BonziBuddy Leaked Source Code by NixButterPlay
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

1240 lines
40 KiB

  1. VERSION 5.00
  2. Begin VB.Form frmDialog
  3. Caption = "BonziBUDDY"
  4. ScaleMode = 1
  5. AutoRedraw = False
  6. FontTransparent = True
  7. BorderStyle = 3 'Fixed Dialog
  8. Icon = "frmDialog.frx":0000
  9. LinkTopic = "Form1"
  10. MaxButton = 0 'False
  11. MinButton = 0 'False
  12. ClientLeft = 4815
  13. ClientTop = 9540
  14. ClientWidth = 6030
  15. ClientHeight = 1350
  16. LockControls = -1 'True
  17. ShowInTaskbar = 0 'False
  18. StartUpPosition = 2 'CenterScreen
  19. Begin VB.CheckBox chkStopIt
  20. Caption = "Don't Prompt Me Again"
  21. Left = 210
  22. Top = 990
  23. Width = 2655
  24. Height = 225
  25. TabIndex = 3
  26. End
  27. Begin VB.CommandButton cmdNo
  28. Caption = "&No"
  29. Left = 4680
  30. Top = 600
  31. Width = 1215
  32. Height = 375
  33. TabIndex = 1
  34. End
  35. Begin VB.CommandButton cmdYes
  36. Caption = "&Yes"
  37. Left = 4680
  38. Top = 120
  39. Width = 1215
  40. Height = 375
  41. TabIndex = 0
  42. End
  43. Begin VB.Image Image1
  44. Picture = "frmDialog.frx":08CA
  45. Left = 120
  46. Top = 240
  47. Width = 480
  48. Height = 480
  49. End
  50. Begin VB.Label lblPrompt
  51. Left = 750
  52. Top = 180
  53. Width = 3765
  54. Height = 675
  55. TabIndex = 2
  56. AutoSize = -1 'True
  57. WordWrap = -1 'True
  58. End
  59. End
  60. Attribute VB_Name = "frmDialog"
  61. Private Sub cmdNo_Click() '6C3170
  62. loc_006C3170: push ebp
  63. loc_006C3171: mov ebp, esp
  64. loc_006C3173: sub esp, 00000018h
  65. loc_006C3176: push 00412856h ; __vbaExceptHandler
  66. loc_006C317B: mov eax, fs:[00000000h]
  67. loc_006C3181: push eax
  68. loc_006C3182: mov fs:[00000000h], esp
  69. loc_006C3189: mov eax, 00000054h
  70. loc_006C318E: call 00412850h ; __vbaChkstk
  71. loc_006C3193: push ebx
  72. loc_006C3194: push esi
  73. loc_006C3195: push edi
  74. loc_006C3196: mov var_18, esp
  75. loc_006C3199: mov var_14, 0040CF00h ; Chr(37)
  76. loc_006C31A0: mov eax, Me
  77. loc_006C31A3: and eax, 00000001h
  78. loc_006C31A6: mov var_10, eax
  79. loc_006C31A9: mov ecx, Me
  80. loc_006C31AC: and ecx, FFFFFFFEh
  81. loc_006C31AF: mov Me, ecx
  82. loc_006C31B2: mov var_C, 00000000h
  83. loc_006C31B9: mov edx, Me
  84. loc_006C31BC: mov eax, [edx]
  85. loc_006C31BE: mov ecx, Me
  86. loc_006C31C1: push ecx
  87. loc_006C31C2: call [eax+00000004h]
  88. loc_006C31C5: mov var_4, 00000001h
  89. loc_006C31CC: mov var_4, 00000002h
  90. loc_006C31D3: push FFFFFFFFh
  91. loc_006C31D5: call [00401124h] ; __vbaOnError
  92. loc_006C31DB: mov var_4, 00000003h
  93. loc_006C31E2: lea edx, var_28
  94. loc_006C31E5: push edx
  95. loc_006C31E6: push 00448380h ; "Decline"
  96. loc_006C31EB: mov eax, [0073A08Ch]
  97. loc_006C31F0: mov ecx, [eax]
  98. loc_006C31F2: mov edx, [0073A08Ch]
  99. loc_006C31F8: push edx
  100. loc_006C31F9: call [ecx+00000064h]
  101. loc_006C31FC: fnclex
  102. loc_006C31FE: mov var_4C, eax
  103. loc_006C3201: cmp var_4C, 00000000h
  104. loc_006C3205: jge 006C3223h
  105. loc_006C3207: push 00000064h
  106. loc_006C3209: push 004419ACh
  107. loc_006C320E: mov eax, [0073A08Ch]
  108. loc_006C3213: push eax
  109. loc_006C3214: mov ecx, var_4C
  110. loc_006C3217: push ecx
  111. loc_006C3218: call [004010CCh] ; __vbaHresultCheckObj
  112. loc_006C321E: mov var_68, eax
  113. loc_006C3221: jmp 006C322Ah
  114. loc_006C3223: mov var_68, 00000000h
  115. loc_006C322A: lea ecx, var_28
  116. loc_006C322D: call [0040142Ch] ; __vbaFreeObj
  117. loc_006C3233: mov var_4, 00000004h
  118. loc_006C323A: mov var_40, 80020004h
  119. loc_006C3241: mov var_48, 0000000Ah
  120. loc_006C3248: push 00455514h ; "OK "
  121. loc_006C324D: mov edx, [0073A040h]
  122. loc_006C3253: push edx
  123. loc_006C3254: call [00401098h] ; __vbaStrCat
  124. loc_006C325A: mov edx, eax
  125. loc_006C325C: lea ecx, var_24
  126. loc_006C325F: call [004013C0h] ; __vbaStrMove
  127. loc_006C3265: push eax
  128. loc_006C3266: push 0045ED28h ; ", if you're sure."
  129. loc_006C326B: call [00401098h] ; __vbaStrCat
  130. loc_006C3271: mov var_30, eax
  131. loc_006C3274: mov var_38, 00000008h
  132. loc_006C327B: lea eax, var_28
  133. loc_006C327E: push eax
  134. loc_006C327F: mov eax, 00000010h
  135. loc_006C3284: call 00412850h ; __vbaChkstk
  136. loc_006C3289: mov ecx, esp
  137. loc_006C328B: mov edx, var_48
  138. loc_006C328E: mov [ecx], edx
  139. loc_006C3290: mov eax, var_44
  140. loc_006C3293: mov [ecx+00000004h], eax
  141. loc_006C3296: mov edx, var_40
  142. loc_006C3299: mov [ecx+00000008h], edx
  143. loc_006C329C: mov eax, var_3C
  144. loc_006C329F: mov [ecx+0000000Ch], eax
  145. loc_006C32A2: mov eax, 00000010h
  146. loc_006C32A7: call 00412850h ; __vbaChkstk
  147. loc_006C32AC: mov ecx, esp
  148. loc_006C32AE: mov edx, var_38
  149. loc_006C32B1: mov [ecx], edx
  150. loc_006C32B3: mov eax, var_34
  151. loc_006C32B6: mov [ecx+00000004h], eax
  152. loc_006C32B9: mov edx, var_30
  153. loc_006C32BC: mov [ecx+00000008h], edx
  154. loc_006C32BF: mov eax, var_2C
  155. loc_006C32C2: mov [ecx+0000000Ch], eax
  156. loc_006C32C5: mov ecx, [0073A08Ch]
  157. loc_006C32CB: mov edx, [ecx]
  158. loc_006C32CD: mov eax, [0073A08Ch]
  159. loc_006C32D2: push eax
  160. loc_006C32D3: call [edx+00000078h]
  161. loc_006C32D6: fnclex
  162. loc_006C32D8: mov var_4C, eax
  163. loc_006C32DB: cmp var_4C, 00000000h
  164. loc_006C32DF: jge 006C32FEh
  165. loc_006C32E1: push 00000078h
  166. loc_006C32E3: push 004419ACh
  167. loc_006C32E8: mov ecx, [0073A08Ch]
  168. loc_006C32EE: push ecx
  169. loc_006C32EF: mov edx, var_4C
  170. loc_006C32F2: push edx
  171. loc_006C32F3: call [004010CCh] ; __vbaHresultCheckObj
  172. loc_006C32F9: mov var_6C, eax
  173. loc_006C32FC: jmp 006C3305h
  174. loc_006C32FE: mov var_6C, 00000000h
  175. loc_006C3305: lea ecx, var_24
  176. loc_006C3308: call [00401430h] ; __vbaFreeStr
  177. loc_006C330E: lea ecx, var_28
  178. loc_006C3311: call [0040142Ch] ; __vbaFreeObj
  179. loc_006C3317: lea ecx, var_38
  180. loc_006C331A: call [00401030h] ; __vbaFreeVar
  181. loc_006C3320: mov var_4, 00000005h
  182. loc_006C3327: mov eax, Me
  183. loc_006C332A: mov ecx, [eax]
  184. loc_006C332C: mov edx, Me
  185. loc_006C332F: push edx
  186. loc_006C3330: call [ecx+00000704h]
  187. loc_006C3336: mov var_4, 00000006h
  188. loc_006C333D: cmp [0073C818h], 00000000h
  189. loc_006C3344: jnz 006C335Fh
  190. loc_006C3346: push 0073C818h
  191. loc_006C334B: push 00441F00h
  192. loc_006C3350: call [004012FCh] ; __vbaNew2
  193. loc_006C3356: mov var_70, 0073C818h
  194. loc_006C335D: jmp 006C3366h
  195. loc_006C335F: mov var_70, 0073C818h
  196. loc_006C3366: mov eax, var_70
  197. loc_006C3369: mov ecx, [eax]
  198. loc_006C336B: mov var_4C, ecx
  199. loc_006C336E: mov edx, Me
  200. loc_006C3371: push edx
  201. loc_006C3372: lea eax, var_28
  202. loc_006C3375: push eax
  203. loc_006C3376: call [00401130h] ; __vbaObjSetAddref
  204. loc_006C337C: push eax
  205. loc_006C337D: mov ecx, var_4C
  206. loc_006C3380: mov edx, [ecx]
  207. loc_006C3382: mov eax, var_4C
  208. loc_006C3385: push eax
  209. loc_006C3386: call [edx+00000010h]
  210. loc_006C3389: fnclex
  211. loc_006C338B: mov var_50, eax
  212. loc_006C338E: cmp var_50, 00000000h
  213. loc_006C3392: jge 006C33AEh
  214. loc_006C3394: push 00000010h
  215. loc_006C3396: push 00441EF0h
  216. loc_006C339B: mov ecx, var_4C
  217. loc_006C339E: push ecx
  218. loc_006C339F: mov edx, var_50
  219. loc_006C33A2: push edx
  220. loc_006C33A3: call [004010CCh] ; __vbaHresultCheckObj
  221. loc_006C33A9: mov var_74, eax
  222. loc_006C33AC: jmp 006C33B5h
  223. loc_006C33AE: mov var_74, 00000000h
  224. loc_006C33B5: lea ecx, var_28
  225. loc_006C33B8: call [0040142Ch] ; __vbaFreeObj
  226. loc_006C33BE: mov var_10, 00000000h
  227. loc_006C33C5: push 006C33E9h
  228. loc_006C33CA: jmp 006C33E8h
  229. loc_006C33CC: lea ecx, var_24
  230. loc_006C33CF: call [00401430h] ; __vbaFreeStr
  231. loc_006C33D5: lea ecx, var_28
  232. loc_006C33D8: call [0040142Ch] ; __vbaFreeObj
  233. loc_006C33DE: lea ecx, var_38
  234. loc_006C33E1: call [00401030h] ; __vbaFreeVar
  235. loc_006C33E7: ret
  236. loc_006C33E8: ret
  237. loc_006C33E9: mov eax, Me
  238. loc_006C33EC: mov ecx, [eax]
  239. loc_006C33EE: mov edx, Me
  240. loc_006C33F1: push edx
  241. loc_006C33F2: call [ecx+00000008h]
  242. loc_006C33F5: mov eax, var_10
  243. loc_006C33F8: mov ecx, var_20
  244. loc_006C33FB: mov fs:[00000000h], ecx
  245. loc_006C3402: pop edi
  246. loc_006C3403: pop esi
  247. loc_006C3404: pop ebx
  248. loc_006C3405: mov esp, ebp
  249. loc_006C3407: pop ebp
  250. loc_006C3408: retn 0004h
  251. End Sub
  252. Private Sub cmdYes_Click() '6C3410
  253. loc_006C3410: push ebp
  254. loc_006C3411: mov ebp, esp
  255. loc_006C3413: sub esp, 00000018h
  256. loc_006C3416: push 00412856h ; __vbaExceptHandler
  257. loc_006C341B: mov eax, fs:[00000000h]
  258. loc_006C3421: push eax
  259. loc_006C3422: mov fs:[00000000h], esp
  260. loc_006C3429: mov eax, 0000009Ch
  261. loc_006C342E: call 00412850h ; __vbaChkstk
  262. loc_006C3433: push ebx
  263. loc_006C3434: push esi
  264. loc_006C3435: push edi
  265. loc_006C3436: mov var_18, esp
  266. loc_006C3439: mov var_14, 0040CF40h ; Chr(37)
  267. loc_006C3440: mov eax, Me
  268. loc_006C3443: and eax, 00000001h
  269. loc_006C3446: mov var_10, eax
  270. loc_006C3449: mov ecx, Me
  271. loc_006C344C: and ecx, FFFFFFFEh
  272. loc_006C344F: mov Me, ecx
  273. loc_006C3452: mov var_C, 00000000h
  274. loc_006C3459: mov edx, Me
  275. loc_006C345C: mov eax, [edx]
  276. loc_006C345E: mov ecx, Me
  277. loc_006C3461: push ecx
  278. loc_006C3462: call [eax+00000004h]
  279. loc_006C3465: mov var_4, 00000001h
  280. loc_006C346C: mov var_4, 00000002h
  281. loc_006C3473: push FFFFFFFFh
  282. loc_006C3475: call [00401124h] ; __vbaOnError
  283. loc_006C347B: mov var_4, 00000003h
  284. loc_006C3482: cmp [0073C818h], 00000000h
  285. loc_006C3489: jnz 006C34A7h
  286. loc_006C348B: push 0073C818h
  287. loc_006C3490: push 00441F00h
  288. loc_006C3495: call [004012FCh] ; __vbaNew2
  289. loc_006C349B: mov var_88, 0073C818h
  290. loc_006C34A5: jmp 006C34B1h
  291. loc_006C34A7: mov var_88, 0073C818h
  292. loc_006C34B1: mov edx, var_88
  293. loc_006C34B7: mov eax, [edx]
  294. loc_006C34B9: mov var_60, eax
  295. loc_006C34BC: lea ecx, var_38
  296. loc_006C34BF: push ecx
  297. loc_006C34C0: mov edx, var_60
  298. loc_006C34C3: mov eax, [edx]
  299. loc_006C34C5: mov ecx, var_60
  300. loc_006C34C8: push ecx
  301. loc_006C34C9: call [eax+00000018h]
  302. loc_006C34CC: fnclex
  303. loc_006C34CE: mov var_64, eax
  304. loc_006C34D1: cmp var_64, 00000000h
  305. loc_006C34D5: jge 006C34F4h
  306. loc_006C34D7: push 00000018h
  307. loc_006C34D9: push 00441EF0h
  308. loc_006C34DE: mov edx, var_60
  309. loc_006C34E1: push edx
  310. loc_006C34E2: mov eax, var_64
  311. loc_006C34E5: push eax
  312. loc_006C34E6: call [004010CCh] ; __vbaHresultCheckObj
  313. loc_006C34EC: mov var_8C, eax
  314. loc_006C34F2: jmp 006C34FEh
  315. loc_006C34F4: mov var_8C, 00000000h
  316. loc_006C34FE: mov ecx, var_38
  317. loc_006C3501: mov var_68, ecx
  318. loc_006C3504: push 0000000Bh
  319. loc_006C3506: mov edx, var_68
  320. loc_006C3509: mov eax, [edx]
  321. loc_006C350B: mov ecx, var_68
  322. loc_006C350E: push ecx
  323. loc_006C350F: call [eax+0000007Ch]
  324. loc_006C3512: fnclex
  325. loc_006C3514: mov var_6C, eax
  326. loc_006C3517: cmp var_6C, 00000000h
  327. loc_006C351B: jge 006C353Ah
  328. loc_006C351D: push 0000007Ch
  329. loc_006C351F: push 00447BE8h
  330. loc_006C3524: mov edx, var_68
  331. loc_006C3527: push edx
  332. loc_006C3528: mov eax, var_6C
  333. loc_006C352B: push eax
  334. loc_006C352C: call [004010CCh] ; __vbaHresultCheckObj
  335. loc_006C3532: mov var_90, eax
  336. loc_006C3538: jmp 006C3544h
  337. loc_006C353A: mov var_90, 00000000h
  338. loc_006C3544: lea ecx, var_38
  339. loc_006C3547: call [0040142Ch] ; __vbaFreeObj
  340. loc_006C354D: mov var_4, 00000004h
  341. loc_006C3554: lea ecx, var_5C
  342. loc_006C3557: push ecx
  343. loc_006C3558: mov edx, Me
  344. loc_006C355B: mov eax, [edx]
  345. loc_006C355D: mov ecx, Me
  346. loc_006C3560: push ecx
  347. loc_006C3561: call [eax+00000058h]
  348. loc_006C3564: fnclex
  349. loc_006C3566: mov var_60, eax
  350. loc_006C3569: cmp var_60, 00000000h
  351. loc_006C356D: jge 006C358Ch
  352. loc_006C356F: push 00000058h
  353. loc_006C3571: push 00456654h
  354. loc_006C3576: mov edx, Me
  355. loc_006C3579: push edx
  356. loc_006C357A: mov eax, var_60
  357. loc_006C357D: push eax
  358. loc_006C357E: call [004010CCh] ; __vbaHresultCheckObj
  359. loc_006C3584: mov var_94, eax
  360. loc_006C358A: jmp 006C3596h
  361. loc_006C358C: mov var_94, 00000000h
  362. loc_006C3596: cmp [0073C818h], 00000000h
  363. loc_006C359D: jnz 006C35BBh
  364. loc_006C359F: push 0073C818h
  365. loc_006C35A4: push 00441F00h
  366. loc_006C35A9: call [004012FCh] ; __vbaNew2
  367. loc_006C35AF: mov var_98, 0073C818h
  368. loc_006C35B9: jmp 006C35C5h
  369. loc_006C35BB: mov var_98, 0073C818h
  370. loc_006C35C5: mov ecx, var_98
  371. loc_006C35CB: mov edx, [ecx]
  372. loc_006C35CD: mov var_64, edx
  373. loc_006C35D0: lea eax, var_38
  374. loc_006C35D3: push eax
  375. loc_006C35D4: mov ecx, var_64
  376. loc_006C35D7: mov edx, [ecx]
  377. loc_006C35D9: mov eax, var_64
  378. loc_006C35DC: push eax
  379. loc_006C35DD: call [edx+00000014h]
  380. loc_006C35E0: fnclex
  381. loc_006C35E2: mov var_68, eax
  382. loc_006C35E5: cmp var_68, 00000000h
  383. loc_006C35E9: jge 006C3608h
  384. loc_006C35EB: push 00000014h
  385. loc_006C35ED: push 00441EF0h
  386. loc_006C35F2: mov ecx, var_64
  387. loc_006C35F5: push ecx
  388. loc_006C35F6: mov edx, var_68
  389. loc_006C35F9: push edx
  390. loc_006C35FA: call [004010CCh] ; __vbaHresultCheckObj
  391. loc_006C3600: mov var_9C, eax
  392. loc_006C3606: jmp 006C3612h
  393. loc_006C3608: mov var_9C, 00000000h
  394. loc_006C3612: mov eax, var_38
  395. loc_006C3615: mov var_6C, eax
  396. loc_006C3618: lea ecx, var_24
  397. loc_006C361B: push ecx
  398. loc_006C361C: mov edx, var_6C
  399. loc_006C361F: mov eax, [edx]
  400. loc_006C3621: mov ecx, var_6C
  401. loc_006C3624: push ecx
  402. loc_006C3625: call [eax+00000050h]
  403. loc_006C3628: fnclex
  404. loc_006C362A: mov var_70, eax
  405. loc_006C362D: cmp var_70, 00000000h
  406. loc_006C3631: jge 006C3650h
  407. loc_006C3633: push 00000050h
  408. loc_006C3635: push 004437B4h
  409. loc_006C363A: mov edx, var_6C
  410. loc_006C363D: push edx
  411. loc_006C363E: mov eax, var_70
  412. loc_006C3641: push eax
  413. loc_006C3642: call [004010CCh] ; __vbaHresultCheckObj
  414. loc_006C3648: mov var_A0, eax
  415. loc_006C364E: jmp 006C365Ah
  416. loc_006C3650: mov var_A0, 00000000h
  417. loc_006C365A: push 00000001h
  418. loc_006C365C: push 00000000h
  419. loc_006C365E: push 00446714h ; "/s /v iehelpermiddleman.dll"
  420. loc_006C3663: lea ecx, var_34
  421. loc_006C3666: push ecx
  422. loc_006C3667: call [00401370h] ; __vbaStrToAnsi
  423. loc_006C366D: push eax
  424. loc_006C366E: mov edx, var_24
  425. loc_006C3671: push edx
  426. loc_006C3672: push 004466B8h ; "\regsvr32.exe"
  427. loc_006C3677: call [00401098h] ; __vbaStrCat
  428. loc_006C367D: mov edx, eax
  429. loc_006C367F: lea ecx, var_2C
  430. loc_006C3682: call [004013C0h] ; __vbaStrMove
  431. loc_006C3688: push eax
  432. loc_006C3689: lea eax, var_30
  433. loc_006C368C: push eax
  434. loc_006C368D: call [00401370h] ; __vbaStrToAnsi
  435. loc_006C3693: push eax
  436. loc_006C3694: push 00444DE4h ; "open"
  437. loc_006C3699: lea ecx, var_28
  438. loc_006C369C: push ecx
  439. loc_006C369D: call [00401370h] ; __vbaStrToAnsi
  440. loc_006C36A3: push eax
  441. loc_006C36A4: mov edx, var_5C
  442. loc_006C36A7: push edx
  443. loc_006C36A8: ShellExecute(%x1v, %x2v, %x3v, %x4v, %x5v, %x6v)
  444. loc_006C36AD: call [004010BCh] ; __vbaSetSystemError
  445. loc_006C36B3: lea eax, var_34
  446. loc_006C36B6: push eax
  447. loc_006C36B7: lea ecx, var_30
  448. loc_006C36BA: push ecx
  449. loc_006C36BB: lea edx, var_2C
  450. loc_006C36BE: push edx
  451. loc_006C36BF: lea eax, var_28
  452. loc_006C36C2: push eax
  453. loc_006C36C3: lea ecx, var_24
  454. loc_006C36C6: push ecx
  455. loc_006C36C7: push 00000005h
  456. loc_006C36C9: call [00401324h] ; __vbaFreeStrList
  457. loc_006C36CF: add esp, 00000018h
  458. loc_006C36D2: lea ecx, var_38
  459. loc_006C36D5: call [0040142Ch] ; __vbaFreeObj
  460. loc_006C36DB: mov var_4, 00000005h
  461. loc_006C36E2: push 004466ACh ; "YES"
  462. loc_006C36E7: push 00445C00h ; "Integrate"
  463. loc_006C36EC: push 0043C260h ; "Downloader"
  464. loc_006C36F1: push 0043B010h ; "BONZIBUDDY"
  465. loc_006C36F6: call [00401010h] ; rtcSaveSetting
  466. loc_006C36FC: mov var_4, 00000006h
  467. loc_006C3703: lea edx, var_38
  468. loc_006C3706: push edx
  469. loc_006C3707: push 004519CCh ; "Acknowledge"
  470. loc_006C370C: mov eax, [0073A08Ch]
  471. loc_006C3711: mov ecx, [eax]
  472. loc_006C3713: mov edx, [0073A08Ch]
  473. loc_006C3719: push edx
  474. loc_006C371A: call [ecx+00000064h]
  475. loc_006C371D: fnclex
  476. loc_006C371F: mov var_60, eax
  477. loc_006C3722: cmp var_60, 00000000h
  478. loc_006C3726: jge 006C3747h
  479. loc_006C3728: push 00000064h
  480. loc_006C372A: push 004419ACh
  481. loc_006C372F: mov eax, [0073A08Ch]
  482. loc_006C3734: push eax
  483. loc_006C3735: mov ecx, var_60
  484. loc_006C3738: push ecx
  485. loc_006C3739: call [004010CCh] ; __vbaHresultCheckObj
  486. loc_006C373F: mov var_A4, eax
  487. loc_006C3745: jmp 006C3751h
  488. loc_006C3747: mov var_A4, 00000000h
  489. loc_006C3751: lea ecx, var_38
  490. loc_006C3754: call [0040142Ch] ; __vbaFreeObj
  491. loc_006C375A: mov var_4, 00000007h
  492. loc_006C3761: mov var_50, 80020004h
  493. loc_006C3768: mov var_58, 0000000Ah
  494. loc_006C376F: mov var_40, 0046D26Ch ; "OK! It's done! I will now automatically handle your Internet downloads for you!"
  495. loc_006C3776: mov var_48, 00000008h
  496. loc_006C377D: lea edx, var_38
  497. loc_006C3780: push edx
  498. loc_006C3781: mov eax, 00000010h
  499. loc_006C3786: call 00412850h ; __vbaChkstk
  500. loc_006C378B: mov eax, esp
  501. loc_006C378D: mov ecx, var_58
  502. loc_006C3790: mov [eax], ecx
  503. loc_006C3792: mov edx, var_54
  504. loc_006C3795: mov [eax+00000004h], edx
  505. loc_006C3798: mov ecx, var_50
  506. loc_006C379B: mov [eax+00000008h], ecx
  507. loc_006C379E: mov edx, var_4C
  508. loc_006C37A1: mov [eax+0000000Ch], edx
  509. loc_006C37A4: mov eax, 00000010h
  510. loc_006C37A9: call 00412850h ; __vbaChkstk
  511. loc_006C37AE: mov eax, esp
  512. loc_006C37B0: mov ecx, var_48
  513. loc_006C37B3: mov [eax], ecx
  514. loc_006C37B5: mov edx, var_44
  515. loc_006C37B8: mov [eax+00000004h], edx
  516. loc_006C37BB: mov ecx, var_40
  517. loc_006C37BE: mov [eax+00000008h], ecx
  518. loc_006C37C1: mov edx, var_3C
  519. loc_006C37C4: mov [eax+0000000Ch], edx
  520. loc_006C37C7: mov eax, [0073A08Ch]
  521. loc_006C37CC: mov ecx, [eax]
  522. loc_006C37CE: mov edx, [0073A08Ch]
  523. loc_006C37D4: push edx
  524. loc_006C37D5: call [ecx+00000078h]
  525. loc_006C37D8: fnclex
  526. loc_006C37DA: mov var_60, eax
  527. loc_006C37DD: cmp var_60, 00000000h
  528. loc_006C37E1: jge 006C3802h
  529. loc_006C37E3: push 00000078h
  530. loc_006C37E5: push 004419ACh
  531. loc_006C37EA: mov eax, [0073A08Ch]
  532. loc_006C37EF: push eax
  533. loc_006C37F0: mov ecx, var_60
  534. loc_006C37F3: push ecx
  535. loc_006C37F4: call [004010CCh] ; __vbaHresultCheckObj
  536. loc_006C37FA: mov var_A8, eax
  537. loc_006C3800: jmp 006C380Ch
  538. loc_006C3802: mov var_A8, 00000000h
  539. loc_006C380C: lea ecx, var_38
  540. loc_006C380F: call [0040142Ch] ; __vbaFreeObj
  541. loc_006C3815: mov var_4, 00000008h
  542. loc_006C381C: cmp [0073C818h], 00000000h
  543. loc_006C3823: jnz 006C3841h
  544. loc_006C3825: push 0073C818h
  545. loc_006C382A: push 00441F00h
  546. loc_006C382F: call [004012FCh] ; __vbaNew2
  547. loc_006C3835: mov var_AC, 0073C818h
  548. loc_006C383F: jmp 006C384Bh
  549. loc_006C3841: mov var_AC, 0073C818h
  550. loc_006C384B: mov edx, var_AC
  551. loc_006C3851: mov eax, [edx]
  552. loc_006C3853: mov var_60, eax
  553. loc_006C3856: lea ecx, var_38
  554. loc_006C3859: push ecx
  555. loc_006C385A: mov edx, var_60
  556. loc_006C385D: mov eax, [edx]
  557. loc_006C385F: mov ecx, var_60
  558. loc_006C3862: push ecx
  559. loc_006C3863: call [eax+00000018h]
  560. loc_006C3866: fnclex
  561. loc_006C3868: mov var_64, eax
  562. loc_006C386B: cmp var_64, 00000000h
  563. loc_006C386F: jge 006C388Eh
  564. loc_006C3871: push 00000018h
  565. loc_006C3873: push 00441EF0h
  566. loc_006C3878: mov edx, var_60
  567. loc_006C387B: push edx
  568. loc_006C387C: mov eax, var_64
  569. loc_006C387F: push eax
  570. loc_006C3880: call [004010CCh] ; __vbaHresultCheckObj
  571. loc_006C3886: mov var_B0, eax
  572. loc_006C388C: jmp 006C3898h
  573. loc_006C388E: mov var_B0, 00000000h
  574. loc_006C3898: mov ecx, var_38
  575. loc_006C389B: mov var_68, ecx
  576. loc_006C389E: push 00000000h
  577. loc_006C38A0: mov edx, var_68
  578. loc_006C38A3: mov eax, [edx]
  579. loc_006C38A5: mov ecx, var_68
  580. loc_006C38A8: push ecx
  581. loc_006C38A9: call [eax+0000007Ch]
  582. loc_006C38AC: fnclex
  583. loc_006C38AE: mov var_6C, eax
  584. loc_006C38B1: cmp var_6C, 00000000h
  585. loc_006C38B5: jge 006C38D4h
  586. loc_006C38B7: push 0000007Ch
  587. loc_006C38B9: push 00447BE8h
  588. loc_006C38BE: mov edx, var_68
  589. loc_006C38C1: push edx
  590. loc_006C38C2: mov eax, var_6C
  591. loc_006C38C5: push eax
  592. loc_006C38C6: call [004010CCh] ; __vbaHresultCheckObj
  593. loc_006C38CC: mov var_B4, eax
  594. loc_006C38D2: jmp 006C38DEh
  595. loc_006C38D4: mov var_B4, 00000000h
  596. loc_006C38DE: lea ecx, var_38
  597. loc_006C38E1: call [0040142Ch] ; __vbaFreeObj
  598. loc_006C38E7: mov var_4, 00000009h
  599. loc_006C38EE: mov ecx, Me
  600. loc_006C38F1: mov edx, [ecx]
  601. loc_006C38F3: mov eax, Me
  602. loc_006C38F6: push eax
  603. loc_006C38F7: call [edx+00000704h]
  604. loc_006C38FD: mov var_4, 0000000Ah
  605. loc_006C3904: cmp [0073C818h], 00000000h
  606. loc_006C390B: jnz 006C3929h
  607. loc_006C390D: push 0073C818h
  608. loc_006C3912: push 00441F00h
  609. loc_006C3917: call [004012FCh] ; __vbaNew2
  610. loc_006C391D: mov var_B8, 0073C818h
  611. loc_006C3927: jmp 006C3933h
  612. loc_006C3929: mov var_B8, 0073C818h
  613. loc_006C3933: mov ecx, var_B8
  614. loc_006C3939: mov edx, [ecx]
  615. loc_006C393B: mov var_60, edx
  616. loc_006C393E: mov eax, Me
  617. loc_006C3941: push eax
  618. loc_006C3942: lea ecx, var_38
  619. loc_006C3945: push ecx
  620. loc_006C3946: call [00401130h] ; __vbaObjSetAddref
  621. loc_006C394C: push eax
  622. loc_006C394D: mov edx, var_60
  623. loc_006C3950: mov eax, [edx]
  624. loc_006C3952: mov ecx, var_60
  625. loc_006C3955: push ecx
  626. loc_006C3956: call [eax+00000010h]
  627. loc_006C3959: fnclex
  628. loc_006C395B: mov var_64, eax
  629. loc_006C395E: cmp var_64, 00000000h
  630. loc_006C3962: jge 006C3981h
  631. loc_006C3964: push 00000010h
  632. loc_006C3966: push 00441EF0h
  633. loc_006C396B: mov edx, var_60
  634. loc_006C396E: push edx
  635. loc_006C396F: mov eax, var_64
  636. loc_006C3972: push eax
  637. loc_006C3973: call [004010CCh] ; __vbaHresultCheckObj
  638. loc_006C3979: mov var_BC, eax
  639. loc_006C397F: jmp 006C398Bh
  640. loc_006C3981: mov var_BC, 00000000h
  641. loc_006C398B: lea ecx, var_38
  642. loc_006C398E: call [0040142Ch] ; __vbaFreeObj
  643. loc_006C3994: mov var_10, 00000000h
  644. loc_006C399B: push 006C39CCh
  645. loc_006C39A0: jmp 006C39CBh
  646. loc_006C39A2: lea ecx, var_34
  647. loc_006C39A5: push ecx
  648. loc_006C39A6: lea edx, var_30
  649. loc_006C39A9: push edx
  650. loc_006C39AA: lea eax, var_2C
  651. loc_006C39AD: push eax
  652. loc_006C39AE: lea ecx, var_28
  653. loc_006C39B1: push ecx
  654. loc_006C39B2: lea edx, var_24
  655. loc_006C39B5: push edx
  656. loc_006C39B6: push 00000005h
  657. loc_006C39B8: call [00401324h] ; __vbaFreeStrList
  658. loc_006C39BE: add esp, 00000018h
  659. loc_006C39C1: lea ecx, var_38
  660. loc_006C39C4: call [0040142Ch] ; __vbaFreeObj
  661. loc_006C39CA: ret
  662. loc_006C39CB: ret
  663. loc_006C39CC: mov eax, Me
  664. loc_006C39CF: mov ecx, [eax]
  665. loc_006C39D1: mov edx, Me
  666. loc_006C39D4: push edx
  667. loc_006C39D5: call [ecx+00000008h]
  668. loc_006C39D8: mov eax, var_10
  669. loc_006C39DB: mov ecx, var_20
  670. loc_006C39DE: mov fs:[00000000h], ecx
  671. loc_006C39E5: pop edi
  672. loc_006C39E6: pop esi
  673. loc_006C39E7: pop ebx
  674. loc_006C39E8: mov esp, ebp
  675. loc_006C39EA: pop ebp
  676. loc_006C39EB: retn 0004h
  677. End Sub
  678. Public Function DisplayDialog(strPrompt, strCaption, udtDialogType) '6C2F60
  679. loc_006C2F60: push ebp
  680. loc_006C2F61: mov ebp, esp
  681. loc_006C2F63: sub esp, 0000000Ch
  682. loc_006C2F66: push 00412856h ; __vbaExceptHandler
  683. loc_006C2F6B: mov eax, fs:[00000000h]
  684. loc_006C2F71: push eax
  685. loc_006C2F72: mov fs:[00000000h], esp
  686. loc_006C2F79: sub esp, 00000074h
  687. loc_006C2F7C: push ebx
  688. loc_006C2F7D: push esi
  689. loc_006C2F7E: push edi
  690. loc_006C2F7F: mov var_C, esp
  691. loc_006C2F82: mov var_8, 0040CEF0h
  692. loc_006C2F89: xor ebx, ebx
  693. loc_006C2F8B: mov var_4, ebx
  694. loc_006C2F8E: mov esi, Me
  695. loc_006C2F91: push esi
  696. loc_006C2F92: mov eax, [esi]
  697. loc_006C2F94: call [eax+00000004h]
  698. loc_006C2F97: mov ecx, arg_18
  699. loc_006C2F9A: push esi
  700. loc_006C2F9B: mov var_24, ebx
  701. loc_006C2F9E: mov var_28, ebx
  702. loc_006C2FA1: mov [ecx], ebx
  703. loc_006C2FA3: mov edx, [esi]
  704. loc_006C2FA5: mov var_38, ebx
  705. loc_006C2FA8: mov var_48, ebx
  706. loc_006C2FAB: mov var_58, ebx
  707. loc_006C2FAE: mov var_68, ebx
  708. loc_006C2FB1: mov var_78, ebx
  709. loc_006C2FB4: call [edx+0000030Ch]
  710. loc_006C2FBA: push eax
  711. loc_006C2FBB: lea eax, var_28
  712. loc_006C2FBE: push eax
  713. loc_006C2FBF: call [00401128h] ; __vbaObjSet
  714. loc_006C2FC5: mov edx, strPrompt
  715. loc_006C2FC8: mov edi, eax
  716. loc_006C2FCA: mov eax, [edx]
  717. loc_006C2FCC: mov ecx, [edi]
  718. loc_006C2FCE: push eax
  719. loc_006C2FCF: push edi
  720. loc_006C2FD0: call [ecx+00000054h]
  721. loc_006C2FD3: cmp eax, ebx
  722. loc_006C2FD5: fnclex
  723. loc_006C2FD7: jge 006C2FECh
  724. loc_006C2FD9: push 00000054h
  725. loc_006C2FDB: push 00441988h
  726. loc_006C2FE0: push edi
  727. loc_006C2FE1: mov edi, [004010CCh] ; __vbaHresultCheckObj
  728. loc_006C2FE7: push eax
  729. loc_006C2FE8: call edi
  730. loc_006C2FEA: jmp 006C2FF2h
  731. loc_006C2FEC: mov edi, [004010CCh] ; __vbaHresultCheckObj
  732. loc_006C2FF2: lea ecx, var_28
  733. loc_006C2FF5: call [0040142Ch] ; __vbaFreeObj
  734. loc_006C2FFB: mov ecx, strCaption
  735. loc_006C2FFE: lea edx, var_68
  736. loc_006C3001: lea eax, var_38
  737. loc_006C3004: push edx
  738. loc_006C3005: push eax
  739. loc_006C3006: mov var_60, ecx
  740. loc_006C3009: mov var_68, 00004008h
  741. loc_006C3010: call [00401154h] ; rtcTrimVar
  742. loc_006C3016: lea ecx, var_38
  743. loc_006C3019: lea edx, var_48
  744. loc_006C301C: push ecx
  745. loc_006C301D: push edx
  746. loc_006C301E: mov var_70, ebx
  747. loc_006C3021: mov var_78, 00008002h
  748. loc_006C3028: call [004010D4h] ; __vbaLenVar
  749. loc_006C302E: push eax
  750. loc_006C302F: lea eax, var_78
  751. loc_006C3032: push eax
  752. loc_006C3033: call [00401348h] ; __vbaVarTstNe
  753. loc_006C3039: lea ecx, var_38
  754. loc_006C303C: mov var_7C, ax
  755. loc_006C3040: call [00401030h] ; __vbaFreeVar
  756. loc_006C3046: cmp var_7C, bx
  757. loc_006C304A: mov ecx, [esi]
  758. loc_006C304C: jz 006C3060h
  759. loc_006C304E: mov edx, strCaption
  760. loc_006C3051: mov eax, [edx]
  761. loc_006C3053: push eax
  762. loc_006C3054: push esi
  763. loc_006C3055: call [ecx+00000054h]
  764. loc_006C3058: cmp eax, ebx
  765. loc_006C305A: fnclex
  766. loc_006C305C: jge 006C307Ah
  767. loc_006C305E: jmp 006C306Fh
  768. loc_006C3060: push 004537A4h ; "BonziBUDDY"
  769. loc_006C3065: push esi
  770. loc_006C3066: call [ecx+00000054h]
  771. loc_006C3069: cmp eax, ebx
  772. loc_006C306B: fnclex
  773. loc_006C306D: jge 006C307Ah
  774. loc_006C306F: push 00000054h
  775. loc_006C3071: push 00456654h
  776. loc_006C3076: push esi
  777. loc_006C3077: push eax
  778. loc_006C3078: call edi
  779. loc_006C307A: mov edx, udtDialogType
  780. loc_006C307D: mov ecx, [esi]
  781. loc_006C307F: push esi
  782. loc_006C3080: mov eax, [edx]
  783. loc_006C3082: mov [esi+00000034h], eax
  784. loc_006C3085: call [ecx+00000708h]
  785. loc_006C308B: sub esp, 00000010h
  786. loc_006C308E: mov ecx, 0000000Ah
  787. loc_006C3093: mov ebx, esp
  788. loc_006C3095: mov var_78, ecx
  789. loc_006C3098: mov var_68, ecx
  790. loc_006C309B: mov eax, 80020004h
  791. loc_006C30A0: mov [ebx], ecx
  792. loc_006C30A2: mov ecx, var_74
  793. loc_006C30A5: mov var_70, eax
  794. loc_006C30A8: mov edx, eax
  795. loc_006C30AA: mov [ebx+00000004h], ecx
  796. loc_006C30AD: sub esp, 00000010h
  797. loc_006C30B0: mov ecx, esp
  798. loc_006C30B2: mov edi, [esi]
  799. loc_006C30B4: mov [ebx+00000008h], eax
  800. loc_006C30B7: mov eax, var_6C
  801. loc_006C30BA: mov var_60, edx
  802. loc_006C30BD: push esi
  803. loc_006C30BE: mov [ebx+0000000Ch], eax
  804. loc_006C30C1: mov eax, var_68
  805. loc_006C30C4: mov [ecx], eax
  806. loc_006C30C6: mov eax, var_64
  807. loc_006C30C9: mov [ecx+00000004h], eax
  808. loc_006C30CC: mov [ecx+00000008h], edx
  809. loc_006C30CF: mov edx, var_5C
  810. loc_006C30D2: mov [ecx+0000000Ch], edx
  811. loc_006C30D5: call [edi+000002B0h]
  812. loc_006C30DB: test eax, eax
  813. loc_006C30DD: fnclex
  814. loc_006C30DF: jge 006C30F3h
  815. loc_006C30E1: push 000002B0h
  816. loc_006C30E6: push 00456654h
  817. loc_006C30EB: push esi
  818. loc_006C30EC: push eax
  819. loc_006C30ED: call [004010CCh] ; __vbaHresultCheckObj
  820. loc_006C30F3: push 006C312Bh
  821. loc_006C30F8: jmp 006C312Ah
  822. loc_006C30FA: test var_4, 04h
  823. loc_006C30FE: jz 006C3109h
  824. loc_006C3100: lea ecx, var_24
  825. loc_006C3103: call [00401030h] ; __vbaFreeVar
  826. loc_006C3109: lea ecx, var_28
  827. loc_006C310C: call [0040142Ch] ; __vbaFreeObj
  828. loc_006C3112: lea eax, var_58
  829. loc_006C3115: lea ecx, var_48
  830. loc_006C3118: push eax
  831. loc_006C3119: lea edx, var_38
  832. loc_006C311C: push ecx
  833. loc_006C311D: push edx
  834. loc_006C311E: push 00000003h
  835. loc_006C3120: call [00401050h] ; __vbaFreeVarList
  836. loc_006C3126: add esp, 00000010h
  837. loc_006C3129: ret
  838. loc_006C312A: ret
  839. loc_006C312B: mov eax, Me
  840. loc_006C312E: push eax
  841. loc_006C312F: mov ecx, [eax]
  842. loc_006C3131: call [ecx+00000008h]
  843. loc_006C3134: mov edx, arg_18
  844. loc_006C3137: mov eax, var_24
  845. loc_006C313A: mov ecx, var_20
  846. loc_006C313D: mov [edx], eax
  847. loc_006C313F: mov eax, var_1C
  848. loc_006C3142: mov [edx+00000004h], ecx
  849. loc_006C3145: mov ecx, var_18
  850. loc_006C3148: mov [edx+00000008h], eax
  851. loc_006C314B: mov [edx+0000000Ch], ecx
  852. loc_006C314E: mov eax, var_4
  853. loc_006C3151: mov ecx, var_14
  854. loc_006C3154: pop edi
  855. loc_006C3155: pop esi
  856. loc_006C3156: mov fs:[00000000h], ecx
  857. loc_006C315D: pop ebx
  858. loc_006C315E: mov esp, ebp
  859. loc_006C3160: pop ebp
  860. loc_006C3161: retn 0014h
  861. End Function
  862. Private Sub Proc_39_3_6C39F0
  863. loc_006C39F0: push ebp
  864. loc_006C39F1: mov ebp, esp
  865. loc_006C39F3: sub esp, 00000008h
  866. loc_006C39F6: push 00412856h ; __vbaExceptHandler
  867. loc_006C39FB: mov eax, fs:[00000000h]
  868. loc_006C3A01: push eax
  869. loc_006C3A02: mov fs:[00000000h], esp
  870. loc_006C3A09: sub esp, 00000018h
  871. loc_006C3A0C: push ebx
  872. loc_006C3A0D: push esi
  873. loc_006C3A0E: push edi
  874. loc_006C3A0F: mov var_8, esp
  875. loc_006C3A12: mov var_4, 0040CF90h
  876. loc_006C3A19: mov eax, Me
  877. loc_006C3A1C: xor edi, edi
  878. loc_006C3A1E: push eax
  879. loc_006C3A1F: mov var_14, edi
  880. loc_006C3A22: mov ecx, [eax]
  881. loc_006C3A24: mov var_18, edi
  882. loc_006C3A27: call [ecx+000002FCh]
  883. loc_006C3A2D: lea edx, var_14
  884. loc_006C3A30: push eax
  885. loc_006C3A31: push edx
  886. loc_006C3A32: call [00401128h] ; __vbaObjSet
  887. loc_006C3A38: mov esi, eax
  888. loc_006C3A3A: lea ecx, var_18
  889. loc_006C3A3D: push ecx
  890. loc_006C3A3E: push esi
  891. loc_006C3A3F: mov eax, [esi]
  892. loc_006C3A41: call [eax+000000E0h]
  893. loc_006C3A47: cmp eax, edi
  894. loc_006C3A49: fnclex
  895. loc_006C3A4B: jge 006C3A5Fh
  896. loc_006C3A4D: push 000000E0h
  897. loc_006C3A52: push 00446678h
  898. loc_006C3A57: push esi
  899. loc_006C3A58: push eax
  900. loc_006C3A59: call [004010CCh] ; __vbaHresultCheckObj
  901. loc_006C3A5F: xor edx, edx
  902. loc_006C3A61: cmp var_18, 0001h
  903. loc_006C3A66: lea ecx, var_14
  904. loc_006C3A69: setz dl
  905. loc_006C3A6C: neg edx
  906. loc_006C3A6E: mov esi, edx
  907. loc_006C3A70: call [0040142Ch] ; __vbaFreeObj
  908. loc_006C3A76: cmp si, di
  909. loc_006C3A79: jz 006C3A82h
  910. loc_006C3A7B: push 00444034h
  911. loc_006C3A80: jmp 006C3A87h
  912. loc_006C3A82: push 0044402Ch
  913. loc_006C3A87: push 00445C18h ; "DontPromptToIntegrate"
  914. loc_006C3A8C: push 0043C260h ; "Downloader"
  915. loc_006C3A91: push 0043B010h ; "BONZIBUDDY"
  916. loc_006C3A96: call [00401010h] ; rtcSaveSetting
  917. loc_006C3A9C: push 006C3AAEh
  918. loc_006C3AA1: jmp 006C3AADh
  919. loc_006C3AA3: lea ecx, var_14
  920. loc_006C3AA6: call [0040142Ch] ; __vbaFreeObj
  921. loc_006C3AAC: ret
  922. loc_006C3AAD: ret
  923. loc_006C3AAE: mov ecx, var_10
  924. loc_006C3AB1: pop edi
  925. loc_006C3AB2: pop esi
  926. loc_006C3AB3: xor eax, eax
  927. loc_006C3AB5: mov fs:[00000000h], ecx
  928. loc_006C3ABC: pop ebx
  929. loc_006C3ABD: mov esp, ebp
  930. loc_006C3ABF: pop ebp
  931. loc_006C3AC0: retn 0004h
  932. End Sub
  933. Private Sub Proc_39_4_6C3AD0
  934. loc_006C3AD0: push ebp
  935. loc_006C3AD1: mov ebp, esp
  936. loc_006C3AD3: sub esp, 00000008h
  937. loc_006C3AD6: push 00412856h ; __vbaExceptHandler
  938. loc_006C3ADB: mov eax, fs:[00000000h]
  939. loc_006C3AE1: push eax
  940. loc_006C3AE2: mov fs:[00000000h], esp
  941. loc_006C3AE9: sub esp, 00000030h
  942. loc_006C3AEC: push ebx
  943. loc_006C3AED: push esi
  944. loc_006C3AEE: push edi
  945. loc_006C3AEF: mov var_8, esp
  946. loc_006C3AF2: mov var_4, 0040CFA8h
  947. loc_006C3AF9: mov esi, Me
  948. loc_006C3AFC: xor eax, eax
  949. loc_006C3AFE: mov var_14, eax
  950. loc_006C3B01: mov var_18, eax
  951. loc_006C3B04: mov var_1C, eax
  952. loc_006C3B07: mov var_20, eax
  953. loc_006C3B0A: mov var_24, eax
  954. loc_006C3B0D: mov eax, [esi]
  955. loc_006C3B0F: push esi
  956. loc_006C3B10: call [eax+0000030Ch]
  957. loc_006C3B16: mov ebx, [00401128h] ; __vbaObjSet
  958. loc_006C3B1C: lea ecx, var_14
  959. loc_006C3B1F: push eax
  960. loc_006C3B20: push ecx
  961. loc_006C3B21: call ebx
  962. loc_006C3B23: mov edi, eax
  963. loc_006C3B25: push 456B5000h
  964. loc_006C3B2A: push edi
  965. loc_006C3B2B: mov edx, [edi]
  966. loc_006C3B2D: call [edx+00000084h]
  967. loc_006C3B33: test eax, eax
  968. loc_006C3B35: fnclex
  969. loc_006C3B37: jge 006C3B4Bh
  970. loc_006C3B39: push 00000084h
  971. loc_006C3B3E: push 00441988h
  972. loc_006C3B43: push edi
  973. loc_006C3B44: push eax
  974. loc_006C3B45: call [004010CCh] ; __vbaHresultCheckObj
  975. loc_006C3B4B: lea ecx, var_14
  976. loc_006C3B4E: call [0040142Ch] ; __vbaFreeObj
  977. loc_006C3B54: mov eax, [esi]
  978. loc_006C3B56: push esi
  979. loc_006C3B57: call [eax+0000030Ch]
  980. loc_006C3B5D: lea ecx, var_14
  981. loc_006C3B60: push eax
  982. loc_006C3B61: push ecx
  983. loc_006C3B62: call ebx
  984. loc_006C3B64: mov edi, eax
  985. loc_006C3B66: lea eax, var_20
  986. loc_006C3B69: push eax
  987. loc_006C3B6A: push edi
  988. loc_006C3B6B: mov edx, [edi]
  989. loc_006C3B6D: call [edx+00000088h]
  990. loc_006C3B73: test eax, eax
  991. loc_006C3B75: fnclex
  992. loc_006C3B77: jge 006C3B8Bh
  993. loc_006C3B79: push 00000088h
  994. loc_006C3B7E: push 00441988h
  995. loc_006C3B83: push edi
  996. loc_006C3B84: push eax
  997. loc_006C3B85: call [004010CCh] ; __vbaHresultCheckObj
  998. loc_006C3B8B: fld real4 ptr var_20
  999. loc_006C3B8E: fcomp real4 ptr [0040CFA4h]
  1000. loc_006C3B94: fnstsw ax
  1001. loc_006C3B96: test ah, 41h
  1002. loc_006C3B99: jz 006C3BA2h
  1003. loc_006C3B9B: mov eax, 00000001h
  1004. loc_006C3BA0: jmp 006C3BA4h
  1005. loc_006C3BA2: xor eax, eax
  1006. loc_006C3BA4: neg eax
  1007. loc_006C3BA6: lea ecx, var_14
  1008. loc_006C3BA9: mov di, ax
  1009. loc_006C3BAC: call [0040142Ch] ; __vbaFreeObj
  1010. loc_006C3BB2: test di, di
  1011. loc_006C3BB5: jz 006C3C46h
  1012. loc_006C3BBB: mov eax, [0073A664h]
  1013. loc_006C3BC0: test eax, eax
  1014. loc_006C3BC2: jnz 006C3BD4h
  1015. loc_006C3BC4: push 0073A664h
  1016. loc_006C3BC9: push 004183C8h
  1017. loc_006C3BCE: call [004012FCh] ; __vbaNew2
  1018. loc_006C3BD4: mov edi, [0073A664h]
  1019. loc_006C3BDA: push 44D7A000h
  1020. loc_006C3BDF: push edi
  1021. loc_006C3BE0: mov ecx, [edi]
  1022. loc_006C3BE2: call [ecx+0000008Ch]
  1023. loc_006C3BE8: test eax, eax
  1024. loc_006C3BEA: fnclex
  1025. loc_006C3BEC: jge 006C3C00h
  1026. loc_006C3BEE: push 0000008Ch
  1027. loc_006C3BF3: push 00456654h
  1028. loc_006C3BF8: push edi
  1029. loc_006C3BF9: push eax
  1030. loc_006C3BFA: call [004010CCh] ; __vbaHresultCheckObj
  1031. loc_006C3C00: mov edx, [esi]
  1032. loc_006C3C02: push esi
  1033. loc_006C3C03: call [edx+000002FCh]
  1034. loc_006C3C09: push eax
  1035. loc_006C3C0A: lea eax, var_14
  1036. loc_006C3C0D: push eax
  1037. loc_006C3C0E: call ebx
  1038. loc_006C3C10: mov esi, eax
  1039. loc_006C3C12: push 44778000h
  1040. loc_006C3C17: push esi
  1041. loc_006C3C18: mov ecx, [esi]
  1042. loc_006C3C1A: call [ecx+0000007Ch]
  1043. loc_006C3C1D: test eax, eax
  1044. loc_006C3C1F: fnclex
  1045. loc_006C3C21: jge 006C3C32h
  1046. loc_006C3C23: push 0000007Ch
  1047. loc_006C3C25: push 00446678h
  1048. loc_006C3C2A: push esi
  1049. loc_006C3C2B: push eax
  1050. loc_006C3C2C: call [004010CCh] ; __vbaHresultCheckObj
  1051. loc_006C3C32: lea ecx, var_14
  1052. loc_006C3C35: call [0040142Ch] ; __vbaFreeObj
  1053. loc_006C3C3B: fwait
  1054. loc_006C3C3C: push 006C3E02h
  1055. loc_006C3C41: jmp 006C3E01h
  1056. loc_006C3C46: mov edx, [esi]
  1057. loc_006C3C48: push esi
  1058. loc_006C3C49: call [edx+0000030Ch]
  1059. loc_006C3C4F: push eax
  1060. loc_006C3C50: lea eax, var_18
  1061. loc_006C3C53: push eax
  1062. loc_006C3C54: call ebx
  1063. loc_006C3C56: mov edi, eax
  1064. loc_006C3C58: lea edx, var_24
  1065. loc_006C3C5B: push edx
  1066. loc_006C3C5C: push edi
  1067. loc_006C3C5D: mov ecx, [edi]
  1068. loc_006C3C5F: call [ecx+00000088h]
  1069. loc_006C3C65: test eax, eax
  1070. loc_006C3C67: fnclex
  1071. loc_006C3C69: jge 006C3C7Dh
  1072. loc_006C3C6B: push 00000088h
  1073. loc_006C3C70: push 00441988h
  1074. loc_006C3C75: push edi
  1075. loc_006C3C76: push eax
  1076. loc_006C3C77: call [004010CCh] ; __vbaHresultCheckObj
  1077. loc_006C3C7D: mov eax, [esi]
  1078. loc_006C3C7F: push esi
  1079. loc_006C3C80: call [eax+000002FCh]
  1080. loc_006C3C86: lea ecx, var_1C
  1081. loc_006C3C89: push eax
  1082. loc_006C3C8A: push ecx
  1083. loc_006C3C8B: call ebx
  1084. loc_006C3C8D: mov edx, [esi]
  1085. loc_006C3C8F: push esi
  1086. loc_006C3C90: mov var_38, eax
  1087. loc_006C3C93: call [edx+0000030Ch]
  1088. loc_006C3C99: push eax
  1089. loc_006C3C9A: lea eax, var_14
  1090. loc_006C3C9D: push eax
  1091. loc_006C3C9E: call ebx
  1092. loc_006C3CA0: mov edi, eax
  1093. loc_006C3CA2: lea edx, var_20
  1094. loc_006C3CA5: push edx
  1095. loc_006C3CA6: push edi
  1096. loc_006C3CA7: mov ecx, [edi]
  1097. loc_006C3CA9: call [ecx+00000078h]
  1098. loc_006C3CAC: test eax, eax
  1099. loc_006C3CAE: fnclex
  1100. loc_006C3CB0: jge 006C3CC1h
  1101. loc_006C3CB2: push 00000078h
  1102. loc_006C3CB4: push 00441988h
  1103. loc_006C3CB9: push edi
  1104. loc_006C3CBA: push eax
  1105. loc_006C3CBB: call [004010CCh] ; __vbaHresultCheckObj
  1106. loc_006C3CC1: fld real4 ptr var_24
  1107. loc_006C3CC4: fadd st0, real4 ptr var_20
  1108. loc_006C3CC7: mov edi, var_38
  1109. loc_006C3CCA: mov ecx, [edi]
  1110. loc_006C3CCC: fadd st0, real4 ptr [004043DCh]
  1111. loc_006C3CD2: push ecx
  1112. loc_006C3CD3: fnstsw ax
  1113. loc_006C3CD5: test al, 0Dh
  1114. loc_006C3CD7: jnz 006C3E17h
  1115. loc_006C3CDD: fstp real4 ptr [esp]
  1116. loc_006C3CE0: push edi
  1117. loc_006C3CE1: call [ecx+0000007Ch]
  1118. loc_006C3CE4: test eax, eax
  1119. loc_006C3CE6: fnclex
  1120. loc_006C3CE8: jge 006C3CF9h
  1121. loc_006C3CEA: push 0000007Ch
  1122. loc_006C3CEC: push 00446678h
  1123. loc_006C3CF1: push edi
  1124. loc_006C3CF2: push eax
  1125. loc_006C3CF3: call [004010CCh] ; __vbaHresultCheckObj
  1126. loc_006C3CF9: lea edx, var_1C
  1127. loc_006C3CFC: lea eax, var_18
  1128. loc_006C3CFF: push edx
  1129. loc_006C3D00: lea ecx, var_14
  1130. loc_006C3D03: push eax
  1131. loc_006C3D04: push ecx
  1132. loc_006C3D05: push 00000003h
  1133. loc_006C3D07: call [00401068h] ; __vbaFreeObjList
  1134. loc_006C3D0D: mov edx, [esi]
  1135. loc_006C3D0F: add esp, 00000010h
  1136. loc_006C3D12: push esi
  1137. loc_006C3D13: call [edx+000002FCh]
  1138. loc_006C3D19: push eax
  1139. loc_006C3D1A: lea eax, var_18
  1140. loc_006C3D1D: push eax
  1141. loc_006C3D1E: call ebx
  1142. loc_006C3D20: mov edi, eax
  1143. loc_006C3D22: lea edx, var_24
  1144. loc_006C3D25: push edx
  1145. loc_006C3D26: push edi
  1146. loc_006C3D27: mov ecx, [edi]
  1147. loc_006C3D29: call [ecx+00000088h]
  1148. loc_006C3D2F: test eax, eax
  1149. loc_006C3D31: fnclex
  1150. loc_006C3D33: jge 006C3D47h
  1151. loc_006C3D35: push 00000088h
  1152. loc_006C3D3A: push 00446678h
  1153. loc_006C3D3F: push edi
  1154. loc_006C3D40: push eax
  1155. loc_006C3D41: call [004010CCh] ; __vbaHresultCheckObj
  1156. loc_006C3D47: mov eax, [0073A664h]
  1157. loc_006C3D4C: test eax, eax
  1158. loc_006C3D4E: jnz 006C3D60h
  1159. loc_006C3D50: push 0073A664h
  1160. loc_006C3D55: push 004183C8h
  1161. loc_006C3D5A: call [004012FCh] ; __vbaNew2
  1162. loc_006C3D60: mov eax, [esi]
  1163. loc_006C3D62: mov edi, [0073A664h]
  1164. loc_006C3D68: push esi
  1165. loc_006C3D69: call [eax+000002FCh]
  1166. loc_006C3D6F: lea ecx, var_14
  1167. loc_006C3D72: push eax
  1168. loc_006C3D73: push ecx
  1169. loc_006C3D74: call ebx
  1170. loc_006C3D76: mov esi, eax
  1171. loc_006C3D78: lea eax, var_20
  1172. loc_006C3D7B: push eax
  1173. loc_006C3D7C: push esi
  1174. loc_006C3D7D: mov edx, [esi]
  1175. loc_006C3D7F: call [edx+00000078h]
  1176. loc_006C3D82: test eax, eax
  1177. loc_006C3D84: fnclex
  1178. loc_006C3D86: jge 006C3D97h
  1179. loc_006C3D88: push 00000078h
  1180. loc_006C3D8A: push 00446678h
  1181. loc_006C3D8F: push esi
  1182. loc_006C3D90: push eax
  1183. loc_006C3D91: call [004010CCh] ; __vbaHresultCheckObj
  1184. loc_006C3D97: fld real4 ptr var_24
  1185. loc_006C3D9A: fadd st0, real4 ptr var_20
  1186. loc_006C3D9D: mov ecx, [edi]
  1187. loc_006C3D9F: push ecx
  1188. loc_006C3DA0: fadd st0, real4 ptr [0040CFA0h]
  1189. loc_006C3DA6: fnstsw ax
  1190. loc_006C3DA8: test al, 0Dh
  1191. loc_006C3DAA: jnz 006C3E17h
  1192. loc_006C3DAC: fstp real4 ptr [esp]
  1193. loc_006C3DAF: push edi
  1194. loc_006C3DB0: call [ecx+0000008Ch]
  1195. loc_006C3DB6: test eax, eax
  1196. loc_006C3DB8: fnclex
  1197. loc_006C3DBA: jge 006C3DCEh
  1198. loc_006C3DBC: push 0000008Ch
  1199. loc_006C3DC1: push 00456654h
  1200. loc_006C3DC6: push edi
  1201. loc_006C3DC7: push eax
  1202. loc_006C3DC8: call [004010CCh] ; __vbaHresultCheckObj
  1203. loc_006C3DCE: lea edx, var_18
  1204. loc_006C3DD1: lea eax, var_14
  1205. loc_006C3DD4: push edx
  1206. loc_006C3DD5: push eax
  1207. loc_006C3DD6: push 00000002h
  1208. loc_006C3DD8: call [00401068h] ; __vbaFreeObjList
  1209. loc_006C3DDE: add esp, 0000000Ch
  1210. loc_006C3DE1: fwait
  1211. loc_006C3DE2: push 006C3E02h
  1212. loc_006C3DE7: jmp 006C3E01h
  1213. loc_006C3DE9: lea ecx, var_1C
  1214. loc_006C3DEC: lea edx, var_18
  1215. loc_006C3DEF: push ecx
  1216. loc_006C3DF0: lea eax, var_14
  1217. loc_006C3DF3: push edx
  1218. loc_006C3DF4: push eax
  1219. loc_006C3DF5: push 00000003h
  1220. loc_006C3DF7: call [00401068h] ; __vbaFreeObjList
  1221. loc_006C3DFD: add esp, 00000010h
  1222. loc_006C3E00: ret
  1223. loc_006C3E01: ret
  1224. loc_006C3E02: mov ecx, var_10
  1225. loc_006C3E05: pop edi
  1226. loc_006C3E06: pop esi
  1227. loc_006C3E07: xor eax, eax
  1228. loc_006C3E09: mov fs:[00000000h], ecx
  1229. loc_006C3E10: pop ebx
  1230. loc_006C3E11: mov esp, ebp
  1231. loc_006C3E13: pop ebp
  1232. loc_006C3E14: retn 0004h
  1233. End Sub