]
004384C0 . 8BD0 mov edx, eax
004384C2 . 5F pop edi
004384C3 . 5E pop esi
004384C4 . 5B pop ebx
004384C5 . 890A mov [edx], ecx
004384C7 . 8B4D C0 mov ecx, [ebp-40]
004384CA . 894A 04 mov [edx+4], ecx
004384CD . 8B4D C4 mov ecx, [ebp-3C]
004384D0 . 894A 08 mov [edx+8], ecx
004384D3 . 8B4D C8 mov ecx, [ebp-38]
004384D6 . 894A 0C mov [edx+C], ecx
004384D9 . 8B4D EC mov ecx, [ebp-14]
004384DC . 64:890D 00000>mov fs:[0], ecx
004384E3 . 8BE5 mov esp, ebp
004384E5 . 5D pop ebp
004384E6 . C2 0800 retn 8
004384E9 90 nop
004384EA 90 nop
004384EB 90 nop
004384EC 90 nop
004384ED 90 nop
004384EE 90 nop
004384EF 90 nop
004384F0 $ 55 push ebp
004384F1 . 8BEC mov ebp, esp
004384F3 . 83EC 08 sub esp, 8
004384F6 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
004384FB . 64:A1 0000000>mov eax, fs:[0]
00438501 . 50 push eax
00438502 . 64:8925 00000>mov fs:[0], esp
00438509 . 83EC 50 sub esp, 50
0043850C . 53 push ebx
0043850D . 56 push esi
0043850E . 57 push edi
0043850F . 8965 F8 mov [ebp-8], esp
00438512 . C745 FC E8174>mov dword ptr [ebp-4], 004017E8
00438519 . 8B3D E8114000 mov edi, [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
0043851F . 33F6 xor esi, esi
00438521 . BA 081C4100 mov edx, 00411C08 ; UNICODE "RegCode"
00438526 . 8D4D E8 lea ecx, [ebp-18]
00438529 . 8975 EC mov [ebp-14], esi
0043852C . 8975 E8 mov [ebp-18], esi
0043852F . 8975 E4 mov [ebp-1C], esi
00438532 . 8975 E0 mov [ebp-20], esi
00438535 . 8975 D4 mov [ebp-2C], esi
00438538 . 8975 D0 mov [ebp-30], esi
0043853B . 8975 C0 mov [ebp-40], esi
0043853E . 8975 B0 mov [ebp-50], esi
00438541 . 8975 AC mov [ebp-54], esi
00438544 . FFD7 call edi ; <&MSVBVM60.__vbaStrCopy>
00438546 . BA 2CEA4000 mov edx, 0040EA2C
0043854B . 8D4D E0 lea ecx, [ebp-20]
0043854E . FFD7 call edi
00438550 . 8B3D 20124000 mov edi, [<&MSVBVM60.__vbaStrToAnsi>>; MSVBVM60.__vbaStrToAnsi
00438556 . 8D45 EC lea eax, [ebp-14]
00438559 . 50 push eax
0043855A . 68 19000200 push 20019
0043855F . 56 push esi
00438560 . 8D4D D4 lea ecx, [ebp-2C]
00438563 . 68 B41B4100 push 00411BB4 ; UNICODE "Software\pro edit\Registration"
00438568 . 51 push ecx
00438569 . FFD7 call edi ; <&MSVBVM60.__vbaStrToAnsi>
0043856B . 50 push eax
0043856C . 68 02000080 push 80000002
00438571 . E8 6669FDFF call 0040EEDC
00438576 . 8B1D 74104000 mov ebx, [<&MSVBVM60.__vbaSetSystemE>; MSVBVM60.__vbaSetSystemError
0043857C . 8945 AC mov [ebp-54], eax
0043857F . FFD3 call ebx ; <&MSVBVM60.__vbaSetSystemError>
00438581 . 8B55 AC mov edx, [ebp-54]
00438584 . 8D4D D4 lea ecx, [ebp-2C]
00438587 . 8955 DC mov [ebp-24], edx
0043858A . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00438590 . 3975 DC cmp [ebp-24], esi
00438593 . E9 FD000000 jmp 00438695
00438598 90 nop
00438599 . 8B45 E8 mov eax, [ebp-18]
0043859C . C745 E4 FF000>mov dword ptr [ebp-1C], 0FF
004385A3 . 50 push eax
004385A4 . 68 1C1C4100 push 00411C1C
004385A9 . FF15 68104000 call [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
004385AF . 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
004385B5 . 8BD0 mov edx, eax
004385B7 . 8D4D E8 lea ecx, [ebp-18]
004385BA . FFD6 call esi ; <&MSVBVM60.__vbaStrMove>
004385BC . 8B4D E4 mov ecx, [ebp-1C]
004385BF . 8D55 C0 lea edx, [ebp-40]
004385C2 . 51 push ecx
004385C3 . 52 push edx
004385C4 . FF15 E8104000 call [<&MSVBVM60.rtcSpaceVar>] ; MSVBVM60.rtcSpaceVar
004385CA . 8D45 C0 lea eax, [ebp-40]
004385CD . 50 push eax
004385CE . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
004385D4 . 8BD0 mov edx, eax
004385D6 . 8D4D E0 lea ecx, [ebp-20]
004385D9 . FFD6 call esi
004385DB . 8D4D C0 lea ecx, [ebp-40]
004385DE . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
004385E4 . 8B55 E0 mov edx, [ebp-20]
004385E7 . 8D4D E4 lea ecx, [ebp-1C]
004385EA . 51 push ecx
004385EB . 8D45 D0 lea eax, [ebp-30]
004385EE . 52 push edx
004385EF . 50 push eax
004385F0 . C745 AC 01000>mov dword ptr [ebp-54], 1
004385F7 . FFD7 call edi
004385F9 . 8B55 E8 mov edx, [ebp-18]
004385FC . 8D4D AC lea ecx, [ebp-54]
004385FF . 50 push eax
00438600 . 51 push ecx
00438601 . 6A 00 push 0
00438603 . 8D45 D4 lea eax, [ebp-2C]
00438606 . 52 push edx
00438607 . 50 push eax
00438608 . FFD7 call edi
0043860A . 8B4D EC mov ecx, [ebp-14]
0043860D . 50 push eax
0043860E . 51 push ecx
0043860F . E8 A869FDFF call 0040EFBC
00438614 . FFD3 call ebx
00438616 . 8B55 D4 mov edx, [ebp-2C]
00438619 . 8B3D 64114000 mov edi, [<&MSVBVM60.__vbaStrToUnico>; MSVBVM60.__vbaStrToUnicode
0043861F . 8D45 E8 lea eax, [ebp-18]
00438622 . 52 push edx
00438623 . 50 push eax
00438624 . FFD7 call edi ; <&MSVBVM60.__vbaStrToUnicode>
00438626 . 8B4D D0 mov ecx, [ebp-30]
00438629 . 8D55 E0 lea edx, [ebp-20]
0043862C . 51 push ecx
0043862D . 52 push edx
0043862E . FFD7 call edi
00438630 . 8D45 D0 lea eax, [ebp-30]
00438633 . 8D4D D4 lea ecx, [ebp-2C]
00438636 . 50 push eax
00438637 . 51 push ecx
00438638 . 6A 02 push 2
0043863A . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00438640 . 8B55 EC mov edx, [ebp-14]
00438643 . 83C4 0C add esp, 0C
00438646 . 52 push edx
00438647 . E8 E065FDFF call 0040EC2C
0043864C . 8945 AC mov [ebp-54], eax
0043864F . FFD3 call ebx
00438651 . 8B4D E4 mov ecx, [ebp-1C]
00438654 . 8D45 E0 lea eax, [ebp-20]
00438657 . 83E9 01 sub ecx, 1
0043865A . 8945 B8 mov [ebp-48], eax
0043865D . 0F80 E9000000 jo 0043874C
00438663 . 8D55 B0 lea edx, [ebp-50]
00438666 . 51 push ecx
00438667 . 8D45 C0 lea eax, [ebp-40]
0043866A . 52 push edx
0043866B . 50 push eax
0043866C . C745 B0 08400>mov dword ptr [ebp-50], 4008
00438673 . FF15 34124000 call [<&MSVBVM60.rtcLeftCharVar>] ; MSVBVM60.rtcLeftCharVar
00438679 . 8D4D C0 lea ecx, [ebp-40]
0043867C . 51 push ecx
0043867D . FF15 30104000 call [<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00438683 . 8BD0 mov edx, eax
00438685 . 8D4D E0 lea ecx, [ebp-20]
00438688 . FFD6 call esi
0043868A . 8D4D C0 lea ecx, [ebp-40]
0043868D . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438693 . EB 06 jmp short 0043869B
00438695 > 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0043869B > 8B55 E0 mov edx, [ebp-20]
0043869E . 8B3D 04114000 mov edi, [<&MSVBVM60.__vbaStrCmp>] ; MSVBVM60.__vbaStrCmp
004386A4 . 52 push edx
004386A5 . 68 2CEA4000 push 0040EA2C
004386AA . FFD7 call edi ; <&MSVBVM60.__vbaStrCmp>
004386AC . 85C0 test eax, eax
004386AE 75 0A jnz short 004386BA
004386B0 . 8945 D8 mov [ebp-28], eax
004386B3 . 68 37874300 push 00438737
004386B8 . EB 6C jmp short 00438726
004386BA > E8 B1000000 call 00438770
004386BF . 8BD0 mov edx, eax
004386C1 . 8D4D D4 lea ecx, [ebp-2C]
004386C4 . FFD6 call esi
004386C6 . 50 push eax
004386C7 . E8 F4E8FFFF call 00436FC0
004386CC . 8BD0 mov edx, eax
004386CE . 8D4D D0 lea ecx, [ebp-30]
004386D1 . FFD6 call esi
004386D3 . 50 push eax
004386D4 . 8B45 E0 mov eax, [ebp-20]
004386D7 . 50 push eax
004386D8 . FFD7 call edi
004386DA . 8BF0 mov esi, eax
004386DC . 8D4D D0 lea ecx, [ebp-30]
004386DF . F7DE neg esi
004386E1 . 1BF6 sbb esi, esi
004386E3 . 8D55 D4 lea edx, [ebp-2C]
004386E6 . 51 push ecx
004386E7 . 52 push edx
004386E8 . F7DE neg esi
004386EA . 6A 02 push 2
004386EC . F7DE neg esi
004386EE . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004386F4 . 83C4 0C add esp, 0C
004386F7 . 66:F7DE neg si
004386FA . 1BF6 sbb esi, esi
004386FC . 68 37874300 push 00438737
00438701 . F7DE neg esi
00438703 . 4E dec esi
00438704 . 8975 D8 mov [ebp-28], esi
00438707 . EB 1D jmp short 00438726
00438709 . 8D45 D0 lea eax, [ebp-30]
0043870C . 8D4D D4 lea ecx, [ebp-2C]
0043870F . 50 push eax
00438710 . 51 push ecx
00438711 . 6A 02 push 2
00438713 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00438719 . 83C4 0C add esp, 0C
0043871C . 8D4D C0 lea ecx, [ebp-40]
0043871F . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438725 . C3 retn
00438726 > 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0043872C . 8D4D E8 lea ecx, [ebp-18]
0043872F . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
00438731 . 8D4D E0 lea ecx, [ebp-20]
00438734 . FFD6 call esi
00438736 . C3 retn
00438737 . 8B4D F0 mov ecx, [ebp-10]
0043873A . 66:8B45 D8 mov ax, [ebp-28]
0043873E . 5F pop edi
0043873F . 5E pop esi
00438740 . 64:890D 00000>mov fs:[0], ecx
00438747 . 5B pop ebx
00438748 . 8BE5 mov esp, ebp
0043874A . 5D pop ebp
0043874B . C3 retn
0043874C > FF15 BC114000 call [<&MSVBVM60.__vbaErrorOverflow>] ; MSVBVM60.__vbaErrorOverflow
00438752 . 90 nop
00438753 . 90 nop
00438754 . 90 nop
00438755 . 90 nop
00438756 . 90 nop
00438757 . 90 nop
00438758 . 90 nop
00438759 . 90 nop
0043875A . 90 nop
0043875B . 90 nop
0043875C . 90 nop
0043875D . 90 nop
0043875E . 90 nop
0043875F . 90 nop
00438760 /$ 66:33C0 xor ax, ax
00438763 \. C3 retn
00438764 90 nop
00438765 90 nop
00438766 90 nop
00438767 90 nop
00438768 90 nop
00438769 90 nop
0043876A 90 nop
0043876B 90 nop
0043876C 90 nop
0043876D 90 nop
0043876E 90 nop
0043876F 90 nop
00438770 $ 55 push ebp
00438771 . 8BEC mov ebp, esp
00438773 . 83EC 14 sub esp, 14
00438776 . 68 D6204000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE handler installation
0043877B . 64:A1 0000000>mov eax, fs:[0]
00438781 . 50 push eax
00438782 . 64:8925 00000>mov fs:[0], esp
00438789 . 81EC C0000000 sub esp, 0C0
0043878F . 53 push ebx
00438790 . 56 push esi
00438791 . 57 push edi
00438792 . 8965 EC mov [ebp-14], esp
00438795 . C745 F0 F8174>mov dword ptr [ebp-10], 004017F8
0043879C . 33FF xor edi, edi
0043879E . 897D F4 mov [ebp-C], edi
004387A1 . 897D F8 mov [ebp-8], edi
004387A4 . 897D E0 mov [ebp-20], edi
004387A7 . 897D DC mov [ebp-24], edi
004387AA . 897D D4 mov [ebp-2C], edi
004387AD . 897D D0 mov [ebp-30], edi
004387B0 . 897D CC mov [ebp-34], edi
004387B3 . 897D C8 mov [ebp-38], edi
004387B6 . 897D C4 mov [ebp-3C], edi
004387B9 . 897D C0 mov [ebp-40], edi
004387BC . 897D BC mov [ebp-44], edi
004387BF . 897D B8 mov [ebp-48], edi
004387C2 . 897D A8 mov [ebp-58], edi
004387C5 . 897D 98 mov [ebp-68], edi
004387C8 . 897D 88 mov [ebp-78], edi
004387CB . 89BD 78FFFFFF mov [ebp-88], edi
004387D1 . 89BD 44FFFFFF mov [ebp-BC], edi
004387D7 . 6A 01 push 1
004387D9 . FF15 A0104000 call [<&MSVBVM60.__vbaOnError>] ; MSVBVM60.__vbaOnError
004387DF . BA 2CEA4000 mov edx, 0040EA2C
004387E4 . 8D4D CC lea ecx, [ebp-34]
004387E7 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
004387ED . C745 D0 32000>mov dword ptr [ebp-30], 32
004387F4 . 897D B0 mov [ebp-50], edi
004387F7 . C745 A8 02000>mov dword ptr [ebp-58], 2
004387FE . 8D45 A8 lea eax, [ebp-58]
00438801 . 50 push eax
00438802 . 6A 32 push 32
00438804 . FF15 74114000 call [<&MSVBVM60.rtcStringBstr>] ; MSVBVM60.rtcStringBstr
0043880A . 8BD0 mov edx, eax
0043880C . 8D4D D4 lea ecx, [ebp-2C]
0043880F . 8B1D 44124000 mov ebx, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00438815 . FFD3 call ebx ; <&MSVBVM60.__vbaStrMove>
00438817 . 8D4D A8 lea ecx, [ebp-58]
0043881A . FF15 24104000 call [<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00438820 . 8B4D D4 mov ecx, [ebp-2C]
00438823 . 51 push ecx
00438824 . 8D55 C8 lea edx, [ebp-38]
00438827 . 52 push edx
00438828 . FF15 20124000 call [<&MSVBVM60.__vbaStrToAnsi>] ; MSVBVM60.__vbaStrToAnsi
0043882E . 50 push eax
0043882F . 8D45 D0 lea eax, [ebp-30]
00438832 . 50 push eax
00438833 . E8 8868FDFF call 0040F0C0
00438838 . 8985 44FFFFFF mov [ebp-BC], eax
0043883E . FF15 74104000 call [<&MSVBVM60.__vbaSetSystemError>>; MSVBVM60.__vbaSetSystemError
00438844 . 8B4D C8 mov ecx, [ebp-38]
00438847 . 51 push ecx
00438848 . 8D55 D4 lea edx, [ebp-2C]
0043884B . 52 push edx
0043884C . FF15 64114000 call [<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
00438852 . 8BB5 44FFFFFF mov esi, [ebp-BC]
00438858 . 8D4D C8 lea ecx, [ebp-38]
0043885B . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00438861 . 3BF7 cmp esi, edi
00438863 . 75 17 jnz short 0043887C
00438865 . 8B45 D0 mov eax, [ebp-30]
00438868 . 50 push eax
00438869 . 8B4D D4 mov ecx, [ebp-2C]
0043886C . 51 push ecx
0043886D . FF15 28124000 call [<&MSVBVM60.rtcLeftCharBstr>] ; MSVBVM60.rtcLeftCharBstr
00438873 . 8BD0 mov edx, eax
00438875 . 8D4D DC lea ecx, [ebp-24]
00438878 . FFD3 call ebx
0043887A . EB 0E jmp short 0043888A
0043887C > BA 0CEA4000 mov edx, 0040EA0C ; UNICODE "ERROR"
00438881 . 8D4D DC lea ecx, [ebp-24]
00438884 . FF15 E8114000 call [<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
0043888A > 8D55 DC lea edx, [ebp-24]
0043888D . 52 push edx
0043888E . 8D45 DC lea eax, [ebp-24]
00438891 . 50 push eax
00438892 . E8 69E5FFFF call 00436E00
00438897 . 8BD0 mov edx, eax
00438899 . 8D4D E0 lea ecx, [ebp-20]
0043889C . FFD3 call ebx
0043889E . FF15 98104000 call [<&MSVBVM60.__vbaExitProc>] ; MSVBVM60.__vbaExitProc
004388A4 . 68 428A4300 push 00438A42
004388A9 . E9 7E010000 jmp 00438A2C
004388AE . B9 04000280 mov ecx, 80020004
004388B3 . 894D 80 mov [ebp-80], ecx
004388B6 . B8 0A000000 mov eax, 0A
004388BB . 8985 78FFFFFF mov [ebp-88], eax
004388C1 . 894D 90 mov [ebp-70], ecx
004388C4 . 8945 88 mov [ebp-78], eax
004388C7 . 894D A0 mov [ebp-60], ecx
004388CA . 8945 98 mov [ebp-68], eax
004388CD . 8B3D 04124000 mov edi, [<&MSVBVM60.rtcErrObj>] ; MSVBVM60.rtcErrObj
004388D3 . FFD7 call edi ; <&MSVBVM60.rtcErrObj>
004388D5 . 50 push eax
004388D6 . 8D4D BC lea ecx, [ebp-44]
004388D9 . 51 push ecx
004388DA . 8B1D 9C104000 mov ebx, [<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
004388E0 . FFD3 call ebx ; <&MSVBVM60.__vbaObjSet>
004388E2 . 8BF0 mov esi, eax
004388E4 . 8B16 mov edx, [esi]
004388E6 . 8D85 44FFFFFF lea eax, [ebp-BC]
004388EC . 50 push eax
004388ED . 56 push esi
004388EE . FF52 1C call [edx+1C]
004388F1 . DBE2 fclex
004388F3 . 85C0 test eax, eax
004388F5 . 7D 0F jge short 00438906
004388F7 . 6A 1C push 1C
004388F9 . 68 64FD4000 push 0040FD64
004388FE . 56 push esi
004388FF . 50 push eax
00438900 . FF15 78104000 call [<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00438906 > FFD7 call edi
00438908 . 50 push eax
00438909 . 8D4D B8 lea ecx, [ebp-48]
0043890C . 51 push ecx
0043890D . FFD3 call ebx
0043890F . 8BF0 mov esi, eax
00438911 . 8B16 mov edx, [esi]
00438913 . 8D45 C4 lea eax, [ebp-3C]
00438916 . 50 push eax
00438917 . 56 push esi
00438918 . FF52 2C call [edx+2C]
0043891B . DBE2 fclex
0043891D . 85C0 test eax, eax
0043891F . 7D 0F jge short 00438930
00438921 . 6A 2C push 2C
00438923 . 68 64FD4000 push 0040FD64
00438928 . 56 push esi
00438929 . 50 push eax
0043892A . FF15 78104000 call [<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00438930 > 8B8D 44FFFFFF mov ecx, [ebp-BC]
00438936 . 51 push ecx
00438937 . FF15 14104000 call [<&MSVBVM60.__vbaStrI4>] ; MSVBVM60.__vbaStrI4
0043893D . 8BD0 mov edx, eax
0043893F . 8D4D C8 lea ecx, [ebp-38]
00438942 . 8B35 44124000 mov esi, [<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00438948 . FFD6 call esi ; <&MSVBVM60.__vbaStrMove>
0043894A . 50 push eax
0043894B . 68 08054100 push 00410508 ; UNICODE CR,LF
00438950 . 8B3D 68104000 mov edi, [<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
00438956 . FFD7 call edi ; <&MSVBVM60.__vbaStrCat>
00438958 . 8BD0 mov edx, eax
0043895A . 8D4D C0 lea ecx, [ebp-40]
0043895D . FFD6 call esi
0043895F . 50 push eax
00438960 . 8B55 C4 mov edx, [ebp-3C]
00438963 . 52 push edx
00438964 . FFD7 call edi
00438966 . 8945 B0 mov [ebp-50], eax
00438969 . C745 A8 08000>mov dword ptr [ebp-58], 8
00438970 . 8D85 78FFFFFF lea eax, [ebp-88]
00438976 . 50 push eax
00438977 . 8D4D 88 lea ecx, [ebp-78]
0043897A . 51 push ecx
0043897B . 8D55 98 lea edx, [ebp-68]
0043897E . 52 push edx
0043897F . 6A 00 push 0
00438981 . 8D45 A8 lea eax, [ebp-58]
00438984 . 50 push eax
00438985 . FF15 A4104000 call [<&MSVBVM60.rtcMsgBox>] ; MSVBVM60.rtcMsgBox
0043898B . 8D4D C4 lea ecx, [ebp-3C]
0043898E . 51 push ecx
0043898F . 8D55 C0 lea edx, [ebp-40]
00438992 . 52 push edx
00438993 . 8D45 C8 lea eax, [ebp-38]
00438996 . 50 push eax
00438997 . 6A 03 push 3
00438999 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
0043899F . 8D4D B8 lea ecx, [ebp-48]
004389A2 . 51 push ecx
004389A3 . 8D55 BC lea edx, [ebp-44]
004389A6 . 52 push edx
004389A7 . 6A 02 push 2
004389A9 . FF15 48104000 call [<&MSVBVM60.__vbaFreeObjList>] ; MSVBVM60.__vbaFreeObjList
004389AF . 8D85 78FFFFFF lea eax, [ebp-88]
004389B5 . 50 push eax
004389B6 . 8D4D 88 lea ecx, [ebp-78]
004389B9 . 51 push ecx
004389BA . 8D55 98 lea edx, [ebp-68]
004389BD . 52 push edx
004389BE . 8D45 A8 lea eax, [ebp-58]
004389C1 . 50 push eax
004389C2 . 6A 04 push 4
004389C4 . FF15 40104000 call [<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
004389CA . 83C4 30 add esp, 30
004389CD . FF15 98104000 call [<&MSVBVM60.__vbaExitProc>] ; MSVBVM60.__vbaExitProc
004389D3 . 68 428A4300 push 00438A42
004389D8 . EB 52 jmp short 00438A2C
004389DA . F645 F4 04 test byte ptr [ebp-C], 4
004389DE . 74 09 je short 004389E9
004389E0 . 8D4D E0 lea ecx, [ebp-20]
004389E3 . FF15 70124000 call [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
004389E9 > 8D4D C0 lea ecx, [ebp-40]
004389EC . 51 push ecx
004389ED . 8D55 C4 lea edx, [ebp-3C]
004389F0 . 52 push edx
004389F1 . 8D45 C8 lea eax, [ebp-38]
004389F4 . 50 push eax
004389F5 . 6A 03 push 3
004389F7 . FF15 F4114000 call [<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
004389FD . 8D4D B8 lea ecx, [ebp-48]
00438A00 . 51 push ecx
00438A01 . 8D55 BC lea edx, [ebp-44]
00438A04 . 52 push edx
00438A05 . 6A 02 push 2
00438A07 . FF15 48104000 call [<&MSVBVM60.__vbaFreeObjList>] ; MSVBVM60.__vbaFreeObjList
00438A0D . 8D85 78FFFFFF lea eax, [ebp-88]
00438A13 . 50 push eax
00438A14 . 8D4D 88 lea ecx, [ebp-78]
00438A17 . 51 push ecx
00438A18 . 8D55 98 lea edx, [ebp-68]
00438A1B . 52 push edx
00438A1C . 8D45 A8 lea eax, [ebp-58]
00438A1F . 50 push eax
00438A20 . 6A 04 push 4
00438A22 . FF15 40104000 call [<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
00438A28 . 83C4 30 add esp, 30
00438A2B . C3 retn
00438A2C > 8D4D DC lea ecx, [ebp-24]
00438A2F . 8B35 70124000 mov esi, [<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00438A35 . FFD6 call esi ; <&MSVBVM60.__vbaFreeStr>
00438A37 . 8D4D D4 lea ecx, [ebp-2C]
00438A3A . FFD6 call esi
00438A3C . 8D4D CC lea ecx, [ebp-34]
00438A3F . FFD6 call esi
00438A41 . C3 retn
00438A42 . 8B45 E0 mov eax, [ebp-20]
00438A45 . 8B4D E4 mov ecx, [ebp-1C]
00438A48 . 64:890D 00000>mov fs:[0], ecx
00438A4F . 5F pop edi
00438A50 . 5E pop esi
00438A51 . 5B pop ebx
00438A52 . 8BE5 mov esp, ebp
00438A54 . 5D pop ebp
00438A55 . C3 retn
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
|
|
|---|---|
|
|
学习
支持 
|
|
|
楼主你学得真快，比我是强多了。。。
|
|
|
本人期代学习中...我也要学写注册机呀..
谁人能教我呀... 这个很容易吗.... 请高手们写出来等我们学习一下吧... 
|
|
|
|
|
|
|
|
|
真的很佩服啊
|
