一个老外的VB程序破解遇到困难....
这个程序一打开就是验证.. 关键字找不到有用,
请问一下高手们..这类验证的程序应该用那些断点对付呢,,, 请指教一下!! 感谢大恩!!
用万能断点>返回到这里004606F0 DBE2 fclex
和bp ShowWindow断点法也是返回到这个地址..004606F0 DBE2 fclex
这个地址是否关健点呢和那里才是真正的验证地址呢... 请指教一下
00460430 55 push ebp
00460431 8BEC mov ebp, esp
00460433 83EC 18 sub esp, 18
00460436 68 C6294000 push <jmp.&msvbvm60.__vbaExceptHandle>
0046043B 64:A1 00000000 mov eax, dword ptr fs:[0]
00460441 50 push eax
00460442 64:8925 0000000>mov dword ptr fs:[0], esp
00460449 B8 98060000 mov eax, 698
0046044E E8 6D25FAFF call <jmp.&msvbvm60.__vbaChkstk>
00460453 53 push ebx
00460454 56 push esi
00460455 57 push edi
00460456 8965 E8 mov dword ptr [ebp-18], esp
00460459 C745 EC A025400>mov dword ptr [ebp-14], 004025A0
00460460 8B45 08 mov eax, dword ptr [ebp+8]
00460463 83E0 01 and eax, 1
00460466 8945 F0 mov dword ptr [ebp-10], eax
00460469 8B4D 08 mov ecx, dword ptr [ebp+8]
0046046C 83E1 FE and ecx, FFFFFFFE
0046046F 894D 08 mov dword ptr [ebp+8], ecx
00460472 C745 F4 0000000>mov dword ptr [ebp-C], 0
00460479 8B55 08 mov edx, dword ptr [ebp+8]
0046047C 8B02 mov eax, dword ptr [edx]
0046047E 8B4D 08 mov ecx, dword ptr [ebp+8]
00460481 51 push ecx
00460482 FF50 04 call dword ptr [eax+4]
00460485 C745 FC 0100000>mov dword ptr [ebp-4], 1
0046048C C745 FC 0200000>mov dword ptr [ebp-4], 2
00460493 6A FF push -1
00460495 FF15 84D04900 call dword ptr [<&msvbvm60.__vbaOnErr>; msvbvm60.__vbaOnError
0046049B C745 FC 0300000>mov dword ptr [ebp-4], 3
004604A2 8B55 08 mov edx, dword ptr [ebp+8]
004604A5 8B02 mov eax, dword ptr [edx]
004604A7 8B4D 08 mov ecx, dword ptr [ebp+8]
004604AA 51 push ecx
004604AB FF90 0C030000 call dword ptr [eax+30C]
004604B1 50 push eax
004604B2 8D55 9C lea edx, dword ptr [ebp-64]
004604B5 52 push edx
004604B6 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
004604BC 8985 E0F9FFFF mov dword ptr [ebp-620], eax
004604C2 68 C84E4100 push 00414EC8 ; UNICODE "Please Wait For Authorization ......"
004604C7 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
004604CD 8B08 mov ecx, dword ptr [eax]
004604CF 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
004604D5 52 push edx
004604D6 FF51 54 call dword ptr [ecx+54]
004604D9 DBE2 fclex
004604DB 8985 DCF9FFFF mov dword ptr [ebp-624], eax
004604E1 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
004604E8 7D 23 jge short 0046050D
004604EA 6A 54 push 54
004604EC 68 E8894000 push 004089E8
004604F1 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
004604F7 50 push eax
004604F8 8B8D DCF9FFFF mov ecx, dword ptr [ebp-624]
004604FE 51 push ecx
004604FF FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00460505 8985 B0F9FFFF mov dword ptr [ebp-650], eax
0046050B EB 0A jmp short 00460517
0046050D C785 B0F9FFFF 0>mov dword ptr [ebp-650], 0
00460517 8D4D 9C lea ecx, dword ptr [ebp-64]
0046051A FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00460520 C745 FC 0400000>mov dword ptr [ebp-4], 4
00460527 C785 20FAFFFF 1>mov dword ptr [ebp-5E0], 00408A1C ; UNICODE "evilboot.net"
00460531 C785 18FAFFFF 0>mov dword ptr [ebp-5E8], 8
0046053B 833D A4D04600 0>cmp dword ptr [46D0A4], 0
00460542 75 1C jnz short 00460560
00460544 68 A4D04600 push 0046D0A4
00460549 68 90504000 push 00405090
0046054E FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
00460554 C785 ACF9FFFF A>mov dword ptr [ebp-654], 0046D0A4
0046055E EB 0A jmp short 0046056A
00460560 C785 ACF9FFFF A>mov dword ptr [ebp-654], 0046D0A4
0046056A B8 10000000 mov eax, 10
0046056F E8 4C24FAFF call <jmp.&msvbvm60.__vbaChkstk>
00460574 8BD4 mov edx, esp
00460576 8B85 18FAFFFF mov eax, dword ptr [ebp-5E8]
0046057C 8902 mov dword ptr [edx], eax
0046057E 8B8D 1CFAFFFF mov ecx, dword ptr [ebp-5E4]
00460584 894A 04 mov dword ptr [edx+4], ecx
00460587 8B85 20FAFFFF mov eax, dword ptr [ebp-5E0]
0046058D 8942 08 mov dword ptr [edx+8], eax
00460590 8B8D 24FAFFFF mov ecx, dword ptr [ebp-5DC]
00460596 894A 0C mov dword ptr [edx+C], ecx
00460599 6A 0A push 0A
0046059B 8B95 ACF9FFFF mov edx, dword ptr [ebp-654]
004605A1 8B02 mov eax, dword ptr [edx]
004605A3 8B8D ACF9FFFF mov ecx, dword ptr [ebp-654]
004605A9 8B11 mov edx, dword ptr [ecx]
004605AB 8B0A mov ecx, dword ptr [edx]
004605AD 50 push eax
004605AE FF91 14030000 call dword ptr [ecx+314]
004605B4 50 push eax
004605B5 8D55 9C lea edx, dword ptr [ebp-64]
004605B8 52 push edx
004605B9 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
004605BF 50 push eax
004605C0 FF15 60D24900 call dword ptr [<&msvbvm60.__vbaLateI>; msvbvm60.__vbaLateIdSt
004605C6 8D4D 9C lea ecx, dword ptr [ebp-64]
004605C9 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
004605CF C745 FC 0500000>mov dword ptr [ebp-4], 5
004605D6 8B45 08 mov eax, dword ptr [ebp+8]
004605D9 8B08 mov ecx, dword ptr [eax]
004605DB 8B55 08 mov edx, dword ptr [ebp+8]
004605DE 52 push edx
004605DF FF91 00030000 call dword ptr [ecx+300]
004605E5 50 push eax
004605E6 8D45 98 lea eax, dword ptr [ebp-68]
004605E9 50 push eax
004605EA FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
004605F0 8985 E0F9FFFF mov dword ptr [ebp-620], eax
004605F6 6A 00 push 0
004605F8 6A 06 push 6
004605FA 8B4D 08 mov ecx, dword ptr [ebp+8]
004605FD 8B11 mov edx, dword ptr [ecx]
004605FF 8B45 08 mov eax, dword ptr [ebp+8]
00460602 50 push eax
00460603 FF92 18030000 call dword ptr [edx+318]
00460609 50 push eax
0046060A 8D4D 9C lea ecx, dword ptr [ebp-64]
0046060D 51 push ecx
0046060E FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00460614 50 push eax
00460615 8D55 88 lea edx, dword ptr [ebp-78]
00460618 52 push edx
00460619 FF15 24D14900 call dword ptr [<&msvbvm60.__vbaLateI>; msvbvm60.__vbaLateIdCallLd
0046061F 83C4 10 add esp, 10
00460622 50 push eax
00460623 FF15 2CD04900 call dword ptr [<&msvbvm60.__vbaStrVa>; msvbvm60.__vbaStrVarMove
00460629 8BD0 mov edx, eax
0046062B 8D4D A4 lea ecx, dword ptr [ebp-5C]
0046062E FF15 4CD24900 call dword ptr [<&msvbvm60.__vbaStrMo>; msvbvm60.__vbaStrMove
00460634 50 push eax
00460635 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
0046063B 8B08 mov ecx, dword ptr [eax]
0046063D 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
00460643 52 push edx
00460644 FF91 A4000000 call dword ptr [ecx+A4]
0046064A DBE2 fclex
0046064C 8985 DCF9FFFF mov dword ptr [ebp-624], eax
00460652 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
00460659 7D 26 jge short 00460681
0046065B 68 A4000000 push 0A4
00460660 68 788B4000 push 00408B78
00460665 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
0046066B 50 push eax
0046066C 8B8D DCF9FFFF mov ecx, dword ptr [ebp-624]
00460672 51 push ecx
00460673 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00460679 8985 A8F9FFFF mov dword ptr [ebp-658], eax
0046067F EB 0A jmp short 0046068B
00460681 C785 A8F9FFFF 0>mov dword ptr [ebp-658], 0
0046068B 8D4D A4 lea ecx, dword ptr [ebp-5C]
0046068E FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
00460694 8D55 98 lea edx, dword ptr [ebp-68]
00460697 52 push edx
00460698 8D45 9C lea eax, dword ptr [ebp-64]
0046069B 50 push eax
0046069C 6A 02 push 2
0046069E FF15 40D04900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObjList
004606A4 83C4 0C add esp, 0C
004606A7 8D4D 88 lea ecx, dword ptr [ebp-78]
004606AA FF15 24D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVar
004606B0 C745 FC 0600000>mov dword ptr [ebp-4], 6
004606B7 8B4D 08 mov ecx, dword ptr [ebp+8]
004606BA 8B11 mov edx, dword ptr [ecx]
004606BC 8B45 08 mov eax, dword ptr [ebp+8]
004606BF 50 push eax
004606C0 FF92 00030000 call dword ptr [edx+300]
004606C6 50 push eax
004606C7 8D4D 9C lea ecx, dword ptr [ebp-64]
004606CA 51 push ecx
004606CB FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
004606D1 8985 E0F9FFFF mov dword ptr [ebp-620], eax
004606D7 8D55 A4 lea edx, dword ptr [ebp-5C]
004606DA 52 push edx
004606DB 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
004606E1 8B08 mov ecx, dword ptr [eax]
004606E3 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
004606E9 52 push edx
004606EA FF91 A0000000 call dword ptr [ecx+A0]
004606F0 DBE2 fclex
004606F2 8985 DCF9FFFF mov dword ptr [ebp-624], eax
004606F8 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
004606FF 7D 26 jge short 00460727
00460701 68 A0000000 push 0A0
00460706 68 788B4000 push 00408B78
0046070B 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
00460711 50 push eax
00460712 8B8D DCF9FFFF mov ecx, dword ptr [ebp-624]
00460718 51 push ecx
00460719 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
0046071F 8985 A4F9FFFF mov dword ptr [ebp-65C], eax
00460725 EB 0A jmp short 00460731
00460727 C785 A4F9FFFF 0>mov dword ptr [ebp-65C], 0
00460731 8B55 A4 mov edx, dword ptr [ebp-5C]
00460734 52 push edx
00460735 68 60904000 push 00409060 ; UNICODE "127.0.0.1"
0046073A FF15 F0D04900 call dword ptr [<&msvbvm60.__vbaStrCm>; msvbvm60.__vbaStrCmp
00460740 F7D8 neg eax
00460742 1BC0 sbb eax, eax
00460744 40 inc eax
00460745 F7D8 neg eax
00460747 66:8985 D8F9FFF>mov word ptr [ebp-628], ax
0046074E 8D4D A4 lea ecx, dword ptr [ebp-5C]
00460751 FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
00460757 8D4D 9C lea ecx, dword ptr [ebp-64]
0046075A FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00460760 0FBF85 D8F9FFFF movsx eax, word ptr [ebp-628]
00460767 85C0 test eax, eax
00460769 0F84 0F020000 je 0046097E
0046076F C745 FC 0700000>mov dword ptr [ebp-4], 7
00460776 C745 90 0100000>mov dword ptr [ebp-70], 1
0046077D C745 88 0200000>mov dword ptr [ebp-78], 2
00460784 8D4D 88 lea ecx, dword ptr [ebp-78]
00460787 51 push ecx
00460788 E8 73CCFEFF call 0044D400
0046078D 8D4D 88 lea ecx, dword ptr [ebp-78]
00460790 FF15 24D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVar
00460796 C745 FC 0800000>mov dword ptr [ebp-4], 8
0046079D 833D 50D14600 0>cmp dword ptr [46D150], 0
004607A4 75 1C jnz short 004607C2
004607A6 68 50D14600 push 0046D150
004607AB 68 98364000 push 00403698
004607B0 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
004607B6 C785 A0F9FFFF 5>mov dword ptr [ebp-660], 0046D150
004607C0 EB 0A jmp short 004607CC
004607C2 C785 A0F9FFFF 5>mov dword ptr [ebp-660], 0046D150
004607CC 8B95 A0F9FFFF mov edx, dword ptr [ebp-660]
004607D2 8B02 mov eax, dword ptr [edx]
004607D4 8985 E0F9FFFF mov dword ptr [ebp-620], eax
004607DA C785 10FAFFFF 0>mov dword ptr [ebp-5F0], 80020004
004607E4 C785 08FAFFFF 0>mov dword ptr [ebp-5F8], 0A
004607EE C785 20FAFFFF 0>mov dword ptr [ebp-5E0], 80020004
004607F8 C785 18FAFFFF 0>mov dword ptr [ebp-5E8], 0A
00460802 B8 10000000 mov eax, 10
00460807 E8 B421FAFF call <jmp.&msvbvm60.__vbaChkstk>
0046080C 8BCC mov ecx, esp
0046080E 8B95 08FAFFFF mov edx, dword ptr [ebp-5F8]
00460814 8911 mov dword ptr [ecx], edx
00460816 8B85 0CFAFFFF mov eax, dword ptr [ebp-5F4]
0046081C 8941 04 mov dword ptr [ecx+4], eax
0046081F 8B95 10FAFFFF mov edx, dword ptr [ebp-5F0]
00460825 8951 08 mov dword ptr [ecx+8], edx
00460828 8B85 14FAFFFF mov eax, dword ptr [ebp-5EC]
0046082E 8941 0C mov dword ptr [ecx+C], eax
00460831 B8 10000000 mov eax, 10
00460836 E8 8521FAFF call <jmp.&msvbvm60.__vbaChkstk>
0046083B 8BCC mov ecx, esp
0046083D 8B95 18FAFFFF mov edx, dword ptr [ebp-5E8]
00460843 8911 mov dword ptr [ecx], edx
00460845 8B85 1CFAFFFF mov eax, dword ptr [ebp-5E4]
0046084B 8941 04 mov dword ptr [ecx+4], eax
0046084E 8B95 20FAFFFF mov edx, dword ptr [ebp-5E0]
00460854 8951 08 mov dword ptr [ecx+8], edx
00460857 8B85 24FAFFFF mov eax, dword ptr [ebp-5DC]
0046085D 8941 0C mov dword ptr [ecx+C], eax
00460860 8B8D E0F9FFFF mov ecx, dword ptr [ebp-620]
00460866 8B11 mov edx, dword ptr [ecx]
00460868 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
0046086E 50 push eax
0046086F FF92 B0020000 call dword ptr [edx+2B0]
00460875 DBE2 fclex
00460877 8985 DCF9FFFF mov dword ptr [ebp-624], eax
0046087D 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
00460884 7D 26 jge short 004608AC
00460886 68 B0020000 push 2B0
0046088B 68 144F4100 push 00414F14
00460890 8B8D E0F9FFFF mov ecx, dword ptr [ebp-620]
00460896 51 push ecx
00460897 8B95 DCF9FFFF mov edx, dword ptr [ebp-624]
0046089D 52 push edx
0046089E FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
004608A4 8985 9CF9FFFF mov dword ptr [ebp-664], eax
004608AA EB 0A jmp short 004608B6
004608AC C785 9CF9FFFF 0>mov dword ptr [ebp-664], 0
004608B6 C745 FC 0900000>mov dword ptr [ebp-4], 9
004608BD 833D A4D04600 0>cmp dword ptr [46D0A4], 0
004608C4 75 1C jnz short 004608E2
004608C6 68 A4D04600 push 0046D0A4
004608CB 68 90504000 push 00405090
004608D0 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
004608D6 C785 98F9FFFF A>mov dword ptr [ebp-668], 0046D0A4
004608E0 EB 0A jmp short 004608EC
004608E2 C785 98F9FFFF A>mov dword ptr [ebp-668], 0046D0A4
004608EC 68 C08A4000 push 00408AC0
004608F1 8B85 98F9FFFF mov eax, dword ptr [ebp-668]
004608F7 8B08 mov ecx, dword ptr [eax]
004608F9 51 push ecx
004608FA FF15 44D24900 call dword ptr [<&msvbvm60.__vbaCastO>; msvbvm60.__vbaCastObj
00460900 50 push eax
00460901 8D55 9C lea edx, dword ptr [ebp-64]
00460904 52 push edx
00460905 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
0046090B 8D45 9C lea eax, dword ptr [ebp-64]
0046090E 50 push eax
0046090F 8B4D 08 mov ecx, dword ptr [ebp+8]
00460912 8B11 mov edx, dword ptr [ecx]
00460914 8B45 08 mov eax, dword ptr [ebp+8]
00460917 50 push eax
00460918 FF92 FC060000 call dword ptr [edx+6FC]
0046091E 8985 E0F9FFFF mov dword ptr [ebp-620], eax
00460924 83BD E0F9FFFF 0>cmp dword ptr [ebp-620], 0
0046092B 7D 23 jge short 00460950
0046092D 68 FC060000 push 6FC
00460932 68 688A4000 push 00408A68
00460937 8B4D 08 mov ecx, dword ptr [ebp+8]
0046093A 51 push ecx
0046093B 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
00460941 52 push edx
00460942 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00460948 8985 94F9FFFF mov dword ptr [ebp-66C], eax
0046094E EB 0A jmp short 0046095A
00460950 C785 94F9FFFF 0>mov dword ptr [ebp-66C], 0
0046095A 68 688A4000 push 00408A68
0046095F 8B45 9C mov eax, dword ptr [ebp-64]
00460962 50 push eax
00460963 FF15 44D24900 call dword ptr [<&msvbvm60.__vbaCastO>; msvbvm60.__vbaCastObj
00460969 50 push eax
0046096A 68 A4D04600 push 0046D0A4
0046096F FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00460975 8D4D 9C lea ecx, dword ptr [ebp-64]
00460978 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
0046097E C745 FC 0B00000>mov dword ptr [ebp-4], 0B
00460985 833D A4D04600 0>cmp dword ptr [46D0A4], 0
0046098C 75 1C jnz short 004609AA
0046098E 68 A4D04600 push 0046D0A4
00460993 68 90504000 push 00405090
00460998 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
0046099E C785 90F9FFFF A>mov dword ptr [ebp-670], 0046D0A4
004609A8 EB 0A jmp short 004609B4
004609AA C785 90F9FFFF A>mov dword ptr [ebp-670], 0046D0A4
004609B4 8B8D 90F9FFFF mov ecx, dword ptr [ebp-670]
004609BA 8B11 mov edx, dword ptr [ecx]
004609BC 8995 E0F9FFFF mov dword ptr [ebp-620], edx
004609C2 C785 10FAFFFF 0>mov dword ptr [ebp-5F0], 80020004
004609CC C785 08FAFFFF 0>mov dword ptr [ebp-5F8], 0A
004609D6 C785 20FAFFFF 0>mov dword ptr [ebp-5E0], 80020004
004609E0 C785 18FAFFFF 0>mov dword ptr [ebp-5E8], 0A
004609EA B8 10000000 mov eax, 10
004609EF E8 CC1FFAFF call <jmp.&msvbvm60.__vbaChkstk>
004609F4 8BC4 mov eax, esp
004609F6 8B8D 08FAFFFF mov ecx, dword ptr [ebp-5F8]
004609FC 8908 mov dword ptr [eax], ecx
004609FE 8B95 0CFAFFFF mov edx, dword ptr [ebp-5F4]
00460A04 8950 04 mov dword ptr [eax+4], edx
00460A07 8B8D 10FAFFFF mov ecx, dword ptr [ebp-5F0]
00460A0D 8948 08 mov dword ptr [eax+8], ecx
00460A10 8B95 14FAFFFF mov edx, dword ptr [ebp-5EC]
00460A16 8950 0C mov dword ptr [eax+C], edx
00460A19 B8 10000000 mov eax, 10
00460A1E E8 9D1FFAFF call <jmp.&msvbvm60.__vbaChkstk>
00460A23 8BC4 mov eax, esp
00460A25 8B8D 18FAFFFF mov ecx, dword ptr [ebp-5E8]
00460A2B 8908 mov dword ptr [eax], ecx
00460A2D 8B95 1CFAFFFF mov edx, dword ptr [ebp-5E4]
00460A33 8950 04 mov dword ptr [eax+4], edx
00460A36 8B8D 20FAFFFF mov ecx, dword ptr [ebp-5E0]
00460A3C 8948 08 mov dword ptr [eax+8], ecx
00460A3F 8B95 24FAFFFF mov edx, dword ptr [ebp-5DC]
00460A45 8950 0C mov dword ptr [eax+C], edx
00460A48 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
00460A4E 8B08 mov ecx, dword ptr [eax]
00460A50 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
00460A56 52 push edx
00460A57 FF91 B0020000 call dword ptr [ecx+2B0] ; ?
00460A5D DBE2 fclex
00460A5F 8985 DCF9FFFF mov dword ptr [ebp-624], eax
00460A65 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
00460A6C 7D 26 jge short 00460A94
00460A6E 68 B0020000 push 2B0
00460A73 68 388A4000 push 00408A38
00460A78 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
00460A7E 50 push eax
00460A7F 8B8D DCF9FFFF mov ecx, dword ptr [ebp-624]
00460A85 51 push ecx
00460A86 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00460A8C 8985 8CF9FFFF mov dword ptr [ebp-674], eax
00460A92 EB 0A jmp short 00460A9E
00460A94 C785 8CF9FFFF 0>mov dword ptr [ebp-674], 0
00460A9E C745 FC 0C00000>mov dword ptr [ebp-4], 0C
00460AA5 833D A4D04600 0>cmp dword ptr [46D0A4], 0
00460AAC 75 1C jnz short 00460ACA
00460AAE 68 A4D04600 push 0046D0A4
00460AB3 68 90504000 push 00405090
00460AB8 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
00460ABE C785 88F9FFFF A>mov dword ptr [ebp-678], 0046D0A4
00460AC8 EB 0A jmp short 00460AD4
00460ACA C785 88F9FFFF A>mov dword ptr [ebp-678], 0046D0A4
00460AD4 8B95 88F9FFFF mov edx, dword ptr [ebp-678]
00460ADA 8B02 mov eax, dword ptr [edx]
00460ADC 8B8D 88F9FFFF mov ecx, dword ptr [ebp-678]
00460AE2 8B11 mov edx, dword ptr [ecx]
00460AE4 8B0A mov ecx, dword ptr [edx]
00460AE6 50 push eax
00460AE7 FF91 10030000 call dword ptr [ecx+310]
00460AED 50 push eax
00460AEE 8D55 9C lea edx, dword ptr [ebp-64]
00460AF1 52 push edx
00460AF2 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00460AF8 8985 E0F9FFFF mov dword ptr [ebp-620], eax
00460AFE 6A 47 push 47
00460B00 8D45 88 lea eax, dword ptr [ebp-78]
00460B03 50 push eax
00460B04 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B0A 6A 45 push 45
00460B0C 8D8D 78FFFFFF lea ecx, dword ptr [ebp-88]
00460B12 51 push ecx
00460B13 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B19 6A 54 push 54
00460B1B 8D95 58FFFFFF lea edx, dword ptr [ebp-A8]
00460B21 52 push edx
00460B22 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B28 6A 20 push 20
00460B2A 8D85 38FFFFFF lea eax, dword ptr [ebp-C8]
00460B30 50 push eax
00460B31 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B37 6A 2F push 2F
00460B39 8D8D 18FFFFFF lea ecx, dword ptr [ebp-E8]
00460B3F 51 push ecx
00460B40 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B46 6A 2F push 2F
00460B48 8D95 F8FEFFFF lea edx, dword ptr [ebp-108]
00460B4E 52 push edx
00460B4F FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B55 6A 56 push 56
00460B57 8D85 D8FEFFFF lea eax, dword ptr [ebp-128]
00460B5D 50 push eax
00460B5E FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B64 6A 6F push 6F
00460B66 8D8D B8FEFFFF lea ecx, dword ptr [ebp-148]
00460B6C 51 push ecx
00460B6D FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B73 6A 69 push 69
00460B75 8D95 98FEFFFF lea edx, dword ptr [ebp-168]
00460B7B 52 push edx
00460B7C FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B82 6A 63 push 63
00460B84 8D85 78FEFFFF lea eax, dword ptr [ebp-188]
00460B8A 50 push eax
00460B8B FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460B91 6A 65 push 65
00460B93 8D8D 58FEFFFF lea ecx, dword ptr [ebp-1A8]
00460B99 51 push ecx
00460B9A FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460BA0 6A 2D push 2D
00460BA2 8D95 38FEFFFF lea edx, dword ptr [ebp-1C8]
00460BA8 52 push edx
00460BA9 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460BAF 6A 2D push 2D
00460BB1 8D85 18FEFFFF lea eax, dword ptr [ebp-1E8]
00460BB7 50 push eax
00460BB8 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460BBE 6A 46 push 46
00460BC0 8D8D F8FDFFFF lea ecx, dword ptr [ebp-208]
00460BC6 51 push ecx
00460BC7 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460BCD 6A 72 push 72
00460BCF 8D95 D8FDFFFF lea edx, dword ptr [ebp-228]
00460BD5 52 push edx
00460BD6 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460BDC 6A 65 push 65
00460BDE 8D85 B8FDFFFF lea eax, dword ptr [ebp-248]
00460BE4 50 push eax
00460BE5 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460BEB 6A 65 push 65
00460BED 8D8D 98FDFFFF lea ecx, dword ptr [ebp-268]
00460BF3 51 push ecx
00460BF4 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460BFA 6A 7A push 7A
00460BFC 8D95 78FDFFFF lea edx, dword ptr [ebp-288]
00460C02 52 push edx
00460C03 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C09 6A 65 push 65
00460C0B 8D85 58FDFFFF lea eax, dword ptr [ebp-2A8]
00460C11 50 push eax
00460C12 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C18 6A 2F push 2F
00460C1A 8D8D 38FDFFFF lea ecx, dword ptr [ebp-2C8]
00460C20 51 push ecx
00460C21 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C27 6A 56 push 56
00460C29 8D95 18FDFFFF lea edx, dword ptr [ebp-2E8]
00460C2F 52 push edx
00460C30 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C36 6A 34 push 34
00460C38 8D85 F8FCFFFF lea eax, dword ptr [ebp-308]
00460C3E 50 push eax
00460C3F FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C45 6A 2E push 2E
00460C47 8D8D D8FCFFFF lea ecx, dword ptr [ebp-328]
00460C4D 51 push ecx
00460C4E FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C54 6A 30 push 30
00460C56 8D95 B8FCFFFF lea edx, dword ptr [ebp-348]
00460C5C 52 push edx
00460C5D FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C63 6A 2F push 2F
00460C65 8D85 98FCFFFF lea eax, dword ptr [ebp-368]
00460C6B 50 push eax
00460C6C FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C72 6A 41 push 41
00460C74 8D8D 78FCFFFF lea ecx, dword ptr [ebp-388]
00460C7A 51 push ecx
00460C7B FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C81 6A 63 push 63
00460C83 8D95 58FCFFFF lea edx, dword ptr [ebp-3A8]
00460C89 52 push edx
00460C8A FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C90 6A 74 push 74
00460C92 8D85 38FCFFFF lea eax, dword ptr [ebp-3C8]
00460C98 50 push eax
00460C99 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460C9F 6A 69 push 69
00460CA1 8D8D 18FCFFFF lea ecx, dword ptr [ebp-3E8]
00460CA7 51 push ecx
00460CA8 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460CAE 6A 76 push 76
00460CB0 8D95 F8FBFFFF lea edx, dword ptr [ebp-408]
00460CB6 52 push edx
00460CB7 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460CBD 6A 65 push 65
00460CBF 8D85 D8FBFFFF lea eax, dword ptr [ebp-428]
00460CC5 50 push eax
00460CC6 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460CCC 6A 2E push 2E
00460CCE 8D8D B8FBFFFF lea ecx, dword ptr [ebp-448]
00460CD4 51 push ecx
00460CD5 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460CDB 6A 74 push 74
00460CDD 8D95 98FBFFFF lea edx, dword ptr [ebp-468]
00460CE3 52 push edx
00460CE4 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460CEA 6A 78 push 78
00460CEC 8D85 78FBFFFF lea eax, dword ptr [ebp-488]
00460CF2 50 push eax
00460CF3 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460CF9 6A 74 push 74
00460CFB 8D8D 58FBFFFF lea ecx, dword ptr [ebp-4A8]
00460D01 51 push ecx
00460D02 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D08 6A 20 push 20
00460D0A 8D95 38FBFFFF lea edx, dword ptr [ebp-4C8]
00460D10 52 push edx
00460D11 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D17 6A 48 push 48
00460D19 8D85 18FBFFFF lea eax, dword ptr [ebp-4E8]
00460D1F 50 push eax
00460D20 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D26 6A 54 push 54
00460D28 8D8D F8FAFFFF lea ecx, dword ptr [ebp-508]
00460D2E 51 push ecx
00460D2F FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D35 6A 54 push 54
00460D37 8D95 D8FAFFFF lea edx, dword ptr [ebp-528]
00460D3D 52 push edx
00460D3E FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D44 6A 50 push 50
00460D46 8D85 B8FAFFFF lea eax, dword ptr [ebp-548]
00460D4C 50 push eax
00460D4D FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D53 6A 2F push 2F
00460D55 8D8D 98FAFFFF lea ecx, dword ptr [ebp-568]
00460D5B 51 push ecx
00460D5C FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D62 6A 31 push 31
00460D64 8D95 78FAFFFF lea edx, dword ptr [ebp-588]
00460D6A 52 push edx
00460D6B FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D71 6A 2E push 2E
00460D73 8D85 58FAFFFF lea eax, dword ptr [ebp-5A8]
00460D79 50 push eax
00460D7A FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D80 6A 31 push 31
00460D82 8D8D 38FAFFFF lea ecx, dword ptr [ebp-5C8]
00460D88 51 push ecx
00460D89 FF15 74D14900 call dword ptr [<&msvbvm60.rtcVarBstr>; msvbvm60.rtcVarBstrFromAnsi
00460D8F 8D55 88 lea edx, dword ptr [ebp-78]
00460D92 52 push edx
00460D93 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
00460D99 50 push eax
00460D9A 8D8D 68FFFFFF lea ecx, dword ptr [ebp-98]
00460DA0 51 push ecx
00460DA1 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460DA7 50 push eax
00460DA8 8D95 58FFFFFF lea edx, dword ptr [ebp-A8]
00460DAE 52 push edx
00460DAF 8D85 48FFFFFF lea eax, dword ptr [ebp-B8]
00460DB5 50 push eax
00460DB6 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460DBC 50 push eax
00460DBD 8D8D 38FFFFFF lea ecx, dword ptr [ebp-C8]
00460DC3 51 push ecx
00460DC4 8D95 28FFFFFF lea edx, dword ptr [ebp-D8]
00460DCA 52 push edx
00460DCB FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460DD1 50 push eax
00460DD2 8D85 18FFFFFF lea eax, dword ptr [ebp-E8]
00460DD8 50 push eax
00460DD9 8D8D 08FFFFFF lea ecx, dword ptr [ebp-F8]
00460DDF 51 push ecx
00460DE0 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460DE6 50 push eax
00460DE7 8D95 F8FEFFFF lea edx, dword ptr [ebp-108]
00460DED 52 push edx
00460DEE 8D85 E8FEFFFF lea eax, dword ptr [ebp-118]
00460DF4 50 push eax
00460DF5 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460DFB 50 push eax
00460DFC 8D8D D8FEFFFF lea ecx, dword ptr [ebp-128]
00460E02 51 push ecx
00460E03 8D95 C8FEFFFF lea edx, dword ptr [ebp-138]
00460E09 52 push edx
00460E0A FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460E10 50 push eax
00460E11 8D85 B8FEFFFF lea eax, dword ptr [ebp-148]
00460E17 50 push eax
00460E18 8D8D A8FEFFFF lea ecx, dword ptr [ebp-158]
00460E1E 51 push ecx
00460E1F FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460E25 50 push eax
00460E26 8D95 98FEFFFF lea edx, dword ptr [ebp-168]
00460E2C 52 push edx
00460E2D 8D85 88FEFFFF lea eax, dword ptr [ebp-178]
00460E33 50 push eax
00460E34 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460E3A 50 push eax
00460E3B 8D8D 78FEFFFF lea ecx, dword ptr [ebp-188]
00460E41 51 push ecx
00460E42 8D95 68FEFFFF lea edx, dword ptr [ebp-198]
00460E48 52 push edx
00460E49 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460E4F 50 push eax
00460E50 8D85 58FEFFFF lea eax, dword ptr [ebp-1A8]
00460E56 50 push eax
00460E57 8D8D 48FEFFFF lea ecx, dword ptr [ebp-1B8]
00460E5D 51 push ecx
00460E5E FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460E64 50 push eax
00460E65 8D95 38FEFFFF lea edx, dword ptr [ebp-1C8]
00460E6B 52 push edx
00460E6C 8D85 28FEFFFF lea eax, dword ptr [ebp-1D8]
00460E72 50 push eax
00460E73 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460E79 50 push eax
00460E7A 8D8D 18FEFFFF lea ecx, dword ptr [ebp-1E8]
00460E80 51 push ecx
00460E81 8D95 08FEFFFF lea edx, dword ptr [ebp-1F8]
00460E87 52 push edx
00460E88 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460E8E 50 push eax
00460E8F 8D85 F8FDFFFF lea eax, dword ptr [ebp-208]
00460E95 50 push eax
00460E96 8D8D E8FDFFFF lea ecx, dword ptr [ebp-218]
00460E9C 51 push ecx
00460E9D FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460EA3 50 push eax
00460EA4 8D95 D8FDFFFF lea edx, dword ptr [ebp-228]
00460EAA 52 push edx
00460EAB 8D85 C8FDFFFF lea eax, dword ptr [ebp-238]
00460EB1 50 push eax
00460EB2 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460EB8 50 push eax
00460EB9 8D8D B8FDFFFF lea ecx, dword ptr [ebp-248]
00460EBF 51 push ecx
00460EC0 8D95 A8FDFFFF lea edx, dword ptr [ebp-258]
00460EC6 52 push edx
00460EC7 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460ECD 50 push eax
00460ECE 8D85 98FDFFFF lea eax, dword ptr [ebp-268]
00460ED4 50 push eax
00460ED5 8D8D 88FDFFFF lea ecx, dword ptr [ebp-278]
00460EDB 51 push ecx
00460EDC FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460EE2 50 push eax
00460EE3 8D95 78FDFFFF lea edx, dword ptr [ebp-288]
00460EE9 52 push edx
00460EEA 8D85 68FDFFFF lea eax, dword ptr [ebp-298]
00460EF0 50 push eax
00460EF1 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460EF7 50 push eax
00460EF8 8D8D 58FDFFFF lea ecx, dword ptr [ebp-2A8]
00460EFE 51 push ecx
00460EFF 8D95 48FDFFFF lea edx, dword ptr [ebp-2B8]
00460F05 52 push edx
00460F06 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F0C 50 push eax
00460F0D 8D85 38FDFFFF lea eax, dword ptr [ebp-2C8]
00460F13 50 push eax
00460F14 8D8D 28FDFFFF lea ecx, dword ptr [ebp-2D8]
00460F1A 51 push ecx
00460F1B FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F21 50 push eax
00460F22 8D95 18FDFFFF lea edx, dword ptr [ebp-2E8]
00460F28 52 push edx
00460F29 8D85 08FDFFFF lea eax, dword ptr [ebp-2F8]
00460F2F 50 push eax
00460F30 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F36 50 push eax
00460F37 8D8D F8FCFFFF lea ecx, dword ptr [ebp-308]
00460F3D 51 push ecx
00460F3E 8D95 E8FCFFFF lea edx, dword ptr [ebp-318]
00460F44 52 push edx
00460F45 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F4B 50 push eax
00460F4C 8D85 D8FCFFFF lea eax, dword ptr [ebp-328]
00460F52 50 push eax
00460F53 8D8D C8FCFFFF lea ecx, dword ptr [ebp-338]
00460F59 51 push ecx
00460F5A FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F60 50 push eax
00460F61 8D95 B8FCFFFF lea edx, dword ptr [ebp-348]
00460F67 52 push edx
00460F68 8D85 A8FCFFFF lea eax, dword ptr [ebp-358]
00460F6E 50 push eax
00460F6F FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F75 50 push eax
00460F76 8D8D 98FCFFFF lea ecx, dword ptr [ebp-368]
00460F7C 51 push ecx
00460F7D 8D95 88FCFFFF lea edx, dword ptr [ebp-378]
00460F83 52 push edx
00460F84 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F8A 50 push eax
00460F8B 8D85 78FCFFFF lea eax, dword ptr [ebp-388]
00460F91 50 push eax
00460F92 8D8D 68FCFFFF lea ecx, dword ptr [ebp-398]
00460F98 51 push ecx
00460F99 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460F9F 50 push eax
00460FA0 8D95 58FCFFFF lea edx, dword ptr [ebp-3A8]
00460FA6 52 push edx
00460FA7 8D85 48FCFFFF lea eax, dword ptr [ebp-3B8]
00460FAD 50 push eax
00460FAE FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460FB4 50 push eax
00460FB5 8D8D 38FCFFFF lea ecx, dword ptr [ebp-3C8]
00460FBB 51 push ecx
00460FBC 8D95 28FCFFFF lea edx, dword ptr [ebp-3D8]
00460FC2 52 push edx
00460FC3 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460FC9 50 push eax
00460FCA 8D85 18FCFFFF lea eax, dword ptr [ebp-3E8]
00460FD0 50 push eax
00460FD1 8D8D 08FCFFFF lea ecx, dword ptr [ebp-3F8]
00460FD7 51 push ecx
00460FD8 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460FDE 50 push eax
00460FDF 8D95 F8FBFFFF lea edx, dword ptr [ebp-408]
00460FE5 52 push edx
00460FE6 8D85 E8FBFFFF lea eax, dword ptr [ebp-418]
00460FEC 50 push eax
00460FED FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00460FF3 50 push eax
00460FF4 8D8D D8FBFFFF lea ecx, dword ptr [ebp-428]
00460FFA 51 push ecx
00460FFB 8D95 C8FBFFFF lea edx, dword ptr [ebp-438]
00461001 52 push edx
00461002 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00461008 50 push eax
00461009 8D85 B8FBFFFF lea eax, dword ptr [ebp-448]
0046100F 50 push eax
00461010 8D8D A8FBFFFF lea ecx, dword ptr [ebp-458]
00461016 51 push ecx
00461017 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
0046101D 50 push eax
0046101E 8D95 98FBFFFF lea edx, dword ptr [ebp-468]
00461024 52 push edx
00461025 8D85 88FBFFFF lea eax, dword ptr [ebp-478]
0046102B 50 push eax
0046102C FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00461032 50 push eax
00461033 8D8D 78FBFFFF lea ecx, dword ptr [ebp-488]
00461039 51 push ecx
0046103A 8D95 68FBFFFF lea edx, dword ptr [ebp-498]
00461040 52 push edx
00461041 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00461047 50 push eax
00461048 8D85 58FBFFFF lea eax, dword ptr [ebp-4A8]
0046104E 50 push eax
0046104F 8D8D 48FBFFFF lea ecx, dword ptr [ebp-4B8]
00461055 51 push ecx
00461056 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
0046105C 50 push eax
0046105D 8D95 38FBFFFF lea edx, dword ptr [ebp-4C8]
00461063 52 push edx
00461064 8D85 28FBFFFF lea eax, dword ptr [ebp-4D8]
0046106A 50 push eax
0046106B FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00461071 50 push eax
00461072 8D8D 18FBFFFF lea ecx, dword ptr [ebp-4E8]
00461078 51 push ecx
00461079 8D95 08FBFFFF lea edx, dword ptr [ebp-4F8]
0046107F 52 push edx
00461080 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00461086 50 push eax
00461087 8D85 F8FAFFFF lea eax, dword ptr [ebp-508]
0046108D 50 push eax
0046108E 8D8D E8FAFFFF lea ecx, dword ptr [ebp-518]
00461094 51 push ecx
00461095 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
0046109B 50 push eax
0046109C 8D95 D8FAFFFF lea edx, dword ptr [ebp-528]
004610A2 52 push edx
004610A3 8D85 C8FAFFFF lea eax, dword ptr [ebp-538]
004610A9 50 push eax
004610AA FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
004610B0 50 push eax
004610B1 8D8D B8FAFFFF lea ecx, dword ptr [ebp-548]
004610B7 51 push ecx
004610B8 8D95 A8FAFFFF lea edx, dword ptr [ebp-558]
004610BE 52 push edx
004610BF FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
004610C5 50 push eax
004610C6 8D85 98FAFFFF lea eax, dword ptr [ebp-568]
004610CC 50 push eax
004610CD 8D8D 88FAFFFF lea ecx, dword ptr [ebp-578]
004610D3 51 push ecx
004610D4 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
004610DA 50 push eax
004610DB 8D95 78FAFFFF lea edx, dword ptr [ebp-588]
004610E1 52 push edx
004610E2 8D85 68FAFFFF lea eax, dword ptr [ebp-598]
004610E8 50 push eax
004610E9 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
004610EF 50 push eax
004610F0 8D8D 58FAFFFF lea ecx, dword ptr [ebp-5A8]
004610F6 51 push ecx
004610F7 8D95 48FAFFFF lea edx, dword ptr [ebp-5B8]
004610FD 52 push edx
004610FE FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00461104 50 push eax
00461105 8D85 38FAFFFF lea eax, dword ptr [ebp-5C8]
0046110B 50 push eax
0046110C 8D8D 28FAFFFF lea ecx, dword ptr [ebp-5D8]
00461112 51 push ecx
00461113 FF15 90D14900 call dword ptr [<&msvbvm60.__vbaVarCa>; msvbvm60.__vbaVarCat
00461119 50 push eax
0046111A 8D55 A4 lea edx, dword ptr [ebp-5C]
0046111D 52 push edx
0046111E FF15 8CD14900 call dword ptr [<&msvbvm60.__vbaStrVa>; msvbvm60.__vbaStrVarVal
00461124 50 push eax
00461125 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
0046112B 8B08 mov ecx, dword ptr [eax]
0046112D 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
00461133 52 push edx
00461134 FF51 54 call dword ptr [ecx+54]
00461137 DBE2 fclex
00461139 8985 DCF9FFFF mov dword ptr [ebp-624], eax
0046113F 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
00461146 7D 23 jge short 0046116B
00461148 6A 54 push 54
0046114A 68 E8894000 push 004089E8
0046114F 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
00461155 50 push eax
00461156 8B8D DCF9FFFF mov ecx, dword ptr [ebp-624]
0046115C 51 push ecx
0046115D FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00461163 8985 84F9FFFF mov dword ptr [ebp-67C], eax
00461169 EB 0A jmp short 00461175
0046116B C785 84F9FFFF 0>mov dword ptr [ebp-67C], 0
00461175 8D4D A4 lea ecx, dword ptr [ebp-5C]
00461178 FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
0046117E 8D4D 9C lea ecx, dword ptr [ebp-64]
00461181 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461187 8D95 B8FDFFFF lea edx, dword ptr [ebp-248]
0046118D 52 push edx
0046118E 8D85 C8FDFFFF lea eax, dword ptr [ebp-238]
00461194 50 push eax
00461195 8D8D D8FDFFFF lea ecx, dword ptr [ebp-228]
0046119B 51 push ecx
0046119C 8D95 E8FDFFFF lea edx, dword ptr [ebp-218]
004611A2 52 push edx
004611A3 8D85 F8FDFFFF lea eax, dword ptr [ebp-208]
004611A9 50 push eax
004611AA 8D8D 08FEFFFF lea ecx, dword ptr [ebp-1F8]
004611B0 51 push ecx
004611B1 8D95 18FEFFFF lea edx, dword ptr [ebp-1E8]
004611B7 52 push edx
004611B8 8D85 28FEFFFF lea eax, dword ptr [ebp-1D8]
004611BE 50 push eax
004611BF 8D8D 38FEFFFF lea ecx, dword ptr [ebp-1C8]
004611C5 51 push ecx
004611C6 8D95 48FEFFFF lea edx, dword ptr [ebp-1B8]
004611CC 52 push edx
004611CD 8D85 58FEFFFF lea eax, dword ptr [ebp-1A8]
004611D3 50 push eax
004611D4 8D8D 68FEFFFF lea ecx, dword ptr [ebp-198]
004611DA 51 push ecx
004611DB 8D95 78FEFFFF lea edx, dword ptr [ebp-188]
004611E1 52 push edx
004611E2 8D85 88FEFFFF lea eax, dword ptr [ebp-178]
004611E8 50 push eax
004611E9 8D8D 98FEFFFF lea ecx, dword ptr [ebp-168]
004611EF 51 push ecx
004611F0 8D95 A8FEFFFF lea edx, dword ptr [ebp-158]
004611F6 52 push edx
004611F7 8D85 B8FEFFFF lea eax, dword ptr [ebp-148]
004611FD 50 push eax
004611FE 8D8D C8FEFFFF lea ecx, dword ptr [ebp-138]
00461204 51 push ecx
00461205 8D95 D8FEFFFF lea edx, dword ptr [ebp-128]
0046120B 52 push edx
0046120C 8D85 E8FEFFFF lea eax, dword ptr [ebp-118]
00461212 50 push eax
00461213 8D8D F8FEFFFF lea ecx, dword ptr [ebp-108]
00461219 51 push ecx
0046121A 8D95 08FFFFFF lea edx, dword ptr [ebp-F8]
00461220 52 push edx
00461221 8D85 18FFFFFF lea eax, dword ptr [ebp-E8]
00461227 50 push eax
00461228 8D8D 28FFFFFF lea ecx, dword ptr [ebp-D8]
0046122E 51 push ecx
0046122F 8D95 38FFFFFF lea edx, dword ptr [ebp-C8]
00461235 52 push edx
00461236 8D85 48FFFFFF lea eax, dword ptr [ebp-B8]
0046123C 50 push eax
0046123D 8D8D 58FFFFFF lea ecx, dword ptr [ebp-A8]
00461243 51 push ecx
00461244 8D95 68FFFFFF lea edx, dword ptr [ebp-98]
0046124A 52 push edx
0046124B 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
00461251 50 push eax
00461252 8D4D 88 lea ecx, dword ptr [ebp-78]
00461255 51 push ecx
00461256 8D95 D8FBFFFF lea edx, dword ptr [ebp-428]
0046125C 52 push edx
0046125D 8D85 E8FBFFFF lea eax, dword ptr [ebp-418]
00461263 50 push eax
00461264 8D8D F8FBFFFF lea ecx, dword ptr [ebp-408]
0046126A 51 push ecx
0046126B 8D95 08FCFFFF lea edx, dword ptr [ebp-3F8]
00461271 52 push edx
00461272 8D85 18FCFFFF lea eax, dword ptr [ebp-3E8]
00461278 50 push eax
00461279 8D8D 28FCFFFF lea ecx, dword ptr [ebp-3D8]
0046127F 51 push ecx
00461280 8D95 38FCFFFF lea edx, dword ptr [ebp-3C8]
00461286 52 push edx
00461287 8D85 48FCFFFF lea eax, dword ptr [ebp-3B8]
0046128D 50 push eax
0046128E 8D8D 58FCFFFF lea ecx, dword ptr [ebp-3A8]
00461294 51 push ecx
00461295 8D95 68FCFFFF lea edx, dword ptr [ebp-398]
0046129B 52 push edx
0046129C 8D85 78FCFFFF lea eax, dword ptr [ebp-388]
004612A2 50 push eax
004612A3 8D8D 88FCFFFF lea ecx, dword ptr [ebp-378]
004612A9 51 push ecx
004612AA 8D95 98FCFFFF lea edx, dword ptr [ebp-368]
004612B0 52 push edx
004612B1 8D85 A8FCFFFF lea eax, dword ptr [ebp-358]
004612B7 50 push eax
004612B8 8D8D B8FCFFFF lea ecx, dword ptr [ebp-348]
004612BE 51 push ecx
004612BF 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
004612C5 52 push edx
004612C6 8D85 D8FCFFFF lea eax, dword ptr [ebp-328]
004612CC 50 push eax
004612CD 8D8D E8FCFFFF lea ecx, dword ptr [ebp-318]
004612D3 51 push ecx
004612D4 8D95 F8FCFFFF lea edx, dword ptr [ebp-308]
004612DA 52 push edx
004612DB 8D85 08FDFFFF lea eax, dword ptr [ebp-2F8]
004612E1 50 push eax
004612E2 8D8D 18FDFFFF lea ecx, dword ptr [ebp-2E8]
004612E8 51 push ecx
004612E9 8D95 28FDFFFF lea edx, dword ptr [ebp-2D8]
004612EF 52 push edx
004612F0 8D85 38FDFFFF lea eax, dword ptr [ebp-2C8]
004612F6 50 push eax
004612F7 8D8D 48FDFFFF lea ecx, dword ptr [ebp-2B8]
004612FD 51 push ecx
004612FE 8D95 58FDFFFF lea edx, dword ptr [ebp-2A8]
00461304 52 push edx
00461305 8D85 68FDFFFF lea eax, dword ptr [ebp-298]
0046130B 50 push eax
0046130C 8D8D 78FDFFFF lea ecx, dword ptr [ebp-288]
00461312 51 push ecx
00461313 8D95 88FDFFFF lea edx, dword ptr [ebp-278]
00461319 52 push edx
0046131A 8D85 98FDFFFF lea eax, dword ptr [ebp-268]
00461320 50 push eax
00461321 8D8D A8FDFFFF lea ecx, dword ptr [ebp-258]
00461327 51 push ecx
00461328 8D95 28FAFFFF lea edx, dword ptr [ebp-5D8]
0046132E 52 push edx
0046132F 8D85 38FAFFFF lea eax, dword ptr [ebp-5C8]
00461335 50 push eax
00461336 8D8D 48FAFFFF lea ecx, dword ptr [ebp-5B8]
0046133C 51 push ecx
0046133D 8D95 58FAFFFF lea edx, dword ptr [ebp-5A8]
00461343 52 push edx
00461344 8D85 68FAFFFF lea eax, dword ptr [ebp-598]
0046134A 50 push eax
0046134B 8D8D 78FAFFFF lea ecx, dword ptr [ebp-588]
00461351 51 push ecx
00461352 8D95 88FAFFFF lea edx, dword ptr [ebp-578]
00461358 52 push edx
00461359 8D85 98FAFFFF lea eax, dword ptr [ebp-568]
0046135F 50 push eax
00461360 8D8D A8FAFFFF lea ecx, dword ptr [ebp-558]
00461366 51 push ecx
00461367 8D95 B8FAFFFF lea edx, dword ptr [ebp-548]
0046136D 52 push edx
0046136E 8D85 C8FAFFFF lea eax, dword ptr [ebp-538]
00461374 50 push eax
00461375 8D8D D8FAFFFF lea ecx, dword ptr [ebp-528]
0046137B 51 push ecx
0046137C 8D95 E8FAFFFF lea edx, dword ptr [ebp-518]
00461382 52 push edx
00461383 8D85 F8FAFFFF lea eax, dword ptr [ebp-508]
00461389 50 push eax
0046138A 8D8D 08FBFFFF lea ecx, dword ptr [ebp-4F8]
00461390 51 push ecx
00461391 8D95 18FBFFFF lea edx, dword ptr [ebp-4E8]
00461397 52 push edx
00461398 8D85 28FBFFFF lea eax, dword ptr [ebp-4D8]
0046139E 50 push eax
0046139F 8D8D 38FBFFFF lea ecx, dword ptr [ebp-4C8]
004613A5 51 push ecx
004613A6 8D95 48FBFFFF lea edx, dword ptr [ebp-4B8]
004613AC 52 push edx
004613AD 8D85 58FBFFFF lea eax, dword ptr [ebp-4A8]
004613B3 50 push eax
004613B4 8D8D 68FBFFFF lea ecx, dword ptr [ebp-498]
004613BA 51 push ecx
004613BB 8D95 78FBFFFF lea edx, dword ptr [ebp-488]
004613C1 52 push edx
004613C2 8D85 88FBFFFF lea eax, dword ptr [ebp-478]
004613C8 50 push eax
004613C9 8D8D 98FBFFFF lea ecx, dword ptr [ebp-468]
004613CF 51 push ecx
004613D0 8D95 A8FBFFFF lea edx, dword ptr [ebp-458]
004613D6 52 push edx
004613D7 8D85 B8FBFFFF lea eax, dword ptr [ebp-448]
004613DD 50 push eax
004613DE 8D8D C8FBFFFF lea ecx, dword ptr [ebp-438]
004613E4 51 push ecx
004613E5 6A 57 push 57
004613E7 FF15 34D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVarList
004613ED 81C4 60010000 add esp, 160
004613F3 C745 FC 0D00000>mov dword ptr [ebp-4], 0D
004613FA 837D D8 00 cmp dword ptr [ebp-28], 0
004613FE 75 1A jnz short 0046141A
00461400 8D55 D8 lea edx, dword ptr [ebp-28]
00461403 52 push edx
00461404 68 08334000 push 00403308
00461409 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
0046140F 8D45 D8 lea eax, dword ptr [ebp-28]
00461412 8985 80F9FFFF mov dword ptr [ebp-680], eax
00461418 EB 09 jmp short 00461423
0046141A 8D4D D8 lea ecx, dword ptr [ebp-28]
0046141D 898D 80F9FFFF mov dword ptr [ebp-680], ecx
00461423 8B95 80F9FFFF mov edx, dword ptr [ebp-680]
00461429 8B02 mov eax, dword ptr [edx]
0046142B 8985 E0F9FFFF mov dword ptr [ebp-620], eax
00461431 8D4D A4 lea ecx, dword ptr [ebp-5C]
00461434 51 push ecx
00461435 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
0046143B 8B02 mov eax, dword ptr [edx]
0046143D 8B8D E0F9FFFF mov ecx, dword ptr [ebp-620]
00461443 51 push ecx
00461444 FF50 1C call dword ptr [eax+1C]
00461447 DBE2 fclex
00461449 8985 DCF9FFFF mov dword ptr [ebp-624], eax
0046144F 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
00461456 7D 23 jge short 0046147B
00461458 6A 1C push 1C
0046145A 68 904F4100 push 00414F90
0046145F 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
00461465 52 push edx
00461466 8B85 DCF9FFFF mov eax, dword ptr [ebp-624]
0046146C 50 push eax
0046146D FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00461473 8985 7CF9FFFF mov dword ptr [ebp-684], eax
00461479 EB 0A jmp short 00461485
0046147B C785 7CF9FFFF 0>mov dword ptr [ebp-684], 0
00461485 8B4D A4 mov ecx, dword ptr [ebp-5C]
00461488 898D BCF9FFFF mov dword ptr [ebp-644], ecx
0046148E C745 A4 0000000>mov dword ptr [ebp-5C], 0
00461495 8B95 BCF9FFFF mov edx, dword ptr [ebp-644]
0046149B 8D4D B0 lea ecx, dword ptr [ebp-50]
0046149E FF15 4CD24900 call dword ptr [<&msvbvm60.__vbaStrMo>; msvbvm60.__vbaStrMove
004614A4 C745 FC 0E00000>mov dword ptr [ebp-4], 0E
004614AB 8D95 E4F9FFFF lea edx, dword ptr [ebp-61C]
004614B1 52 push edx
004614B2 8D45 DC lea eax, dword ptr [ebp-24]
004614B5 50 push eax
004614B6 8B4D 08 mov ecx, dword ptr [ebp+8]
004614B9 8B11 mov edx, dword ptr [ecx]
004614BB 8B45 08 mov eax, dword ptr [ebp+8]
004614BE 50 push eax
004614BF FF92 F8060000 call dword ptr [edx+6F8]
004614C5 8985 E0F9FFFF mov dword ptr [ebp-620], eax
004614CB 83BD E0F9FFFF 0>cmp dword ptr [ebp-620], 0
004614D2 7D 23 jge short 004614F7
004614D4 68 F8060000 push 6F8
004614D9 68 688A4000 push 00408A68
004614DE 8B4D 08 mov ecx, dword ptr [ebp+8]
004614E1 51 push ecx
004614E2 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
004614E8 52 push edx
004614E9 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
004614EF 8985 78F9FFFF mov dword ptr [ebp-688], eax
004614F5 EB 0A jmp short 00461501
004614F7 C785 78F9FFFF 0>mov dword ptr [ebp-688], 0
00461501 0FBF85 E4F9FFFF movsx eax, word ptr [ebp-61C]
00461508 85C0 test eax, eax
0046150A 0F84 37030000 je 00461847
00461510 C745 FC 0F00000>mov dword ptr [ebp-4], 0F
00461517 C745 90 0400028>mov dword ptr [ebp-70], 80020004
0046151E C745 88 0A00000>mov dword ptr [ebp-78], 0A
00461525 8D4D 88 lea ecx, dword ptr [ebp-78]
00461528 51 push ecx
00461529 FF15 B0D14900 call dword ptr [<&msvbvm60.rtcFreeFil>; msvbvm60.rtcFreeFile
0046152F 66:8945 C8 mov word ptr [ebp-38], ax
00461533 8D4D 88 lea ecx, dword ptr [ebp-78]
00461536 FF15 24D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVar
0046153C C745 FC 1000000>mov dword ptr [ebp-4], 10
00461543 8B55 DC mov edx, dword ptr [ebp-24]
00461546 52 push edx
00461547 66:8B45 C8 mov ax, word ptr [ebp-38]
0046154B 50 push eax
0046154C 6A FF push -1
0046154E 6A 20 push 20
00461550 FF15 A8D14900 call dword ptr [<&msvbvm60.__vbaFileO>; msvbvm60.__vbaFileOpen
00461556 C745 FC 1100000>mov dword ptr [ebp-4], 11
0046155D 6A 00 push 0
0046155F 66:8B4D C8 mov cx, word ptr [ebp-38]
00461563 51 push ecx
00461564 FF15 B4D14900 call dword ptr [<&msvbvm60.rtcFileLen>; msvbvm60.rtcFileLength
0046156A 83E8 01 sub eax, 1
0046156D 0F80 580A0000 jo 00461FCB
00461573 50 push eax
00461574 6A 01 push 1
00461576 6A 11 push 11
00461578 8D55 D0 lea edx, dword ptr [ebp-30]
0046157B 52 push edx
0046157C 6A 01 push 1
0046157E 68 80000000 push 80
00461583 FF15 28D14900 call dword ptr [<&msvbvm60.__vbaRedim>; msvbvm60.__vbaRedim
00461589 83C4 1C add esp, 1C
0046158C C745 FC 1200000>mov dword ptr [ebp-4], 12
00461593 66:8B45 C8 mov ax, word ptr [ebp-38]
00461597 50 push eax
00461598 8D4D D0 lea ecx, dword ptr [ebp-30]
0046159B 51 push ecx
0046159C 68 80514100 push 00415180
004615A1 FF15 84D14900 call dword ptr [<&msvbvm60.__vbaGetOw>; msvbvm60.__vbaGetOwner3
004615A7 C745 FC 1300000>mov dword ptr [ebp-4], 13
004615AE 66:8B55 C8 mov dx, word ptr [ebp-38]
004615B2 52 push edx
004615B3 FF15 E0D04900 call dword ptr [<&msvbvm60.__vbaFileC>; msvbvm60.__vbaFileClose
004615B9 C745 FC 1400000>mov dword ptr [ebp-4], 14
004615C0 8D45 D0 lea eax, dword ptr [ebp-30]
004615C3 8985 20FAFFFF mov dword ptr [ebp-5E0], eax
004615C9 C785 18FAFFFF 1>mov dword ptr [ebp-5E8], 6011
004615D3 6A 00 push 0
004615D5 6A 40 push 40
004615D7 8D8D 18FAFFFF lea ecx, dword ptr [ebp-5E8]
004615DD 51 push ecx
004615DE 8D55 88 lea edx, dword ptr [ebp-78]
004615E1 52 push edx
004615E2 FF15 7CD14900 call dword ptr [<&msvbvm60.rtcStrConv>; msvbvm60.rtcStrConvVar2
004615E8 8D45 88 lea eax, dword ptr [ebp-78]
004615EB 50 push eax
004615EC FF15 2CD04900 call dword ptr [<&msvbvm60.__vbaStrVa>; msvbvm60.__vbaStrVarMove
004615F2 8BD0 mov edx, eax
004615F4 8D4D AC lea ecx, dword ptr [ebp-54]
004615F7 FF15 4CD24900 call dword ptr [<&msvbvm60.__vbaStrMo>; msvbvm60.__vbaStrMove
004615FD 8D4D 88 lea ecx, dword ptr [ebp-78]
00461600 FF15 24D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVar
00461606 C745 FC 1500000>mov dword ptr [ebp-4], 15
0046160D 837D D4 00 cmp dword ptr [ebp-2C], 0
00461611 75 1A jnz short 0046162D
00461613 8D4D D4 lea ecx, dword ptr [ebp-2C]
00461616 51 push ecx
00461617 68 04344000 push 00403404
0046161C FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
00461622 8D55 D4 lea edx, dword ptr [ebp-2C]
00461625 8995 74F9FFFF mov dword ptr [ebp-68C], edx
0046162B EB 09 jmp short 00461636
0046162D 8D45 D4 lea eax, dword ptr [ebp-2C]
00461630 8985 74F9FFFF mov dword ptr [ebp-68C], eax
00461636 8B8D 74F9FFFF mov ecx, dword ptr [ebp-68C]
0046163C 8B11 mov edx, dword ptr [ecx]
0046163E 8995 E0F9FFFF mov dword ptr [ebp-620], edx
00461644 BA 9C514100 mov edx, 0041519C ; UNICODE "QualityLider"
00461649 8D4D A4 lea ecx, dword ptr [ebp-5C]
0046164C FF15 D0D14900 call dword ptr [<&msvbvm60.__vbaStrCo>; msvbvm60.__vbaStrCopy
00461652 8D45 A0 lea eax, dword ptr [ebp-60]
00461655 50 push eax
00461656 8D4D A4 lea ecx, dword ptr [ebp-5C]
00461659 51 push ecx
0046165A 8D55 AC lea edx, dword ptr [ebp-54]
0046165D 52 push edx
0046165E 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
00461664 8B08 mov ecx, dword ptr [eax]
00461666 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
0046166C 52 push edx
0046166D FF51 20 call dword ptr [ecx+20]
00461670 DBE2 fclex
00461672 8985 DCF9FFFF mov dword ptr [ebp-624], eax
00461678 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
0046167F 7D 23 jge short 004616A4
00461681 6A 20 push 20
00461683 68 C8514100 push 004151C8
00461688 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
0046168E 50 push eax
0046168F 8B8D DCF9FFFF mov ecx, dword ptr [ebp-624]
00461695 51 push ecx
00461696 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
0046169C 8985 70F9FFFF mov dword ptr [ebp-690], eax
004616A2 EB 0A jmp short 004616AE
004616A4 C785 70F9FFFF 0>mov dword ptr [ebp-690], 0
004616AE 8B55 A0 mov edx, dword ptr [ebp-60]
004616B1 8995 B8F9FFFF mov dword ptr [ebp-648], edx
004616B7 C745 A0 0000000>mov dword ptr [ebp-60], 0
004616BE 8B95 B8F9FFFF mov edx, dword ptr [ebp-648]
004616C4 8D4D CC lea ecx, dword ptr [ebp-34]
004616C7 FF15 4CD24900 call dword ptr [<&msvbvm60.__vbaStrMo>; msvbvm60.__vbaStrMove
004616CD 8D4D A4 lea ecx, dword ptr [ebp-5C]
004616D0 FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
004616D6 C745 FC 1600000>mov dword ptr [ebp-4], 16
004616DD 837D B4 00 cmp dword ptr [ebp-4C], 0
004616E1 75 1A jnz short 004616FD
004616E3 8D45 B4 lea eax, dword ptr [ebp-4C]
004616E6 50 push eax
004616E7 68 34354000 push 00403534
004616EC FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
004616F2 8D4D B4 lea ecx, dword ptr [ebp-4C]
004616F5 898D 6CF9FFFF mov dword ptr [ebp-694], ecx
004616FB EB 09 jmp short 00461706
004616FD 8D55 B4 lea edx, dword ptr [ebp-4C]
00461700 8995 6CF9FFFF mov dword ptr [ebp-694], edx
00461706 8B85 6CF9FFFF mov eax, dword ptr [ebp-694]
0046170C 8B08 mov ecx, dword ptr [eax]
0046170E 898D E0F9FFFF mov dword ptr [ebp-620], ecx
00461714 8D55 9C lea edx, dword ptr [ebp-64]
00461717 52 push edx
00461718 8D45 CC lea eax, dword ptr [ebp-34]
0046171B 50 push eax
0046171C 8D4D B0 lea ecx, dword ptr [ebp-50]
0046171F 51 push ecx
00461720 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
00461726 8B02 mov eax, dword ptr [edx]
00461728 8B8D E0F9FFFF mov ecx, dword ptr [ebp-620]
0046172E 51 push ecx
0046172F FF50 20 call dword ptr [eax+20]
00461732 DBE2 fclex
00461734 8985 DCF9FFFF mov dword ptr [ebp-624], eax
0046173A 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
00461741 7D 23 jge short 00461766
00461743 6A 20 push 20
00461745 68 DC544100 push 004154DC
0046174A 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
00461750 52 push edx
00461751 8B85 DCF9FFFF mov eax, dword ptr [ebp-624]
00461757 50 push eax
00461758 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
0046175E 8985 68F9FFFF mov dword ptr [ebp-698], eax
00461764 EB 0A jmp short 00461770
00461766 C785 68F9FFFF 0>mov dword ptr [ebp-698], 0
00461770 8B4D 9C mov ecx, dword ptr [ebp-64]
00461773 898D B4F9FFFF mov dword ptr [ebp-64C], ecx
00461779 C745 9C 0000000>mov dword ptr [ebp-64], 0
00461780 8B95 B4F9FFFF mov edx, dword ptr [ebp-64C]
00461786 52 push edx
00461787 8D45 A8 lea eax, dword ptr [ebp-58]
0046178A 50 push eax
0046178B FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461791 C745 FC 1700000>mov dword ptr [ebp-4], 17
00461798 C785 20FAFFFF C>mov dword ptr [ebp-5E0], 004153C0 ; UNICODE "ValidKey"
004617A2 C785 18FAFFFF 0>mov dword ptr [ebp-5E8], 8
004617AC 8D95 18FAFFFF lea edx, dword ptr [ebp-5E8]
004617B2 8D4D 88 lea ecx, dword ptr [ebp-78]
004617B5 FF15 18D24900 call dword ptr [<&msvbvm60.__vbaVarDu>; msvbvm60.__vbaVarDup
004617BB 8D8D 78FFFFFF lea ecx, dword ptr [ebp-88]
004617C1 51 push ecx
004617C2 8D55 88 lea edx, dword ptr [ebp-78]
004617C5 52 push edx
004617C6 8B45 A8 mov eax, dword ptr [ebp-58]
004617C9 8B08 mov ecx, dword ptr [eax]
004617CB 8B55 A8 mov edx, dword ptr [ebp-58]
004617CE 52 push edx
004617CF FF51 1C call dword ptr [ecx+1C]
004617D2 DBE2 fclex
004617D4 8985 E0F9FFFF mov dword ptr [ebp-620], eax
004617DA 83BD E0F9FFFF 0>cmp dword ptr [ebp-620], 0
004617E1 7D 20 jge short 00461803
004617E3 6A 1C push 1C
004617E5 68 EC8E4000 push 00408EEC
004617EA 8B45 A8 mov eax, dword ptr [ebp-58]
004617ED 50 push eax
004617EE 8B8D E0F9FFFF mov ecx, dword ptr [ebp-620]
004617F4 51 push ecx
004617F5 FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
004617FB 8985 64F9FFFF mov dword ptr [ebp-69C], eax
00461801 EB 0A jmp short 0046180D
00461803 C785 64F9FFFF 0>mov dword ptr [ebp-69C], 0
0046180D 8D95 78FFFFFF lea edx, dword ptr [ebp-88]
00461813 52 push edx
00461814 FF15 BCD04900 call dword ptr [<&msvbvm60.__vbaBoolV>; msvbvm60.__vbaBoolVarNull
0046181A 66:8985 DCF9FFF>mov word ptr [ebp-624], ax
00461821 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
00461827 50 push eax
00461828 8D4D 88 lea ecx, dword ptr [ebp-78]
0046182B 51 push ecx
0046182C 6A 02 push 2
0046182E FF15 34D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVarList
00461834 83C4 0C add esp, 0C
00461837 0FBF95 DCF9FFFF movsx edx, word ptr [ebp-624]
0046183E 85D2 test edx, edx
00461840 74 05 je short 00461847
00461842 E9 F3000000 jmp 0046193A
00461847 C745 FC 1B00000>mov dword ptr [ebp-4], 1B
0046184E 8B45 08 mov eax, dword ptr [ebp+8]
00461851 8B08 mov ecx, dword ptr [eax]
00461853 8B55 08 mov edx, dword ptr [ebp+8]
00461856 52 push edx
00461857 FF91 FC020000 call dword ptr [ecx+2FC]
0046185D 50 push eax
0046185E 8D45 9C lea eax, dword ptr [ebp-64]
00461861 50 push eax
00461862 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461868 8985 E0F9FFFF mov dword ptr [ebp-620], eax
0046186E 8D4D 98 lea ecx, dword ptr [ebp-68]
00461871 51 push ecx
00461872 6A 00 push 0
00461874 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
0046187A 8B02 mov eax, dword ptr [edx]
0046187C 8B8D E0F9FFFF mov ecx, dword ptr [ebp-620]
00461882 51 push ecx
00461883 FF50 40 call dword ptr [eax+40]
00461886 DBE2 fclex
00461888 8985 DCF9FFFF mov dword ptr [ebp-624], eax
0046188E 83BD DCF9FFFF 0>cmp dword ptr [ebp-624], 0
00461895 7D 23 jge short 004618BA
00461897 6A 40 push 40
00461899 68 80554100 push 00415580
0046189E 8B95 E0F9FFFF mov edx, dword ptr [ebp-620]
004618A4 52 push edx
004618A5 8B85 DCF9FFFF mov eax, dword ptr [ebp-624]
004618AB 50 push eax
004618AC FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
004618B2 8985 60F9FFFF mov dword ptr [ebp-6A0], eax
004618B8 EB 0A jmp short 004618C4
004618BA C785 60F9FFFF 0>mov dword ptr [ebp-6A0], 0
004618C4 8B4D 98 mov ecx, dword ptr [ebp-68]
004618C7 898D D8F9FFFF mov dword ptr [ebp-628], ecx
004618CD 8B55 B0 mov edx, dword ptr [ebp-50]
004618D0 52 push edx
004618D1 8B85 D8F9FFFF mov eax, dword ptr [ebp-628]
004618D7 8B08 mov ecx, dword ptr [eax]
004618D9 8B95 D8F9FFFF mov edx, dword ptr [ebp-628]
004618DF 52 push edx
004618E0 FF91 A4000000 call dword ptr [ecx+A4]
004618E6 DBE2 fclex
004618E8 8985 D4F9FFFF mov dword ptr [ebp-62C], eax
004618EE 83BD D4F9FFFF 0>cmp dword ptr [ebp-62C], 0
004618F5 7D 26 jge short 0046191D
004618F7 68 A4000000 push 0A4
004618FC 68 788B4000 push 00408B78
00461901 8B85 D8F9FFFF mov eax, dword ptr [ebp-628]
00461907 50 push eax
00461908 8B8D D4F9FFFF mov ecx, dword ptr [ebp-62C]
0046190E 51 push ecx
0046190F FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00461915 8985 5CF9FFFF mov dword ptr [ebp-6A4], eax
0046191B EB 0A jmp short 00461927
0046191D C785 5CF9FFFF 0>mov dword ptr [ebp-6A4], 0
00461927 8D55 98 lea edx, dword ptr [ebp-68]
0046192A 52 push edx
0046192B 8D45 9C lea eax, dword ptr [ebp-64]
0046192E 50 push eax
0046192F 6A 02 push 2
00461931 FF15 40D04900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObjList
00461937 83C4 0C add esp, 0C
0046193A C745 FC 1D00000>mov dword ptr [ebp-4], 1D
00461941 68 C8514100 push 004151C8
00461946 6A 00 push 0
00461948 FF15 44D24900 call dword ptr [<&msvbvm60.__vbaCastO>; msvbvm60.__vbaCastObj
0046194E 50 push eax
0046194F 8D4D D4 lea ecx, dword ptr [ebp-2C]
00461952 51 push ecx
00461953 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461959 C745 FC 1E00000>mov dword ptr [ebp-4], 1E
00461960 6A 00 push 0
00461962 8D55 B8 lea edx, dword ptr [ebp-48]
00461965 52 push edx
00461966 FF15 30D24900 call dword ptr [<&msvbvm60.__vbaVarSe>; msvbvm60.__vbaVarSetObjAddref
0046196C C745 FC 1F00000>mov dword ptr [ebp-4], 1F
00461973 68 904F4100 push 00414F90
00461978 6A 00 push 0
0046197A FF15 44D24900 call dword ptr [<&msvbvm60.__vbaCastO>; msvbvm60.__vbaCastObj
00461980 50 push eax
00461981 8D45 D8 lea eax, dword ptr [ebp-28]
00461984 50 push eax
00461985 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
0046198B C745 FC 2000000>mov dword ptr [ebp-4], 20
00461992 C745 90 0400000>mov dword ptr [ebp-70], 4
00461999 C745 88 0200000>mov dword ptr [ebp-78], 2
004619A0 8D4D 88 lea ecx, dword ptr [ebp-78]
004619A3 51 push ecx
004619A4 E8 57BAFEFF call 0044D400
004619A9 8D4D 88 lea ecx, dword ptr [ebp-78]
004619AC FF15 24D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVar
004619B2 C745 FC 2100000>mov dword ptr [ebp-4], 21
004619B9 833D A4D04600 0>cmp dword ptr [46D0A4], 0
004619C0 75 1C jnz short 004619DE
004619C2 68 A4D04600 push 0046D0A4
004619C7 68 90504000 push 00405090
004619CC FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
004619D2 C785 58F9FFFF A>mov dword ptr [ebp-6A8], 0046D0A4
004619DC EB 0A jmp short 004619E8
004619DE C785 58F9FFFF A>mov dword ptr [ebp-6A8], 0046D0A4
004619E8 6A 00 push 0
004619EA 6A 46 push 46
004619EC 8B95 58F9FFFF mov edx, dword ptr [ebp-6A8]
004619F2 8B02 mov eax, dword ptr [edx]
004619F4 8B8D 58F9FFFF mov ecx, dword ptr [ebp-6A8]
004619FA 8B11 mov edx, dword ptr [ecx]
004619FC 8B0A mov ecx, dword ptr [edx]
004619FE 50 push eax
004619FF FF91 14030000 call dword ptr [ecx+314]
00461A05 50 push eax
00461A06 8D55 9C lea edx, dword ptr [ebp-64]
00461A09 52 push edx
00461A0A FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461A10 50 push eax
00461A11 FF15 28D04900 call dword ptr [<&msvbvm60.__vbaLateI>; msvbvm60.__vbaLateIdCall
00461A17 83C4 0C add esp, 0C
00461A1A 8D4D 9C lea ecx, dword ptr [ebp-64]
00461A1D FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461A23 C745 FC 2200000>mov dword ptr [ebp-4], 22
00461A2A C785 20FAFFFF 1>mov dword ptr [ebp-5E0], 00408A1C ; UNICODE "evilboot.net"
00461A34 C785 18FAFFFF 0>mov dword ptr [ebp-5E8], 8
00461A3E C785 00FAFFFF 5>mov dword ptr [ebp-600], 50
00461A48 C785 F8F9FFFF 0>mov dword ptr [ebp-608], 2
00461A52 833D A4D04600 0>cmp dword ptr [46D0A4], 0
00461A59 75 1C jnz short 00461A77
00461A5B 68 A4D04600 push 0046D0A4
00461A60 68 90504000 push 00405090
00461A65 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
00461A6B C785 54F9FFFF A>mov dword ptr [ebp-6AC], 0046D0A4
00461A75 EB 0A jmp short 00461A81
00461A77 C785 54F9FFFF A>mov dword ptr [ebp-6AC], 0046D0A4
00461A81 B8 10000000 mov eax, 10
00461A86 E8 350FFAFF call <jmp.&msvbvm60.__vbaChkstk>
00461A8B 8BC4 mov eax, esp
00461A8D 8B8D 18FAFFFF mov ecx, dword ptr [ebp-5E8]
00461A93 8908 mov dword ptr [eax], ecx
00461A95 8B95 1CFAFFFF mov edx, dword ptr [ebp-5E4]
00461A9B 8950 04 mov dword ptr [eax+4], edx
00461A9E 8B8D 20FAFFFF mov ecx, dword ptr [ebp-5E0]
00461AA4 8948 08 mov dword ptr [eax+8], ecx
00461AA7 8B95 24FAFFFF mov edx, dword ptr [ebp-5DC]
00461AAD 8950 0C mov dword ptr [eax+C], edx
00461AB0 B8 10000000 mov eax, 10
00461AB5 E8 060FFAFF call <jmp.&msvbvm60.__vbaChkstk>
00461ABA 8BC4 mov eax, esp
00461ABC 8B8D F8F9FFFF mov ecx, dword ptr [ebp-608]
00461AC2 8908 mov dword ptr [eax], ecx
00461AC4 8B95 FCF9FFFF mov edx, dword ptr [ebp-604]
00461ACA 8950 04 mov dword ptr [eax+4], edx
00461ACD 8B8D 00FAFFFF mov ecx, dword ptr [ebp-600]
00461AD3 8948 08 mov dword ptr [eax+8], ecx
00461AD6 8B95 04FAFFFF mov edx, dword ptr [ebp-5FC]
00461ADC 8950 0C mov dword ptr [eax+C], edx
00461ADF 6A 02 push 2
00461AE1 6A 40 push 40
00461AE3 8B85 54F9FFFF mov eax, dword ptr [ebp-6AC]
00461AE9 8B08 mov ecx, dword ptr [eax]
00461AEB 8B95 54F9FFFF mov edx, dword ptr [ebp-6AC]
00461AF1 8B02 mov eax, dword ptr [edx]
00461AF3 8B10 mov edx, dword ptr [eax]
00461AF5 51 push ecx
00461AF6 FF92 14030000 call dword ptr [edx+314]
00461AFC 50 push eax
00461AFD 8D45 9C lea eax, dword ptr [ebp-64]
00461B00 50 push eax
00461B01 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461B07 50 push eax
00461B08 FF15 28D04900 call dword ptr [<&msvbvm60.__vbaLateI>; msvbvm60.__vbaLateIdCall
00461B0E 83C4 2C add esp, 2C
00461B11 8D4D 9C lea ecx, dword ptr [ebp-64]
00461B14 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461B1A C745 FC 2300000>mov dword ptr [ebp-4], 23
00461B21 833D A4D04600 0>cmp dword ptr [46D0A4], 0
00461B28 75 1C jnz short 00461B46
00461B2A 68 A4D04600 push 0046D0A4
00461B2F 68 90504000 push 00405090
00461B34 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
00461B3A C785 50F9FFFF A>mov dword ptr [ebp-6B0], 0046D0A4
00461B44 EB 0A jmp short 00461B50
00461B46 C785 50F9FFFF A>mov dword ptr [ebp-6B0], 0046D0A4
00461B50 6A 00 push 0
00461B52 6A 0A push 0A
00461B54 8B8D 50F9FFFF mov ecx, dword ptr [ebp-6B0]
00461B5A 8B11 mov edx, dword ptr [ecx]
00461B5C 8B85 50F9FFFF mov eax, dword ptr [ebp-6B0]
00461B62 8B08 mov ecx, dword ptr [eax]
00461B64 8B01 mov eax, dword ptr [ecx]
00461B66 52 push edx
00461B67 FF90 14030000 call dword ptr [eax+314]
00461B6D 50 push eax
00461B6E 8D4D 9C lea ecx, dword ptr [ebp-64]
00461B71 51 push ecx
00461B72 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461B78 50 push eax
00461B79 8D55 88 lea edx, dword ptr [ebp-78]
00461B7C 52 push edx
00461B7D FF15 24D14900 call dword ptr [<&msvbvm60.__vbaLateI>; msvbvm60.__vbaLateIdCallLd
00461B83 83C4 10 add esp, 10
00461B86 50 push eax
00461B87 FF15 2CD04900 call dword ptr [<&msvbvm60.__vbaStrVa>; msvbvm60.__vbaStrVarMove
00461B8D 8BD0 mov edx, eax
00461B8F 8D4D A4 lea ecx, dword ptr [ebp-5C]
00461B92 FF15 4CD24900 call dword ptr [<&msvbvm60.__vbaStrMo>; msvbvm60.__vbaStrMove
00461B98 50 push eax
00461B99 68 1C8A4000 push 00408A1C ; UNICODE "evilboot.net"
00461B9E FF15 F0D04900 call dword ptr [<&msvbvm60.__vbaStrCm>; msvbvm60.__vbaStrCmp
00461BA4 F7D8 neg eax
00461BA6 1BC0 sbb eax, eax
00461BA8 40 inc eax
00461BA9 F7D8 neg eax
00461BAB 66:F7D0 not ax
00461BAE 66:8985 E0F9FFF>mov word ptr [ebp-620], ax
00461BB5 8D4D A4 lea ecx, dword ptr [ebp-5C]
00461BB8 FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
00461BBE 8D4D 9C lea ecx, dword ptr [ebp-64]
00461BC1 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461BC7 8D4D 88 lea ecx, dword ptr [ebp-78]
00461BCA FF15 24D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVar
00461BD0 0FBF85 E0F9FFFF movsx eax, word ptr [ebp-620]
00461BD7 85C0 test eax, eax
00461BD9 0F84 C8000000 je 00461CA7
00461BDF C745 FC 2400000>mov dword ptr [ebp-4], 24
00461BE6 833D 10D04600 0>cmp dword ptr [46D010], 0
00461BED 75 1C jnz short 00461C0B
00461BEF 68 10D04600 push 0046D010
00461BF4 68 C8624000 push 004062C8
00461BF9 FF15 B8D14900 call dword ptr [<&msvbvm60.__vbaNew2>>; msvbvm60.__vbaNew2
00461BFF C785 4CF9FFFF 1>mov dword ptr [ebp-6B4], 0046D010
00461C09 EB 0A jmp short 00461C15
00461C0B C785 4CF9FFFF 1>mov dword ptr [ebp-6B4], 0046D010
00461C15 68 C08A4000 push 00408AC0
00461C1A 8B8D 4CF9FFFF mov ecx, dword ptr [ebp-6B4]
00461C20 8B11 mov edx, dword ptr [ecx]
00461C22 52 push edx
00461C23 FF15 44D24900 call dword ptr [<&msvbvm60.__vbaCastO>; msvbvm60.__vbaCastObj
00461C29 50 push eax
00461C2A 8D45 9C lea eax, dword ptr [ebp-64]
00461C2D 50 push eax
00461C2E FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461C34 8D4D 9C lea ecx, dword ptr [ebp-64]
00461C37 51 push ecx
00461C38 8B55 08 mov edx, dword ptr [ebp+8]
00461C3B 8B02 mov eax, dword ptr [edx]
00461C3D 8B4D 08 mov ecx, dword ptr [ebp+8]
00461C40 51 push ecx
00461C41 FF90 FC060000 call dword ptr [eax+6FC]
00461C47 8985 E0F9FFFF mov dword ptr [ebp-620], eax
00461C4D 83BD E0F9FFFF 0>cmp dword ptr [ebp-620], 0
00461C54 7D 23 jge short 00461C79
00461C56 68 FC060000 push 6FC
00461C5B 68 688A4000 push 00408A68
00461C60 8B55 08 mov edx, dword ptr [ebp+8]
00461C63 52 push edx
00461C64 8B85 E0F9FFFF mov eax, dword ptr [ebp-620]
00461C6A 50 push eax
00461C6B FF15 64D04900 call dword ptr [<&msvbvm60.__vbaHresu>; msvbvm60.__vbaHresultCheckObj
00461C71 8985 48F9FFFF mov dword ptr [ebp-6B8], eax
00461C77 EB 0A jmp short 00461C83
00461C79 C785 48F9FFFF 0>mov dword ptr [ebp-6B8], 0
00461C83 68 84844000 push 00408484
00461C88 8B4D 9C mov ecx, dword ptr [ebp-64]
00461C8B 51 push ecx
00461C8C FF15 44D24900 call dword ptr [<&msvbvm60.__vbaCastO>; msvbvm60.__vbaCastObj
00461C92 50 push eax
00461C93 68 10D04600 push 0046D010
00461C98 FF15 88D04900 call dword ptr [<&msvbvm60.__vbaObjSe>; msvbvm60.__vbaObjSet
00461C9E 8D4D 9C lea ecx, dword ptr [ebp-64]
00461CA1 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461CA7 C745 F0 0000000>mov dword ptr [ebp-10], 0
00461CAE 68 A91F4600 push 00461FA9
00461CB3 E9 93020000 jmp 00461F4B
00461CB8 8D55 A0 lea edx, dword ptr [ebp-60]
00461CBB 52 push edx
00461CBC 8D45 A4 lea eax, dword ptr [ebp-5C]
00461CBF 50 push eax
00461CC0 6A 02 push 2
00461CC2 FF15 E0D14900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStrList
00461CC8 83C4 0C add esp, 0C
00461CCB 8D4D 98 lea ecx, dword ptr [ebp-68]
00461CCE 51 push ecx
00461CCF 8D55 9C lea edx, dword ptr [ebp-64]
00461CD2 52 push edx
00461CD3 6A 02 push 2
00461CD5 FF15 40D04900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObjList
00461CDB 83C4 0C add esp, 0C
00461CDE 8D85 28FAFFFF lea eax, dword ptr [ebp-5D8]
00461CE4 50 push eax
00461CE5 8D8D 38FAFFFF lea ecx, dword ptr [ebp-5C8]
00461CEB 51 push ecx
00461CEC 8D95 48FAFFFF lea edx, dword ptr [ebp-5B8]
00461CF2 52 push edx
00461CF3 8D85 58FAFFFF lea eax, dword ptr [ebp-5A8]
00461CF9 50 push eax
00461CFA 8D8D 68FAFFFF lea ecx, dword ptr [ebp-598]
00461D00 51 push ecx
00461D01 8D95 78FAFFFF lea edx, dword ptr [ebp-588]
00461D07 52 push edx
00461D08 8D85 88FAFFFF lea eax, dword ptr [ebp-578]
00461D0E 50 push eax
00461D0F 8D8D 98FAFFFF lea ecx, dword ptr [ebp-568]
00461D15 51 push ecx
00461D16 8D95 A8FAFFFF lea edx, dword ptr [ebp-558]
00461D1C 52 push edx
00461D1D 8D85 B8FAFFFF lea eax, dword ptr [ebp-548]
00461D23 50 push eax
00461D24 8D8D C8FAFFFF lea ecx, dword ptr [ebp-538]
00461D2A 51 push ecx
00461D2B 8D95 D8FAFFFF lea edx, dword ptr [ebp-528]
00461D31 52 push edx
00461D32 8D85 E8FAFFFF lea eax, dword ptr [ebp-518]
00461D38 50 push eax
00461D39 8D8D F8FAFFFF lea ecx, dword ptr [ebp-508]
00461D3F 51 push ecx
00461D40 8D95 08FBFFFF lea edx, dword ptr [ebp-4F8]
00461D46 52 push edx
00461D47 8D85 18FBFFFF lea eax, dword ptr [ebp-4E8]
00461D4D 50 push eax
00461D4E 8D8D 28FBFFFF lea ecx, dword ptr [ebp-4D8]
00461D54 51 push ecx
00461D55 8D95 38FBFFFF lea edx, dword ptr [ebp-4C8]
00461D5B 52 push edx
00461D5C 8D85 48FBFFFF lea eax, dword ptr [ebp-4B8]
00461D62 50 push eax
00461D63 8D8D 58FBFFFF lea ecx, dword ptr [ebp-4A8]
00461D69 51 push ecx
00461D6A 8D95 68FBFFFF lea edx, dword ptr [ebp-498]
00461D70 52 push edx
00461D71 8D85 78FBFFFF lea eax, dword ptr [ebp-488]
00461D77 50 push eax
00461D78 8D8D 88FBFFFF lea ecx, dword ptr [ebp-478]
00461D7E 51 push ecx
00461D7F 8D95 98FBFFFF lea edx, dword ptr [ebp-468]
00461D85 52 push edx
00461D86 8D85 A8FBFFFF lea eax, dword ptr [ebp-458]
00461D8C 50 push eax
00461D8D 8D8D B8FBFFFF lea ecx, dword ptr [ebp-448]
00461D93 51 push ecx
00461D94 8D95 C8FBFFFF lea edx, dword ptr [ebp-438]
00461D9A 52 push edx
00461D9B 8D85 D8FBFFFF lea eax, dword ptr [ebp-428]
00461DA1 50 push eax
00461DA2 8D8D E8FBFFFF lea ecx, dword ptr [ebp-418]
00461DA8 51 push ecx
00461DA9 8D95 F8FBFFFF lea edx, dword ptr [ebp-408]
00461DAF 52 push edx
00461DB0 8D85 08FCFFFF lea eax, dword ptr [ebp-3F8]
00461DB6 50 push eax
00461DB7 8D8D 18FCFFFF lea ecx, dword ptr [ebp-3E8]
00461DBD 51 push ecx
00461DBE 8D95 28FCFFFF lea edx, dword ptr [ebp-3D8]
00461DC4 52 push edx
00461DC5 8D85 38FCFFFF lea eax, dword ptr [ebp-3C8]
00461DCB 50 push eax
00461DCC 8D8D 48FCFFFF lea ecx, dword ptr [ebp-3B8]
00461DD2 51 push ecx
00461DD3 8D95 58FCFFFF lea edx, dword ptr [ebp-3A8]
00461DD9 52 push edx
00461DDA 8D85 68FCFFFF lea eax, dword ptr [ebp-398]
00461DE0 50 push eax
00461DE1 8D8D 78FCFFFF lea ecx, dword ptr [ebp-388]
00461DE7 51 push ecx
00461DE8 8D95 88FCFFFF lea edx, dword ptr [ebp-378]
00461DEE 52 push edx
00461DEF 8D85 98FCFFFF lea eax, dword ptr [ebp-368]
00461DF5 50 push eax
00461DF6 8D8D A8FCFFFF lea ecx, dword ptr [ebp-358]
00461DFC 51 push ecx
00461DFD 8D95 B8FCFFFF lea edx, dword ptr [ebp-348]
00461E03 52 push edx
00461E04 8D85 C8FCFFFF lea eax, dword ptr [ebp-338]
00461E0A 50 push eax
00461E0B 8D8D D8FCFFFF lea ecx, dword ptr [ebp-328]
00461E11 51 push ecx
00461E12 8D95 E8FCFFFF lea edx, dword ptr [ebp-318]
00461E18 52 push edx
00461E19 8D85 F8FCFFFF lea eax, dword ptr [ebp-308]
00461E1F 50 push eax
00461E20 8D8D 08FDFFFF lea ecx, dword ptr [ebp-2F8]
00461E26 51 push ecx
00461E27 8D95 18FDFFFF lea edx, dword ptr [ebp-2E8]
00461E2D 52 push edx
00461E2E 8D85 28FDFFFF lea eax, dword ptr [ebp-2D8]
00461E34 50 push eax
00461E35 8D8D 38FDFFFF lea ecx, dword ptr [ebp-2C8]
00461E3B 51 push ecx
00461E3C 8D95 48FDFFFF lea edx, dword ptr [ebp-2B8]
00461E42 52 push edx
00461E43 8D85 58FDFFFF lea eax, dword ptr [ebp-2A8]
00461E49 50 push eax
00461E4A 8D8D 68FDFFFF lea ecx, dword ptr [ebp-298]
00461E50 51 push ecx
00461E51 8D95 78FDFFFF lea edx, dword ptr [ebp-288]
00461E57 52 push edx
00461E58 8D85 88FDFFFF lea eax, dword ptr [ebp-278]
00461E5E 50 push eax
00461E5F 8D8D 98FDFFFF lea ecx, dword ptr [ebp-268]
00461E65 51 push ecx
00461E66 8D95 A8FDFFFF lea edx, dword ptr [ebp-258]
00461E6C 52 push edx
00461E6D 8D85 B8FDFFFF lea eax, dword ptr [ebp-248]
00461E73 50 push eax
00461E74 8D8D C8FDFFFF lea ecx, dword ptr [ebp-238]
00461E7A 51 push ecx
00461E7B 8D95 D8FDFFFF lea edx, dword ptr [ebp-228]
00461E81 52 push edx
00461E82 8D85 E8FDFFFF lea eax, dword ptr [ebp-218]
00461E88 50 push eax
00461E89 8D8D F8FDFFFF lea ecx, dword ptr [ebp-208]
00461E8F 51 push ecx
00461E90 8D95 08FEFFFF lea edx, dword ptr [ebp-1F8]
00461E96 52 push edx
00461E97 8D85 18FEFFFF lea eax, dword ptr [ebp-1E8]
00461E9D 50 push eax
00461E9E 8D8D 28FEFFFF lea ecx, dword ptr [ebp-1D8]
00461EA4 51 push ecx
00461EA5 8D95 38FEFFFF lea edx, dword ptr [ebp-1C8]
00461EAB 52 push edx
00461EAC 8D85 48FEFFFF lea eax, dword ptr [ebp-1B8]
00461EB2 50 push eax
00461EB3 8D8D 58FEFFFF lea ecx, dword ptr [ebp-1A8]
00461EB9 51 push ecx
00461EBA 8D95 68FEFFFF lea edx, dword ptr [ebp-198]
00461EC0 52 push edx
00461EC1 8D85 78FEFFFF lea eax, dword ptr [ebp-188]
00461EC7 50 push eax
00461EC8 8D8D 88FEFFFF lea ecx, dword ptr [ebp-178]
00461ECE 51 push ecx
00461ECF 8D95 98FEFFFF lea edx, dword ptr [ebp-168]
00461ED5 52 push edx
00461ED6 8D85 A8FEFFFF lea eax, dword ptr [ebp-158]
00461EDC 50 push eax
00461EDD 8D8D B8FEFFFF lea ecx, dword ptr [ebp-148]
00461EE3 51 push ecx
00461EE4 8D95 C8FEFFFF lea edx, dword ptr [ebp-138]
00461EEA 52 push edx
00461EEB 8D85 D8FEFFFF lea eax, dword ptr [ebp-128]
00461EF1 50 push eax
00461EF2 8D8D E8FEFFFF lea ecx, dword ptr [ebp-118]
00461EF8 51 push ecx
00461EF9 8D95 F8FEFFFF lea edx, dword ptr [ebp-108]
00461EFF 52 push edx
00461F00 8D85 08FFFFFF lea eax, dword ptr [ebp-F8]
00461F06 50 push eax
00461F07 8D8D 18FFFFFF lea ecx, dword ptr [ebp-E8]
00461F0D 51 push ecx
00461F0E 8D95 28FFFFFF lea edx, dword ptr [ebp-D8]
00461F14 52 push edx
00461F15 8D85 38FFFFFF lea eax, dword ptr [ebp-C8]
00461F1B 50 push eax
00461F1C 8D8D 48FFFFFF lea ecx, dword ptr [ebp-B8]
00461F22 51 push ecx
00461F23 8D95 58FFFFFF lea edx, dword ptr [ebp-A8]
00461F29 52 push edx
00461F2A 8D85 68FFFFFF lea eax, dword ptr [ebp-98]
00461F30 50 push eax
00461F31 8D8D 78FFFFFF lea ecx, dword ptr [ebp-88]
00461F37 51 push ecx
00461F38 8D55 88 lea edx, dword ptr [ebp-78]
00461F3B 52 push edx
00461F3C 6A 57 push 57
00461F3E FF15 34D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVarList
00461F44 81C4 60010000 add esp, 160
00461F4A C3 retn
00461F4B 8D4D DC lea ecx, dword ptr [ebp-24]
00461F4E FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
00461F54 8D4D D8 lea ecx, dword ptr [ebp-28]
00461F57 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461F5D 8D4D D4 lea ecx, dword ptr [ebp-2C]
00461F60 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461F66 8D45 D0 lea eax, dword ptr [ebp-30]
00461F69 50 push eax
00461F6A 6A 00 push 0
00461F6C FF15 70D04900 call dword ptr [<&msvbvm60.__vbaAryDe>; msvbvm60.__vbaAryDestruct
00461F72 8D4D CC lea ecx, dword ptr [ebp-34]
00461F75 FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
00461F7B 8D4D B8 lea ecx, dword ptr [ebp-48]
00461F7E FF15 24D04900 call dword ptr [<&msvbvm60.__vbaFreeV>; msvbvm60.__vbaFreeVar
00461F84 8D4D B4 lea ecx, dword ptr [ebp-4C]
00461F87 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461F8D 8D4D B0 lea ecx, dword ptr [ebp-50]
00461F90 FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
00461F96 8D4D AC lea ecx, dword ptr [ebp-54]
00461F99 FF15 7CD24900 call dword ptr [<&msvbvm60.__vbaFreeS>; msvbvm60.__vbaFreeStr
00461F9F 8D4D A8 lea ecx, dword ptr [ebp-58]
00461FA2 FF15 80D24900 call dword ptr [<&msvbvm60.__vbaFreeO>; msvbvm60.__vbaFreeObj
00461FA8 C3 retn
00461FA9 8B4D 08 mov ecx, dword ptr [ebp+8]
00461FAC 8B11 mov edx, dword ptr [ecx]
00461FAE 8B45 08 mov eax, dword ptr [ebp+8]
00461FB1 50 push eax
00461FB2 FF52 08 call dword ptr [edx+8]
00461FB5 8B45 F0 mov eax, dword ptr [ebp-10]
00461FB8 8B4D E0 mov ecx, dword ptr [ebp-20]
00461FBB 64:890D 0000000>mov dword ptr fs:[0], ecx
00461FC2 5F pop edi
00461FC3 5E pop esi
00461FC4 5B pop ebx
00461FC5 8BE5 mov esp, ebp
00461FC7 5D pop ebp
00461FC8 C2 0400 retn 4
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课