-
-
[旧帖] [求助]第一次破VB程序 0.00雪花
-
发表于: 2008-9-3 16:47 3467
-
用的aspack 2.12加的壳，我脱完壳后用OD找了好久找到了程序执行空间，而且找到了关键代码：
call _UnPacke.00565150 经测试表明该调用验证两个字符是否为16进制数
我想找出注册码的算法，代码虽然有点长，但是大概结构我还是了解，开始一段是对机器码进行处理，这段我看不太懂，只知道里面进行了Left和Right,后面再进我输入的注册码进行处理，循环取两位进行验证，看是否为16进制的字符。
但是细节方面我看不懂，我对VB的代码不太熟悉，哪位大哥能不能给我解释一下部分代码给我指点下就行，只要我看懂了，其他的代码我就可以自己弄了
注册码长度通过之后开始算法验证：
0058868F > 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00588695 . 50 PUSH EAX
00588696 . FF15 00124000 CALL DWORD PTR DS:[<&MSVBVM60.#610>] ; MSVBVM60.rtcGetDateVar \\获得日期在EAX里面地址对应的内存
0058869C . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0043136C ; mmdd
005886A6 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
005886B0 . 8D95 DCFEFFFF LEA EDX,DWORD PTR SS:[EBP-124]
005886B6 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
005886BC . FF15 18124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarDup>] ; MSVBVM60.__vbaVarDup
005886C2 . 6A 01 PUSH 1
005886C4 . 6A 01 PUSH 1
005886C6 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
005886CC . 51 PUSH ECX
005886CD . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
005886D3 . 52 PUSH EDX
005886D4 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005886DA . 50 PUSH EAX
005886DB . FF15 60104000 CALL DWORD PTR DS:[<&MSVBVM60.#660>] ; MSVBVM60.rtcVarFromFormatVar
005886E1 . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],3FD
005886EB . C785 CCFEFFFF>MOV DWORD PTR SS:[EBP-134],2
005886F5 . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
005886FB . 51 PUSH ECX
005886FC . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
00588702 . 52 PUSH EDX
00588703 . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
00588709 . 50 PUSH EAX
0058870A . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588710 . 50 PUSH EAX
00588711 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00588717 . 8BD0 MOV EDX,EAX
00588719 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
0058871C . FF15 3C124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00588722 . 8D8D 1CFFFFFF LEA ECX,DWORD PTR SS:[EBP-E4]
00588728 . 51 PUSH ECX
00588729 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058872F . 52 PUSH EDX
00588730 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588736 . 50 PUSH EAX
00588737 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058873D . 51 PUSH ECX
0058873E . 6A 04 PUSH 4
00588740 . FFD7 CALL EDI
00588742 . 83C4 14 ADD ESP,14
00588745 . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
00588748 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
0058874E . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00588758 . 6A 02 PUSH 2
0058875A . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
00588760 . 50 PUSH EAX
00588761 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588767 . 51 PUSH ECX
00588768 . FF15 34124000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
0058876E . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588774 . 52 PUSH EDX
00588775 . 8D85 74FFFFFF LEA EAX,DWORD PTR SS:[EBP-8C]
0058877B . 50 PUSH EAX
0058877C . 8B1D 8C114000 MOV EBX,DWORD PTR DS:[<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00588782 . FFD3 CALL EBX ; <&MSVBVM60.__vbaStrVarVal>
00588784 . 50 PUSH EAX
00588785 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
0058878B . 51 PUSH ECX
0058878C . E8 BFC9FDFF CALL _UnPacke.00565150
00588791 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588797 . 52 PUSH EDX
00588798 . FF15 F8114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>] ; MSVBVM60.__vbaI4Var
0058879E . 50 PUSH EAX
0058879F . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005887A5 . 50 PUSH EAX
005887A6 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi
005887AC . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
005887AF . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
005887B5 . C785 CCFEFFFF>MOV DWORD PTR SS:[EBP-134],4008
005887BF . 6A 02 PUSH 2
005887C1 . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
005887C7 . 52 PUSH EDX
005887C8 . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
005887CE . 50 PUSH EAX
005887CF . FF15 44124000 CALL DWORD PTR DS:[<&MSVBVM60.#619>] ; MSVBVM60.rtcRightCharVar
005887D5 . 8D8D 1CFFFFFF LEA ECX,DWORD PTR SS:[EBP-E4]
005887DB . 51 PUSH ECX
005887DC . 8D95 70FFFFFF LEA EDX,DWORD PTR SS:[EBP-90]
005887E2 . 52 PUSH EDX
005887E3 . FFD3 CALL EBX
005887E5 . 50 PUSH EAX
005887E6 . 8D85 0CFFFFFF LEA EAX,DWORD PTR SS:[EBP-F4]
005887EC . 50 PUSH EAX
005887ED . E8 5EC9FDFF CALL _UnPacke.00565150
005887F2 . 8D8D 0CFFFFFF LEA ECX,DWORD PTR SS:[EBP-F4]
005887F8 . 51 PUSH ECX
005887F9 . FF15 F8114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>] ; MSVBVM60.__vbaI4Var
005887FF . 50 PUSH EAX
00588800 . 8D95 FCFEFFFF LEA EDX,DWORD PTR SS:[EBP-104]
00588806 . 52 PUSH EDX
00588807 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi
0058880D . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00588813 . 50 PUSH EAX
00588814 . 8D8D FCFEFFFF LEA ECX,DWORD PTR SS:[EBP-104]
0058881A . 51 PUSH ECX
0058881B . 8D95 ECFEFFFF LEA EDX,DWORD PTR SS:[EBP-114]
00588821 . 52 PUSH EDX
00588822 . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588828 . 50 PUSH EAX
00588829 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
0058882F . 8BD0 MOV EDX,EAX
00588831 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
00588834 . FF15 3C124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0058883A . 8D85 70FFFFFF LEA EAX,DWORD PTR SS:[EBP-90]
00588840 . 50 PUSH EAX
00588841 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00588847 . 51 PUSH ECX
00588848 . 6A 02 PUSH 2
0058884A . FF15 D4114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00588850 . 8D95 ECFEFFFF LEA EDX,DWORD PTR SS:[EBP-114]
00588856 . 52 PUSH EDX
00588857 . 8D85 FCFEFFFF LEA EAX,DWORD PTR SS:[EBP-104]
0058885D . 50 PUSH EAX
0058885E . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
00588864 . 51 PUSH ECX
00588865 . 8D95 0CFFFFFF LEA EDX,DWORD PTR SS:[EBP-F4]
0058886B . 52 PUSH EDX
0058886C . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
00588872 . 50 PUSH EAX
00588873 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588879 . 51 PUSH ECX
0058887A . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588880 . 52 PUSH EDX
00588881 . 6A 07 PUSH 7
00588883 . FFD7 CALL EDI
00588885 . 83C4 2C ADD ESP,2C
00588888 . 68 F4CC4200 PUSH _UnPacke.0042CCF4
0058888D . FF15 40114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaNew>] ; MSVBVM60.__vbaNew
00588893 . 50 PUSH EAX
00588894 . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
00588897 . 50 PUSH EAX
00588898 . FF15 A8104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
0058889E . 3935 10A06900 CMP DWORD PTR DS:[69A010],ESI
005888A4 . 75 10 JNZ SHORT _UnPacke.005888B6
005888A6 . 68 10A06900 PUSH _UnPacke.0069A010
005888AB . 68 98CC4200 PUSH _UnPacke.0042CC98
005888B0 . FF15 B0114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2
005888B6 > 8B0D 10A06900 MOV ECX,DWORD PTR DS:[69A010]
005888BC . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
005888C2 . B8 09000000 MOV EAX,9
005888C7 . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
005888CD . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0043137C ; s
005888D7 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
005888E1 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
005888E4 . 8B0A MOV ECX,DWORD PTR DS:[EDX]
005888E6 . 6A 01 PUSH 1
005888E8 . 6A 03 PUSH 3
005888EA . 6A 03 PUSH 3
005888EC . 83EC 10 SUB ESP,10
005888EF . 8BD4 MOV EDX,ESP
005888F1 . 8902 MOV DWORD PTR DS:[EDX],EAX
005888F3 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
005888F9 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
005888FC . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588902 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588905 . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
0058890B . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
0058890E . 83EC 10 SUB ESP,10
00588911 . 8BD4 MOV EDX,ESP
00588913 . 8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124]
00588919 . 8902 MOV DWORD PTR DS:[EDX],EAX
0058891B . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588921 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588924 . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
0058892A . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
0058892D . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588933 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588936 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588939 . 52 PUSH EDX
0058893A . FF91 A0000000 CALL DWORD PTR DS:[ECX+A0]
00588940 . DBE2 FCLEX
00588942 . 3BC6 CMP EAX,ESI
00588944 . 7D 15 JGE SHORT _UnPacke.0058895B
00588946 . 68 A0000000 PUSH 0A0
0058894B . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588950 . 8B4D C8 MOV ECX,DWORD PTR SS:[EBP-38]
00588953 . 51 PUSH ECX
00588954 . 50 PUSH EAX
00588955 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
0058895B > 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
0058895E . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588960 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588966 . 51 PUSH ECX
00588967 . 50 PUSH EAX
00588968 . FF52 54 CALL DWORD PTR DS:[EDX+54]
0058896B . DBE2 FCLEX
0058896D . 3BC6 CMP EAX,ESI
0058896F . 7D 12 JGE SHORT _UnPacke.00588983
00588971 . 6A 54 PUSH 54
00588973 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588978 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
0058897B . 52 PUSH EDX
0058897C . 50 PUSH EAX
0058897D . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588983 > 8B8D 68FFFFFF MOV ECX,DWORD PTR SS:[EBP-98]
00588989 . 898D 88FEFFFF MOV DWORD PTR SS:[EBP-178],ECX
0058898F . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0042CBB4
00588999 . B8 08000000 MOV EAX,8
0058899E . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
005889A4 . 8B09 MOV ECX,DWORD PTR DS:[ECX]
005889A6 . 8D95 64FFFFFF LEA EDX,DWORD PTR SS:[EBP-9C]
005889AC . 52 PUSH EDX
005889AD . 83EC 10 SUB ESP,10
005889B0 . 8BD4 MOV EDX,ESP
005889B2 . 8902 MOV DWORD PTR DS:[EDX],EAX
005889B4 . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
005889BA . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
005889BD . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
005889C3 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
005889C6 . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
005889CC . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
005889CF . 8B95 68FFFFFF MOV EDX,DWORD PTR SS:[EBP-98]
005889D5 . 52 PUSH EDX
005889D6 . FF51 28 CALL DWORD PTR DS:[ECX+28]
005889D9 . DBE2 FCLEX
005889DB . 3BC6 CMP EAX,ESI
005889DD . 7D 15 JGE SHORT _UnPacke.005889F4
005889DF . 6A 28 PUSH 28
005889E1 . 68 F0EF4200 PUSH _UnPacke.0042EFF0
005889E6 . 8B8D 88FEFFFF MOV ECX,DWORD PTR SS:[EBP-178]
005889EC . 51 PUSH ECX
005889ED . 50 PUSH EAX
005889EE . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
005889F4 > 8B85 64FFFFFF MOV EAX,DWORD PTR SS:[EBP-9C]
005889FA . 89B5 64FFFFFF MOV DWORD PTR SS:[EBP-9C],ESI
00588A00 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00588A06 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],9
00588A10 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588A16 . 52 PUSH EDX
00588A17 . FF15 08114000 CALL DWORD PTR DS:[<&MSVBVM60.#560>] ; MSVBVM60.rtcIsNull
00588A1D . 33C9 XOR ECX,ECX
00588A1F . 66:3D FFFF CMP AX,0FFFF
00588A23 . 0F94C1 SETE CL
00588A26 . F7D9 NEG ECX
00588A28 . 66:898D B4FEF>MOV WORD PTR SS:[EBP-14C],CX
00588A2F . C785 ACFEFFFF>MOV DWORD PTR SS:[EBP-154],0B
00588A39 . 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
00588A3C . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588A3E . 8D8D 60FFFFFF LEA ECX,DWORD PTR SS:[EBP-A0]
00588A44 . 51 PUSH ECX
00588A45 . 50 PUSH EAX
00588A46 . FF52 54 CALL DWORD PTR DS:[EDX+54]
00588A49 . DBE2 FCLEX
00588A4B . 3BC6 CMP EAX,ESI
00588A4D . 7D 12 JGE SHORT _UnPacke.00588A61
00588A4F . 6A 54 PUSH 54
00588A51 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588A56 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588A59 . 52 PUSH EDX
00588A5A . 50 PUSH EAX
00588A5B . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588A61 > 8B8D 60FFFFFF MOV ECX,DWORD PTR SS:[EBP-A0]
00588A67 . 898D 7CFEFFFF MOV DWORD PTR SS:[EBP-184],ECX
00588A6D . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],_UnPacke.0042CBB4
00588A77 . B8 08000000 MOV EAX,8
00588A7C . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588A82 . 8B09 MOV ECX,DWORD PTR DS:[ECX]
00588A84 . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
00588A8A . 52 PUSH EDX
00588A8B . 83EC 10 SUB ESP,10
00588A8E . 8BD4 MOV EDX,ESP
00588A90 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588A92 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
00588A98 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588A9B . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588AA1 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588AA4 . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
00588AAA . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588AAD . 8B95 60FFFFFF MOV EDX,DWORD PTR SS:[EBP-A0]
00588AB3 . 52 PUSH EDX
00588AB4 . FF51 28 CALL DWORD PTR DS:[ECX+28]
00588AB7 . DBE2 FCLEX
00588AB9 . 3BC6 CMP EAX,ESI
00588ABB . 7D 15 JGE SHORT _UnPacke.00588AD2
00588ABD . 6A 28 PUSH 28
00588ABF . 68 F0EF4200 PUSH _UnPacke.0042EFF0
00588AC4 . 8B8D 7CFEFFFF MOV ECX,DWORD PTR SS:[EBP-184]
00588ACA . 51 PUSH ECX
00588ACB . 50 PUSH EAX
00588ACC . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588AD2 > 8B85 5CFFFFFF MOV EAX,DWORD PTR SS:[EBP-A4]
00588AD8 . 8985 74FEFFFF MOV DWORD PTR SS:[EBP-18C],EAX
00588ADE . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588AE0 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588AE6 . 51 PUSH ECX
00588AE7 . 50 PUSH EAX
00588AE8 . FF52 34 CALL DWORD PTR DS:[EDX+34]
00588AEB . DBE2 FCLEX
00588AED . 3BC6 CMP EAX,ESI
00588AEF . 7D 15 JGE SHORT _UnPacke.00588B06
00588AF1 . 6A 34 PUSH 34
00588AF3 . 68 00F04200 PUSH _UnPacke.0042F000
00588AF8 . 8B95 74FEFFFF MOV EDX,DWORD PTR SS:[EBP-18C]
00588AFE . 52 PUSH EDX
00588AFF . 50 PUSH EAX
00588B00 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588B06 > C785 C4FEFFFF>MOV DWORD PTR SS:[EBP-13C],_UnPacke.0042CC74
00588B10 . C785 BCFEFFFF>MOV DWORD PTR SS:[EBP-144],8008
00588B1A . 8D85 ACFEFFFF LEA EAX,DWORD PTR SS:[EBP-154]
00588B20 . 50 PUSH EAX
00588B21 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588B27 . 51 PUSH ECX
00588B28 . 8D95 BCFEFFFF LEA EDX,DWORD PTR SS:[EBP-144]
00588B2E . 52 PUSH EDX
00588B2F . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00588B35 . 50 PUSH EAX
00588B36 . FF15 FC114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarCmpEq>] ; MSVBVM60.__vbaVarCmpEq
00588B3C . 50 PUSH EAX
00588B3D . 8D8D 1CFFFFFF LEA ECX,DWORD PTR SS:[EBP-E4]
00588B43 . 51 PUSH ECX
00588B44 . FF15 20114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarOr>] ; MSVBVM60.__vbaVarOr
00588B4A . 50 PUSH EAX
00588B4B . FF15 D0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaBoolVarNull>] ; MSVBVM60.__vbaBoolVarNull
00588B51 . 8985 6CFEFFFF MOV DWORD PTR SS:[EBP-194],EAX
00588B57 . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
00588B5D . 52 PUSH EDX
00588B5E . 8D85 60FFFFFF LEA EAX,DWORD PTR SS:[EBP-A0]
00588B64 . 50 PUSH EAX
00588B65 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588B6B . 51 PUSH ECX
00588B6C . 6A 03 PUSH 3
00588B6E . FF15 38104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeObjList>] ; MSVBVM60.__vbaFreeObjList
00588B74 . 8D95 ACFEFFFF LEA EDX,DWORD PTR SS:[EBP-154]
00588B7A . 52 PUSH EDX
00588B7B . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588B81 . 50 PUSH EAX
00588B82 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588B88 . 51 PUSH ECX
00588B89 . 6A 03 PUSH 3
00588B8B . FFD7 CALL EDI
00588B8D . 83C4 20 ADD ESP,20
00588B90 . 66:39B5 6CFEF>CMP WORD PTR SS:[EBP-194],SI
00588B97 . 0F84 5E010000 JE _UnPacke.00588CFB
00588B9D . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],2E
00588BA7 . B8 02000000 MOV EAX,2
00588BAC . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588BB2 . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0042CBB4
00588BBC . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
00588BC6 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588BC9 . 8B0A MOV ECX,DWORD PTR DS:[EDX]
00588BCB . 83EC 10 SUB ESP,10
00588BCE . 8BD4 MOV EDX,ESP
00588BD0 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588BD2 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
00588BD8 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588BDB . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588BE1 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588BE4 . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
00588BEA . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588BED . 83EC 10 SUB ESP,10
00588BF0 . 8BD4 MOV EDX,ESP
00588BF2 . 8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124]
00588BF8 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588BFA . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588C00 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588C03 . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
00588C09 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588C0C . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588C12 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588C15 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588C18 . 52 PUSH EDX
00588C19 . FF91 00010000 CALL DWORD PTR DS:[ECX+100]
00588C1F . DBE2 FCLEX
00588C21 . 3BC6 CMP EAX,ESI
00588C23 . 7D 15 JGE SHORT _UnPacke.00588C3A
00588C25 . 68 00010000 PUSH 100
00588C2A . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588C2F . 8B4D C8 MOV ECX,DWORD PTR SS:[EBP-38]
00588C32 . 51 PUSH ECX
00588C33 . 50 PUSH EAX
00588C34 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588C3A > B9 04000280 MOV ECX,80020004
00588C3F . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
00588C45 . B8 0A000000 MOV EAX,0A
00588C4A . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588C50 . 898D E4FEFFFF MOV DWORD PTR SS:[EBP-11C],ECX
00588C56 . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
00588C5C . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588C5F . 8B0A MOV ECX,DWORD PTR DS:[EDX]
00588C61 . 83EC 10 SUB ESP,10
00588C64 . 8BD4 MOV EDX,ESP
00588C66 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588C68 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
00588C6E . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588C71 . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588C77 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588C7A . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
00588C80 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588C83 . 83EC 10 SUB ESP,10
00588C86 . 8BD4 MOV EDX,ESP
00588C88 . 8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124]
00588C8E . 8902 MOV DWORD PTR DS:[EDX],EAX
00588C90 . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588C96 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588C99 . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
00588C9F . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588CA2 . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588CA8 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588CAB . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588CAE . 52 PUSH EDX
00588CAF . FF91 AC000000 CALL DWORD PTR DS:[ECX+AC]
00588CB5 . DBE2 FCLEX
00588CB7 . 3BC6 CMP EAX,ESI
00588CB9 . 7D 15 JGE SHORT _UnPacke.00588CD0
00588CBB . 68 AC000000 PUSH 0AC
00588CC0 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588CC5 . 8B4D C8 MOV ECX,DWORD PTR SS:[EBP-38]
00588CC8 . 51 PUSH ECX
00588CC9 . 50 PUSH EAX
00588CCA . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588CD0 > C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.004313F0 ; f
00588CDA . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
00588CE4 . 8D95 DCFEFFFF LEA EDX,DWORD PTR SS:[EBP-124]
00588CEA . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588CF0 . FF15 28124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarCopy>] ; MSVBVM60.__vbaVarCopy
00588CF6 . E9 57010000 JMP _UnPacke.00588E52
00588CFB > 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
00588CFE . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588D00 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588D06 . 51 PUSH ECX
00588D07 . 50 PUSH EAX
00588D08 . FF52 54 CALL DWORD PTR DS:[EDX+54]
00588D0B . DBE2 FCLEX
00588D0D . 3BC6 CMP EAX,ESI
00588D0F . 7D 12 JGE SHORT _UnPacke.00588D23
00588D11 . 6A 54 PUSH 54
00588D13 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588D18 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588D1B . 52 PUSH EDX
00588D1C . 50 PUSH EAX
00588D1D . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588D23 > 8B8D 68FFFFFF MOV ECX,DWORD PTR SS:[EBP-98]
00588D29 . 898D 88FEFFFF MOV DWORD PTR SS:[EBP-178],ECX
00588D2F . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0042CBB4
00588D39 . B8 08000000 MOV EAX,8
00588D3E . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
00588D44 . 8B09 MOV ECX,DWORD PTR DS:[ECX]
00588D46 . 8D95 64FFFFFF LEA EDX,DWORD PTR SS:[EBP-9C]
00588D4C . 52 PUSH EDX
00588D4D . 83EC 10 SUB ESP,10
00588D50 . 8BD4 MOV EDX,ESP
00588D52 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588D54 . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588D5A . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588D5D . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
00588D63 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588D66 . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588D6C . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588D6F . 8B95 68FFFFFF MOV EDX,DWORD PTR SS:[EBP-98]
00588D75 . 52 PUSH EDX
00588D76 . FF51 28 CALL DWORD PTR DS:[ECX+28]
00588D79 . DBE2 FCLEX
00588D7B . 3BC6 CMP EAX,ESI
00588D7D . 7D 15 JGE SHORT _UnPacke.00588D94
00588D7F . 6A 28 PUSH 28
00588D81 . 68 F0EF4200 PUSH _UnPacke.0042EFF0
00588D86 . 8B8D 88FEFFFF MOV ECX,DWORD PTR SS:[EBP-178]
00588D8C . 51 PUSH ECX
00588D8D . 50 PUSH EAX
00588D8E . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588D94 > 8B85 64FFFFFF MOV EAX,DWORD PTR SS:[EBP-9C]
00588D9A . 89B5 64FFFFFF MOV DWORD PTR SS:[EBP-9C],ESI
00588DA0 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00588DA6 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],9
00588DB0 . 6A 02 PUSH 2
00588DB2 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588DB8 . 52 PUSH EDX
00588DB9 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588DBF . 50 PUSH EAX
00588DC0 . FF15 34124000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
00588DC6 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588DCC . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588DD2 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
00588DD8 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588DDE . FF15 80124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
00588DE4 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588DEA . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00588DF0 . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588DF6 . 51 PUSH ECX
00588DF7 . 8D95 74FFFFFF LEA EDX,DWORD PTR SS:[EBP-8C]
00588DFD . 52 PUSH EDX
00588DFE . FFD3 CALL EBX
00588E00 . 50 PUSH EAX
00588E01 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00588E07 . 50 PUSH EAX
00588E08 . E8 43C3FDFF CALL _UnPacke.00565150
00588E0D . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588E13 . 51 PUSH ECX
00588E14 . FF15 F8114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>] ; MSVBVM60.__vbaI4Var
00588E1A . 50 PUSH EAX
00588E1B . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588E21 . 52 PUSH EDX
00588E22 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi
00588E28 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588E2E . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588E34 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
00588E3A . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00588E40 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00588E46 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588E4C . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00588E52 > 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
00588E55 . 8B08 MOV ECX,DWORD PTR DS:[EAX]
00588E57 . 50 PUSH EAX
00588E58 . FF91 80000000 CALL DWORD PTR DS:[ECX+80]
00588E5E . DBE2 FCLEX
00588E60 . 3BC6 CMP EAX,ESI
00588E62 . 7D 15 JGE SHORT _UnPacke.00588E79
00588E64 . 68 80000000 PUSH 80
00588E69 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588E6E . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588E71 . 52 PUSH EDX
00588E72 . 50 PUSH EAX
00588E73 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588E79 > C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.004313F8 ; fffff
00588E83 . B8 08000000 MOV EAX,8
00588E88 . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
00588E8E . 8B4D 98 MOV ECX,DWORD PTR SS:[EBP-68]
00588E91 . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
00588E97 . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588E9D . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
00588EA3 . 52 PUSH EDX
00588EA4 . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
00588EAA . 50 PUSH EAX
00588EAB . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588EB1 . 51 PUSH ECX
00588EB2 . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588EB8 . 50 PUSH EAX
00588EB9 . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
00588EBF . 52 PUSH EDX
00588EC0 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588EC6 . 50 PUSH EAX
00588EC7 . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588ECD . 8BD0 MOV EDX,EAX
00588ECF . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588ED5 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
00588EDB . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588EE1 . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00588EE7 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
00588EEA . 8B08 MOV ECX,DWORD PTR DS:[EAX]
00588EEC . 50 PUSH EAX
00588EED . FF91 04030000 CALL DWORD PTR DS:[ECX+304]
00588EF3 . 50 PUSH EAX
00588EF4 . 8D95 68FFFFFF LEA EDX,DWORD PTR SS:[EBP-98]
00588EFA . 52 PUSH EDX
00588EFB . FF15 A8104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
00588F01 . 8985 8CFEFFFF MOV DWORD PTR SS:[EBP-174],EAX
00588F07 . 8B08 MOV ECX,DWORD PTR DS:[EAX]
00588F09 . 8D95 74FFFFFF LEA EDX,DWORD PTR SS:[EBP-8C]
00588F0F . 52 PUSH EDX
00588F10 . 50 PUSH EAX
00588F11 . FF91 A0000000 CALL DWORD PTR DS:[ECX+A0]
00588F17 . DBE2 FCLEX
00588F19 . 3BC6 CMP EAX,ESI
00588F1B . 7D 18 JGE SHORT _UnPacke.00588F35
00588F1D . 68 A0000000 PUSH 0A0
00588F22 . 68 E4D94200 PUSH _UnPacke.0042D9E4
00588F27 . 8B8D 8CFEFFFF MOV ECX,DWORD PTR SS:[EBP-174]
00588F2D . 51 PUSH ECX
00588F2E . 50 PUSH EAX
00588F2F . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588F35 > 8B85 74FFFFFF MOV EAX,DWORD PTR SS:[EBP-8C]
00588F3B . C785 74FFFFFF>MOV DWORD PTR SS:[EBP-8C],0
00588F45 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00588F4B . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8
00588F55 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588F5B . 52 PUSH EDX
00588F5C . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588F62 . 50 PUSH EAX
00588F63 . FF15 C4104000 CALL DWORD PTR DS:[<&MSVBVM60.#520>] ; MSVBVM60.rtcTrimVar
00588F69 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588F6F . 51 PUSH ECX
00588F70 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00588F76 . 8BD0 MOV EDX,EAX
00588F78 . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
00588F7B . FF15 3C124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00588F81 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588F87 . FF15 80124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
00588F8D . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588F93 . 52 PUSH EDX
00588F94 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00588F9A . 50 PUSH EAX
00588F9B . BE 02000000 MOV ESI,2
00588FA0 . 56 PUSH ESI
00588FA1 . FFD7 CALL EDI
00588FA3 . 83C4 0C ADD ESP,0C
00588FA6 . 89B5 54FFFFFF MOV DWORD PTR SS:[EBP-AC],ESI
00588FAC . 89B5 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],ESI
00588FB2 . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
00588FB5 . 898D E4FEFFFF MOV DWORD PTR SS:[EBP-11C],ECX
00588FBB . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00588FC5 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588FCB . 52 PUSH EDX
00588FCC . 6A 01 PUSH 1
00588FCE . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
00588FD4 . 50 PUSH EAX
00588FD5 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588FDB . 51 PUSH ECX
00588FDC . 8B35 E4104000 MOV ESI,DWORD PTR DS:[<&MSVBVM60.#632>] ; MSVBVM60.rtcMidCharVar
00588FE2 . FFD6 CALL ESI ; <&MSVBVM60.#632>
00588FE4 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588FEA . 52 PUSH EDX
00588FEB . 8D85 74FFFFFF LEA EAX,DWORD PTR SS:[EBP-8C]
00588FF1 . 50 PUSH EAX
00588FF2 . FFD3 CALL EBX
00588FF4 . 50 PUSH EAX
00588FF5 . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
00588FFB . 51 PUSH ECX
00588FFC . E8 4FC1FDFF CALL _UnPacke.00565150
00589001 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589007 . 52 PUSH EDX
00589008 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
0058900E . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589011 . 8801 MOV BYTE PTR DS:[ECX],AL
00589013 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589019 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0058901F . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589025 . 52 PUSH EDX
00589026 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058902C . 50 PUSH EAX
0058902D . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00589033 . 51 PUSH ECX
00589034 . 6A 03 PUSH 3
00589036 . FFD7 CALL EDI
00589038 . 83C4 10 ADD ESP,10
0058903B . B8 02000000 MOV EAX,2
00589040 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00589046 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
0058904C . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
0058904F . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
00589055 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
0058905F . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00589065 . 50 PUSH EAX
00589066 . 6A 03 PUSH 3
00589068 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
0058906E . 51 PUSH ECX
0058906F . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589075 . 52 PUSH EDX
00589076 . FFD6 CALL ESI
00589078 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058907E . 50 PUSH EAX
0058907F . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589085 . 51 PUSH ECX
00589086 . FFD3 CALL EBX
00589088 . 50 PUSH EAX
00589089 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058908F . 52 PUSH EDX
00589090 . E8 BBC0FDFF CALL _UnPacke.00565150
00589095 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
0058909B . 50 PUSH EAX
0058909C . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
005890A2 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
005890A5 . 8841 01 MOV BYTE PTR DS:[ECX+1],AL
005890A8 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005890AE . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
005890B4 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005890BA . 52 PUSH EDX
005890BB . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005890C1 . 50 PUSH EAX
005890C2 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005890C8 . 51 PUSH ECX
005890C9 . 6A 03 PUSH 3
005890CB . FFD7 CALL EDI
005890CD . 83C4 10 ADD ESP,10
005890D0 . B8 02000000 MOV EAX,2
005890D5 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
005890DB . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
005890E1 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
005890E4 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
005890EA . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005890F4 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
005890FA . 50 PUSH EAX
005890FB . 6A 05 PUSH 5
005890FD . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
00589103 . 51 PUSH ECX
00589104 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
0058910A . 52 PUSH EDX
0058910B . FFD6 CALL ESI
0058910D . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589113 . 50 PUSH EAX
00589114 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058911A . 51 PUSH ECX
0058911B . FFD3 CALL EBX
0058911D . 50 PUSH EAX
0058911E . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589124 . 52 PUSH EDX
00589125 . E8 26C0FDFF CALL _UnPacke.00565150
0058912A . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589130 . 50 PUSH EAX
00589131 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
00589137 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
0058913A . 8841 02 MOV BYTE PTR DS:[ECX+2],AL
0058913D . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589143 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589149 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058914F . 52 PUSH EDX
00589150 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589156 . 50 PUSH EAX
00589157 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058915D . 51 PUSH ECX
0058915E . 6A 03 PUSH 3
00589160 . FFD7 CALL EDI
00589162 . 83C4 10 ADD ESP,10
00589165 . B8 02000000 MOV EAX,2
0058916A . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00589170 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
00589176 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
00589179 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
0058917F . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00589189 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058918F . 50 PUSH EAX
00589190 . 6A 07 PUSH 7
00589192 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
00589198 . 51 PUSH ECX
00589199 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
0058919F . 52 PUSH EDX
005891A0 . FFD6 CALL ESI
005891A2 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005891A8 . 50 PUSH EAX
005891A9 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005891AF . 51 PUSH ECX
005891B0 . FFD3 CALL EBX
005891B2 . 50 PUSH EAX
005891B3 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005891B9 . 52 PUSH EDX
005891BA . E8 91BFFDFF CALL _UnPacke.00565150
005891BF . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005891C5 . 50 PUSH EAX
005891C6 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
005891CC . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
005891CF . 8841 03 MOV BYTE PTR DS:[ECX+3],AL
005891D2 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005891D8 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
005891DE . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005891E4 . 52 PUSH EDX
005891E5 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005891EB . 50 PUSH EAX
005891EC . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005891F2 . 51 PUSH ECX
005891F3 . 6A 03 PUSH 3
005891F5 . FFD7 CALL EDI
005891F7 . 83C4 10 ADD ESP,10
005891FA . B8 02000000 MOV EAX,2
005891FF . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00589205 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
0058920B . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
0058920E . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
00589214 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
0058921E . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00589224 . 50 PUSH EAX
00589225 . 6A 09 PUSH 9
00589227 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
0058922D . 51 PUSH ECX
0058922E . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589234 . 52 PUSH EDX
00589235 . FFD6 CALL ESI
00589237 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058923D . 50 PUSH EAX
0058923E . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589244 . 51 PUSH ECX
00589245 . FFD3 CALL EBX
00589247 . 50 PUSH EAX
00589248 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058924E . 52 PUSH EDX
0058924F . E8 FCBEFDFF CALL _UnPacke.00565150
00589254 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
0058925A . 50 PUSH EAX
0058925B . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
00589261 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589264 . 8841 04 MOV BYTE PTR DS:[ECX+4],AL
00589267 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058926D . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589273 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589279 . 52 PUSH EDX
0058927A . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589280 . 50 PUSH EAX
00589281 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00589287 . 51 PUSH ECX
00589288 . 6A 03 PUSH 3
0058928A . FFD7 CALL EDI
0058928C . 83C4 10 ADD ESP,10
0058928F . B8 02000000 MOV EAX,2
00589294 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
0058929A . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
005892A0 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
005892A3 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
005892A9 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005892B3 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
005892B9 . 50 PUSH EAX
005892BA . 6A 0B PUSH 0B
005892BC . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
005892C2 . 51 PUSH ECX
005892C3 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
005892C9 . 52 PUSH EDX
005892CA . FFD6 CALL ESI
005892CC . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005892D2 . 50 PUSH EAX
005892D3 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005892D9 . 51 PUSH ECX
005892DA . FFD3 CALL EBX
005892DC . 50 PUSH EAX
005892DD . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005892E3 . 52 PUSH EDX
005892E4 . E8 67BEFDFF CALL _UnPacke.00565150
005892E9 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005892EF . 50 PUSH EAX
005892F0 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
005892F6 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
005892F9 . 8841 05 MOV BYTE PTR DS:[ECX+5],AL
005892FC . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589302 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589308 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058930E . 52 PUSH EDX
0058930F . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589315 . 50 PUSH EAX
00589316 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058931C . 51 PUSH ECX
0058931D . 6A 03 PUSH 3
0058931F . FFD7 CALL EDI
00589321 . 83C4 10 ADD ESP,10
00589324 . B8 02000000 MOV EAX,2
00589329 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
0058932F . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
00589335 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
00589338 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
0058933E . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00589348 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058934E . 50 PUSH EAX
0058934F . 6A 0D PUSH 0D
00589351 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
00589357 . 51 PUSH ECX
00589358 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
0058935E . 52 PUSH EDX
0058935F . FFD6 CALL ESI
00589361 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589367 . 50 PUSH EAX
00589368 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058936E . 51 PUSH ECX
0058936F . FFD3 CALL EBX
00589371 . 50 PUSH EAX
00589372 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589378 . 52 PUSH EDX
00589379 . E8 D2BDFDFF CALL _UnPacke.00565150
0058937E . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589384 . 50 PUSH EAX
00589385 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
0058938B . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
0058938E . 8841 06 MOV BYTE PTR DS:[ECX+6],AL
00589391 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589397 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0058939D . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005893A3 . 52 PUSH EDX
005893A4 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005893AA . 50 PUSH EAX
005893AB . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005893B1 . 51 PUSH ECX
005893B2 . 6A 03 PUSH 3
005893B4 . FFD7 CALL EDI
005893B6 . 83C4 10 ADD ESP,10
005893B9 . B8 02000000 MOV EAX,2
005893BE . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
005893C4 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
005893CA . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
005893CD . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
005893D3 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005893DD . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
005893E3 . 50 PUSH EAX
005893E4 . 6A 0F PUSH 0F
005893E6 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
005893EC . 51 PUSH ECX
005893ED . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
005893F3 . 52 PUSH EDX
005893F4 . FFD6 CALL ESI
005893F6 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005893FC . 50 PUSH EAX
005893FD . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589403 . 51 PUSH ECX
00589404 . FFD3 CALL EBX
00589406 . 50 PUSH EAX
00589407 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058940D . 52 PUSH EDX
0058940E . E8 3DBDFDFF CALL _UnPacke.00565150
00589413 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589419 . 50 PUSH EAX
0058941A . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
00589420 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589423 . 8841 07 MOV BYTE PTR DS:[ECX+7],AL
00589426 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058942C . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589432 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589438 . 52 PUSH EDX
00589439 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058943F . 50 PUSH EAX
00589440 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00589446 . 51 PUSH ECX
00589447 . 6A 03 PUSH 3
00589449 . FFD7 CALL EDI
0058944B . 83C4 10 ADD ESP,10
0058944E . 8B55 C0 MOV EDX,DWORD PTR SS:[EBP-40]
00589451 . 52 PUSH EDX
00589452 . 8D85 6CFFFFFF LEA EAX,DWORD PTR SS:[EBP-94]
00589458 . 50 PUSH EAX
00589459 . FF15 14124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToAnsi>] ; MSVBVM60.__vbaStrToAnsi
0058945F . 50 PUSH EAX
00589460 . 6A 08 PUSH 8
00589462 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589465 . 51 PUSH ECX
00589466 . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
0058946C . 52 PUSH EDX
0058946D . 8D85 74FFFFFF LEA EAX,DWORD PTR SS:[EBP-8C]
00589473 . 50 PUSH EAX
00589474 . FFD3 CALL EBX
00589476 . 50 PUSH EAX
00589477 . 8D8D 70FFFFFF LEA ECX,DWORD PTR SS:[EBP-90]
0058947D . 51 PUSH ECX
0058947E . FF15 14124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToAnsi>] ; MSVBVM60.__vbaStrToAnsi
00589484 . 50 PUSH EAX
00589485 . E8 DE4FEAFF CALL _UnPacke.0042E468 //调用DLL 里面的解密函数
0058948A . 8985 98FEFFFF MOV DWORD PTR SS:[EBP-168],EAX
00589490 . FF15 6C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaSetSystemError>>; MSVBVM60.__vbaSetSystemError
00589496 . 8B95 6CFFFFFF MOV EDX,DWORD PTR SS:[EBP-94]
0058949C . 52 PUSH EDX
0058949D . 8D45 C0 LEA EAX,DWORD PTR SS:[EBP-40]
005894A0 . 50 PUSH EAX
005894A1 . FF15 60114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
005894A7 . 66:8B8D 98FEF>MOV CX,WORD PTR SS:[EBP-168]
005894AE . 66:890D 1CA06>MOV WORD PTR DS:[69A01C],CX
005894B5 . 8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94]
005894BB . 52 PUSH EDX
005894BC . 8D85 70FFFFFF LEA EAX,DWORD PTR SS:[EBP-90]
005894C2 . 50 PUSH EAX
005894C3 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005894C9 . 51 PUSH ECX
005894CA . 6A 03 PUSH 3
005894CC . FF15 D4114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
005894D2 . 83C4 10 ADD ESP,10
005894D5 . 66:833D 1CA06>CMP WORD PTR DS:[69A01C],0
005894DD . 0F8D B5000000 JGE _UnPacke.00589598
005894E3 . B9 04000280 MOV ECX,80020004
005894E8 . 898D 24FFFFFF MOV DWORD PTR SS:[EBP-DC],ECX
005894EE . B8 0A000000 MOV EAX,0A
005894F3 . 8985 1CFFFFFF MOV DWORD PTR SS:[EBP-E4],EAX
005894F9 . 898D 34FFFFFF MOV DWORD PTR SS:[EBP-CC],ECX
005894FF . 8985 2CFFFFFF MOV DWORD PTR SS:[EBP-D4],EAX
00589505 . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],_UnPacke.00431428
0058950F . BB 08000000 MOV EBX,8
00589514 . 899D CCFEFFFF MOV DWORD PTR SS:[EBP-134],EBX
0058951A . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
00589520 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00589526 . 8B35 18124000 MOV ESI,DWORD PTR DS:[<&MSVBVM60.__vbaVarDup>] ; MSVBVM60.__vbaVarDup
0058952C . FFD6 CALL ESI ; <&MSVBVM60.__vbaVarDup>
0058952E . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.00431408
00589538 . 899D DCFEFFFF MOV DWORD PTR SS:[EBP-124],EBX
0058953E . 8D95 DCFEFFFF LEA EDX,DWORD PTR SS:[EBP-124]
00589544 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058954A . FFD6 CALL ESI
0058954C . 8D95 1CFFFFFF LEA EDX,DWORD PTR SS:[EBP-E4]
00589552 . 52 PUSH EDX
00589553 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589559 . 50 PUSH EAX
0058955A . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00589560 . 51 PUSH ECX
00589561 . 6A 40 PUSH 40
00589563 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00589569 . 52 PUSH EDX
0058956A . FF15 AC104000 CALL DWORD PTR DS:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
00589570 . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
00589576 . 50 PUSH EAX
00589577 . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
0058957D . 51 PUSH ECX
0058957E . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589584 . 52 PUSH EDX
00589585 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058958B . 50 PUSH EAX
0058958C . 6A 04 PUSH 4
0058958E . FFD7 CALL EDI
00589590 . 83C4 14 ADD ESP,14
00589593 . E9 431A0000 JMP _UnPacke.0058AFDB
00589598 > C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],1
005895A2 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],2
005895AC . 8D4D C0 LEA ECX,DWORD PTR SS:[EBP-40]
005895AF . 898D E4FEFFFF MOV DWORD PTR SS:[EBP-11C],ECX
005895B5 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005895BF . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
005895C5 . 52 PUSH EDX
005895C6 . 6A 07 PUSH 7
005895C8 . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
005895CE . 50 PUSH EAX
005895CF . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
005895D5 . 51 PUSH ECX
005895D6 . FFD6 CALL ESI
005895D8 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
005895DE . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
005895E1 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
005895E7 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005895ED . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
005895F3 . C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],1
005895FD . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],2
00589607 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8]
0058960A . 83C2 40 ADD EDX,40
0058960D . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
00589613 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
0058961D . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00589623 . 50 PUSH EAX
00589624 . 6A 01 PUSH 1
00589626 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
0058962C . 51 PUSH ECX
0058962D . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589633 . 52 PUSH EDX
00589634 . FFD6 CALL ESI
00589636 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058963C . 50 PUSH EAX
0058963D . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
00589640 . 51 PUSH ECX
00589641 . FF15 F4114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarTstNe>] ; MSVBVM60.__vbaVarTstNe //关键比较函数
00589647 . 66:8985 8CFEF>MOV WORD PTR SS:[EBP-174],AX
0058964E . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589654 . 52 PUSH EDX
00589655 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058965B . 50 PUSH EAX
0058965C . 6A 02 PUSH 2
0058965E . FFD7 CALL EDI
00589660 . 83C4 0C ADD ESP,0C
00589663 . 66:83BD 8CFEF>CMP WORD PTR SS:[EBP-174],0
0058966B 0F84 E4000000 JE _UnPacke.00589755 //关键跳转
call _UnPacke.00565150 经测试表明该调用验证两个字符是否为16进制数
我想找出注册码的算法，代码虽然有点长，但是大概结构我还是了解，开始一段是对机器码进行处理，这段我看不太懂，只知道里面进行了Left和Right,后面再进我输入的注册码进行处理，循环取两位进行验证，看是否为16进制的字符。
但是细节方面我看不懂，我对VB的代码不太熟悉，哪位大哥能不能给我解释一下部分代码给我指点下就行，只要我看懂了，其他的代码我就可以自己弄了
注册码长度通过之后开始算法验证：
0058868F > 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00588695 . 50 PUSH EAX
00588696 . FF15 00124000 CALL DWORD PTR DS:[<&MSVBVM60.#610>] ; MSVBVM60.rtcGetDateVar \\获得日期在EAX里面地址对应的内存
0058869C . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0043136C ; mmdd
005886A6 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
005886B0 . 8D95 DCFEFFFF LEA EDX,DWORD PTR SS:[EBP-124]
005886B6 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
005886BC . FF15 18124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarDup>] ; MSVBVM60.__vbaVarDup
005886C2 . 6A 01 PUSH 1
005886C4 . 6A 01 PUSH 1
005886C6 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
005886CC . 51 PUSH ECX
005886CD . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
005886D3 . 52 PUSH EDX
005886D4 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005886DA . 50 PUSH EAX
005886DB . FF15 60104000 CALL DWORD PTR DS:[<&MSVBVM60.#660>] ; MSVBVM60.rtcVarFromFormatVar
005886E1 . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],3FD
005886EB . C785 CCFEFFFF>MOV DWORD PTR SS:[EBP-134],2
005886F5 . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
005886FB . 51 PUSH ECX
005886FC . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
00588702 . 52 PUSH EDX
00588703 . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
00588709 . 50 PUSH EAX
0058870A . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588710 . 50 PUSH EAX
00588711 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00588717 . 8BD0 MOV EDX,EAX
00588719 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
0058871C . FF15 3C124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00588722 . 8D8D 1CFFFFFF LEA ECX,DWORD PTR SS:[EBP-E4]
00588728 . 51 PUSH ECX
00588729 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058872F . 52 PUSH EDX
00588730 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588736 . 50 PUSH EAX
00588737 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058873D . 51 PUSH ECX
0058873E . 6A 04 PUSH 4
00588740 . FFD7 CALL EDI
00588742 . 83C4 14 ADD ESP,14
00588745 . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
00588748 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
0058874E . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00588758 . 6A 02 PUSH 2
0058875A . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
00588760 . 50 PUSH EAX
00588761 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588767 . 51 PUSH ECX
00588768 . FF15 34124000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
0058876E . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588774 . 52 PUSH EDX
00588775 . 8D85 74FFFFFF LEA EAX,DWORD PTR SS:[EBP-8C]
0058877B . 50 PUSH EAX
0058877C . 8B1D 8C114000 MOV EBX,DWORD PTR DS:[<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00588782 . FFD3 CALL EBX ; <&MSVBVM60.__vbaStrVarVal>
00588784 . 50 PUSH EAX
00588785 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
0058878B . 51 PUSH ECX
0058878C . E8 BFC9FDFF CALL _UnPacke.00565150
00588791 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588797 . 52 PUSH EDX
00588798 . FF15 F8114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>] ; MSVBVM60.__vbaI4Var
0058879E . 50 PUSH EAX
0058879F . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005887A5 . 50 PUSH EAX
005887A6 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi
005887AC . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
005887AF . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
005887B5 . C785 CCFEFFFF>MOV DWORD PTR SS:[EBP-134],4008
005887BF . 6A 02 PUSH 2
005887C1 . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
005887C7 . 52 PUSH EDX
005887C8 . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
005887CE . 50 PUSH EAX
005887CF . FF15 44124000 CALL DWORD PTR DS:[<&MSVBVM60.#619>] ; MSVBVM60.rtcRightCharVar
005887D5 . 8D8D 1CFFFFFF LEA ECX,DWORD PTR SS:[EBP-E4]
005887DB . 51 PUSH ECX
005887DC . 8D95 70FFFFFF LEA EDX,DWORD PTR SS:[EBP-90]
005887E2 . 52 PUSH EDX
005887E3 . FFD3 CALL EBX
005887E5 . 50 PUSH EAX
005887E6 . 8D85 0CFFFFFF LEA EAX,DWORD PTR SS:[EBP-F4]
005887EC . 50 PUSH EAX
005887ED . E8 5EC9FDFF CALL _UnPacke.00565150
005887F2 . 8D8D 0CFFFFFF LEA ECX,DWORD PTR SS:[EBP-F4]
005887F8 . 51 PUSH ECX
005887F9 . FF15 F8114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>] ; MSVBVM60.__vbaI4Var
005887FF . 50 PUSH EAX
00588800 . 8D95 FCFEFFFF LEA EDX,DWORD PTR SS:[EBP-104]
00588806 . 52 PUSH EDX
00588807 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi
0058880D . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00588813 . 50 PUSH EAX
00588814 . 8D8D FCFEFFFF LEA ECX,DWORD PTR SS:[EBP-104]
0058881A . 51 PUSH ECX
0058881B . 8D95 ECFEFFFF LEA EDX,DWORD PTR SS:[EBP-114]
00588821 . 52 PUSH EDX
00588822 . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588828 . 50 PUSH EAX
00588829 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
0058882F . 8BD0 MOV EDX,EAX
00588831 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
00588834 . FF15 3C124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
0058883A . 8D85 70FFFFFF LEA EAX,DWORD PTR SS:[EBP-90]
00588840 . 50 PUSH EAX
00588841 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00588847 . 51 PUSH ECX
00588848 . 6A 02 PUSH 2
0058884A . FF15 D4114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00588850 . 8D95 ECFEFFFF LEA EDX,DWORD PTR SS:[EBP-114]
00588856 . 52 PUSH EDX
00588857 . 8D85 FCFEFFFF LEA EAX,DWORD PTR SS:[EBP-104]
0058885D . 50 PUSH EAX
0058885E . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
00588864 . 51 PUSH ECX
00588865 . 8D95 0CFFFFFF LEA EDX,DWORD PTR SS:[EBP-F4]
0058886B . 52 PUSH EDX
0058886C . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
00588872 . 50 PUSH EAX
00588873 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588879 . 51 PUSH ECX
0058887A . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588880 . 52 PUSH EDX
00588881 . 6A 07 PUSH 7
00588883 . FFD7 CALL EDI
00588885 . 83C4 2C ADD ESP,2C
00588888 . 68 F4CC4200 PUSH _UnPacke.0042CCF4
0058888D . FF15 40114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaNew>] ; MSVBVM60.__vbaNew
00588893 . 50 PUSH EAX
00588894 . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
00588897 . 50 PUSH EAX
00588898 . FF15 A8104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
0058889E . 3935 10A06900 CMP DWORD PTR DS:[69A010],ESI
005888A4 . 75 10 JNZ SHORT _UnPacke.005888B6
005888A6 . 68 10A06900 PUSH _UnPacke.0069A010
005888AB . 68 98CC4200 PUSH _UnPacke.0042CC98
005888B0 . FF15 B0114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2
005888B6 > 8B0D 10A06900 MOV ECX,DWORD PTR DS:[69A010]
005888BC . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
005888C2 . B8 09000000 MOV EAX,9
005888C7 . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
005888CD . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0043137C ; s
005888D7 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
005888E1 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
005888E4 . 8B0A MOV ECX,DWORD PTR DS:[EDX]
005888E6 . 6A 01 PUSH 1
005888E8 . 6A 03 PUSH 3
005888EA . 6A 03 PUSH 3
005888EC . 83EC 10 SUB ESP,10
005888EF . 8BD4 MOV EDX,ESP
005888F1 . 8902 MOV DWORD PTR DS:[EDX],EAX
005888F3 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
005888F9 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
005888FC . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588902 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588905 . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
0058890B . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
0058890E . 83EC 10 SUB ESP,10
00588911 . 8BD4 MOV EDX,ESP
00588913 . 8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124]
00588919 . 8902 MOV DWORD PTR DS:[EDX],EAX
0058891B . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588921 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588924 . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
0058892A . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
0058892D . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588933 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588936 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588939 . 52 PUSH EDX
0058893A . FF91 A0000000 CALL DWORD PTR DS:[ECX+A0]
00588940 . DBE2 FCLEX
00588942 . 3BC6 CMP EAX,ESI
00588944 . 7D 15 JGE SHORT _UnPacke.0058895B
00588946 . 68 A0000000 PUSH 0A0
0058894B . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588950 . 8B4D C8 MOV ECX,DWORD PTR SS:[EBP-38]
00588953 . 51 PUSH ECX
00588954 . 50 PUSH EAX
00588955 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
0058895B > 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
0058895E . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588960 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588966 . 51 PUSH ECX
00588967 . 50 PUSH EAX
00588968 . FF52 54 CALL DWORD PTR DS:[EDX+54]
0058896B . DBE2 FCLEX
0058896D . 3BC6 CMP EAX,ESI
0058896F . 7D 12 JGE SHORT _UnPacke.00588983
00588971 . 6A 54 PUSH 54
00588973 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588978 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
0058897B . 52 PUSH EDX
0058897C . 50 PUSH EAX
0058897D . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588983 > 8B8D 68FFFFFF MOV ECX,DWORD PTR SS:[EBP-98]
00588989 . 898D 88FEFFFF MOV DWORD PTR SS:[EBP-178],ECX
0058898F . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0042CBB4
00588999 . B8 08000000 MOV EAX,8
0058899E . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
005889A4 . 8B09 MOV ECX,DWORD PTR DS:[ECX]
005889A6 . 8D95 64FFFFFF LEA EDX,DWORD PTR SS:[EBP-9C]
005889AC . 52 PUSH EDX
005889AD . 83EC 10 SUB ESP,10
005889B0 . 8BD4 MOV EDX,ESP
005889B2 . 8902 MOV DWORD PTR DS:[EDX],EAX
005889B4 . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
005889BA . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
005889BD . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
005889C3 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
005889C6 . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
005889CC . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
005889CF . 8B95 68FFFFFF MOV EDX,DWORD PTR SS:[EBP-98]
005889D5 . 52 PUSH EDX
005889D6 . FF51 28 CALL DWORD PTR DS:[ECX+28]
005889D9 . DBE2 FCLEX
005889DB . 3BC6 CMP EAX,ESI
005889DD . 7D 15 JGE SHORT _UnPacke.005889F4
005889DF . 6A 28 PUSH 28
005889E1 . 68 F0EF4200 PUSH _UnPacke.0042EFF0
005889E6 . 8B8D 88FEFFFF MOV ECX,DWORD PTR SS:[EBP-178]
005889EC . 51 PUSH ECX
005889ED . 50 PUSH EAX
005889EE . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
005889F4 > 8B85 64FFFFFF MOV EAX,DWORD PTR SS:[EBP-9C]
005889FA . 89B5 64FFFFFF MOV DWORD PTR SS:[EBP-9C],ESI
00588A00 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00588A06 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],9
00588A10 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588A16 . 52 PUSH EDX
00588A17 . FF15 08114000 CALL DWORD PTR DS:[<&MSVBVM60.#560>] ; MSVBVM60.rtcIsNull
00588A1D . 33C9 XOR ECX,ECX
00588A1F . 66:3D FFFF CMP AX,0FFFF
00588A23 . 0F94C1 SETE CL
00588A26 . F7D9 NEG ECX
00588A28 . 66:898D B4FEF>MOV WORD PTR SS:[EBP-14C],CX
00588A2F . C785 ACFEFFFF>MOV DWORD PTR SS:[EBP-154],0B
00588A39 . 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
00588A3C . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588A3E . 8D8D 60FFFFFF LEA ECX,DWORD PTR SS:[EBP-A0]
00588A44 . 51 PUSH ECX
00588A45 . 50 PUSH EAX
00588A46 . FF52 54 CALL DWORD PTR DS:[EDX+54]
00588A49 . DBE2 FCLEX
00588A4B . 3BC6 CMP EAX,ESI
00588A4D . 7D 12 JGE SHORT _UnPacke.00588A61
00588A4F . 6A 54 PUSH 54
00588A51 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588A56 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588A59 . 52 PUSH EDX
00588A5A . 50 PUSH EAX
00588A5B . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588A61 > 8B8D 60FFFFFF MOV ECX,DWORD PTR SS:[EBP-A0]
00588A67 . 898D 7CFEFFFF MOV DWORD PTR SS:[EBP-184],ECX
00588A6D . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],_UnPacke.0042CBB4
00588A77 . B8 08000000 MOV EAX,8
00588A7C . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588A82 . 8B09 MOV ECX,DWORD PTR DS:[ECX]
00588A84 . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
00588A8A . 52 PUSH EDX
00588A8B . 83EC 10 SUB ESP,10
00588A8E . 8BD4 MOV EDX,ESP
00588A90 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588A92 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
00588A98 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588A9B . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588AA1 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588AA4 . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
00588AAA . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588AAD . 8B95 60FFFFFF MOV EDX,DWORD PTR SS:[EBP-A0]
00588AB3 . 52 PUSH EDX
00588AB4 . FF51 28 CALL DWORD PTR DS:[ECX+28]
00588AB7 . DBE2 FCLEX
00588AB9 . 3BC6 CMP EAX,ESI
00588ABB . 7D 15 JGE SHORT _UnPacke.00588AD2
00588ABD . 6A 28 PUSH 28
00588ABF . 68 F0EF4200 PUSH _UnPacke.0042EFF0
00588AC4 . 8B8D 7CFEFFFF MOV ECX,DWORD PTR SS:[EBP-184]
00588ACA . 51 PUSH ECX
00588ACB . 50 PUSH EAX
00588ACC . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588AD2 > 8B85 5CFFFFFF MOV EAX,DWORD PTR SS:[EBP-A4]
00588AD8 . 8985 74FEFFFF MOV DWORD PTR SS:[EBP-18C],EAX
00588ADE . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588AE0 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588AE6 . 51 PUSH ECX
00588AE7 . 50 PUSH EAX
00588AE8 . FF52 34 CALL DWORD PTR DS:[EDX+34]
00588AEB . DBE2 FCLEX
00588AED . 3BC6 CMP EAX,ESI
00588AEF . 7D 15 JGE SHORT _UnPacke.00588B06
00588AF1 . 6A 34 PUSH 34
00588AF3 . 68 00F04200 PUSH _UnPacke.0042F000
00588AF8 . 8B95 74FEFFFF MOV EDX,DWORD PTR SS:[EBP-18C]
00588AFE . 52 PUSH EDX
00588AFF . 50 PUSH EAX
00588B00 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588B06 > C785 C4FEFFFF>MOV DWORD PTR SS:[EBP-13C],_UnPacke.0042CC74
00588B10 . C785 BCFEFFFF>MOV DWORD PTR SS:[EBP-144],8008
00588B1A . 8D85 ACFEFFFF LEA EAX,DWORD PTR SS:[EBP-154]
00588B20 . 50 PUSH EAX
00588B21 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588B27 . 51 PUSH ECX
00588B28 . 8D95 BCFEFFFF LEA EDX,DWORD PTR SS:[EBP-144]
00588B2E . 52 PUSH EDX
00588B2F . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00588B35 . 50 PUSH EAX
00588B36 . FF15 FC114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarCmpEq>] ; MSVBVM60.__vbaVarCmpEq
00588B3C . 50 PUSH EAX
00588B3D . 8D8D 1CFFFFFF LEA ECX,DWORD PTR SS:[EBP-E4]
00588B43 . 51 PUSH ECX
00588B44 . FF15 20114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarOr>] ; MSVBVM60.__vbaVarOr
00588B4A . 50 PUSH EAX
00588B4B . FF15 D0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaBoolVarNull>] ; MSVBVM60.__vbaBoolVarNull
00588B51 . 8985 6CFEFFFF MOV DWORD PTR SS:[EBP-194],EAX
00588B57 . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
00588B5D . 52 PUSH EDX
00588B5E . 8D85 60FFFFFF LEA EAX,DWORD PTR SS:[EBP-A0]
00588B64 . 50 PUSH EAX
00588B65 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588B6B . 51 PUSH ECX
00588B6C . 6A 03 PUSH 3
00588B6E . FF15 38104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeObjList>] ; MSVBVM60.__vbaFreeObjList
00588B74 . 8D95 ACFEFFFF LEA EDX,DWORD PTR SS:[EBP-154]
00588B7A . 52 PUSH EDX
00588B7B . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588B81 . 50 PUSH EAX
00588B82 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588B88 . 51 PUSH ECX
00588B89 . 6A 03 PUSH 3
00588B8B . FFD7 CALL EDI
00588B8D . 83C4 20 ADD ESP,20
00588B90 . 66:39B5 6CFEF>CMP WORD PTR SS:[EBP-194],SI
00588B97 . 0F84 5E010000 JE _UnPacke.00588CFB
00588B9D . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],2E
00588BA7 . B8 02000000 MOV EAX,2
00588BAC . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588BB2 . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0042CBB4
00588BBC . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
00588BC6 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588BC9 . 8B0A MOV ECX,DWORD PTR DS:[EDX]
00588BCB . 83EC 10 SUB ESP,10
00588BCE . 8BD4 MOV EDX,ESP
00588BD0 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588BD2 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
00588BD8 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588BDB . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588BE1 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588BE4 . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
00588BEA . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588BED . 83EC 10 SUB ESP,10
00588BF0 . 8BD4 MOV EDX,ESP
00588BF2 . 8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124]
00588BF8 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588BFA . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588C00 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588C03 . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
00588C09 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588C0C . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588C12 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588C15 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588C18 . 52 PUSH EDX
00588C19 . FF91 00010000 CALL DWORD PTR DS:[ECX+100]
00588C1F . DBE2 FCLEX
00588C21 . 3BC6 CMP EAX,ESI
00588C23 . 7D 15 JGE SHORT _UnPacke.00588C3A
00588C25 . 68 00010000 PUSH 100
00588C2A . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588C2F . 8B4D C8 MOV ECX,DWORD PTR SS:[EBP-38]
00588C32 . 51 PUSH ECX
00588C33 . 50 PUSH EAX
00588C34 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588C3A > B9 04000280 MOV ECX,80020004
00588C3F . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
00588C45 . B8 0A000000 MOV EAX,0A
00588C4A . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588C50 . 898D E4FEFFFF MOV DWORD PTR SS:[EBP-11C],ECX
00588C56 . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
00588C5C . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588C5F . 8B0A MOV ECX,DWORD PTR DS:[EDX]
00588C61 . 83EC 10 SUB ESP,10
00588C64 . 8BD4 MOV EDX,ESP
00588C66 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588C68 . 8B85 D0FEFFFF MOV EAX,DWORD PTR SS:[EBP-130]
00588C6E . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588C71 . 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
00588C77 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588C7A . 8B85 D8FEFFFF MOV EAX,DWORD PTR SS:[EBP-128]
00588C80 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588C83 . 83EC 10 SUB ESP,10
00588C86 . 8BD4 MOV EDX,ESP
00588C88 . 8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124]
00588C8E . 8902 MOV DWORD PTR DS:[EDX],EAX
00588C90 . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588C96 . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588C99 . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
00588C9F . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588CA2 . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588CA8 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588CAB . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588CAE . 52 PUSH EDX
00588CAF . FF91 AC000000 CALL DWORD PTR DS:[ECX+AC]
00588CB5 . DBE2 FCLEX
00588CB7 . 3BC6 CMP EAX,ESI
00588CB9 . 7D 15 JGE SHORT _UnPacke.00588CD0
00588CBB . 68 AC000000 PUSH 0AC
00588CC0 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588CC5 . 8B4D C8 MOV ECX,DWORD PTR SS:[EBP-38]
00588CC8 . 51 PUSH ECX
00588CC9 . 50 PUSH EAX
00588CCA . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588CD0 > C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.004313F0 ; f
00588CDA . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],8
00588CE4 . 8D95 DCFEFFFF LEA EDX,DWORD PTR SS:[EBP-124]
00588CEA . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588CF0 . FF15 28124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarCopy>] ; MSVBVM60.__vbaVarCopy
00588CF6 . E9 57010000 JMP _UnPacke.00588E52
00588CFB > 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
00588CFE . 8B10 MOV EDX,DWORD PTR DS:[EAX]
00588D00 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588D06 . 51 PUSH ECX
00588D07 . 50 PUSH EAX
00588D08 . FF52 54 CALL DWORD PTR DS:[EDX+54]
00588D0B . DBE2 FCLEX
00588D0D . 3BC6 CMP EAX,ESI
00588D0F . 7D 12 JGE SHORT _UnPacke.00588D23
00588D11 . 6A 54 PUSH 54
00588D13 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588D18 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588D1B . 52 PUSH EDX
00588D1C . 50 PUSH EAX
00588D1D . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588D23 > 8B8D 68FFFFFF MOV ECX,DWORD PTR SS:[EBP-98]
00588D29 . 898D 88FEFFFF MOV DWORD PTR SS:[EBP-178],ECX
00588D2F . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.0042CBB4
00588D39 . B8 08000000 MOV EAX,8
00588D3E . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
00588D44 . 8B09 MOV ECX,DWORD PTR DS:[ECX]
00588D46 . 8D95 64FFFFFF LEA EDX,DWORD PTR SS:[EBP-9C]
00588D4C . 52 PUSH EDX
00588D4D . 83EC 10 SUB ESP,10
00588D50 . 8BD4 MOV EDX,ESP
00588D52 . 8902 MOV DWORD PTR DS:[EDX],EAX
00588D54 . 8B85 E0FEFFFF MOV EAX,DWORD PTR SS:[EBP-120]
00588D5A . 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
00588D5D . 8B85 E4FEFFFF MOV EAX,DWORD PTR SS:[EBP-11C]
00588D63 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
00588D66 . 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
00588D6C . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
00588D6F . 8B95 68FFFFFF MOV EDX,DWORD PTR SS:[EBP-98]
00588D75 . 52 PUSH EDX
00588D76 . FF51 28 CALL DWORD PTR DS:[ECX+28]
00588D79 . DBE2 FCLEX
00588D7B . 3BC6 CMP EAX,ESI
00588D7D . 7D 15 JGE SHORT _UnPacke.00588D94
00588D7F . 6A 28 PUSH 28
00588D81 . 68 F0EF4200 PUSH _UnPacke.0042EFF0
00588D86 . 8B8D 88FEFFFF MOV ECX,DWORD PTR SS:[EBP-178]
00588D8C . 51 PUSH ECX
00588D8D . 50 PUSH EAX
00588D8E . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588D94 > 8B85 64FFFFFF MOV EAX,DWORD PTR SS:[EBP-9C]
00588D9A . 89B5 64FFFFFF MOV DWORD PTR SS:[EBP-9C],ESI
00588DA0 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00588DA6 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],9
00588DB0 . 6A 02 PUSH 2
00588DB2 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588DB8 . 52 PUSH EDX
00588DB9 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588DBF . 50 PUSH EAX
00588DC0 . FF15 34124000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
00588DC6 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588DCC . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588DD2 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
00588DD8 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588DDE . FF15 80124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
00588DE4 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588DEA . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00588DF0 . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588DF6 . 51 PUSH ECX
00588DF7 . 8D95 74FFFFFF LEA EDX,DWORD PTR SS:[EBP-8C]
00588DFD . 52 PUSH EDX
00588DFE . FFD3 CALL EBX
00588E00 . 50 PUSH EAX
00588E01 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00588E07 . 50 PUSH EAX
00588E08 . E8 43C3FDFF CALL _UnPacke.00565150
00588E0D . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588E13 . 51 PUSH ECX
00588E14 . FF15 F8114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>] ; MSVBVM60.__vbaI4Var
00588E1A . 50 PUSH EAX
00588E1B . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588E21 . 52 PUSH EDX
00588E22 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi
00588E28 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588E2E . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588E34 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
00588E3A . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00588E40 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00588E46 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588E4C . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00588E52 > 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
00588E55 . 8B08 MOV ECX,DWORD PTR DS:[EAX]
00588E57 . 50 PUSH EAX
00588E58 . FF91 80000000 CALL DWORD PTR DS:[ECX+80]
00588E5E . DBE2 FCLEX
00588E60 . 3BC6 CMP EAX,ESI
00588E62 . 7D 15 JGE SHORT _UnPacke.00588E79
00588E64 . 68 80000000 PUSH 80
00588E69 . 68 D4EF4200 PUSH _UnPacke.0042EFD4
00588E6E . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38]
00588E71 . 52 PUSH EDX
00588E72 . 50 PUSH EAX
00588E73 . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588E79 > C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.004313F8 ; fffff
00588E83 . B8 08000000 MOV EAX,8
00588E88 . 8985 DCFEFFFF MOV DWORD PTR SS:[EBP-124],EAX
00588E8E . 8B4D 98 MOV ECX,DWORD PTR SS:[EBP-68]
00588E91 . 898D D4FEFFFF MOV DWORD PTR SS:[EBP-12C],ECX
00588E97 . 8985 CCFEFFFF MOV DWORD PTR SS:[EBP-134],EAX
00588E9D . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
00588EA3 . 52 PUSH EDX
00588EA4 . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
00588EAA . 50 PUSH EAX
00588EAB . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588EB1 . 51 PUSH ECX
00588EB2 . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588EB8 . 50 PUSH EAX
00588EB9 . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
00588EBF . 52 PUSH EDX
00588EC0 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588EC6 . 50 PUSH EAX
00588EC7 . FF15 08124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00588ECD . 8BD0 MOV EDX,EAX
00588ECF . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00588ED5 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
00588EDB . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00588EE1 . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00588EE7 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
00588EEA . 8B08 MOV ECX,DWORD PTR DS:[EAX]
00588EEC . 50 PUSH EAX
00588EED . FF91 04030000 CALL DWORD PTR DS:[ECX+304]
00588EF3 . 50 PUSH EAX
00588EF4 . 8D95 68FFFFFF LEA EDX,DWORD PTR SS:[EBP-98]
00588EFA . 52 PUSH EDX
00588EFB . FF15 A8104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
00588F01 . 8985 8CFEFFFF MOV DWORD PTR SS:[EBP-174],EAX
00588F07 . 8B08 MOV ECX,DWORD PTR DS:[EAX]
00588F09 . 8D95 74FFFFFF LEA EDX,DWORD PTR SS:[EBP-8C]
00588F0F . 52 PUSH EDX
00588F10 . 50 PUSH EAX
00588F11 . FF91 A0000000 CALL DWORD PTR DS:[ECX+A0]
00588F17 . DBE2 FCLEX
00588F19 . 3BC6 CMP EAX,ESI
00588F1B . 7D 18 JGE SHORT _UnPacke.00588F35
00588F1D . 68 A0000000 PUSH 0A0
00588F22 . 68 E4D94200 PUSH _UnPacke.0042D9E4
00588F27 . 8B8D 8CFEFFFF MOV ECX,DWORD PTR SS:[EBP-174]
00588F2D . 51 PUSH ECX
00588F2E . 50 PUSH EAX
00588F2F . FF15 74104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaHresultCheckObj>; MSVBVM60.__vbaHresultCheckObj
00588F35 > 8B85 74FFFFFF MOV EAX,DWORD PTR SS:[EBP-8C]
00588F3B . C785 74FFFFFF>MOV DWORD PTR SS:[EBP-8C],0
00588F45 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00588F4B . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8
00588F55 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588F5B . 52 PUSH EDX
00588F5C . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00588F62 . 50 PUSH EAX
00588F63 . FF15 C4104000 CALL DWORD PTR DS:[<&MSVBVM60.#520>] ; MSVBVM60.rtcTrimVar
00588F69 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588F6F . 51 PUSH ECX
00588F70 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00588F76 . 8BD0 MOV EDX,EAX
00588F78 . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
00588F7B . FF15 3C124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00588F81 . 8D8D 68FFFFFF LEA ECX,DWORD PTR SS:[EBP-98]
00588F87 . FF15 80124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
00588F8D . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588F93 . 52 PUSH EDX
00588F94 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00588F9A . 50 PUSH EAX
00588F9B . BE 02000000 MOV ESI,2
00588FA0 . 56 PUSH ESI
00588FA1 . FFD7 CALL EDI
00588FA3 . 83C4 0C ADD ESP,0C
00588FA6 . 89B5 54FFFFFF MOV DWORD PTR SS:[EBP-AC],ESI
00588FAC . 89B5 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],ESI
00588FB2 . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
00588FB5 . 898D E4FEFFFF MOV DWORD PTR SS:[EBP-11C],ECX
00588FBB . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00588FC5 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00588FCB . 52 PUSH EDX
00588FCC . 6A 01 PUSH 1
00588FCE . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
00588FD4 . 50 PUSH EAX
00588FD5 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00588FDB . 51 PUSH ECX
00588FDC . 8B35 E4104000 MOV ESI,DWORD PTR DS:[<&MSVBVM60.#632>] ; MSVBVM60.rtcMidCharVar
00588FE2 . FFD6 CALL ESI ; <&MSVBVM60.#632>
00588FE4 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00588FEA . 52 PUSH EDX
00588FEB . 8D85 74FFFFFF LEA EAX,DWORD PTR SS:[EBP-8C]
00588FF1 . 50 PUSH EAX
00588FF2 . FFD3 CALL EBX
00588FF4 . 50 PUSH EAX
00588FF5 . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
00588FFB . 51 PUSH ECX
00588FFC . E8 4FC1FDFF CALL _UnPacke.00565150
00589001 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589007 . 52 PUSH EDX
00589008 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
0058900E . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589011 . 8801 MOV BYTE PTR DS:[ECX],AL
00589013 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589019 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0058901F . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589025 . 52 PUSH EDX
00589026 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058902C . 50 PUSH EAX
0058902D . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00589033 . 51 PUSH ECX
00589034 . 6A 03 PUSH 3
00589036 . FFD7 CALL EDI
00589038 . 83C4 10 ADD ESP,10
0058903B . B8 02000000 MOV EAX,2
00589040 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00589046 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
0058904C . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
0058904F . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
00589055 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
0058905F . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00589065 . 50 PUSH EAX
00589066 . 6A 03 PUSH 3
00589068 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
0058906E . 51 PUSH ECX
0058906F . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589075 . 52 PUSH EDX
00589076 . FFD6 CALL ESI
00589078 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058907E . 50 PUSH EAX
0058907F . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589085 . 51 PUSH ECX
00589086 . FFD3 CALL EBX
00589088 . 50 PUSH EAX
00589089 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058908F . 52 PUSH EDX
00589090 . E8 BBC0FDFF CALL _UnPacke.00565150
00589095 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
0058909B . 50 PUSH EAX
0058909C . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
005890A2 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
005890A5 . 8841 01 MOV BYTE PTR DS:[ECX+1],AL
005890A8 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005890AE . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
005890B4 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005890BA . 52 PUSH EDX
005890BB . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005890C1 . 50 PUSH EAX
005890C2 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005890C8 . 51 PUSH ECX
005890C9 . 6A 03 PUSH 3
005890CB . FFD7 CALL EDI
005890CD . 83C4 10 ADD ESP,10
005890D0 . B8 02000000 MOV EAX,2
005890D5 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
005890DB . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
005890E1 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
005890E4 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
005890EA . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005890F4 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
005890FA . 50 PUSH EAX
005890FB . 6A 05 PUSH 5
005890FD . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
00589103 . 51 PUSH ECX
00589104 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
0058910A . 52 PUSH EDX
0058910B . FFD6 CALL ESI
0058910D . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589113 . 50 PUSH EAX
00589114 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058911A . 51 PUSH ECX
0058911B . FFD3 CALL EBX
0058911D . 50 PUSH EAX
0058911E . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589124 . 52 PUSH EDX
00589125 . E8 26C0FDFF CALL _UnPacke.00565150
0058912A . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589130 . 50 PUSH EAX
00589131 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
00589137 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
0058913A . 8841 02 MOV BYTE PTR DS:[ECX+2],AL
0058913D . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589143 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589149 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058914F . 52 PUSH EDX
00589150 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589156 . 50 PUSH EAX
00589157 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058915D . 51 PUSH ECX
0058915E . 6A 03 PUSH 3
00589160 . FFD7 CALL EDI
00589162 . 83C4 10 ADD ESP,10
00589165 . B8 02000000 MOV EAX,2
0058916A . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00589170 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
00589176 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
00589179 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
0058917F . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00589189 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058918F . 50 PUSH EAX
00589190 . 6A 07 PUSH 7
00589192 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
00589198 . 51 PUSH ECX
00589199 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
0058919F . 52 PUSH EDX
005891A0 . FFD6 CALL ESI
005891A2 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005891A8 . 50 PUSH EAX
005891A9 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005891AF . 51 PUSH ECX
005891B0 . FFD3 CALL EBX
005891B2 . 50 PUSH EAX
005891B3 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005891B9 . 52 PUSH EDX
005891BA . E8 91BFFDFF CALL _UnPacke.00565150
005891BF . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005891C5 . 50 PUSH EAX
005891C6 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
005891CC . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
005891CF . 8841 03 MOV BYTE PTR DS:[ECX+3],AL
005891D2 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005891D8 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
005891DE . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005891E4 . 52 PUSH EDX
005891E5 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005891EB . 50 PUSH EAX
005891EC . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005891F2 . 51 PUSH ECX
005891F3 . 6A 03 PUSH 3
005891F5 . FFD7 CALL EDI
005891F7 . 83C4 10 ADD ESP,10
005891FA . B8 02000000 MOV EAX,2
005891FF . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
00589205 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
0058920B . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
0058920E . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
00589214 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
0058921E . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00589224 . 50 PUSH EAX
00589225 . 6A 09 PUSH 9
00589227 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
0058922D . 51 PUSH ECX
0058922E . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589234 . 52 PUSH EDX
00589235 . FFD6 CALL ESI
00589237 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058923D . 50 PUSH EAX
0058923E . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589244 . 51 PUSH ECX
00589245 . FFD3 CALL EBX
00589247 . 50 PUSH EAX
00589248 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058924E . 52 PUSH EDX
0058924F . E8 FCBEFDFF CALL _UnPacke.00565150
00589254 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
0058925A . 50 PUSH EAX
0058925B . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
00589261 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589264 . 8841 04 MOV BYTE PTR DS:[ECX+4],AL
00589267 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058926D . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589273 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589279 . 52 PUSH EDX
0058927A . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589280 . 50 PUSH EAX
00589281 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00589287 . 51 PUSH ECX
00589288 . 6A 03 PUSH 3
0058928A . FFD7 CALL EDI
0058928C . 83C4 10 ADD ESP,10
0058928F . B8 02000000 MOV EAX,2
00589294 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
0058929A . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
005892A0 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
005892A3 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
005892A9 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005892B3 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
005892B9 . 50 PUSH EAX
005892BA . 6A 0B PUSH 0B
005892BC . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
005892C2 . 51 PUSH ECX
005892C3 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
005892C9 . 52 PUSH EDX
005892CA . FFD6 CALL ESI
005892CC . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005892D2 . 50 PUSH EAX
005892D3 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005892D9 . 51 PUSH ECX
005892DA . FFD3 CALL EBX
005892DC . 50 PUSH EAX
005892DD . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005892E3 . 52 PUSH EDX
005892E4 . E8 67BEFDFF CALL _UnPacke.00565150
005892E9 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
005892EF . 50 PUSH EAX
005892F0 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
005892F6 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
005892F9 . 8841 05 MOV BYTE PTR DS:[ECX+5],AL
005892FC . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589302 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589308 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058930E . 52 PUSH EDX
0058930F . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589315 . 50 PUSH EAX
00589316 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058931C . 51 PUSH ECX
0058931D . 6A 03 PUSH 3
0058931F . FFD7 CALL EDI
00589321 . 83C4 10 ADD ESP,10
00589324 . B8 02000000 MOV EAX,2
00589329 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
0058932F . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
00589335 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
00589338 . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
0058933E . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
00589348 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058934E . 50 PUSH EAX
0058934F . 6A 0D PUSH 0D
00589351 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
00589357 . 51 PUSH ECX
00589358 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
0058935E . 52 PUSH EDX
0058935F . FFD6 CALL ESI
00589361 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
00589367 . 50 PUSH EAX
00589368 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058936E . 51 PUSH ECX
0058936F . FFD3 CALL EBX
00589371 . 50 PUSH EAX
00589372 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589378 . 52 PUSH EDX
00589379 . E8 D2BDFDFF CALL _UnPacke.00565150
0058937E . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589384 . 50 PUSH EAX
00589385 . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
0058938B . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
0058938E . 8841 06 MOV BYTE PTR DS:[ECX+6],AL
00589391 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589397 . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
0058939D . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
005893A3 . 52 PUSH EDX
005893A4 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005893AA . 50 PUSH EAX
005893AB . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005893B1 . 51 PUSH ECX
005893B2 . 6A 03 PUSH 3
005893B4 . FFD7 CALL EDI
005893B6 . 83C4 10 ADD ESP,10
005893B9 . B8 02000000 MOV EAX,2
005893BE . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
005893C4 . 8985 4CFFFFFF MOV DWORD PTR SS:[EBP-B4],EAX
005893CA . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
005893CD . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
005893D3 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005893DD . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
005893E3 . 50 PUSH EAX
005893E4 . 6A 0F PUSH 0F
005893E6 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
005893EC . 51 PUSH ECX
005893ED . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
005893F3 . 52 PUSH EDX
005893F4 . FFD6 CALL ESI
005893F6 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
005893FC . 50 PUSH EAX
005893FD . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
00589403 . 51 PUSH ECX
00589404 . FFD3 CALL EBX
00589406 . 50 PUSH EAX
00589407 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0058940D . 52 PUSH EDX
0058940E . E8 3DBDFDFF CALL _UnPacke.00565150
00589413 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589419 . 50 PUSH EAX
0058941A . FF15 70124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaUI1Var>] ; MSVBVM60.__vbaUI1Var
00589420 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589423 . 8841 07 MOV BYTE PTR DS:[ECX+7],AL
00589426 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
0058942C . FF15 84124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00589432 . 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
00589438 . 52 PUSH EDX
00589439 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058943F . 50 PUSH EAX
00589440 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
00589446 . 51 PUSH ECX
00589447 . 6A 03 PUSH 3
00589449 . FFD7 CALL EDI
0058944B . 83C4 10 ADD ESP,10
0058944E . 8B55 C0 MOV EDX,DWORD PTR SS:[EBP-40]
00589451 . 52 PUSH EDX
00589452 . 8D85 6CFFFFFF LEA EAX,DWORD PTR SS:[EBP-94]
00589458 . 50 PUSH EAX
00589459 . FF15 14124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToAnsi>] ; MSVBVM60.__vbaStrToAnsi
0058945F . 50 PUSH EAX
00589460 . 6A 08 PUSH 8
00589462 . 8B4D B0 MOV ECX,DWORD PTR SS:[EBP-50]
00589465 . 51 PUSH ECX
00589466 . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
0058946C . 52 PUSH EDX
0058946D . 8D85 74FFFFFF LEA EAX,DWORD PTR SS:[EBP-8C]
00589473 . 50 PUSH EAX
00589474 . FFD3 CALL EBX
00589476 . 50 PUSH EAX
00589477 . 8D8D 70FFFFFF LEA ECX,DWORD PTR SS:[EBP-90]
0058947D . 51 PUSH ECX
0058947E . FF15 14124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToAnsi>] ; MSVBVM60.__vbaStrToAnsi
00589484 . 50 PUSH EAX
00589485 . E8 DE4FEAFF CALL _UnPacke.0042E468 //调用DLL 里面的解密函数
0058948A . 8985 98FEFFFF MOV DWORD PTR SS:[EBP-168],EAX
00589490 . FF15 6C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaSetSystemError>>; MSVBVM60.__vbaSetSystemError
00589496 . 8B95 6CFFFFFF MOV EDX,DWORD PTR SS:[EBP-94]
0058949C . 52 PUSH EDX
0058949D . 8D45 C0 LEA EAX,DWORD PTR SS:[EBP-40]
005894A0 . 50 PUSH EAX
005894A1 . FF15 60114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
005894A7 . 66:8B8D 98FEF>MOV CX,WORD PTR SS:[EBP-168]
005894AE . 66:890D 1CA06>MOV WORD PTR DS:[69A01C],CX
005894B5 . 8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94]
005894BB . 52 PUSH EDX
005894BC . 8D85 70FFFFFF LEA EAX,DWORD PTR SS:[EBP-90]
005894C2 . 50 PUSH EAX
005894C3 . 8D8D 74FFFFFF LEA ECX,DWORD PTR SS:[EBP-8C]
005894C9 . 51 PUSH ECX
005894CA . 6A 03 PUSH 3
005894CC . FF15 D4114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
005894D2 . 83C4 10 ADD ESP,10
005894D5 . 66:833D 1CA06>CMP WORD PTR DS:[69A01C],0
005894DD . 0F8D B5000000 JGE _UnPacke.00589598
005894E3 . B9 04000280 MOV ECX,80020004
005894E8 . 898D 24FFFFFF MOV DWORD PTR SS:[EBP-DC],ECX
005894EE . B8 0A000000 MOV EAX,0A
005894F3 . 8985 1CFFFFFF MOV DWORD PTR SS:[EBP-E4],EAX
005894F9 . 898D 34FFFFFF MOV DWORD PTR SS:[EBP-CC],ECX
005894FF . 8985 2CFFFFFF MOV DWORD PTR SS:[EBP-D4],EAX
00589505 . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],_UnPacke.00431428
0058950F . BB 08000000 MOV EBX,8
00589514 . 899D CCFEFFFF MOV DWORD PTR SS:[EBP-134],EBX
0058951A . 8D95 CCFEFFFF LEA EDX,DWORD PTR SS:[EBP-134]
00589520 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00589526 . 8B35 18124000 MOV ESI,DWORD PTR DS:[<&MSVBVM60.__vbaVarDup>] ; MSVBVM60.__vbaVarDup
0058952C . FFD6 CALL ESI ; <&MSVBVM60.__vbaVarDup>
0058952E . C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],_UnPacke.00431408
00589538 . 899D DCFEFFFF MOV DWORD PTR SS:[EBP-124],EBX
0058953E . 8D95 DCFEFFFF LEA EDX,DWORD PTR SS:[EBP-124]
00589544 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
0058954A . FFD6 CALL ESI
0058954C . 8D95 1CFFFFFF LEA EDX,DWORD PTR SS:[EBP-E4]
00589552 . 52 PUSH EDX
00589553 . 8D85 2CFFFFFF LEA EAX,DWORD PTR SS:[EBP-D4]
00589559 . 50 PUSH EAX
0058955A . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
00589560 . 51 PUSH ECX
00589561 . 6A 40 PUSH 40
00589563 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
00589569 . 52 PUSH EDX
0058956A . FF15 AC104000 CALL DWORD PTR DS:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
00589570 . 8D85 1CFFFFFF LEA EAX,DWORD PTR SS:[EBP-E4]
00589576 . 50 PUSH EAX
00589577 . 8D8D 2CFFFFFF LEA ECX,DWORD PTR SS:[EBP-D4]
0058957D . 51 PUSH ECX
0058957E . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589584 . 52 PUSH EDX
00589585 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058958B . 50 PUSH EAX
0058958C . 6A 04 PUSH 4
0058958E . FFD7 CALL EDI
00589590 . 83C4 14 ADD ESP,14
00589593 . E9 431A0000 JMP _UnPacke.0058AFDB
00589598 > C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],1
005895A2 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],2
005895AC . 8D4D C0 LEA ECX,DWORD PTR SS:[EBP-40]
005895AF . 898D E4FEFFFF MOV DWORD PTR SS:[EBP-11C],ECX
005895B5 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
005895BF . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
005895C5 . 52 PUSH EDX
005895C6 . 6A 07 PUSH 7
005895C8 . 8D85 DCFEFFFF LEA EAX,DWORD PTR SS:[EBP-124]
005895CE . 50 PUSH EAX
005895CF . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
005895D5 . 51 PUSH ECX
005895D6 . FFD6 CALL ESI
005895D8 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
005895DE . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
005895E1 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarMove>] ; MSVBVM60.__vbaVarMove
005895E7 . 8D8D 4CFFFFFF LEA ECX,DWORD PTR SS:[EBP-B4]
005895ED . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
005895F3 . C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],1
005895FD . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],2
00589607 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8]
0058960A . 83C2 40 ADD EDX,40
0058960D . 8995 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EDX
00589613 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],4008
0058961D . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
00589623 . 50 PUSH EAX
00589624 . 6A 01 PUSH 1
00589626 . 8D8D DCFEFFFF LEA ECX,DWORD PTR SS:[EBP-124]
0058962C . 51 PUSH ECX
0058962D . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589633 . 52 PUSH EDX
00589634 . FFD6 CALL ESI
00589636 . 8D85 3CFFFFFF LEA EAX,DWORD PTR SS:[EBP-C4]
0058963C . 50 PUSH EAX
0058963D . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
00589640 . 51 PUSH ECX
00589641 . FF15 F4114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarTstNe>] ; MSVBVM60.__vbaVarTstNe //关键比较函数
00589647 . 66:8985 8CFEF>MOV WORD PTR SS:[EBP-174],AX
0058964E . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00589654 . 52 PUSH EDX
00589655 . 8D85 4CFFFFFF LEA EAX,DWORD PTR SS:[EBP-B4]
0058965B . 50 PUSH EAX
0058965C . 6A 02 PUSH 2
0058965E . FFD7 CALL EDI
00589660 . 83C4 0C ADD ESP,0C
00589663 . 66:83BD 8CFEF>CMP WORD PTR SS:[EBP-174],0
0058966B 0F84 E4000000 JE _UnPacke.00589755 //关键跳转
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
赞赏
|
|
|---|---|
|
|
软件下载地址？
|
|
|
真有时间 呵呵
|
|
|
我搜了一下，原来论坛里面已经有了
http://bbs.pediy.com/showthread.php?t=62313 想找出注册算法 |
|
|
他的文章
- [求助]关于 imul 4259
- [讨论]关于恢复inline hook在不同操作系统版本和不同系统中的问题 9772
- [己解决]inline hook的恢复 9379
- [讨论]Shadow SSDT hook 5838
赞赏
雪币:
留言:
