BonziBuddy Leaked Source Code by NixButterPlay
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

5055 lines
171 KiB

  1. VERSION 1.0 CLASS
  2. BEGIN
  3. MultiUse = -1 'True
  4. Persistable = 0 'NotPersistable
  5. DataBindingBehavior = 0 'vbNone
  6. DataSourceBehavior = 0 'vbNone
  7. MTSTransactionMode = 0 'NotAnMTSObject
  8. END
  9. Attribute VB_Name = "clsBonziEventTap"
  10. Attribute VB_GlobalNameSpace = False
  11. Attribute VB_Creatable = True
  12. Attribute VB_PredeclaredId = False
  13. Attribute VB_Exposed = False
  14. Public Property Get Tap(Index As Integer) '7283E0
  15. loc_007283E0: push ebp
  16. loc_007283E1: mov ebp, esp
  17. loc_007283E3: sub esp, 0000000Ch
  18. loc_007283E6: push 00412856h ; __vbaExceptHandler
  19. loc_007283EB: mov eax, fs:[00000000h]
  20. loc_007283F1: push eax
  21. loc_007283F2: mov fs:[00000000h], esp
  22. loc_007283F9: sub esp, 0000000Ch
  23. loc_007283FC: push ebx
  24. loc_007283FD: push esi
  25. loc_007283FE: push edi
  26. loc_007283FF: mov var_C, esp
  27. loc_00728402: mov var_8, 00412168h
  28. loc_00728409: xor edi, edi
  29. loc_0072840B: mov var_4, edi
  30. loc_0072840E: mov esi, Me
  31. loc_00728411: push esi
  32. loc_00728412: mov eax, [esi]
  33. loc_00728414: call [eax+00000004h]
  34. loc_00728417: mov ecx, Index
  35. loc_0072841A: lea eax, var_18
  36. loc_0072841D: mov var_18, edi
  37. loc_00728420: mov [ecx], edi
  38. loc_00728422: mov edx, [esi+00000034h]
  39. loc_00728425: push edx
  40. loc_00728426: push eax
  41. loc_00728427: call [00401130h] ; __vbaObjSetAddref
  42. loc_0072842D: push 0072843Fh
  43. loc_00728432: jmp 0072843Eh
  44. loc_00728434: lea ecx, var_18
  45. loc_00728437: call [0040142Ch] ; __vbaFreeObj
  46. loc_0072843D: ret
  47. loc_0072843E: ret
  48. loc_0072843F: mov eax, Me
  49. loc_00728442: push eax
  50. loc_00728443: mov ecx, [eax]
  51. loc_00728445: call [ecx+00000008h]
  52. loc_00728448: mov edx, Index
  53. loc_0072844B: mov eax, var_18
  54. loc_0072844E: mov [edx], eax
  55. loc_00728450: mov eax, var_4
  56. loc_00728453: mov ecx, var_14
  57. loc_00728456: pop edi
  58. loc_00728457: pop esi
  59. loc_00728458: mov fs:[00000000h], ecx
  60. loc_0072845F: pop ebx
  61. loc_00728460: mov esp, ebp
  62. loc_00728462: pop ebp
  63. loc_00728463: retn 0008h
  64. End Sub
  65. Public Property Set Tap(objTap) '728470
  66. loc_00728470: push ebp
  67. loc_00728471: mov ebp, esp
  68. loc_00728473: sub esp, 0000000Ch
  69. loc_00728476: push 00412856h ; __vbaExceptHandler
  70. loc_0072847B: mov eax, fs:[00000000h]
  71. loc_00728481: push eax
  72. loc_00728482: mov fs:[00000000h], esp
  73. loc_00728489: sub esp, 00000008h
  74. loc_0072848C: push ebx
  75. loc_0072848D: push esi
  76. loc_0072848E: push edi
  77. loc_0072848F: mov var_C, esp
  78. loc_00728492: mov var_8, 00412178h
  79. loc_00728499: mov var_4, 00000000h
  80. loc_007284A0: mov esi, Me
  81. loc_007284A3: push esi
  82. loc_007284A4: mov eax, [esi]
  83. loc_007284A6: call [eax+00000004h]
  84. loc_007284A9: mov ecx, objTap
  85. loc_007284AC: lea eax, [esi+00000034h]
  86. loc_007284AF: mov edx, [ecx]
  87. loc_007284B1: push edx
  88. loc_007284B2: push eax
  89. loc_007284B3: call [00401130h] ; __vbaObjSetAddref
  90. loc_007284B9: mov ecx, [esi]
  91. loc_007284BB: push esi
  92. loc_007284BC: call [ecx+00000030h]
  93. loc_007284BF: mov edx, [esi]
  94. loc_007284C1: push esi
  95. loc_007284C2: call [edx+00000034h]
  96. loc_007284C5: mov eax, Me
  97. loc_007284C8: push eax
  98. loc_007284C9: mov ecx, [eax]
  99. loc_007284CB: call [ecx+00000008h]
  100. loc_007284CE: mov eax, var_4
  101. loc_007284D1: mov ecx, var_14
  102. loc_007284D4: pop edi
  103. loc_007284D5: pop esi
  104. loc_007284D6: mov fs:[00000000h], ecx
  105. loc_007284DD: pop ebx
  106. loc_007284DE: mov esp, ebp
  107. loc_007284E0: pop ebp
  108. loc_007284E1: retn 0008h
  109. End Sub
  110. Public Sub RunEvent() '728A60
  111. loc_00728A60: push ebp
  112. loc_00728A61: mov ebp, esp
  113. loc_00728A63: sub esp, 00000018h
  114. loc_00728A66: push 00412856h ; __vbaExceptHandler
  115. loc_00728A6B: mov eax, fs:[00000000h]
  116. loc_00728A71: push eax
  117. loc_00728A72: mov fs:[00000000h], esp
  118. loc_00728A79: mov eax, 00000400h
  119. loc_00728A7E: call 00412850h ; __vbaChkstk
  120. loc_00728A83: push ebx
  121. loc_00728A84: push esi
  122. loc_00728A85: push edi
  123. loc_00728A86: mov var_18, esp
  124. loc_00728A89: mov var_14, 004121A0h
  125. loc_00728A90: mov var_10, 00000000h
  126. loc_00728A97: mov var_C, 00000000h
  127. loc_00728A9E: mov eax, Me
  128. loc_00728AA1: mov ecx, [eax]
  129. loc_00728AA3: mov edx, Me
  130. loc_00728AA6: push edx
  131. loc_00728AA7: call [ecx+00000004h]
  132. loc_00728AAA: mov var_4, 00000001h
  133. loc_00728AB1: mov var_4, 00000002h
  134. loc_00728AB8: push FFFFFFFFh
  135. loc_00728ABA: call [00401124h] ; __vbaOnError
  136. loc_00728AC0: mov var_4, 00000003h
  137. loc_00728AC7: mov eax, Me
  138. loc_00728ACA: cmp [eax+00000038h], 00000000h
  139. loc_00728ACE: jz 00728B2Ch
  140. loc_00728AD0: mov ecx, Me
  141. loc_00728AD3: mov edx, [ecx+00000038h]
  142. loc_00728AD6: cmp [edx], 0001h
  143. loc_00728ADA: jnz 00728B2Ch
  144. loc_00728ADC: mov eax, Me
  145. loc_00728ADF: movsx ecx, [eax+0000003Ch]
  146. loc_00728AE3: mov edx, Me
  147. loc_00728AE6: mov eax, [edx+00000038h]
  148. loc_00728AE9: sub ecx, [eax+00000014h]
  149. loc_00728AEC: mov var_110, ecx
  150. loc_00728AF2: mov ecx, Me
  151. loc_00728AF5: mov edx, [ecx+00000038h]
  152. loc_00728AF8: mov eax, var_110
  153. loc_00728AFE: cmp eax, [edx+00000010h]
  154. loc_00728B01: jae 00728B0Fh
  155. loc_00728B03: mov var_1C4, 00000000h
  156. loc_00728B0D: jmp 00728B1Bh
  157. loc_00728B0F: call [004011A8h] ; __vbaGenerateBoundsError
  158. loc_00728B15: mov var_1C4, eax
  159. loc_00728B1B: mov ecx, var_110
  160. loc_00728B21: shl ecx, 02h
  161. loc_00728B24: mov var_1C8, ecx
  162. loc_00728B2A: jmp 00728B38h
  163. loc_00728B2C: call [004011A8h] ; __vbaGenerateBoundsError
  164. loc_00728B32: mov var_1C8, eax
  165. loc_00728B38: push 00000000h
  166. loc_00728B3A: mov edx, Me
  167. loc_00728B3D: mov eax, [edx+00000038h]
  168. loc_00728B40: mov ecx, [eax+0000000Ch]
  169. loc_00728B43: mov edx, var_1C8
  170. loc_00728B49: mov eax, [ecx+edx]
  171. loc_00728B4C: push eax
  172. loc_00728B4D: call [00401238h] ; __vbaObjIs
  173. loc_00728B53: movsx ecx, ax
  174. loc_00728B56: test ecx, ecx
  175. loc_00728B58: jz 00729BD3h
  176. loc_00728B5E: mov var_4, 00000004h
  177. loc_00728B65: mov edx, Me
  178. loc_00728B68: mov eax, [edx]
  179. loc_00728B6A: mov ecx, Me
  180. loc_00728B6D: push ecx
  181. loc_00728B6E: call [eax+00000038h]
  182. loc_00728B71: mov var_4, 00000005h
  183. loc_00728B78: mov edx, Me
  184. loc_00728B7B: cmp [edx+0000003Ch], 0000h
  185. loc_00728B80: jle 00728BD3h
  186. loc_00728B82: mov var_4, 00000006h
  187. loc_00728B89: mov eax, Me
  188. loc_00728B8C: mov ecx, [eax]
  189. loc_00728B8E: mov edx, Me
  190. loc_00728B91: push edx
  191. loc_00728B92: call [ecx+00000024h]
  192. loc_00728B95: mov var_110, eax
  193. loc_00728B9B: cmp var_110, 00000000h
  194. loc_00728BA2: jge 00728BC4h
  195. loc_00728BA4: push 00000024h
  196. loc_00728BA6: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  197. loc_00728BAB: mov eax, Me
  198. loc_00728BAE: push eax
  199. loc_00728BAF: mov ecx, var_110
  200. loc_00728BB5: push ecx
  201. loc_00728BB6: call [004010CCh] ; __vbaHresultCheckObj
  202. loc_00728BBC: mov var_1CC, eax
  203. loc_00728BC2: jmp 00728BCEh
  204. loc_00728BC4: mov var_1CC, 00000000h
  205. loc_00728BCE: jmp 00729BCEh
  206. loc_00728BD3: mov var_4, 00000008h
  207. loc_00728BDA: lea edx, var_94
  208. loc_00728BE0: push edx
  209. loc_00728BE1: mov eax, Me
  210. loc_00728BE4: mov ecx, [eax]
  211. loc_00728BE6: mov edx, Me
  212. loc_00728BE9: push edx
  213. loc_00728BEA: call [ecx+0000001Ch]
  214. loc_00728BED: mov var_110, eax
  215. loc_00728BF3: cmp var_110, 00000000h
  216. loc_00728BFA: jge 00728C1Ch
  217. loc_00728BFC: push 0000001Ch
  218. loc_00728BFE: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  219. loc_00728C03: mov eax, Me
  220. loc_00728C06: push eax
  221. loc_00728C07: mov ecx, var_110
  222. loc_00728C0D: push ecx
  223. loc_00728C0E: call [004010CCh] ; __vbaHresultCheckObj
  224. loc_00728C14: mov var_1D0, eax
  225. loc_00728C1A: jmp 00728C26h
  226. loc_00728C1C: mov var_1D0, 00000000h
  227. loc_00728C26: mov edx, var_94
  228. loc_00728C2C: mov var_114, edx
  229. loc_00728C32: lea eax, var_80
  230. loc_00728C35: push eax
  231. loc_00728C36: mov ecx, var_114
  232. loc_00728C3C: mov edx, [ecx]
  233. loc_00728C3E: mov eax, var_114
  234. loc_00728C44: push eax
  235. loc_00728C45: call [edx+00000040h]
  236. loc_00728C48: fnclex
  237. loc_00728C4A: mov var_118, eax
  238. loc_00728C50: cmp var_118, 00000000h
  239. loc_00728C57: jge 00728C7Ch
  240. loc_00728C59: push 00000040h
  241. loc_00728C5B: push 00475D6Ch
  242. loc_00728C60: mov ecx, var_114
  243. loc_00728C66: push ecx
  244. loc_00728C67: mov edx, var_118
  245. loc_00728C6D: push edx
  246. loc_00728C6E: call [004010CCh] ; __vbaHresultCheckObj
  247. loc_00728C74: mov var_1D4, eax
  248. loc_00728C7A: jmp 00728C86h
  249. loc_00728C7C: mov var_1D4, 00000000h
  250. loc_00728C86: mov eax, var_80
  251. loc_00728C89: mov var_174, eax
  252. loc_00728C8F: mov var_80, 00000000h
  253. loc_00728C96: mov ecx, var_174
  254. loc_00728C9C: mov var_A8, ecx
  255. loc_00728CA2: mov var_B0, 00000008h
  256. loc_00728CAC: lea edx, var_B0
  257. loc_00728CB2: push edx
  258. loc_00728CB3: lea eax, var_C0
  259. loc_00728CB9: push eax
  260. loc_00728CBA: call [00401080h] ; rtcLowerCaseVar
  261. loc_00728CC0: lea edx, var_C0
  262. loc_00728CC6: lea ecx, var_154
  263. loc_00728CCC: call [00401020h] ; __vbaVarMove
  264. loc_00728CD2: lea ecx, var_94
  265. loc_00728CD8: call [0040142Ch] ; __vbaFreeObj
  266. loc_00728CDE: lea ecx, var_B0
  267. loc_00728CE4: call [00401030h] ; __vbaFreeVar
  268. loc_00728CEA: mov var_4, 00000009h
  269. loc_00728CF1: mov var_E8, 00472CF4h ; "product"
  270. loc_00728CFB: mov var_F0, 00008008h
  271. loc_00728D05: lea ecx, var_154
  272. loc_00728D0B: push ecx
  273. loc_00728D0C: lea edx, var_F0
  274. loc_00728D12: push edx
  275. loc_00728D13: call [004011C0h] ; __vbaVarTstEq
  276. loc_00728D19: movsx eax, ax
  277. loc_00728D1C: test eax, eax
  278. loc_00728D1E: jz 00728FDCh
  279. loc_00728D24: mov var_4, 0000000Ah
  280. loc_00728D2B: cmp [0073C818h], 00000000h
  281. loc_00728D32: jnz 00728D50h
  282. loc_00728D34: push 0073C818h
  283. loc_00728D39: push 00441F00h
  284. loc_00728D3E: call [004012FCh] ; __vbaNew2
  285. loc_00728D44: mov var_1D8, 0073C818h
  286. loc_00728D4E: jmp 00728D5Ah
  287. loc_00728D50: mov var_1D8, 0073C818h
  288. loc_00728D5A: mov ecx, var_1D8
  289. loc_00728D60: mov edx, [ecx]
  290. loc_00728D62: mov var_110, edx
  291. loc_00728D68: lea eax, var_94
  292. loc_00728D6E: push eax
  293. loc_00728D6F: mov ecx, var_110
  294. loc_00728D75: mov edx, [ecx]
  295. loc_00728D77: mov eax, var_110
  296. loc_00728D7D: push eax
  297. loc_00728D7E: call [edx+00000014h]
  298. loc_00728D81: fnclex
  299. loc_00728D83: mov var_114, eax
  300. loc_00728D89: cmp var_114, 00000000h
  301. loc_00728D90: jge 00728DB5h
  302. loc_00728D92: push 00000014h
  303. loc_00728D94: push 00441EF0h
  304. loc_00728D99: mov ecx, var_110
  305. loc_00728D9F: push ecx
  306. loc_00728DA0: mov edx, var_114
  307. loc_00728DA6: push edx
  308. loc_00728DA7: call [004010CCh] ; __vbaHresultCheckObj
  309. loc_00728DAD: mov var_1DC, eax
  310. loc_00728DB3: jmp 00728DBFh
  311. loc_00728DB5: mov var_1DC, 00000000h
  312. loc_00728DBF: mov eax, var_94
  313. loc_00728DC5: mov var_118, eax
  314. loc_00728DCB: lea ecx, var_80
  315. loc_00728DCE: push ecx
  316. loc_00728DCF: mov edx, var_118
  317. loc_00728DD5: mov eax, [edx]
  318. loc_00728DD7: mov ecx, var_118
  319. loc_00728DDD: push ecx
  320. loc_00728DDE: call [eax+00000060h]
  321. loc_00728DE1: fnclex
  322. loc_00728DE3: mov var_11C, eax
  323. loc_00728DE9: cmp var_11C, 00000000h
  324. loc_00728DF0: jge 00728E15h
  325. loc_00728DF2: push 00000060h
  326. loc_00728DF4: push 004437B4h
  327. loc_00728DF9: mov edx, var_118
  328. loc_00728DFF: push edx
  329. loc_00728E00: mov eax, var_11C
  330. loc_00728E06: push eax
  331. loc_00728E07: call [004010CCh] ; __vbaHresultCheckObj
  332. loc_00728E0D: mov var_1E0, eax
  333. loc_00728E13: jmp 00728E1Fh
  334. loc_00728E15: mov var_1E0, 00000000h
  335. loc_00728E1F: lea ecx, var_98
  336. loc_00728E25: push ecx
  337. loc_00728E26: mov edx, Me
  338. loc_00728E29: mov eax, [edx]
  339. loc_00728E2B: mov ecx, Me
  340. loc_00728E2E: push ecx
  341. loc_00728E2F: call [eax+0000001Ch]
  342. loc_00728E32: mov var_120, eax
  343. loc_00728E38: cmp var_120, 00000000h
  344. loc_00728E3F: jge 00728E61h
  345. loc_00728E41: push 0000001Ch
  346. loc_00728E43: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  347. loc_00728E48: mov edx, Me
  348. loc_00728E4B: push edx
  349. loc_00728E4C: mov eax, var_120
  350. loc_00728E52: push eax
  351. loc_00728E53: call [004010CCh] ; __vbaHresultCheckObj
  352. loc_00728E59: mov var_1E4, eax
  353. loc_00728E5F: jmp 00728E6Bh
  354. loc_00728E61: mov var_1E4, 00000000h
  355. loc_00728E6B: mov ecx, var_98
  356. loc_00728E71: mov var_124, ecx
  357. loc_00728E77: lea edx, var_84
  358. loc_00728E7D: push edx
  359. loc_00728E7E: mov eax, var_124
  360. loc_00728E84: mov ecx, [eax]
  361. loc_00728E86: mov edx, var_124
  362. loc_00728E8C: push edx
  363. loc_00728E8D: call [ecx+00000060h]
  364. loc_00728E90: fnclex
  365. loc_00728E92: mov var_128, eax
  366. loc_00728E98: cmp var_128, 00000000h
  367. loc_00728E9F: jge 00728EC4h
  368. loc_00728EA1: push 00000060h
  369. loc_00728EA3: push 00475D6Ch
  370. loc_00728EA8: mov eax, var_124
  371. loc_00728EAE: push eax
  372. loc_00728EAF: mov ecx, var_128
  373. loc_00728EB5: push ecx
  374. loc_00728EB6: call [004010CCh] ; __vbaHresultCheckObj
  375. loc_00728EBC: mov var_1E8, eax
  376. loc_00728EC2: jmp 00728ECEh
  377. loc_00728EC4: mov var_1E8, 00000000h
  378. loc_00728ECE: lea edx, var_9C
  379. loc_00728ED4: push edx
  380. loc_00728ED5: mov eax, Me
  381. loc_00728ED8: mov ecx, [eax]
  382. loc_00728EDA: mov edx, Me
  383. loc_00728EDD: push edx
  384. loc_00728EDE: call [ecx+0000001Ch]
  385. loc_00728EE1: mov var_12C, eax
  386. loc_00728EE7: cmp var_12C, 00000000h
  387. loc_00728EEE: jge 00728F10h
  388. loc_00728EF0: push 0000001Ch
  389. loc_00728EF2: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  390. loc_00728EF7: mov eax, Me
  391. loc_00728EFA: push eax
  392. loc_00728EFB: mov ecx, var_12C
  393. loc_00728F01: push ecx
  394. loc_00728F02: call [004010CCh] ; __vbaHresultCheckObj
  395. loc_00728F08: mov var_1EC, eax
  396. loc_00728F0E: jmp 00728F1Ah
  397. loc_00728F10: mov var_1EC, 00000000h
  398. loc_00728F1A: mov edx, var_9C
  399. loc_00728F20: mov var_130, edx
  400. loc_00728F26: lea eax, var_88
  401. loc_00728F2C: push eax
  402. loc_00728F2D: mov ecx, var_130
  403. loc_00728F33: mov edx, [ecx]
  404. loc_00728F35: mov eax, var_130
  405. loc_00728F3B: push eax
  406. loc_00728F3C: call [edx+00000068h]
  407. loc_00728F3F: fnclex
  408. loc_00728F41: mov var_134, eax
  409. loc_00728F47: cmp var_134, 00000000h
  410. loc_00728F4E: jge 00728F73h
  411. loc_00728F50: push 00000068h
  412. loc_00728F52: push 00475D6Ch
  413. loc_00728F57: mov ecx, var_130
  414. loc_00728F5D: push ecx
  415. loc_00728F5E: mov edx, var_134
  416. loc_00728F64: push edx
  417. loc_00728F65: call [004010CCh] ; __vbaHresultCheckObj
  418. loc_00728F6B: mov var_1F0, eax
  419. loc_00728F71: jmp 00728F7Dh
  420. loc_00728F73: mov var_1F0, 00000000h
  421. loc_00728F7D: mov eax, var_88
  422. loc_00728F83: push eax
  423. loc_00728F84: mov ecx, var_84
  424. loc_00728F8A: push ecx
  425. loc_00728F8B: push 004523C4h ; "ProductsHeard"
  426. loc_00728F90: mov edx, var_80
  427. loc_00728F93: push edx
  428. loc_00728F94: call [00401010h] ; rtcSaveSetting
  429. loc_00728F9A: lea eax, var_88
  430. loc_00728FA0: push eax
  431. loc_00728FA1: lea ecx, var_84
  432. loc_00728FA7: push ecx
  433. loc_00728FA8: lea edx, var_80
  434. loc_00728FAB: push edx
  435. loc_00728FAC: push 00000003h
  436. loc_00728FAE: call [00401324h] ; __vbaFreeStrList
  437. loc_00728FB4: add esp, 00000010h
  438. loc_00728FB7: lea eax, var_9C
  439. loc_00728FBD: push eax
  440. loc_00728FBE: lea ecx, var_98
  441. loc_00728FC4: push ecx
  442. loc_00728FC5: lea edx, var_94
  443. loc_00728FCB: push edx
  444. loc_00728FCC: push 00000003h
  445. loc_00728FCE: call [00401068h] ; __vbaFreeObjList
  446. loc_00728FD4: add esp, 00000010h
  447. loc_00728FD7: jmp 00729A6Dh
  448. loc_00728FDC: mov var_4, 0000000Bh
  449. loc_00728FE3: mov var_E8, 00472780h ; "daily"
  450. loc_00728FED: mov var_F0, 00008008h
  451. loc_00728FF7: lea eax, var_154
  452. loc_00728FFD: push eax
  453. loc_00728FFE: lea ecx, var_F0
  454. loc_00729004: push ecx
  455. loc_00729005: call [004011C0h] ; __vbaVarTstEq
  456. loc_0072900B: movsx edx, ax
  457. loc_0072900E: test edx, edx
  458. loc_00729010: jz 007292CEh
  459. loc_00729016: mov var_4, 0000000Ch
  460. loc_0072901D: cmp [0073C818h], 00000000h
  461. loc_00729024: jnz 00729042h
  462. loc_00729026: push 0073C818h
  463. loc_0072902B: push 00441F00h
  464. loc_00729030: call [004012FCh] ; __vbaNew2
  465. loc_00729036: mov var_1F4, 0073C818h
  466. loc_00729040: jmp 0072904Ch
  467. loc_00729042: mov var_1F4, 0073C818h
  468. loc_0072904C: mov eax, var_1F4
  469. loc_00729052: mov ecx, [eax]
  470. loc_00729054: mov var_110, ecx
  471. loc_0072905A: lea edx, var_94
  472. loc_00729060: push edx
  473. loc_00729061: mov eax, var_110
  474. loc_00729067: mov ecx, [eax]
  475. loc_00729069: mov edx, var_110
  476. loc_0072906F: push edx
  477. loc_00729070: call [ecx+00000014h]
  478. loc_00729073: fnclex
  479. loc_00729075: mov var_114, eax
  480. loc_0072907B: cmp var_114, 00000000h
  481. loc_00729082: jge 007290A7h
  482. loc_00729084: push 00000014h
  483. loc_00729086: push 00441EF0h
  484. loc_0072908B: mov eax, var_110
  485. loc_00729091: push eax
  486. loc_00729092: mov ecx, var_114
  487. loc_00729098: push ecx
  488. loc_00729099: call [004010CCh] ; __vbaHresultCheckObj
  489. loc_0072909F: mov var_1F8, eax
  490. loc_007290A5: jmp 007290B1h
  491. loc_007290A7: mov var_1F8, 00000000h
  492. loc_007290B1: mov edx, var_94
  493. loc_007290B7: mov var_118, edx
  494. loc_007290BD: lea eax, var_80
  495. loc_007290C0: push eax
  496. loc_007290C1: mov ecx, var_118
  497. loc_007290C7: mov edx, [ecx]
  498. loc_007290C9: mov eax, var_118
  499. loc_007290CF: push eax
  500. loc_007290D0: call [edx+00000060h]
  501. loc_007290D3: fnclex
  502. loc_007290D5: mov var_11C, eax
  503. loc_007290DB: cmp var_11C, 00000000h
  504. loc_007290E2: jge 00729107h
  505. loc_007290E4: push 00000060h
  506. loc_007290E6: push 004437B4h
  507. loc_007290EB: mov ecx, var_118
  508. loc_007290F1: push ecx
  509. loc_007290F2: mov edx, var_11C
  510. loc_007290F8: push edx
  511. loc_007290F9: call [004010CCh] ; __vbaHresultCheckObj
  512. loc_007290FF: mov var_1FC, eax
  513. loc_00729105: jmp 00729111h
  514. loc_00729107: mov var_1FC, 00000000h
  515. loc_00729111: lea eax, var_98
  516. loc_00729117: push eax
  517. loc_00729118: mov ecx, Me
  518. loc_0072911B: mov edx, [ecx]
  519. loc_0072911D: mov eax, Me
  520. loc_00729120: push eax
  521. loc_00729121: call [edx+0000001Ch]
  522. loc_00729124: mov var_120, eax
  523. loc_0072912A: cmp var_120, 00000000h
  524. loc_00729131: jge 00729153h
  525. loc_00729133: push 0000001Ch
  526. loc_00729135: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  527. loc_0072913A: mov ecx, Me
  528. loc_0072913D: push ecx
  529. loc_0072913E: mov edx, var_120
  530. loc_00729144: push edx
  531. loc_00729145: call [004010CCh] ; __vbaHresultCheckObj
  532. loc_0072914B: mov var_200, eax
  533. loc_00729151: jmp 0072915Dh
  534. loc_00729153: mov var_200, 00000000h
  535. loc_0072915D: mov eax, var_98
  536. loc_00729163: mov var_124, eax
  537. loc_00729169: lea ecx, var_84
  538. loc_0072916F: push ecx
  539. loc_00729170: mov edx, var_124
  540. loc_00729176: mov eax, [edx]
  541. loc_00729178: mov ecx, var_124
  542. loc_0072917E: push ecx
  543. loc_0072917F: call [eax+00000060h]
  544. loc_00729182: fnclex
  545. loc_00729184: mov var_128, eax
  546. loc_0072918A: cmp var_128, 00000000h
  547. loc_00729191: jge 007291B6h
  548. loc_00729193: push 00000060h
  549. loc_00729195: push 00475D6Ch
  550. loc_0072919A: mov edx, var_124
  551. loc_007291A0: push edx
  552. loc_007291A1: mov eax, var_128
  553. loc_007291A7: push eax
  554. loc_007291A8: call [004010CCh] ; __vbaHresultCheckObj
  555. loc_007291AE: mov var_204, eax
  556. loc_007291B4: jmp 007291C0h
  557. loc_007291B6: mov var_204, 00000000h
  558. loc_007291C0: lea ecx, var_9C
  559. loc_007291C6: push ecx
  560. loc_007291C7: mov edx, Me
  561. loc_007291CA: mov eax, [edx]
  562. loc_007291CC: mov ecx, Me
  563. loc_007291CF: push ecx
  564. loc_007291D0: call [eax+0000001Ch]
  565. loc_007291D3: mov var_12C, eax
  566. loc_007291D9: cmp var_12C, 00000000h
  567. loc_007291E0: jge 00729202h
  568. loc_007291E2: push 0000001Ch
  569. loc_007291E4: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  570. loc_007291E9: mov edx, Me
  571. loc_007291EC: push edx
  572. loc_007291ED: mov eax, var_12C
  573. loc_007291F3: push eax
  574. loc_007291F4: call [004010CCh] ; __vbaHresultCheckObj
  575. loc_007291FA: mov var_208, eax
  576. loc_00729200: jmp 0072920Ch
  577. loc_00729202: mov var_208, 00000000h
  578. loc_0072920C: mov ecx, var_9C
  579. loc_00729212: mov var_130, ecx
  580. loc_00729218: lea edx, var_88
  581. loc_0072921E: push edx
  582. loc_0072921F: mov eax, var_130
  583. loc_00729225: mov ecx, [eax]
  584. loc_00729227: mov edx, var_130
  585. loc_0072922D: push edx
  586. loc_0072922E: call [ecx+00000068h]
  587. loc_00729231: fnclex
  588. loc_00729233: mov var_134, eax
  589. loc_00729239: cmp var_134, 00000000h
  590. loc_00729240: jge 00729265h
  591. loc_00729242: push 00000068h
  592. loc_00729244: push 00475D6Ch
  593. loc_00729249: mov eax, var_130
  594. loc_0072924F: push eax
  595. loc_00729250: mov ecx, var_134
  596. loc_00729256: push ecx
  597. loc_00729257: call [004010CCh] ; __vbaHresultCheckObj
  598. loc_0072925D: mov var_20C, eax
  599. loc_00729263: jmp 0072926Fh
  600. loc_00729265: mov var_20C, 00000000h
  601. loc_0072926F: mov edx, var_88
  602. loc_00729275: push edx
  603. loc_00729276: mov eax, var_84
  604. loc_0072927C: push eax
  605. loc_0072927D: push 00452B08h ; "Daily"
  606. loc_00729282: mov ecx, var_80
  607. loc_00729285: push ecx
  608. loc_00729286: call [00401010h] ; rtcSaveSetting
  609. loc_0072928C: lea edx, var_88
  610. loc_00729292: push edx
  611. loc_00729293: lea eax, var_84
  612. loc_00729299: push eax
  613. loc_0072929A: lea ecx, var_80
  614. loc_0072929D: push ecx
  615. loc_0072929E: push 00000003h
  616. loc_007292A0: call [00401324h] ; __vbaFreeStrList
  617. loc_007292A6: add esp, 00000010h
  618. loc_007292A9: lea edx, var_9C
  619. loc_007292AF: push edx
  620. loc_007292B0: lea eax, var_98
  621. loc_007292B6: push eax
  622. loc_007292B7: lea ecx, var_94
  623. loc_007292BD: push ecx
  624. loc_007292BE: push 00000003h
  625. loc_007292C0: call [00401068h] ; __vbaFreeObjList
  626. loc_007292C6: add esp, 00000010h
  627. loc_007292C9: jmp 00729A6Dh
  628. loc_007292CE: mov var_4, 0000000Dh
  629. loc_007292D5: mov var_E8, 004723D8h ; "interest"
  630. loc_007292DF: mov var_F0, 00008008h
  631. loc_007292E9: lea edx, var_154
  632. loc_007292EF: push edx
  633. loc_007292F0: lea eax, var_F0
  634. loc_007292F6: push eax
  635. loc_007292F7: call [004011C0h] ; __vbaVarTstEq
  636. loc_007292FD: movsx ecx, ax
  637. loc_00729300: test ecx, ecx
  638. loc_00729302: jz 007296A0h
  639. loc_00729308: mov var_4, 0000000Eh
  640. loc_0072930F: cmp [0073C818h], 00000000h
  641. loc_00729316: jnz 00729334h
  642. loc_00729318: push 0073C818h
  643. loc_0072931D: push 00441F00h
  644. loc_00729322: call [004012FCh] ; __vbaNew2
  645. loc_00729328: mov var_210, 0073C818h
  646. loc_00729332: jmp 0072933Eh
  647. loc_00729334: mov var_210, 0073C818h
  648. loc_0072933E: mov edx, var_210
  649. loc_00729344: mov eax, [edx]
  650. loc_00729346: mov var_110, eax
  651. loc_0072934C: lea ecx, var_94
  652. loc_00729352: push ecx
  653. loc_00729353: mov edx, var_110
  654. loc_00729359: mov eax, [edx]
  655. loc_0072935B: mov ecx, var_110
  656. loc_00729361: push ecx
  657. loc_00729362: call [eax+00000014h]
  658. loc_00729365: fnclex
  659. loc_00729367: mov var_114, eax
  660. loc_0072936D: cmp var_114, 00000000h
  661. loc_00729374: jge 00729399h
  662. loc_00729376: push 00000014h
  663. loc_00729378: push 00441EF0h
  664. loc_0072937D: mov edx, var_110
  665. loc_00729383: push edx
  666. loc_00729384: mov eax, var_114
  667. loc_0072938A: push eax
  668. loc_0072938B: call [004010CCh] ; __vbaHresultCheckObj
  669. loc_00729391: mov var_214, eax
  670. loc_00729397: jmp 007293A3h
  671. loc_00729399: mov var_214, 00000000h
  672. loc_007293A3: mov ecx, var_94
  673. loc_007293A9: mov var_118, ecx
  674. loc_007293AF: lea edx, var_80
  675. loc_007293B2: push edx
  676. loc_007293B3: mov eax, var_118
  677. loc_007293B9: mov ecx, [eax]
  678. loc_007293BB: mov edx, var_118
  679. loc_007293C1: push edx
  680. loc_007293C2: call [ecx+00000060h]
  681. loc_007293C5: fnclex
  682. loc_007293C7: mov var_11C, eax
  683. loc_007293CD: cmp var_11C, 00000000h
  684. loc_007293D4: jge 007293F9h
  685. loc_007293D6: push 00000060h
  686. loc_007293D8: push 004437B4h
  687. loc_007293DD: mov eax, var_118
  688. loc_007293E3: push eax
  689. loc_007293E4: mov ecx, var_11C
  690. loc_007293EA: push ecx
  691. loc_007293EB: call [004010CCh] ; __vbaHresultCheckObj
  692. loc_007293F1: mov var_218, eax
  693. loc_007293F7: jmp 00729403h
  694. loc_007293F9: mov var_218, 00000000h
  695. loc_00729403: lea edx, var_98
  696. loc_00729409: push edx
  697. loc_0072940A: mov eax, Me
  698. loc_0072940D: mov ecx, [eax]
  699. loc_0072940F: mov edx, Me
  700. loc_00729412: push edx
  701. loc_00729413: call [ecx+0000001Ch]
  702. loc_00729416: mov var_120, eax
  703. loc_0072941C: cmp var_120, 00000000h
  704. loc_00729423: jge 00729445h
  705. loc_00729425: push 0000001Ch
  706. loc_00729427: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  707. loc_0072942C: mov eax, Me
  708. loc_0072942F: push eax
  709. loc_00729430: mov ecx, var_120
  710. loc_00729436: push ecx
  711. loc_00729437: call [004010CCh] ; __vbaHresultCheckObj
  712. loc_0072943D: mov var_21C, eax
  713. loc_00729443: jmp 0072944Fh
  714. loc_00729445: mov var_21C, 00000000h
  715. loc_0072944F: mov edx, var_98
  716. loc_00729455: mov var_124, edx
  717. loc_0072945B: lea eax, var_84
  718. loc_00729461: push eax
  719. loc_00729462: mov ecx, var_124
  720. loc_00729468: mov edx, [ecx]
  721. loc_0072946A: mov eax, var_124
  722. loc_00729470: push eax
  723. loc_00729471: call [edx+00000048h]
  724. loc_00729474: fnclex
  725. loc_00729476: mov var_128, eax
  726. loc_0072947C: cmp var_128, 00000000h
  727. loc_00729483: jge 007294A8h
  728. loc_00729485: push 00000048h
  729. loc_00729487: push 00475D6Ch
  730. loc_0072948C: mov ecx, var_124
  731. loc_00729492: push ecx
  732. loc_00729493: mov edx, var_128
  733. loc_00729499: push edx
  734. loc_0072949A: call [004010CCh] ; __vbaHresultCheckObj
  735. loc_007294A0: mov var_220, eax
  736. loc_007294A6: jmp 007294B2h
  737. loc_007294A8: mov var_220, 00000000h
  738. loc_007294B2: lea eax, var_9C
  739. loc_007294B8: push eax
  740. loc_007294B9: mov ecx, Me
  741. loc_007294BC: mov edx, [ecx]
  742. loc_007294BE: mov eax, Me
  743. loc_007294C1: push eax
  744. loc_007294C2: call [edx+0000001Ch]
  745. loc_007294C5: mov var_12C, eax
  746. loc_007294CB: cmp var_12C, 00000000h
  747. loc_007294D2: jge 007294F4h
  748. loc_007294D4: push 0000001Ch
  749. loc_007294D6: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  750. loc_007294DB: mov ecx, Me
  751. loc_007294DE: push ecx
  752. loc_007294DF: mov edx, var_12C
  753. loc_007294E5: push edx
  754. loc_007294E6: call [004010CCh] ; __vbaHresultCheckObj
  755. loc_007294EC: mov var_224, eax
  756. loc_007294F2: jmp 007294FEh
  757. loc_007294F4: mov var_224, 00000000h
  758. loc_007294FE: mov eax, var_9C
  759. loc_00729504: mov var_130, eax
  760. loc_0072950A: lea ecx, var_88
  761. loc_00729510: push ecx
  762. loc_00729511: mov edx, var_130
  763. loc_00729517: mov eax, [edx]
  764. loc_00729519: mov ecx, var_130
  765. loc_0072951F: push ecx
  766. loc_00729520: call [eax+00000060h]
  767. loc_00729523: fnclex
  768. loc_00729525: mov var_134, eax
  769. loc_0072952B: cmp var_134, 00000000h
  770. loc_00729532: jge 00729557h
  771. loc_00729534: push 00000060h
  772. loc_00729536: push 00475D6Ch
  773. loc_0072953B: mov edx, var_130
  774. loc_00729541: push edx
  775. loc_00729542: mov eax, var_134
  776. loc_00729548: push eax
  777. loc_00729549: call [004010CCh] ; __vbaHresultCheckObj
  778. loc_0072954F: mov var_228, eax
  779. loc_00729555: jmp 00729561h
  780. loc_00729557: mov var_228, 00000000h
  781. loc_00729561: lea ecx, var_A0
  782. loc_00729567: push ecx
  783. loc_00729568: mov edx, Me
  784. loc_0072956B: mov eax, [edx]
  785. loc_0072956D: mov ecx, Me
  786. loc_00729570: push ecx
  787. loc_00729571: call [eax+0000001Ch]
  788. loc_00729574: mov var_138, eax
  789. loc_0072957A: cmp var_138, 00000000h
  790. loc_00729581: jge 007295A3h
  791. loc_00729583: push 0000001Ch
  792. loc_00729585: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  793. loc_0072958A: mov edx, Me
  794. loc_0072958D: push edx
  795. loc_0072958E: mov eax, var_138
  796. loc_00729594: push eax
  797. loc_00729595: call [004010CCh] ; __vbaHresultCheckObj
  798. loc_0072959B: mov var_22C, eax
  799. loc_007295A1: jmp 007295ADh
  800. loc_007295A3: mov var_22C, 00000000h
  801. loc_007295AD: mov ecx, var_A0
  802. loc_007295B3: mov var_13C, ecx
  803. loc_007295B9: lea edx, var_8C
  804. loc_007295BF: push edx
  805. loc_007295C0: mov eax, var_13C
  806. loc_007295C6: mov ecx, [eax]
  807. loc_007295C8: mov edx, var_13C
  808. loc_007295CE: push edx
  809. loc_007295CF: call [ecx+00000068h]
  810. loc_007295D2: fnclex
  811. loc_007295D4: mov var_140, eax
  812. loc_007295DA: cmp var_140, 00000000h
  813. loc_007295E1: jge 00729606h
  814. loc_007295E3: push 00000068h
  815. loc_007295E5: push 00475D6Ch
  816. loc_007295EA: mov eax, var_13C
  817. loc_007295F0: push eax
  818. loc_007295F1: mov ecx, var_140
  819. loc_007295F7: push ecx
  820. loc_007295F8: call [004010CCh] ; __vbaHresultCheckObj
  821. loc_007295FE: mov var_230, eax
  822. loc_00729604: jmp 00729610h
  823. loc_00729606: mov var_230, 00000000h
  824. loc_00729610: mov edx, var_8C
  825. loc_00729616: push edx
  826. loc_00729617: mov eax, var_88
  827. loc_0072961D: push eax
  828. loc_0072961E: push 00476420h ; "InterestsHeard\"
  829. loc_00729623: mov ecx, var_84
  830. loc_00729629: push ecx
  831. loc_0072962A: call [00401098h] ; __vbaStrCat
  832. loc_00729630: mov edx, eax
  833. loc_00729632: lea ecx, var_90
  834. loc_00729638: call [004013C0h] ; __vbaStrMove
  835. loc_0072963E: push eax
  836. loc_0072963F: mov edx, var_80
  837. loc_00729642: push edx
  838. loc_00729643: call [00401010h] ; rtcSaveSetting
  839. loc_00729649: lea eax, var_8C
  840. loc_0072964F: push eax
  841. loc_00729650: lea ecx, var_88
  842. loc_00729656: push ecx
  843. loc_00729657: lea edx, var_90
  844. loc_0072965D: push edx
  845. loc_0072965E: lea eax, var_80
  846. loc_00729661: push eax
  847. loc_00729662: lea ecx, var_84
  848. loc_00729668: push ecx
  849. loc_00729669: push 00000005h
  850. loc_0072966B: call [00401324h] ; __vbaFreeStrList
  851. loc_00729671: add esp, 00000018h
  852. loc_00729674: lea edx, var_A0
  853. loc_0072967A: push edx
  854. loc_0072967B: lea eax, var_9C
  855. loc_00729681: push eax
  856. loc_00729682: lea ecx, var_98
  857. loc_00729688: push ecx
  858. loc_00729689: lea edx, var_94
  859. loc_0072968F: push edx
  860. loc_00729690: push 00000004h
  861. loc_00729692: call [00401068h] ; __vbaFreeObjList
  862. loc_00729698: add esp, 00000014h
  863. loc_0072969B: jmp 00729A6Dh
  864. loc_007296A0: mov var_4, 0000000Fh
  865. loc_007296A7: mov var_E8, 00476444h ; "news"
  866. loc_007296B1: mov var_F0, 00008008h
  867. loc_007296BB: lea eax, var_154
  868. loc_007296C1: push eax
  869. loc_007296C2: lea ecx, var_F0
  870. loc_007296C8: push ecx
  871. loc_007296C9: call [004011C0h] ; __vbaVarTstEq
  872. loc_007296CF: movsx edx, ax
  873. loc_007296D2: test edx, edx
  874. loc_007296D4: jz 00729A6Dh
  875. loc_007296DA: mov var_4, 00000010h
  876. loc_007296E1: cmp [0073C818h], 00000000h
  877. loc_007296E8: jnz 00729706h
  878. loc_007296EA: push 0073C818h
  879. loc_007296EF: push 00441F00h
  880. loc_007296F4: call [004012FCh] ; __vbaNew2
  881. loc_007296FA: mov var_234, 0073C818h
  882. loc_00729704: jmp 00729710h
  883. loc_00729706: mov var_234, 0073C818h
  884. loc_00729710: mov eax, var_234
  885. loc_00729716: mov ecx, [eax]
  886. loc_00729718: mov var_110, ecx
  887. loc_0072971E: lea edx, var_94
  888. loc_00729724: push edx
  889. loc_00729725: mov eax, var_110
  890. loc_0072972B: mov ecx, [eax]
  891. loc_0072972D: mov edx, var_110
  892. loc_00729733: push edx
  893. loc_00729734: call [ecx+00000014h]
  894. loc_00729737: fnclex
  895. loc_00729739: mov var_114, eax
  896. loc_0072973F: cmp var_114, 00000000h
  897. loc_00729746: jge 0072976Bh
  898. loc_00729748: push 00000014h
  899. loc_0072974A: push 00441EF0h
  900. loc_0072974F: mov eax, var_110
  901. loc_00729755: push eax
  902. loc_00729756: mov ecx, var_114
  903. loc_0072975C: push ecx
  904. loc_0072975D: call [004010CCh] ; __vbaHresultCheckObj
  905. loc_00729763: mov var_238, eax
  906. loc_00729769: jmp 00729775h
  907. loc_0072976B: mov var_238, 00000000h
  908. loc_00729775: mov edx, var_94
  909. loc_0072977B: mov var_118, edx
  910. loc_00729781: lea eax, var_80
  911. loc_00729784: push eax
  912. loc_00729785: mov ecx, var_118
  913. loc_0072978B: mov edx, [ecx]
  914. loc_0072978D: mov eax, var_118
  915. loc_00729793: push eax
  916. loc_00729794: call [edx+00000060h]
  917. loc_00729797: fnclex
  918. loc_00729799: mov var_11C, eax
  919. loc_0072979F: cmp var_11C, 00000000h
  920. loc_007297A6: jge 007297CBh
  921. loc_007297A8: push 00000060h
  922. loc_007297AA: push 004437B4h
  923. loc_007297AF: mov ecx, var_118
  924. loc_007297B5: push ecx
  925. loc_007297B6: mov edx, var_11C
  926. loc_007297BC: push edx
  927. loc_007297BD: call [004010CCh] ; __vbaHresultCheckObj
  928. loc_007297C3: mov var_23C, eax
  929. loc_007297C9: jmp 007297D5h
  930. loc_007297CB: mov var_23C, 00000000h
  931. loc_007297D5: lea eax, var_98
  932. loc_007297DB: push eax
  933. loc_007297DC: mov ecx, Me
  934. loc_007297DF: mov edx, [ecx]
  935. loc_007297E1: mov eax, Me
  936. loc_007297E4: push eax
  937. loc_007297E5: call [edx+0000001Ch]
  938. loc_007297E8: mov var_120, eax
  939. loc_007297EE: cmp var_120, 00000000h
  940. loc_007297F5: jge 00729817h
  941. loc_007297F7: push 0000001Ch
  942. loc_007297F9: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  943. loc_007297FE: mov ecx, Me
  944. loc_00729801: push ecx
  945. loc_00729802: mov edx, var_120
  946. loc_00729808: push edx
  947. loc_00729809: call [004010CCh] ; __vbaHresultCheckObj
  948. loc_0072980F: mov var_240, eax
  949. loc_00729815: jmp 00729821h
  950. loc_00729817: mov var_240, 00000000h
  951. loc_00729821: mov eax, var_98
  952. loc_00729827: mov var_124, eax
  953. loc_0072982D: lea ecx, var_84
  954. loc_00729833: push ecx
  955. loc_00729834: mov edx, var_124
  956. loc_0072983A: mov eax, [edx]
  957. loc_0072983C: mov ecx, var_124
  958. loc_00729842: push ecx
  959. loc_00729843: call [eax+00000048h]
  960. loc_00729846: fnclex
  961. loc_00729848: mov var_128, eax
  962. loc_0072984E: cmp var_128, 00000000h
  963. loc_00729855: jge 0072987Ah
  964. loc_00729857: push 00000048h
  965. loc_00729859: push 00475D6Ch
  966. loc_0072985E: mov edx, var_124
  967. loc_00729864: push edx
  968. loc_00729865: mov eax, var_128
  969. loc_0072986B: push eax
  970. loc_0072986C: call [004010CCh] ; __vbaHresultCheckObj
  971. loc_00729872: mov var_244, eax
  972. loc_00729878: jmp 00729884h
  973. loc_0072987A: mov var_244, 00000000h
  974. loc_00729884: lea ecx, var_9C
  975. loc_0072988A: push ecx
  976. loc_0072988B: mov edx, Me
  977. loc_0072988E: mov eax, [edx]
  978. loc_00729890: mov ecx, Me
  979. loc_00729893: push ecx
  980. loc_00729894: call [eax+0000001Ch]
  981. loc_00729897: mov var_12C, eax
  982. loc_0072989D: cmp var_12C, 00000000h
  983. loc_007298A4: jge 007298C6h
  984. loc_007298A6: push 0000001Ch
  985. loc_007298A8: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  986. loc_007298AD: mov edx, Me
  987. loc_007298B0: push edx
  988. loc_007298B1: mov eax, var_12C
  989. loc_007298B7: push eax
  990. loc_007298B8: call [004010CCh] ; __vbaHresultCheckObj
  991. loc_007298BE: mov var_248, eax
  992. loc_007298C4: jmp 007298D0h
  993. loc_007298C6: mov var_248, 00000000h
  994. loc_007298D0: mov ecx, var_9C
  995. loc_007298D6: mov var_130, ecx
  996. loc_007298DC: lea edx, var_88
  997. loc_007298E2: push edx
  998. loc_007298E3: mov eax, var_130
  999. loc_007298E9: mov ecx, [eax]
  1000. loc_007298EB: mov edx, var_130
  1001. loc_007298F1: push edx
  1002. loc_007298F2: call [ecx+00000060h]
  1003. loc_007298F5: fnclex
  1004. loc_007298F7: mov var_134, eax
  1005. loc_007298FD: cmp var_134, 00000000h
  1006. loc_00729904: jge 00729929h
  1007. loc_00729906: push 00000060h
  1008. loc_00729908: push 00475D6Ch
  1009. loc_0072990D: mov eax, var_130
  1010. loc_00729913: push eax
  1011. loc_00729914: mov ecx, var_134
  1012. loc_0072991A: push ecx
  1013. loc_0072991B: call [004010CCh] ; __vbaHresultCheckObj
  1014. loc_00729921: mov var_24C, eax
  1015. loc_00729927: jmp 00729933h
  1016. loc_00729929: mov var_24C, 00000000h
  1017. loc_00729933: lea edx, var_A0
  1018. loc_00729939: push edx
  1019. loc_0072993A: mov eax, Me
  1020. loc_0072993D: mov ecx, [eax]
  1021. loc_0072993F: mov edx, Me
  1022. loc_00729942: push edx
  1023. loc_00729943: call [ecx+0000001Ch]
  1024. loc_00729946: mov var_138, eax
  1025. loc_0072994C: cmp var_138, 00000000h
  1026. loc_00729953: jge 00729975h
  1027. loc_00729955: push 0000001Ch
  1028. loc_00729957: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  1029. loc_0072995C: mov eax, Me
  1030. loc_0072995F: push eax
  1031. loc_00729960: mov ecx, var_138
  1032. loc_00729966: push ecx
  1033. loc_00729967: call [004010CCh] ; __vbaHresultCheckObj
  1034. loc_0072996D: mov var_250, eax
  1035. loc_00729973: jmp 0072997Fh
  1036. loc_00729975: mov var_250, 00000000h
  1037. loc_0072997F: mov edx, var_A0
  1038. loc_00729985: mov var_13C, edx
  1039. loc_0072998B: lea eax, var_8C
  1040. loc_00729991: push eax
  1041. loc_00729992: mov ecx, var_13C
  1042. loc_00729998: mov edx, [ecx]
  1043. loc_0072999A: mov eax, var_13C
  1044. loc_007299A0: push eax
  1045. loc_007299A1: call [edx+00000068h]
  1046. loc_007299A4: fnclex
  1047. loc_007299A6: mov var_140, eax
  1048. loc_007299AC: cmp var_140, 00000000h
  1049. loc_007299B3: jge 007299D8h
  1050. loc_007299B5: push 00000068h
  1051. loc_007299B7: push 00475D6Ch
  1052. loc_007299BC: mov ecx, var_13C
  1053. loc_007299C2: push ecx
  1054. loc_007299C3: mov edx, var_140
  1055. loc_007299C9: push edx
  1056. loc_007299CA: call [004010CCh] ; __vbaHresultCheckObj
  1057. loc_007299D0: mov var_254, eax
  1058. loc_007299D6: jmp 007299E2h
  1059. loc_007299D8: mov var_254, 00000000h
  1060. loc_007299E2: mov eax, var_8C
  1061. loc_007299E8: push eax
  1062. loc_007299E9: mov ecx, var_88
  1063. loc_007299EF: push ecx
  1064. loc_007299F0: push 00476454h ; "NewsHeard\"
  1065. loc_007299F5: mov edx, var_84
  1066. loc_007299FB: push edx
  1067. loc_007299FC: call [00401098h] ; __vbaStrCat
  1068. loc_00729A02: mov edx, eax
  1069. loc_00729A04: lea ecx, var_90
  1070. loc_00729A0A: call [004013C0h] ; __vbaStrMove
  1071. loc_00729A10: push eax
  1072. loc_00729A11: mov eax, var_80
  1073. loc_00729A14: push eax
  1074. loc_00729A15: call [00401010h] ; rtcSaveSetting
  1075. loc_00729A1B: lea ecx, var_8C
  1076. loc_00729A21: push ecx
  1077. loc_00729A22: lea edx, var_88
  1078. loc_00729A28: push edx
  1079. loc_00729A29: lea eax, var_90
  1080. loc_00729A2F: push eax
  1081. loc_00729A30: lea ecx, var_80
  1082. loc_00729A33: push ecx
  1083. loc_00729A34: lea edx, var_84
  1084. loc_00729A3A: push edx
  1085. loc_00729A3B: push 00000005h
  1086. loc_00729A3D: call [00401324h] ; __vbaFreeStrList
  1087. loc_00729A43: add esp, 00000018h
  1088. loc_00729A46: lea eax, var_A0
  1089. loc_00729A4C: push eax
  1090. loc_00729A4D: lea ecx, var_9C
  1091. loc_00729A53: push ecx
  1092. loc_00729A54: lea edx, var_98
  1093. loc_00729A5A: push edx
  1094. loc_00729A5B: lea eax, var_94
  1095. loc_00729A61: push eax
  1096. loc_00729A62: push 00000004h
  1097. loc_00729A64: call [00401068h] ; __vbaFreeObjList
  1098. loc_00729A6A: add esp, 00000014h
  1099. loc_00729A6D: mov var_4, 00000012h
  1100. loc_00729A74: lea ecx, var_94
  1101. loc_00729A7A: push ecx
  1102. loc_00729A7B: mov edx, Me
  1103. loc_00729A7E: mov eax, [edx]
  1104. loc_00729A80: mov ecx, Me
  1105. loc_00729A83: push ecx
  1106. loc_00729A84: call [eax+0000001Ch]
  1107. loc_00729A87: mov var_110, eax
  1108. loc_00729A8D: cmp var_110, 00000000h
  1109. loc_00729A94: jge 00729AB6h
  1110. loc_00729A96: push 0000001Ch
  1111. loc_00729A98: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  1112. loc_00729A9D: mov edx, Me
  1113. loc_00729AA0: push edx
  1114. loc_00729AA1: mov eax, var_110
  1115. loc_00729AA7: push eax
  1116. loc_00729AA8: call [004010CCh] ; __vbaHresultCheckObj
  1117. loc_00729AAE: mov var_258, eax
  1118. loc_00729AB4: jmp 00729AC0h
  1119. loc_00729AB6: mov var_258, 00000000h
  1120. loc_00729AC0: mov ecx, var_94
  1121. loc_00729AC6: mov var_114, ecx
  1122. loc_00729ACC: lea edx, var_80
  1123. loc_00729ACF: push edx
  1124. loc_00729AD0: mov eax, var_114
  1125. loc_00729AD6: mov ecx, [eax]
  1126. loc_00729AD8: mov edx, var_114
  1127. loc_00729ADE: push edx
  1128. loc_00729ADF: call [ecx+00000070h]
  1129. loc_00729AE2: fnclex
  1130. loc_00729AE4: mov var_118, eax
  1131. loc_00729AEA: cmp var_118, 00000000h
  1132. loc_00729AF1: jge 00729B16h
  1133. loc_00729AF3: push 00000070h
  1134. loc_00729AF5: push 00475D6Ch
  1135. loc_00729AFA: mov eax, var_114
  1136. loc_00729B00: push eax
  1137. loc_00729B01: mov ecx, var_118
  1138. loc_00729B07: push ecx
  1139. loc_00729B08: call [004010CCh] ; __vbaHresultCheckObj
  1140. loc_00729B0E: mov var_25C, eax
  1141. loc_00729B14: jmp 00729B20h
  1142. loc_00729B16: mov var_25C, 00000000h
  1143. loc_00729B20: mov edx, var_80
  1144. loc_00729B23: mov var_178, edx
  1145. loc_00729B29: mov var_80, 00000000h
  1146. loc_00729B30: mov edx, var_178
  1147. loc_00729B36: lea ecx, var_84
  1148. loc_00729B3C: call [004013C0h] ; __vbaStrMove
  1149. loc_00729B42: lea eax, var_84
  1150. loc_00729B48: push eax
  1151. loc_00729B49: call 0072F310h
  1152. loc_00729B4E: lea ecx, var_84
  1153. loc_00729B54: call [00401430h] ; __vbaFreeStr
  1154. loc_00729B5A: lea ecx, var_94
  1155. loc_00729B60: call [0040142Ch] ; __vbaFreeObj
  1156. loc_00729B66: mov var_4, 00000013h
  1157. loc_00729B6D: mov var_10C, 00000003h
  1158. loc_00729B77: lea ecx, var_10C
  1159. loc_00729B7D: push ecx
  1160. loc_00729B7E: mov edx, Me
  1161. loc_00729B81: mov eax, [edx+00000044h]
  1162. loc_00729B84: mov ecx, Me
  1163. loc_00729B87: mov edx, [ecx+00000044h]
  1164. loc_00729B8A: mov ecx, [edx]
  1165. loc_00729B8C: push eax
  1166. loc_00729B8D: call [ecx+00000030h]
  1167. loc_00729B90: fnclex
  1168. loc_00729B92: mov var_110, eax
  1169. loc_00729B98: cmp var_110, 00000000h
  1170. loc_00729B9F: jge 00729BC4h
  1171. loc_00729BA1: push 00000030h
  1172. loc_00729BA3: push 004523F0h ; "�" & Chr(37) & "�R���@�" & Chr(13) & "�X�Y�'BBEvent"
  1173. loc_00729BA8: mov edx, Me
  1174. loc_00729BAB: mov eax, [edx+00000044h]
  1175. loc_00729BAE: push eax
  1176. loc_00729BAF: mov ecx, var_110
  1177. loc_00729BB5: push ecx
  1178. loc_00729BB6: call [004010CCh] ; __vbaHresultCheckObj
  1179. loc_00729BBC: mov var_260, eax
  1180. loc_00729BC2: jmp 00729BCEh
  1181. loc_00729BC4: mov var_260, 00000000h
  1182. loc_00729BCE: jmp 0072CBA7h
  1183. loc_00729BD3: mov var_4, 00000016h
  1184. loc_00729BDA: mov edx, Me
  1185. loc_00729BDD: mov eax, [edx+00000038h]
  1186. loc_00729BE0: push eax
  1187. loc_00729BE1: lea ecx, var_7C
  1188. loc_00729BE4: push ecx
  1189. loc_00729BE5: call [00401364h] ; __vbaAryLock
  1190. loc_00729BEB: cmp var_7C, 00000000h
  1191. loc_00729BEF: jz 00729C44h
  1192. loc_00729BF1: mov edx, var_7C
  1193. loc_00729BF4: cmp [edx], 0001h
  1194. loc_00729BF8: jnz 00729C44h
  1195. loc_00729BFA: mov eax, Me
  1196. loc_00729BFD: movsx ecx, [eax+0000003Ch]
  1197. loc_00729C01: mov edx, var_7C
  1198. loc_00729C04: sub ecx, [edx+00000014h]
  1199. loc_00729C07: mov var_110, ecx
  1200. loc_00729C0D: mov eax, var_7C
  1201. loc_00729C10: mov ecx, var_110
  1202. loc_00729C16: cmp ecx, [eax+00000010h]
  1203. loc_00729C19: jae 00729C27h
  1204. loc_00729C1B: mov var_264, 00000000h
  1205. loc_00729C25: jmp 00729C33h
  1206. loc_00729C27: call [004011A8h] ; __vbaGenerateBoundsError
  1207. loc_00729C2D: mov var_264, eax
  1208. loc_00729C33: mov edx, var_110
  1209. loc_00729C39: shl edx, 02h
  1210. loc_00729C3C: mov var_268, edx
  1211. loc_00729C42: jmp 00729C50h
  1212. loc_00729C44: call [004011A8h] ; __vbaGenerateBoundsError
  1213. loc_00729C4A: mov var_268, eax
  1214. loc_00729C50: mov eax, var_7C
  1215. loc_00729C53: mov ecx, [eax+0000000Ch]
  1216. loc_00729C56: add ecx, var_268
  1217. loc_00729C5C: mov var_E8, ecx
  1218. loc_00729C62: mov var_F0, 00004009h
  1219. loc_00729C6C: lea edx, var_F0
  1220. loc_00729C72: push edx
  1221. loc_00729C73: call [004010F4h] ; rtcTypeName
  1222. loc_00729C79: mov edx, eax
  1223. loc_00729C7B: lea ecx, var_80
  1224. loc_00729C7E: call [004013C0h] ; __vbaStrMove
  1225. loc_00729C84: lea eax, var_7C
  1226. loc_00729C87: push eax
  1227. loc_00729C88: call [00401410h] ; __vbaAryUnlock
  1228. loc_00729C8E: mov ecx, var_80
  1229. loc_00729C91: mov var_17C, ecx
  1230. loc_00729C97: mov var_80, 00000000h
  1231. loc_00729C9E: mov edx, var_17C
  1232. loc_00729CA4: lea ecx, var_144
  1233. loc_00729CAA: call [004013C0h] ; __vbaStrMove
  1234. loc_00729CB0: mov var_4, 00000017h
  1235. loc_00729CB7: mov edx, var_144
  1236. loc_00729CBD: push edx
  1237. loc_00729CBE: push 00476470h ; "clsCommandDownloadFile"
  1238. loc_00729CC3: call [004011B8h] ; __vbaStrCmp
  1239. loc_00729CC9: test eax, eax
  1240. loc_00729CCB: jnz 0072A323h
  1241. loc_00729CD1: mov var_4, 00000018h
  1242. loc_00729CD8: mov eax, Me
  1243. loc_00729CDB: cmp [eax+00000038h], 00000000h
  1244. loc_00729CDF: jz 00729D3Dh
  1245. loc_00729CE1: mov ecx, Me
  1246. loc_00729CE4: mov edx, [ecx+00000038h]
  1247. loc_00729CE7: cmp [edx], 0001h
  1248. loc_00729CEB: jnz 00729D3Dh
  1249. loc_00729CED: mov eax, Me
  1250. loc_00729CF0: movsx ecx, [eax+0000003Ch]
  1251. loc_00729CF4: mov edx, Me
  1252. loc_00729CF7: mov eax, [edx+00000038h]
  1253. loc_00729CFA: sub ecx, [eax+00000014h]
  1254. loc_00729CFD: mov var_110, ecx
  1255. loc_00729D03: mov ecx, Me
  1256. loc_00729D06: mov edx, [ecx+00000038h]
  1257. loc_00729D09: mov eax, var_110
  1258. loc_00729D0F: cmp eax, [edx+00000010h]
  1259. loc_00729D12: jae 00729D20h
  1260. loc_00729D14: mov var_26C, 00000000h
  1261. loc_00729D1E: jmp 00729D2Ch
  1262. loc_00729D20: call [004011A8h] ; __vbaGenerateBoundsError
  1263. loc_00729D26: mov var_26C, eax
  1264. loc_00729D2C: mov ecx, var_110
  1265. loc_00729D32: shl ecx, 02h
  1266. loc_00729D35: mov var_270, ecx
  1267. loc_00729D3B: jmp 00729D49h
  1268. loc_00729D3D: call [004011A8h] ; __vbaGenerateBoundsError
  1269. loc_00729D43: mov var_270, eax
  1270. loc_00729D49: push 004764A0h
  1271. loc_00729D4E: mov edx, Me
  1272. loc_00729D51: mov eax, [edx+00000038h]
  1273. loc_00729D54: mov ecx, [eax+0000000Ch]
  1274. loc_00729D57: mov edx, var_270
  1275. loc_00729D5D: mov eax, [ecx+edx]
  1276. loc_00729D60: push eax
  1277. loc_00729D61: call [004013C4h] ; __vbaCastObj
  1278. loc_00729D67: push eax
  1279. loc_00729D68: lea ecx, var_38
  1280. loc_00729D6B: push ecx
  1281. loc_00729D6C: call [00401128h] ; __vbaObjSet
  1282. loc_00729D72: mov var_4, 00000019h
  1283. loc_00729D79: lea edx, var_80
  1284. loc_00729D7C: push edx
  1285. loc_00729D7D: mov eax, var_38
  1286. loc_00729D80: mov ecx, [eax]
  1287. loc_00729D82: mov edx, var_38
  1288. loc_00729D85: push edx
  1289. loc_00729D86: call [ecx+00000030h]
  1290. loc_00729D89: fnclex
  1291. loc_00729D8B: mov var_110, eax
  1292. loc_00729D91: cmp var_110, 00000000h
  1293. loc_00729D98: jge 00729DBAh
  1294. loc_00729D9A: push 00000030h
  1295. loc_00729D9C: push 004764A0h
  1296. loc_00729DA1: mov eax, var_38
  1297. loc_00729DA4: push eax
  1298. loc_00729DA5: mov ecx, var_110
  1299. loc_00729DAB: push ecx
  1300. loc_00729DAC: call [004010CCh] ; __vbaHresultCheckObj
  1301. loc_00729DB2: mov var_274, eax
  1302. loc_00729DB8: jmp 00729DC4h
  1303. loc_00729DBA: mov var_274, 00000000h
  1304. loc_00729DC4: mov edx, var_80
  1305. loc_00729DC7: mov var_180, edx
  1306. loc_00729DCD: mov var_80, 00000000h
  1307. loc_00729DD4: mov eax, var_180
  1308. loc_00729DDA: mov var_A8, eax
  1309. loc_00729DE0: mov var_B0, 00000008h
  1310. loc_00729DEA: lea ecx, var_B0
  1311. loc_00729DF0: push ecx
  1312. loc_00729DF1: lea edx, var_C0
  1313. loc_00729DF7: push edx
  1314. loc_00729DF8: call [00401154h] ; rtcTrimVar
  1315. loc_00729DFE: lea eax, var_C0
  1316. loc_00729E04: push eax
  1317. loc_00729E05: lea ecx, var_84
  1318. loc_00729E0B: push ecx
  1319. loc_00729E0C: call [004012A8h] ; __vbaStrVarVal
  1320. loc_00729E12: push eax
  1321. loc_00729E13: mov edx, var_38
  1322. loc_00729E16: mov eax, [edx]
  1323. loc_00729E18: mov ecx, var_38
  1324. loc_00729E1B: push ecx
  1325. loc_00729E1C: call [eax+00000034h]
  1326. loc_00729E1F: fnclex
  1327. loc_00729E21: mov var_114, eax
  1328. loc_00729E27: cmp var_114, 00000000h
  1329. loc_00729E2E: jge 00729E50h
  1330. loc_00729E30: push 00000034h
  1331. loc_00729E32: push 004764A0h
  1332. loc_00729E37: mov edx, var_38
  1333. loc_00729E3A: push edx
  1334. loc_00729E3B: mov eax, var_114
  1335. loc_00729E41: push eax
  1336. loc_00729E42: call [004010CCh] ; __vbaHresultCheckObj
  1337. loc_00729E48: mov var_278, eax
  1338. loc_00729E4E: jmp 00729E5Ah
  1339. loc_00729E50: mov var_278, 00000000h
  1340. loc_00729E5A: lea ecx, var_84
  1341. loc_00729E60: call [00401430h] ; __vbaFreeStr
  1342. loc_00729E66: lea ecx, var_C0
  1343. loc_00729E6C: push ecx
  1344. loc_00729E6D: lea edx, var_B0
  1345. loc_00729E73: push edx
  1346. loc_00729E74: push 00000002h
  1347. loc_00729E76: call [00401050h] ; __vbaFreeVarList
  1348. loc_00729E7C: add esp, 0000000Ch
  1349. loc_00729E7F: mov var_4, 0000001Ah
  1350. loc_00729E86: lea eax, var_80
  1351. loc_00729E89: push eax
  1352. loc_00729E8A: mov ecx, var_38
  1353. loc_00729E8D: mov edx, [ecx]
  1354. loc_00729E8F: mov eax, var_38
  1355. loc_00729E92: push eax
  1356. loc_00729E93: call [edx+00000030h]
  1357. loc_00729E96: fnclex
  1358. loc_00729E98: mov var_110, eax
  1359. loc_00729E9E: cmp var_110, 00000000h
  1360. loc_00729EA5: jge 00729EC7h
  1361. loc_00729EA7: push 00000030h
  1362. loc_00729EA9: push 004764A0h
  1363. loc_00729EAE: mov ecx, var_38
  1364. loc_00729EB1: push ecx
  1365. loc_00729EB2: mov edx, var_110
  1366. loc_00729EB8: push edx
  1367. loc_00729EB9: call [004010CCh] ; __vbaHresultCheckObj
  1368. loc_00729EBF: mov var_27C, eax
  1369. loc_00729EC5: jmp 00729ED1h
  1370. loc_00729EC7: mov var_27C, 00000000h
  1371. loc_00729ED1: mov eax, var_80
  1372. loc_00729ED4: mov var_184, eax
  1373. loc_00729EDA: mov var_80, 00000000h
  1374. loc_00729EE1: mov ecx, var_184
  1375. loc_00729EE7: mov var_A8, ecx
  1376. loc_00729EED: mov var_B0, 00000008h
  1377. loc_00729EF7: lea edx, var_B0
  1378. loc_00729EFD: push edx
  1379. loc_00729EFE: lea eax, var_C0
  1380. loc_00729F04: push eax
  1381. loc_00729F05: call [00401080h] ; rtcLowerCaseVar
  1382. loc_00729F0B: mov var_E8, 00450E50h ; "true"
  1383. loc_00729F15: mov var_F0, 00008008h
  1384. loc_00729F1F: lea ecx, var_C0
  1385. loc_00729F25: push ecx
  1386. loc_00729F26: lea edx, var_F0
  1387. loc_00729F2C: push edx
  1388. loc_00729F2D: call [00401348h] ; __vbaVarTstNe
  1389. loc_00729F33: mov var_114, ax
  1390. loc_00729F3A: lea eax, var_C0
  1391. loc_00729F40: push eax
  1392. loc_00729F41: lea ecx, var_B0
  1393. loc_00729F47: push ecx
  1394. loc_00729F48: push 00000002h
  1395. loc_00729F4A: call [00401050h] ; __vbaFreeVarList
  1396. loc_00729F50: add esp, 0000000Ch
  1397. loc_00729F53: movsx edx, var_114
  1398. loc_00729F5A: test edx, edx
  1399. loc_00729F5C: jz 00729FB1h
  1400. loc_00729F5E: mov var_4, 0000001Bh
  1401. loc_00729F65: push 00475770h ; "false"
  1402. loc_00729F6A: mov eax, var_38
  1403. loc_00729F6D: mov ecx, [eax]
  1404. loc_00729F6F: mov edx, var_38
  1405. loc_00729F72: push edx
  1406. loc_00729F73: call [ecx+00000034h]
  1407. loc_00729F76: fnclex
  1408. loc_00729F78: mov var_110, eax
  1409. loc_00729F7E: cmp var_110, 00000000h
  1410. loc_00729F85: jge 00729FA7h
  1411. loc_00729F87: push 00000034h
  1412. loc_00729F89: push 004764A0h
  1413. loc_00729F8E: mov eax, var_38
  1414. loc_00729F91: push eax
  1415. loc_00729F92: mov ecx, var_110
  1416. loc_00729F98: push ecx
  1417. loc_00729F99: call [004010CCh] ; __vbaHresultCheckObj
  1418. loc_00729F9F: mov var_280, eax
  1419. loc_00729FA5: jmp 00729FB1h
  1420. loc_00729FA7: mov var_280, 00000000h
  1421. loc_00729FB1: mov var_4, 0000001Dh
  1422. loc_00729FB8: lea edx, var_80
  1423. loc_00729FBB: push edx
  1424. loc_00729FBC: mov eax, var_38
  1425. loc_00729FBF: mov ecx, [eax]
  1426. loc_00729FC1: mov edx, var_38
  1427. loc_00729FC4: push edx
  1428. loc_00729FC5: call [ecx+00000020h]
  1429. loc_00729FC8: fnclex
  1430. loc_00729FCA: mov var_110, eax
  1431. loc_00729FD0: cmp var_110, 00000000h
  1432. loc_00729FD7: jge 00729FF9h
  1433. loc_00729FD9: push 00000020h
  1434. loc_00729FDB: push 004764A0h
  1435. loc_00729FE0: mov eax, var_38
  1436. loc_00729FE3: push eax
  1437. loc_00729FE4: mov ecx, var_110
  1438. loc_00729FEA: push ecx
  1439. loc_00729FEB: call [004010CCh] ; __vbaHresultCheckObj
  1440. loc_00729FF1: mov var_284, eax
  1441. loc_00729FF7: jmp 0072A003h
  1442. loc_00729FF9: mov var_284, 00000000h
  1443. loc_0072A003: mov edx, var_80
  1444. loc_0072A006: mov var_188, edx
  1445. loc_0072A00C: mov var_80, 00000000h
  1446. loc_0072A013: mov edx, var_188
  1447. loc_0072A019: mov ecx, 0073A170h
  1448. loc_0072A01E: call [004013C0h] ; __vbaStrMove
  1449. loc_0072A024: mov var_4, 0000001Eh
  1450. loc_0072A02B: push 00000000h
  1451. loc_0072A02D: call [0040100Ch] ; __vbaStrI2
  1452. loc_0072A033: mov edx, eax
  1453. loc_0072A035: mov ecx, 0073A16Ch
  1454. loc_0072A03A: call [004013C0h] ; __vbaStrMove
  1455. loc_0072A040: mov var_4, 0000001Fh
  1456. loc_0072A047: lea eax, var_80
  1457. loc_0072A04A: push eax
  1458. loc_0072A04B: mov ecx, var_38
  1459. loc_0072A04E: mov edx, [ecx]
  1460. loc_0072A050: mov eax, var_38
  1461. loc_0072A053: push eax
  1462. loc_0072A054: call [edx+00000028h]
  1463. loc_0072A057: fnclex
  1464. loc_0072A059: mov var_110, eax
  1465. loc_0072A05F: cmp var_110, 00000000h
  1466. loc_0072A066: jge 0072A088h
  1467. loc_0072A068: push 00000028h
  1468. loc_0072A06A: push 004764A0h
  1469. loc_0072A06F: mov ecx, var_38
  1470. loc_0072A072: push ecx
  1471. loc_0072A073: mov edx, var_110
  1472. loc_0072A079: push edx
  1473. loc_0072A07A: call [004010CCh] ; __vbaHresultCheckObj
  1474. loc_0072A080: mov var_288, eax
  1475. loc_0072A086: jmp 0072A092h
  1476. loc_0072A088: mov var_288, 00000000h
  1477. loc_0072A092: lea eax, var_84
  1478. loc_0072A098: push eax
  1479. loc_0072A099: mov ecx, var_38
  1480. loc_0072A09C: mov edx, [ecx]
  1481. loc_0072A09E: mov eax, var_38
  1482. loc_0072A0A1: push eax
  1483. loc_0072A0A2: call [edx+00000030h]
  1484. loc_0072A0A5: fnclex
  1485. loc_0072A0A7: mov var_114, eax
  1486. loc_0072A0AD: cmp var_114, 00000000h
  1487. loc_0072A0B4: jge 0072A0D6h
  1488. loc_0072A0B6: push 00000030h
  1489. loc_0072A0B8: push 004764A0h
  1490. loc_0072A0BD: mov ecx, var_38
  1491. loc_0072A0C0: push ecx
  1492. loc_0072A0C1: mov edx, var_114
  1493. loc_0072A0C7: push edx
  1494. loc_0072A0C8: call [004010CCh] ; __vbaHresultCheckObj
  1495. loc_0072A0CE: mov var_28C, eax
  1496. loc_0072A0D4: jmp 0072A0E0h
  1497. loc_0072A0D6: mov var_28C, 00000000h
  1498. loc_0072A0E0: cmp [0073A254h], 00000000h
  1499. loc_0072A0E7: jnz 0072A105h
  1500. loc_0072A0E9: push 0073A254h
  1501. loc_0072A0EE: push 00431838h
  1502. loc_0072A0F3: call [004012FCh] ; __vbaNew2
  1503. loc_0072A0F9: mov var_290, 0073A254h
  1504. loc_0072A103: jmp 0072A10Fh
  1505. loc_0072A105: mov var_290, 0073A254h
  1506. loc_0072A10F: mov eax, var_290
  1507. loc_0072A115: mov ecx, [eax]
  1508. loc_0072A117: mov var_118, ecx
  1509. loc_0072A11D: mov var_108, 0000h
  1510. loc_0072A126: mov edx, var_84
  1511. loc_0072A12C: push edx
  1512. loc_0072A12D: call [00401108h] ; __vbaBoolStr
  1513. loc_0072A133: not ax
  1514. loc_0072A136: mov var_104, ax
  1515. loc_0072A13D: mov eax, var_80
  1516. loc_0072A140: mov var_18C, eax
  1517. loc_0072A146: mov var_80, 00000000h
  1518. loc_0072A14D: mov edx, var_18C
  1519. loc_0072A153: lea ecx, var_88
  1520. loc_0072A159: call [004013C0h] ; __vbaStrMove
  1521. loc_0072A15F: lea ecx, var_108
  1522. loc_0072A165: push ecx
  1523. loc_0072A166: lea edx, var_104
  1524. loc_0072A16C: push edx
  1525. loc_0072A16D: lea eax, var_88
  1526. loc_0072A173: push eax
  1527. loc_0072A174: mov ecx, var_118
  1528. loc_0072A17A: mov edx, [ecx]
  1529. loc_0072A17C: mov eax, var_118
  1530. loc_0072A182: push eax
  1531. loc_0072A183: call [edx+00000740h]
  1532. loc_0072A189: fnclex
  1533. loc_0072A18B: mov var_11C, eax
  1534. loc_0072A191: cmp var_11C, 00000000h
  1535. loc_0072A198: jge 0072A1C0h
  1536. loc_0072A19A: push 00000740h
  1537. loc_0072A19F: push 004408D0h
  1538. loc_0072A1A4: mov ecx, var_118
  1539. loc_0072A1AA: push ecx
  1540. loc_0072A1AB: mov edx, var_11C
  1541. loc_0072A1B1: push edx
  1542. loc_0072A1B2: call [004010CCh] ; __vbaHresultCheckObj
  1543. loc_0072A1B8: mov var_294, eax
  1544. loc_0072A1BE: jmp 0072A1CAh
  1545. loc_0072A1C0: mov var_294, 00000000h
  1546. loc_0072A1CA: lea eax, var_88
  1547. loc_0072A1D0: push eax
  1548. loc_0072A1D1: lea ecx, var_84
  1549. loc_0072A1D7: push ecx
  1550. loc_0072A1D8: push 00000002h
  1551. loc_0072A1DA: call [00401324h] ; __vbaFreeStrList
  1552. loc_0072A1E0: add esp, 0000000Ch
  1553. loc_0072A1E3: mov var_4, 00000020h
  1554. loc_0072A1EA: lea edx, var_94
  1555. loc_0072A1F0: push edx
  1556. loc_0072A1F1: mov eax, var_38
  1557. loc_0072A1F4: mov ecx, [eax]
  1558. loc_0072A1F6: mov edx, var_38
  1559. loc_0072A1F9: push edx
  1560. loc_0072A1FA: call [ecx+00000038h]
  1561. loc_0072A1FD: fnclex
  1562. loc_0072A1FF: mov var_114, eax
  1563. loc_0072A205: cmp var_114, 00000000h
  1564. loc_0072A20C: jge 0072A22Eh
  1565. loc_0072A20E: push 00000038h
  1566. loc_0072A210: push 004764A0h
  1567. loc_0072A215: mov eax, var_38
  1568. loc_0072A218: push eax
  1569. loc_0072A219: mov ecx, var_114
  1570. loc_0072A21F: push ecx
  1571. loc_0072A220: call [004010CCh] ; __vbaHresultCheckObj
  1572. loc_0072A226: mov var_298, eax
  1573. loc_0072A22C: jmp 0072A238h
  1574. loc_0072A22E: mov var_298, 00000000h
  1575. loc_0072A238: mov edx, Me
  1576. loc_0072A23B: cmp [edx+00000038h], 00000000h
  1577. loc_0072A23F: jz 0072A29Dh
  1578. loc_0072A241: mov eax, Me
  1579. loc_0072A244: mov ecx, [eax+00000038h]
  1580. loc_0072A247: cmp [ecx], 0001h
  1581. loc_0072A24B: jnz 0072A29Dh
  1582. loc_0072A24D: mov edx, Me
  1583. loc_0072A250: movsx eax, [edx+0000003Ch]
  1584. loc_0072A254: mov ecx, Me
  1585. loc_0072A257: mov edx, [ecx+00000038h]
  1586. loc_0072A25A: sub eax, [edx+00000014h]
  1587. loc_0072A25D: mov var_110, eax
  1588. loc_0072A263: mov eax, Me
  1589. loc_0072A266: mov ecx, [eax+00000038h]
  1590. loc_0072A269: mov edx, var_110
  1591. loc_0072A26F: cmp edx, [ecx+00000010h]
  1592. loc_0072A272: jae 0072A280h
  1593. loc_0072A274: mov var_29C, 00000000h
  1594. loc_0072A27E: jmp 0072A28Ch
  1595. loc_0072A280: call [004011A8h] ; __vbaGenerateBoundsError
  1596. loc_0072A286: mov var_29C, eax
  1597. loc_0072A28C: mov eax, var_110
  1598. loc_0072A292: shl eax, 02h
  1599. loc_0072A295: mov var_2A0, eax
  1600. loc_0072A29B: jmp 0072A2A9h
  1601. loc_0072A29D: call [004011A8h] ; __vbaGenerateBoundsError
  1602. loc_0072A2A3: mov var_2A0, eax
  1603. loc_0072A2A9: mov ecx, var_94
  1604. loc_0072A2AF: push ecx
  1605. loc_0072A2B0: mov edx, Me
  1606. loc_0072A2B3: mov eax, [edx+00000038h]
  1607. loc_0072A2B6: mov ecx, [eax+0000000Ch]
  1608. loc_0072A2B9: add ecx, var_2A0
  1609. loc_0072A2BF: push ecx
  1610. loc_0072A2C0: call [00401130h] ; __vbaObjSetAddref
  1611. loc_0072A2C6: lea ecx, var_94
  1612. loc_0072A2CC: call [0040142Ch] ; __vbaFreeObj
  1613. loc_0072A2D2: mov var_4, 00000021h
  1614. loc_0072A2D9: mov edx, Me
  1615. loc_0072A2DC: mov eax, [edx]
  1616. loc_0072A2DE: mov ecx, Me
  1617. loc_0072A2E1: push ecx
  1618. loc_0072A2E2: call [eax+00000024h]
  1619. loc_0072A2E5: mov var_110, eax
  1620. loc_0072A2EB: cmp var_110, 00000000h
  1621. loc_0072A2F2: jge 0072A314h
  1622. loc_0072A2F4: push 00000024h
  1623. loc_0072A2F6: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  1624. loc_0072A2FB: mov edx, Me
  1625. loc_0072A2FE: push edx
  1626. loc_0072A2FF: mov eax, var_110
  1627. loc_0072A305: push eax
  1628. loc_0072A306: call [004010CCh] ; __vbaHresultCheckObj
  1629. loc_0072A30C: mov var_2A4, eax
  1630. loc_0072A312: jmp 0072A31Eh
  1631. loc_0072A314: mov var_2A4, 00000000h
  1632. loc_0072A31E: jmp 0072CBA7h
  1633. loc_0072A323: mov var_4, 00000022h
  1634. loc_0072A32A: mov ecx, var_144
  1635. loc_0072A330: push ecx
  1636. loc_0072A331: push 004764B4h ; "clsCommandHTTPPost"
  1637. loc_0072A336: call [004011B8h] ; __vbaStrCmp
  1638. loc_0072A33C: test eax, eax
  1639. loc_0072A33E: jnz 0072A6FDh
  1640. loc_0072A344: mov var_4, 00000023h
  1641. loc_0072A34B: mov edx, Me
  1642. loc_0072A34E: cmp [edx+00000038h], 00000000h
  1643. loc_0072A352: jz 0072A3B0h
  1644. loc_0072A354: mov eax, Me
  1645. loc_0072A357: mov ecx, [eax+00000038h]
  1646. loc_0072A35A: cmp [ecx], 0001h
  1647. loc_0072A35E: jnz 0072A3B0h
  1648. loc_0072A360: mov edx, Me
  1649. loc_0072A363: movsx eax, [edx+0000003Ch]
  1650. loc_0072A367: mov ecx, Me
  1651. loc_0072A36A: mov edx, [ecx+00000038h]
  1652. loc_0072A36D: sub eax, [edx+00000014h]
  1653. loc_0072A370: mov var_110, eax
  1654. loc_0072A376: mov eax, Me
  1655. loc_0072A379: mov ecx, [eax+00000038h]
  1656. loc_0072A37C: mov edx, var_110
  1657. loc_0072A382: cmp edx, [ecx+00000010h]
  1658. loc_0072A385: jae 0072A393h
  1659. loc_0072A387: mov var_2A8, 00000000h
  1660. loc_0072A391: jmp 0072A39Fh
  1661. loc_0072A393: call [004011A8h] ; __vbaGenerateBoundsError
  1662. loc_0072A399: mov var_2A8, eax
  1663. loc_0072A39F: mov eax, var_110
  1664. loc_0072A3A5: shl eax, 02h
  1665. loc_0072A3A8: mov var_2AC, eax
  1666. loc_0072A3AE: jmp 0072A3BCh
  1667. loc_0072A3B0: call [004011A8h] ; __vbaGenerateBoundsError
  1668. loc_0072A3B6: mov var_2AC, eax
  1669. loc_0072A3BC: push 004764DCh
  1670. loc_0072A3C1: mov ecx, Me
  1671. loc_0072A3C4: mov edx, [ecx+00000038h]
  1672. loc_0072A3C7: mov eax, [edx+0000000Ch]
  1673. loc_0072A3CA: mov ecx, var_2AC
  1674. loc_0072A3D0: mov edx, [eax+ecx]
  1675. loc_0072A3D3: push edx
  1676. loc_0072A3D4: call [004013C4h] ; __vbaCastObj
  1677. loc_0072A3DA: push eax
  1678. loc_0072A3DB: lea eax, var_6C
  1679. loc_0072A3DE: push eax
  1680. loc_0072A3DF: call [00401128h] ; __vbaObjSet
  1681. loc_0072A3E5: mov var_4, 00000024h
  1682. loc_0072A3EC: mov var_E8, 00000004h
  1683. loc_0072A3F6: mov var_F0, 00000003h
  1684. loc_0072A400: cmp [0073A254h], 00000000h
  1685. loc_0072A407: jnz 0072A425h
  1686. loc_0072A409: push 0073A254h
  1687. loc_0072A40E: push 00431838h
  1688. loc_0072A413: call [004012FCh] ; __vbaNew2
  1689. loc_0072A419: mov var_2B0, 0073A254h
  1690. loc_0072A423: jmp 0072A42Fh
  1691. loc_0072A425: mov var_2B0, 0073A254h
  1692. loc_0072A42F: mov eax, 00000010h
  1693. loc_0072A434: call 00412850h ; __vbaChkstk
  1694. loc_0072A439: mov ecx, esp
  1695. loc_0072A43B: mov edx, var_F0
  1696. loc_0072A441: mov [ecx], edx
  1697. loc_0072A443: mov eax, var_EC
  1698. loc_0072A449: mov [ecx+00000004h], eax
  1699. loc_0072A44C: mov edx, var_E8
  1700. loc_0072A452: mov [ecx+00000008h], edx
  1701. loc_0072A455: mov eax, var_E4
  1702. loc_0072A45B: mov [ecx+0000000Ch], eax
  1703. loc_0072A45E: push 00000013h
  1704. loc_0072A460: mov ecx, var_2B0
  1705. loc_0072A466: mov edx, [ecx]
  1706. loc_0072A468: mov eax, var_2B0
  1707. loc_0072A46E: mov ecx, [eax]
  1708. loc_0072A470: mov eax, [ecx]
  1709. loc_0072A472: push edx
  1710. loc_0072A473: call [eax+000004B0h]
  1711. loc_0072A479: push eax
  1712. loc_0072A47A: lea ecx, var_94
  1713. loc_0072A480: push ecx
  1714. loc_0072A481: call [00401128h] ; __vbaObjSet
  1715. loc_0072A487: push eax
  1716. loc_0072A488: call [004013F0h] ; __vbaLateIdSt
  1717. loc_0072A48E: lea ecx, var_94
  1718. loc_0072A494: call [0040142Ch] ; __vbaFreeObj
  1719. loc_0072A49A: mov var_4, 00000025h
  1720. loc_0072A4A1: lea edx, var_80
  1721. loc_0072A4A4: push edx
  1722. loc_0072A4A5: mov eax, var_6C
  1723. loc_0072A4A8: mov ecx, [eax]
  1724. loc_0072A4AA: mov edx, var_6C
  1725. loc_0072A4AD: push edx
  1726. loc_0072A4AE: call [ecx+00000020h]
  1727. loc_0072A4B1: fnclex
  1728. loc_0072A4B3: mov var_110, eax
  1729. loc_0072A4B9: cmp var_110, 00000000h
  1730. loc_0072A4C0: jge 0072A4E2h
  1731. loc_0072A4C2: push 00000020h
  1732. loc_0072A4C4: push 004764DCh
  1733. loc_0072A4C9: mov eax, var_6C
  1734. loc_0072A4CC: push eax
  1735. loc_0072A4CD: mov ecx, var_110
  1736. loc_0072A4D3: push ecx
  1737. loc_0072A4D4: call [004010CCh] ; __vbaHresultCheckObj
  1738. loc_0072A4DA: mov var_2B4, eax
  1739. loc_0072A4E0: jmp 0072A4ECh
  1740. loc_0072A4E2: mov var_2B4, 00000000h
  1741. loc_0072A4EC: mov edx, var_80
  1742. loc_0072A4EF: mov var_190, edx
  1743. loc_0072A4F5: mov var_80, 00000000h
  1744. loc_0072A4FC: mov eax, var_190
  1745. loc_0072A502: mov var_A8, eax
  1746. loc_0072A508: mov var_B0, 00000008h
  1747. loc_0072A512: cmp [0073A254h], 00000000h
  1748. loc_0072A519: jnz 0072A537h
  1749. loc_0072A51B: push 0073A254h
  1750. loc_0072A520: push 00431838h
  1751. loc_0072A525: call [004012FCh] ; __vbaNew2
  1752. loc_0072A52B: mov var_2B8, 0073A254h
  1753. loc_0072A535: jmp 0072A541h
  1754. loc_0072A537: mov var_2B8, 0073A254h
  1755. loc_0072A541: mov eax, 00000010h
  1756. loc_0072A546: call 00412850h ; __vbaChkstk
  1757. loc_0072A54B: mov ecx, esp
  1758. loc_0072A54D: mov edx, var_B0
  1759. loc_0072A553: mov [ecx], edx
  1760. loc_0072A555: mov eax, var_AC
  1761. loc_0072A55B: mov [ecx+00000004h], eax
  1762. loc_0072A55E: mov edx, var_A8
  1763. loc_0072A564: mov [ecx+00000008h], edx
  1764. loc_0072A567: mov eax, var_A4
  1765. loc_0072A56D: mov [ecx+0000000Ch], eax
  1766. loc_0072A570: push 00000001h
  1767. loc_0072A572: push 00000016h
  1768. loc_0072A574: mov ecx, var_2B8
  1769. loc_0072A57A: mov edx, [ecx]
  1770. loc_0072A57C: mov eax, var_2B8
  1771. loc_0072A582: mov ecx, [eax]
  1772. loc_0072A584: mov eax, [ecx]
  1773. loc_0072A586: push edx
  1774. loc_0072A587: call [eax+000004B0h]
  1775. loc_0072A58D: push eax
  1776. loc_0072A58E: lea ecx, var_94
  1777. loc_0072A594: push ecx
  1778. loc_0072A595: call [00401128h] ; __vbaObjSet
  1779. loc_0072A59B: push eax
  1780. loc_0072A59C: call [0040103Ch] ; __vbaLateIdCall
  1781. loc_0072A5A2: add esp, 0000001Ch
  1782. loc_0072A5A5: lea ecx, var_94
  1783. loc_0072A5AB: call [0040142Ch] ; __vbaFreeObj
  1784. loc_0072A5B1: lea ecx, var_B0
  1785. loc_0072A5B7: call [00401030h] ; __vbaFreeVar
  1786. loc_0072A5BD: mov var_4, 00000026h
  1787. loc_0072A5C4: lea edx, var_94
  1788. loc_0072A5CA: push edx
  1789. loc_0072A5CB: mov eax, var_6C
  1790. loc_0072A5CE: mov ecx, [eax]
  1791. loc_0072A5D0: mov edx, var_6C
  1792. loc_0072A5D3: push edx
  1793. loc_0072A5D4: call [ecx+00000028h]
  1794. loc_0072A5D7: fnclex
  1795. loc_0072A5D9: mov var_114, eax
  1796. loc_0072A5DF: cmp var_114, 00000000h
  1797. loc_0072A5E6: jge 0072A608h
  1798. loc_0072A5E8: push 00000028h
  1799. loc_0072A5EA: push 004764DCh
  1800. loc_0072A5EF: mov eax, var_6C
  1801. loc_0072A5F2: push eax
  1802. loc_0072A5F3: mov ecx, var_114
  1803. loc_0072A5F9: push ecx
  1804. loc_0072A5FA: call [004010CCh] ; __vbaHresultCheckObj
  1805. loc_0072A600: mov var_2BC, eax
  1806. loc_0072A606: jmp 0072A612h
  1807. loc_0072A608: mov var_2BC, 00000000h
  1808. loc_0072A612: mov edx, Me
  1809. loc_0072A615: cmp [edx+00000038h], 00000000h
  1810. loc_0072A619: jz 0072A677h
  1811. loc_0072A61B: mov eax, Me
  1812. loc_0072A61E: mov ecx, [eax+00000038h]
  1813. loc_0072A621: cmp [ecx], 0001h
  1814. loc_0072A625: jnz 0072A677h
  1815. loc_0072A627: mov edx, Me
  1816. loc_0072A62A: movsx eax, [edx+0000003Ch]
  1817. loc_0072A62E: mov ecx, Me
  1818. loc_0072A631: mov edx, [ecx+00000038h]
  1819. loc_0072A634: sub eax, [edx+00000014h]
  1820. loc_0072A637: mov var_110, eax
  1821. loc_0072A63D: mov eax, Me
  1822. loc_0072A640: mov ecx, [eax+00000038h]
  1823. loc_0072A643: mov edx, var_110
  1824. loc_0072A649: cmp edx, [ecx+00000010h]
  1825. loc_0072A64C: jae 0072A65Ah
  1826. loc_0072A64E: mov var_2C0, 00000000h
  1827. loc_0072A658: jmp 0072A666h
  1828. loc_0072A65A: call [004011A8h] ; __vbaGenerateBoundsError
  1829. loc_0072A660: mov var_2C0, eax
  1830. loc_0072A666: mov eax, var_110
  1831. loc_0072A66C: shl eax, 02h
  1832. loc_0072A66F: mov var_2C4, eax
  1833. loc_0072A675: jmp 0072A683h
  1834. loc_0072A677: call [004011A8h] ; __vbaGenerateBoundsError
  1835. loc_0072A67D: mov var_2C4, eax
  1836. loc_0072A683: mov ecx, var_94
  1837. loc_0072A689: push ecx
  1838. loc_0072A68A: mov edx, Me
  1839. loc_0072A68D: mov eax, [edx+00000038h]
  1840. loc_0072A690: mov ecx, [eax+0000000Ch]
  1841. loc_0072A693: add ecx, var_2C4
  1842. loc_0072A699: push ecx
  1843. loc_0072A69A: call [00401130h] ; __vbaObjSetAddref
  1844. loc_0072A6A0: lea ecx, var_94
  1845. loc_0072A6A6: call [0040142Ch] ; __vbaFreeObj
  1846. loc_0072A6AC: mov var_4, 00000027h
  1847. loc_0072A6B3: mov edx, Me
  1848. loc_0072A6B6: mov eax, [edx]
  1849. loc_0072A6B8: mov ecx, Me
  1850. loc_0072A6BB: push ecx
  1851. loc_0072A6BC: call [eax+00000024h]
  1852. loc_0072A6BF: mov var_110, eax
  1853. loc_0072A6C5: cmp var_110, 00000000h
  1854. loc_0072A6CC: jge 0072A6EEh
  1855. loc_0072A6CE: push 00000024h
  1856. loc_0072A6D0: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  1857. loc_0072A6D5: mov edx, Me
  1858. loc_0072A6D8: push edx
  1859. loc_0072A6D9: mov eax, var_110
  1860. loc_0072A6DF: push eax
  1861. loc_0072A6E0: call [004010CCh] ; __vbaHresultCheckObj
  1862. loc_0072A6E6: mov var_2C8, eax
  1863. loc_0072A6EC: jmp 0072A6F8h
  1864. loc_0072A6EE: mov var_2C8, 00000000h
  1865. loc_0072A6F8: jmp 0072CBA7h
  1866. loc_0072A6FD: mov var_4, 00000028h
  1867. loc_0072A704: mov ecx, var_144
  1868. loc_0072A70A: push ecx
  1869. loc_0072A70B: push 004764F0h ; "clsCommandMsgBox"
  1870. loc_0072A710: call [004011B8h] ; __vbaStrCmp
  1871. loc_0072A716: test eax, eax
  1872. loc_0072A718: jnz 0072AC0Eh
  1873. loc_0072A71E: mov var_4, 00000029h
  1874. loc_0072A725: mov edx, Me
  1875. loc_0072A728: cmp [edx+00000038h], 00000000h
  1876. loc_0072A72C: jz 0072A78Ah
  1877. loc_0072A72E: mov eax, Me
  1878. loc_0072A731: mov ecx, [eax+00000038h]
  1879. loc_0072A734: cmp [ecx], 0001h
  1880. loc_0072A738: jnz 0072A78Ah
  1881. loc_0072A73A: mov edx, Me
  1882. loc_0072A73D: movsx eax, [edx+0000003Ch]
  1883. loc_0072A741: mov ecx, Me
  1884. loc_0072A744: mov edx, [ecx+00000038h]
  1885. loc_0072A747: sub eax, [edx+00000014h]
  1886. loc_0072A74A: mov var_110, eax
  1887. loc_0072A750: mov eax, Me
  1888. loc_0072A753: mov ecx, [eax+00000038h]
  1889. loc_0072A756: mov edx, var_110
  1890. loc_0072A75C: cmp edx, [ecx+00000010h]
  1891. loc_0072A75F: jae 0072A76Dh
  1892. loc_0072A761: mov var_2CC, 00000000h
  1893. loc_0072A76B: jmp 0072A779h
  1894. loc_0072A76D: call [004011A8h] ; __vbaGenerateBoundsError
  1895. loc_0072A773: mov var_2CC, eax
  1896. loc_0072A779: mov eax, var_110
  1897. loc_0072A77F: shl eax, 02h
  1898. loc_0072A782: mov var_2D0, eax
  1899. loc_0072A788: jmp 0072A796h
  1900. loc_0072A78A: call [004011A8h] ; __vbaGenerateBoundsError
  1901. loc_0072A790: mov var_2D0, eax
  1902. loc_0072A796: push 00476514h ; "��k�7k�C��mB�|��*"
  1903. loc_0072A79B: mov ecx, Me
  1904. loc_0072A79E: mov edx, [ecx+00000038h]
  1905. loc_0072A7A1: mov eax, [edx+0000000Ch]
  1906. loc_0072A7A4: mov ecx, var_2D0
  1907. loc_0072A7AA: mov edx, [eax+ecx]
  1908. loc_0072A7AD: push edx
  1909. loc_0072A7AE: call [004013C4h] ; __vbaCastObj
  1910. loc_0072A7B4: push eax
  1911. loc_0072A7B5: lea eax, var_3C
  1912. loc_0072A7B8: push eax
  1913. loc_0072A7B9: call [00401128h] ; __vbaObjSet
  1914. loc_0072A7BF: mov var_4, 0000002Ah
  1915. loc_0072A7C6: lea ecx, var_94
  1916. loc_0072A7CC: push ecx
  1917. loc_0072A7CD: mov edx, var_3C
  1918. loc_0072A7D0: mov eax, [edx]
  1919. loc_0072A7D2: mov ecx, var_3C
  1920. loc_0072A7D5: push ecx
  1921. loc_0072A7D6: call [eax+00000050h]
  1922. loc_0072A7D9: fnclex
  1923. loc_0072A7DB: mov var_114, eax
  1924. loc_0072A7E1: cmp var_114, 00000000h
  1925. loc_0072A7E8: jge 0072A80Ah
  1926. loc_0072A7EA: push 00000050h
  1927. loc_0072A7EC: push 00476514h ; "��k�7k�C��mB�|��*"
  1928. loc_0072A7F1: mov edx, var_3C
  1929. loc_0072A7F4: push edx
  1930. loc_0072A7F5: mov eax, var_114
  1931. loc_0072A7FB: push eax
  1932. loc_0072A7FC: call [004010CCh] ; __vbaHresultCheckObj
  1933. loc_0072A802: mov var_2D4, eax
  1934. loc_0072A808: jmp 0072A814h
  1935. loc_0072A80A: mov var_2D4, 00000000h
  1936. loc_0072A814: mov ecx, Me
  1937. loc_0072A817: cmp [ecx+00000038h], 00000000h
  1938. loc_0072A81B: jz 0072A879h
  1939. loc_0072A81D: mov edx, Me
  1940. loc_0072A820: mov eax, [edx+00000038h]
  1941. loc_0072A823: cmp [eax], 0001h
  1942. loc_0072A827: jnz 0072A879h
  1943. loc_0072A829: mov ecx, Me
  1944. loc_0072A82C: movsx edx, [ecx+0000003Ch]
  1945. loc_0072A830: mov eax, Me
  1946. loc_0072A833: mov ecx, [eax+00000038h]
  1947. loc_0072A836: sub edx, [ecx+00000014h]
  1948. loc_0072A839: mov var_110, edx
  1949. loc_0072A83F: mov edx, Me
  1950. loc_0072A842: mov eax, [edx+00000038h]
  1951. loc_0072A845: mov ecx, var_110
  1952. loc_0072A84B: cmp ecx, [eax+00000010h]
  1953. loc_0072A84E: jae 0072A85Ch
  1954. loc_0072A850: mov var_2D8, 00000000h
  1955. loc_0072A85A: jmp 0072A868h
  1956. loc_0072A85C: call [004011A8h] ; __vbaGenerateBoundsError
  1957. loc_0072A862: mov var_2D8, eax
  1958. loc_0072A868: mov edx, var_110
  1959. loc_0072A86E: shl edx, 02h
  1960. loc_0072A871: mov var_2DC, edx
  1961. loc_0072A877: jmp 0072A885h
  1962. loc_0072A879: call [004011A8h] ; __vbaGenerateBoundsError
  1963. loc_0072A87F: mov var_2DC, eax
  1964. loc_0072A885: mov eax, var_94
  1965. loc_0072A88B: push eax
  1966. loc_0072A88C: mov ecx, Me
  1967. loc_0072A88F: mov edx, [ecx+00000038h]
  1968. loc_0072A892: mov eax, [edx+0000000Ch]
  1969. loc_0072A895: add eax, var_2DC
  1970. loc_0072A89B: push eax
  1971. loc_0072A89C: call [00401130h] ; __vbaObjSetAddref
  1972. loc_0072A8A2: lea ecx, var_94
  1973. loc_0072A8A8: call [0040142Ch] ; __vbaFreeObj
  1974. loc_0072A8AE: mov var_4, 0000002Bh
  1975. loc_0072A8B5: lea ecx, var_80
  1976. loc_0072A8B8: push ecx
  1977. loc_0072A8B9: mov edx, var_3C
  1978. loc_0072A8BC: mov eax, [edx]
  1979. loc_0072A8BE: mov ecx, var_3C
  1980. loc_0072A8C1: push ecx
  1981. loc_0072A8C2: call [eax+00000020h]
  1982. loc_0072A8C5: fnclex
  1983. loc_0072A8C7: mov var_110, eax
  1984. loc_0072A8CD: cmp var_110, 00000000h
  1985. loc_0072A8D4: jge 0072A8F6h
  1986. loc_0072A8D6: push 00000020h
  1987. loc_0072A8D8: push 00476514h ; "��k�7k�C��mB�|��*"
  1988. loc_0072A8DD: mov edx, var_3C
  1989. loc_0072A8E0: push edx
  1990. loc_0072A8E1: mov eax, var_110
  1991. loc_0072A8E7: push eax
  1992. loc_0072A8E8: call [004010CCh] ; __vbaHresultCheckObj
  1993. loc_0072A8EE: mov var_2E0, eax
  1994. loc_0072A8F4: jmp 0072A900h
  1995. loc_0072A8F6: mov var_2E0, 00000000h
  1996. loc_0072A900: push 00000000h
  1997. loc_0072A902: push FFFFFFFFh
  1998. loc_0072A904: push 00000001h
  1999. loc_0072A906: mov ecx, [0073A040h]
  2000. loc_0072A90C: push ecx
  2001. loc_0072A90D: push 00443B44h ; "[username]"
  2002. loc_0072A912: mov edx, var_80
  2003. loc_0072A915: push edx
  2004. loc_0072A916: call [00401258h] ; rtcReplace
  2005. loc_0072A91C: mov edx, eax
  2006. loc_0072A91E: lea ecx, var_88
  2007. loc_0072A924: call [004013C0h] ; __vbaStrMove
  2008. loc_0072A92A: lea eax, var_84
  2009. loc_0072A930: push eax
  2010. loc_0072A931: mov ecx, var_3C
  2011. loc_0072A934: mov edx, [ecx]
  2012. loc_0072A936: mov eax, var_3C
  2013. loc_0072A939: push eax
  2014. loc_0072A93A: call [edx+00000028h]
  2015. loc_0072A93D: fnclex
  2016. loc_0072A93F: mov var_114, eax
  2017. loc_0072A945: cmp var_114, 00000000h
  2018. loc_0072A94C: jge 0072A96Eh
  2019. loc_0072A94E: push 00000028h
  2020. loc_0072A950: push 00476514h ; "��k�7k�C��mB�|��*"
  2021. loc_0072A955: mov ecx, var_3C
  2022. loc_0072A958: push ecx
  2023. loc_0072A959: mov edx, var_114
  2024. loc_0072A95F: push edx
  2025. loc_0072A960: call [004010CCh] ; __vbaHresultCheckObj
  2026. loc_0072A966: mov var_2E4, eax
  2027. loc_0072A96C: jmp 0072A978h
  2028. loc_0072A96E: mov var_2E4, 00000000h
  2029. loc_0072A978: mov var_D8, 80020004h
  2030. loc_0072A982: mov var_E0, 0000000Ah
  2031. loc_0072A98C: mov var_C8, 80020004h
  2032. loc_0072A996: mov var_D0, 0000000Ah
  2033. loc_0072A9A0: mov eax, var_84
  2034. loc_0072A9A6: mov var_194, eax
  2035. loc_0072A9AC: mov var_84, 00000000h
  2036. loc_0072A9B6: mov ecx, var_194
  2037. loc_0072A9BC: mov var_B8, ecx
  2038. loc_0072A9C2: mov var_C0, 00000008h
  2039. loc_0072A9CC: mov edx, var_88
  2040. loc_0072A9D2: mov var_198, edx
  2041. loc_0072A9D8: mov var_88, 00000000h
  2042. loc_0072A9E2: mov eax, var_198
  2043. loc_0072A9E8: mov var_A8, eax
  2044. loc_0072A9EE: mov var_B0, 00000008h
  2045. loc_0072A9F8: lea ecx, var_E0
  2046. loc_0072A9FE: push ecx
  2047. loc_0072A9FF: lea edx, var_D0
  2048. loc_0072AA05: push edx
  2049. loc_0072AA06: lea eax, var_C0
  2050. loc_0072AA0C: push eax
  2051. loc_0072AA0D: push 00001004h
  2052. loc_0072AA12: lea ecx, var_B0
  2053. loc_0072AA18: push ecx
  2054. loc_0072AA19: call [00401120h] ; rtcMsgBox
  2055. loc_0072AA1F: xor edx, edx
  2056. loc_0072AA21: cmp eax, 00000006h
  2057. loc_0072AA24: setz dl
  2058. loc_0072AA27: neg edx
  2059. loc_0072AA29: mov var_118, dx
  2060. loc_0072AA30: lea eax, var_88
  2061. loc_0072AA36: push eax
  2062. loc_0072AA37: lea ecx, var_80
  2063. loc_0072AA3A: push ecx
  2064. loc_0072AA3B: push 00000002h
  2065. loc_0072AA3D: call [00401324h] ; __vbaFreeStrList
  2066. loc_0072AA43: add esp, 0000000Ch
  2067. loc_0072AA46: lea edx, var_E0
  2068. loc_0072AA4C: push edx
  2069. loc_0072AA4D: lea eax, var_D0
  2070. loc_0072AA53: push eax
  2071. loc_0072AA54: lea ecx, var_C0
  2072. loc_0072AA5A: push ecx
  2073. loc_0072AA5B: lea edx, var_B0
  2074. loc_0072AA61: push edx
  2075. loc_0072AA62: push 00000004h
  2076. loc_0072AA64: call [00401050h] ; __vbaFreeVarList
  2077. loc_0072AA6A: add esp, 00000014h
  2078. loc_0072AA6D: movsx eax, var_118
  2079. loc_0072AA74: test eax, eax
  2080. loc_0072AA76: jz 0072AB1Fh
  2081. loc_0072AA7C: mov var_4, 0000002Ch
  2082. loc_0072AA83: lea ecx, var_94
  2083. loc_0072AA89: push ecx
  2084. loc_0072AA8A: mov edx, var_3C
  2085. loc_0072AA8D: mov eax, [edx]
  2086. loc_0072AA8F: mov ecx, var_3C
  2087. loc_0072AA92: push ecx
  2088. loc_0072AA93: call [eax+00000040h]
  2089. loc_0072AA96: fnclex
  2090. loc_0072AA98: mov var_110, eax
  2091. loc_0072AA9E: cmp var_110, 00000000h
  2092. loc_0072AAA5: jge 0072AAC7h
  2093. loc_0072AAA7: push 00000040h
  2094. loc_0072AAA9: push 00476514h ; "��k�7k�C��mB�|��*"
  2095. loc_0072AAAE: mov edx, var_3C
  2096. loc_0072AAB1: push edx
  2097. loc_0072AAB2: mov eax, var_110
  2098. loc_0072AAB8: push eax
  2099. loc_0072AAB9: call [004010CCh] ; __vbaHresultCheckObj
  2100. loc_0072AABF: mov var_2E8, eax
  2101. loc_0072AAC5: jmp 0072AAD1h
  2102. loc_0072AAC7: mov var_2E8, 00000000h
  2103. loc_0072AAD1: mov ecx, var_94
  2104. loc_0072AAD7: mov var_19C, ecx
  2105. loc_0072AADD: mov var_94, 00000000h
  2106. loc_0072AAE7: mov edx, var_19C
  2107. loc_0072AAED: push edx
  2108. loc_0072AAEE: lea eax, var_98
  2109. loc_0072AAF4: push eax
  2110. loc_0072AAF5: call [00401128h] ; __vbaObjSet
  2111. loc_0072AAFB: lea ecx, var_98
  2112. loc_0072AB01: push ecx
  2113. loc_0072AB02: mov edx, Me
  2114. loc_0072AB05: mov eax, [edx]
  2115. loc_0072AB07: mov ecx, Me
  2116. loc_0072AB0A: push ecx
  2117. loc_0072AB0B: call [eax+0000003Ch]
  2118. loc_0072AB0E: lea ecx, var_98
  2119. loc_0072AB14: call [0040142Ch] ; __vbaFreeObj
  2120. loc_0072AB1A: jmp 0072ABBDh
  2121. loc_0072AB1F: mov var_4, 0000002Eh
  2122. loc_0072AB26: lea edx, var_94
  2123. loc_0072AB2C: push edx
  2124. loc_0072AB2D: mov eax, var_3C
  2125. loc_0072AB30: mov ecx, [eax]
  2126. loc_0072AB32: mov edx, var_3C
  2127. loc_0072AB35: push edx
  2128. loc_0072AB36: call [ecx+00000048h]
  2129. loc_0072AB39: fnclex
  2130. loc_0072AB3B: mov var_110, eax
  2131. loc_0072AB41: cmp var_110, 00000000h
  2132. loc_0072AB48: jge 0072AB6Ah
  2133. loc_0072AB4A: push 00000048h
  2134. loc_0072AB4C: push 00476514h ; "��k�7k�C��mB�|��*"
  2135. loc_0072AB51: mov eax, var_3C
  2136. loc_0072AB54: push eax
  2137. loc_0072AB55: mov ecx, var_110
  2138. loc_0072AB5B: push ecx
  2139. loc_0072AB5C: call [004010CCh] ; __vbaHresultCheckObj
  2140. loc_0072AB62: mov var_2EC, eax
  2141. loc_0072AB68: jmp 0072AB74h
  2142. loc_0072AB6A: mov var_2EC, 00000000h
  2143. loc_0072AB74: mov edx, var_94
  2144. loc_0072AB7A: mov var_1A0, edx
  2145. loc_0072AB80: mov var_94, 00000000h
  2146. loc_0072AB8A: mov eax, var_1A0
  2147. loc_0072AB90: push eax
  2148. loc_0072AB91: lea ecx, var_98
  2149. loc_0072AB97: push ecx
  2150. loc_0072AB98: call [00401128h] ; __vbaObjSet
  2151. loc_0072AB9E: lea edx, var_98
  2152. loc_0072ABA4: push edx
  2153. loc_0072ABA5: mov eax, Me
  2154. loc_0072ABA8: mov ecx, [eax]
  2155. loc_0072ABAA: mov edx, Me
  2156. loc_0072ABAD: push edx
  2157. loc_0072ABAE: call [ecx+0000003Ch]
  2158. loc_0072ABB1: lea ecx, var_98
  2159. loc_0072ABB7: call [0040142Ch] ; __vbaFreeObj
  2160. loc_0072ABBD: mov var_4, 00000030h
  2161. loc_0072ABC4: mov eax, Me
  2162. loc_0072ABC7: mov ecx, [eax]
  2163. loc_0072ABC9: mov edx, Me
  2164. loc_0072ABCC: push edx
  2165. loc_0072ABCD: call [ecx+00000024h]
  2166. loc_0072ABD0: mov var_110, eax
  2167. loc_0072ABD6: cmp var_110, 00000000h
  2168. loc_0072ABDD: jge 0072ABFFh
  2169. loc_0072ABDF: push 00000024h
  2170. loc_0072ABE1: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  2171. loc_0072ABE6: mov eax, Me
  2172. loc_0072ABE9: push eax
  2173. loc_0072ABEA: mov ecx, var_110
  2174. loc_0072ABF0: push ecx
  2175. loc_0072ABF1: call [004010CCh] ; __vbaHresultCheckObj
  2176. loc_0072ABF7: mov var_2F0, eax
  2177. loc_0072ABFD: jmp 0072AC09h
  2178. loc_0072ABFF: mov var_2F0, 00000000h
  2179. loc_0072AC09: jmp 0072CBA7h
  2180. loc_0072AC0E: mov var_4, 00000031h
  2181. loc_0072AC15: mov edx, var_144
  2182. loc_0072AC1B: push edx
  2183. loc_0072AC1C: push 00476528h ; "clsCommandMsgBoxOnYes"
  2184. loc_0072AC21: call [004011B8h] ; __vbaStrCmp
  2185. loc_0072AC27: test eax, eax
  2186. loc_0072AC29: jnz 0072AE10h
  2187. loc_0072AC2F: mov var_4, 00000032h
  2188. loc_0072AC36: mov eax, Me
  2189. loc_0072AC39: cmp [eax+00000038h], 00000000h
  2190. loc_0072AC3D: jz 0072AC9Bh
  2191. loc_0072AC3F: mov ecx, Me
  2192. loc_0072AC42: mov edx, [ecx+00000038h]
  2193. loc_0072AC45: cmp [edx], 0001h
  2194. loc_0072AC49: jnz 0072AC9Bh
  2195. loc_0072AC4B: mov eax, Me
  2196. loc_0072AC4E: movsx ecx, [eax+0000003Ch]
  2197. loc_0072AC52: mov edx, Me
  2198. loc_0072AC55: mov eax, [edx+00000038h]
  2199. loc_0072AC58: sub ecx, [eax+00000014h]
  2200. loc_0072AC5B: mov var_110, ecx
  2201. loc_0072AC61: mov ecx, Me
  2202. loc_0072AC64: mov edx, [ecx+00000038h]
  2203. loc_0072AC67: mov eax, var_110
  2204. loc_0072AC6D: cmp eax, [edx+00000010h]
  2205. loc_0072AC70: jae 0072AC7Eh
  2206. loc_0072AC72: mov var_2F4, 00000000h
  2207. loc_0072AC7C: jmp 0072AC8Ah
  2208. loc_0072AC7E: call [004011A8h] ; __vbaGenerateBoundsError
  2209. loc_0072AC84: mov var_2F4, eax
  2210. loc_0072AC8A: mov ecx, var_110
  2211. loc_0072AC90: shl ecx, 02h
  2212. loc_0072AC93: mov var_2F8, ecx
  2213. loc_0072AC99: jmp 0072ACA7h
  2214. loc_0072AC9B: call [004011A8h] ; __vbaGenerateBoundsError
  2215. loc_0072ACA1: mov var_2F8, eax
  2216. loc_0072ACA7: push 00476554h
  2217. loc_0072ACAC: mov edx, Me
  2218. loc_0072ACAF: mov eax, [edx+00000038h]
  2219. loc_0072ACB2: mov ecx, [eax+0000000Ch]
  2220. loc_0072ACB5: mov edx, var_2F8
  2221. loc_0072ACBB: mov eax, [ecx+edx]
  2222. loc_0072ACBE: push eax
  2223. loc_0072ACBF: call [004013C4h] ; __vbaCastObj
  2224. loc_0072ACC5: push eax
  2225. loc_0072ACC6: lea ecx, var_78
  2226. loc_0072ACC9: push ecx
  2227. loc_0072ACCA: call [00401128h] ; __vbaObjSet
  2228. loc_0072ACD0: mov var_4, 00000033h
  2229. loc_0072ACD7: lea edx, var_94
  2230. loc_0072ACDD: push edx
  2231. loc_0072ACDE: mov eax, var_78
  2232. loc_0072ACE1: mov ecx, [eax]
  2233. loc_0072ACE3: mov edx, var_78
  2234. loc_0072ACE6: push edx
  2235. loc_0072ACE7: call [ecx+00000020h]
  2236. loc_0072ACEA: fnclex
  2237. loc_0072ACEC: mov var_114, eax
  2238. loc_0072ACF2: cmp var_114, 00000000h
  2239. loc_0072ACF9: jge 0072AD1Bh
  2240. loc_0072ACFB: push 00000020h
  2241. loc_0072ACFD: push 00476554h
  2242. loc_0072AD02: mov eax, var_78
  2243. loc_0072AD05: push eax
  2244. loc_0072AD06: mov ecx, var_114
  2245. loc_0072AD0C: push ecx
  2246. loc_0072AD0D: call [004010CCh] ; __vbaHresultCheckObj
  2247. loc_0072AD13: mov var_2FC, eax
  2248. loc_0072AD19: jmp 0072AD25h
  2249. loc_0072AD1B: mov var_2FC, 00000000h
  2250. loc_0072AD25: mov edx, Me
  2251. loc_0072AD28: cmp [edx+00000038h], 00000000h
  2252. loc_0072AD2C: jz 0072AD8Ah
  2253. loc_0072AD2E: mov eax, Me
  2254. loc_0072AD31: mov ecx, [eax+00000038h]
  2255. loc_0072AD34: cmp [ecx], 0001h
  2256. loc_0072AD38: jnz 0072AD8Ah
  2257. loc_0072AD3A: mov edx, Me
  2258. loc_0072AD3D: movsx eax, [edx+0000003Ch]
  2259. loc_0072AD41: mov ecx, Me
  2260. loc_0072AD44: mov edx, [ecx+00000038h]
  2261. loc_0072AD47: sub eax, [edx+00000014h]
  2262. loc_0072AD4A: mov var_110, eax
  2263. loc_0072AD50: mov eax, Me
  2264. loc_0072AD53: mov ecx, [eax+00000038h]
  2265. loc_0072AD56: mov edx, var_110
  2266. loc_0072AD5C: cmp edx, [ecx+00000010h]
  2267. loc_0072AD5F: jae 0072AD6Dh
  2268. loc_0072AD61: mov var_300, 00000000h
  2269. loc_0072AD6B: jmp 0072AD79h
  2270. loc_0072AD6D: call [004011A8h] ; __vbaGenerateBoundsError
  2271. loc_0072AD73: mov var_300, eax
  2272. loc_0072AD79: mov eax, var_110
  2273. loc_0072AD7F: shl eax, 02h
  2274. loc_0072AD82: mov var_304, eax
  2275. loc_0072AD88: jmp 0072AD96h
  2276. loc_0072AD8A: call [004011A8h] ; __vbaGenerateBoundsError
  2277. loc_0072AD90: mov var_304, eax
  2278. loc_0072AD96: mov ecx, var_94
  2279. loc_0072AD9C: push ecx
  2280. loc_0072AD9D: mov edx, Me
  2281. loc_0072ADA0: mov eax, [edx+00000038h]
  2282. loc_0072ADA3: mov ecx, [eax+0000000Ch]
  2283. loc_0072ADA6: add ecx, var_304
  2284. loc_0072ADAC: push ecx
  2285. loc_0072ADAD: call [00401130h] ; __vbaObjSetAddref
  2286. loc_0072ADB3: lea ecx, var_94
  2287. loc_0072ADB9: call [0040142Ch] ; __vbaFreeObj
  2288. loc_0072ADBF: mov var_4, 00000034h
  2289. loc_0072ADC6: mov edx, Me
  2290. loc_0072ADC9: mov eax, [edx]
  2291. loc_0072ADCB: mov ecx, Me
  2292. loc_0072ADCE: push ecx
  2293. loc_0072ADCF: call [eax+00000024h]
  2294. loc_0072ADD2: mov var_110, eax
  2295. loc_0072ADD8: cmp var_110, 00000000h
  2296. loc_0072ADDF: jge 0072AE01h
  2297. loc_0072ADE1: push 00000024h
  2298. loc_0072ADE3: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  2299. loc_0072ADE8: mov edx, Me
  2300. loc_0072ADEB: push edx
  2301. loc_0072ADEC: mov eax, var_110
  2302. loc_0072ADF2: push eax
  2303. loc_0072ADF3: call [004010CCh] ; __vbaHresultCheckObj
  2304. loc_0072ADF9: mov var_308, eax
  2305. loc_0072ADFF: jmp 0072AE0Bh
  2306. loc_0072AE01: mov var_308, 00000000h
  2307. loc_0072AE0B: jmp 0072CBA7h
  2308. loc_0072AE10: mov var_4, 00000035h
  2309. loc_0072AE17: mov ecx, var_144
  2310. loc_0072AE1D: push ecx
  2311. loc_0072AE1E: push 00476568h ; "clsCommandMsgBoxOnNo"
  2312. loc_0072AE23: call [004011B8h] ; __vbaStrCmp
  2313. loc_0072AE29: test eax, eax
  2314. loc_0072AE2B: jnz 0072B012h
  2315. loc_0072AE31: mov var_4, 00000036h
  2316. loc_0072AE38: mov edx, Me
  2317. loc_0072AE3B: cmp [edx+00000038h], 00000000h
  2318. loc_0072AE3F: jz 0072AE9Dh
  2319. loc_0072AE41: mov eax, Me
  2320. loc_0072AE44: mov ecx, [eax+00000038h]
  2321. loc_0072AE47: cmp [ecx], 0001h
  2322. loc_0072AE4B: jnz 0072AE9Dh
  2323. loc_0072AE4D: mov edx, Me
  2324. loc_0072AE50: movsx eax, [edx+0000003Ch]
  2325. loc_0072AE54: mov ecx, Me
  2326. loc_0072AE57: mov edx, [ecx+00000038h]
  2327. loc_0072AE5A: sub eax, [edx+00000014h]
  2328. loc_0072AE5D: mov var_110, eax
  2329. loc_0072AE63: mov eax, Me
  2330. loc_0072AE66: mov ecx, [eax+00000038h]
  2331. loc_0072AE69: mov edx, var_110
  2332. loc_0072AE6F: cmp edx, [ecx+00000010h]
  2333. loc_0072AE72: jae 0072AE80h
  2334. loc_0072AE74: mov var_30C, 00000000h
  2335. loc_0072AE7E: jmp 0072AE8Ch
  2336. loc_0072AE80: call [004011A8h] ; __vbaGenerateBoundsError
  2337. loc_0072AE86: mov var_30C, eax
  2338. loc_0072AE8C: mov eax, var_110
  2339. loc_0072AE92: shl eax, 02h
  2340. loc_0072AE95: mov var_310, eax
  2341. loc_0072AE9B: jmp 0072AEA9h
  2342. loc_0072AE9D: call [004011A8h] ; __vbaGenerateBoundsError
  2343. loc_0072AEA3: mov var_310, eax
  2344. loc_0072AEA9: push 00476594h
  2345. loc_0072AEAE: mov ecx, Me
  2346. loc_0072AEB1: mov edx, [ecx+00000038h]
  2347. loc_0072AEB4: mov eax, [edx+0000000Ch]
  2348. loc_0072AEB7: mov ecx, var_310
  2349. loc_0072AEBD: mov edx, [eax+ecx]
  2350. loc_0072AEC0: push edx
  2351. loc_0072AEC1: call [004013C4h] ; __vbaCastObj
  2352. loc_0072AEC7: push eax
  2353. loc_0072AEC8: lea eax, var_40
  2354. loc_0072AECB: push eax
  2355. loc_0072AECC: call [00401128h] ; __vbaObjSet
  2356. loc_0072AED2: mov var_4, 00000037h
  2357. loc_0072AED9: lea ecx, var_94
  2358. loc_0072AEDF: push ecx
  2359. loc_0072AEE0: mov edx, var_40
  2360. loc_0072AEE3: mov eax, [edx]
  2361. loc_0072AEE5: mov ecx, var_40
  2362. loc_0072AEE8: push ecx
  2363. loc_0072AEE9: call [eax+00000020h]
  2364. loc_0072AEEC: fnclex
  2365. loc_0072AEEE: mov var_114, eax
  2366. loc_0072AEF4: cmp var_114, 00000000h
  2367. loc_0072AEFB: jge 0072AF1Dh
  2368. loc_0072AEFD: push 00000020h
  2369. loc_0072AEFF: push 00476594h
  2370. loc_0072AF04: mov edx, var_40
  2371. loc_0072AF07: push edx
  2372. loc_0072AF08: mov eax, var_114
  2373. loc_0072AF0E: push eax
  2374. loc_0072AF0F: call [004010CCh] ; __vbaHresultCheckObj
  2375. loc_0072AF15: mov var_314, eax
  2376. loc_0072AF1B: jmp 0072AF27h
  2377. loc_0072AF1D: mov var_314, 00000000h
  2378. loc_0072AF27: mov ecx, Me
  2379. loc_0072AF2A: cmp [ecx+00000038h], 00000000h
  2380. loc_0072AF2E: jz 0072AF8Ch
  2381. loc_0072AF30: mov edx, Me
  2382. loc_0072AF33: mov eax, [edx+00000038h]
  2383. loc_0072AF36: cmp [eax], 0001h
  2384. loc_0072AF3A: jnz 0072AF8Ch
  2385. loc_0072AF3C: mov ecx, Me
  2386. loc_0072AF3F: movsx edx, [ecx+0000003Ch]
  2387. loc_0072AF43: mov eax, Me
  2388. loc_0072AF46: mov ecx, [eax+00000038h]
  2389. loc_0072AF49: sub edx, [ecx+00000014h]
  2390. loc_0072AF4C: mov var_110, edx
  2391. loc_0072AF52: mov edx, Me
  2392. loc_0072AF55: mov eax, [edx+00000038h]
  2393. loc_0072AF58: mov ecx, var_110
  2394. loc_0072AF5E: cmp ecx, [eax+00000010h]
  2395. loc_0072AF61: jae 0072AF6Fh
  2396. loc_0072AF63: mov var_318, 00000000h
  2397. loc_0072AF6D: jmp 0072AF7Bh
  2398. loc_0072AF6F: call [004011A8h] ; __vbaGenerateBoundsError
  2399. loc_0072AF75: mov var_318, eax
  2400. loc_0072AF7B: mov edx, var_110
  2401. loc_0072AF81: shl edx, 02h
  2402. loc_0072AF84: mov var_31C, edx
  2403. loc_0072AF8A: jmp 0072AF98h
  2404. loc_0072AF8C: call [004011A8h] ; __vbaGenerateBoundsError
  2405. loc_0072AF92: mov var_31C, eax
  2406. loc_0072AF98: mov eax, var_94
  2407. loc_0072AF9E: push eax
  2408. loc_0072AF9F: mov ecx, Me
  2409. loc_0072AFA2: mov edx, [ecx+00000038h]
  2410. loc_0072AFA5: mov eax, [edx+0000000Ch]
  2411. loc_0072AFA8: add eax, var_31C
  2412. loc_0072AFAE: push eax
  2413. loc_0072AFAF: call [00401130h] ; __vbaObjSetAddref
  2414. loc_0072AFB5: lea ecx, var_94
  2415. loc_0072AFBB: call [0040142Ch] ; __vbaFreeObj
  2416. loc_0072AFC1: mov var_4, 00000038h
  2417. loc_0072AFC8: mov ecx, Me
  2418. loc_0072AFCB: mov edx, [ecx]
  2419. loc_0072AFCD: mov eax, Me
  2420. loc_0072AFD0: push eax
  2421. loc_0072AFD1: call [edx+00000024h]
  2422. loc_0072AFD4: mov var_110, eax
  2423. loc_0072AFDA: cmp var_110, 00000000h
  2424. loc_0072AFE1: jge 0072B003h
  2425. loc_0072AFE3: push 00000024h
  2426. loc_0072AFE5: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  2427. loc_0072AFEA: mov ecx, Me
  2428. loc_0072AFED: push ecx
  2429. loc_0072AFEE: mov edx, var_110
  2430. loc_0072AFF4: push edx
  2431. loc_0072AFF5: call [004010CCh] ; __vbaHresultCheckObj
  2432. loc_0072AFFB: mov var_320, eax
  2433. loc_0072B001: jmp 0072B00Dh
  2434. loc_0072B003: mov var_320, 00000000h
  2435. loc_0072B00D: jmp 0072CBA7h
  2436. loc_0072B012: mov var_4, 00000039h
  2437. loc_0072B019: mov eax, var_144
  2438. loc_0072B01F: push eax
  2439. loc_0072B020: push 004765A8h ; "clsCommandOpenWeb"
  2440. loc_0072B025: call [004011B8h] ; __vbaStrCmp
  2441. loc_0072B02B: test eax, eax
  2442. loc_0072B02D: jnz 0072B591h
  2443. loc_0072B033: mov var_4, 0000003Ah
  2444. loc_0072B03A: mov ecx, Me
  2445. loc_0072B03D: cmp [ecx+00000038h], 00000000h
  2446. loc_0072B041: jz 0072B09Fh
  2447. loc_0072B043: mov edx, Me
  2448. loc_0072B046: mov eax, [edx+00000038h]
  2449. loc_0072B049: cmp [eax], 0001h
  2450. loc_0072B04D: jnz 0072B09Fh
  2451. loc_0072B04F: mov ecx, Me
  2452. loc_0072B052: movsx edx, [ecx+0000003Ch]
  2453. loc_0072B056: mov eax, Me
  2454. loc_0072B059: mov ecx, [eax+00000038h]
  2455. loc_0072B05C: sub edx, [ecx+00000014h]
  2456. loc_0072B05F: mov var_110, edx
  2457. loc_0072B065: mov edx, Me
  2458. loc_0072B068: mov eax, [edx+00000038h]
  2459. loc_0072B06B: mov ecx, var_110
  2460. loc_0072B071: cmp ecx, [eax+00000010h]
  2461. loc_0072B074: jae 0072B082h
  2462. loc_0072B076: mov var_324, 00000000h
  2463. loc_0072B080: jmp 0072B08Eh
  2464. loc_0072B082: call [004011A8h] ; __vbaGenerateBoundsError
  2465. loc_0072B088: mov var_324, eax
  2466. loc_0072B08E: mov edx, var_110
  2467. loc_0072B094: shl edx, 02h
  2468. loc_0072B097: mov var_328, edx
  2469. loc_0072B09D: jmp 0072B0ABh
  2470. loc_0072B09F: call [004011A8h] ; __vbaGenerateBoundsError
  2471. loc_0072B0A5: mov var_328, eax
  2472. loc_0072B0AB: push 004765CCh
  2473. loc_0072B0B0: mov eax, Me
  2474. loc_0072B0B3: mov ecx, [eax+00000038h]
  2475. loc_0072B0B6: mov edx, [ecx+0000000Ch]
  2476. loc_0072B0B9: mov eax, var_328
  2477. loc_0072B0BF: mov ecx, [edx+eax]
  2478. loc_0072B0C2: push ecx
  2479. loc_0072B0C3: call [004013C4h] ; __vbaCastObj
  2480. loc_0072B0C9: push eax
  2481. loc_0072B0CA: lea edx, var_28
  2482. loc_0072B0CD: push edx
  2483. loc_0072B0CE: call [00401128h] ; __vbaObjSet
  2484. loc_0072B0D4: mov var_4, 0000003Bh
  2485. loc_0072B0DB: lea eax, var_94
  2486. loc_0072B0E1: push eax
  2487. loc_0072B0E2: mov ecx, Me
  2488. loc_0072B0E5: mov edx, [ecx]
  2489. loc_0072B0E7: mov eax, Me
  2490. loc_0072B0EA: push eax
  2491. loc_0072B0EB: call [edx+0000001Ch]
  2492. loc_0072B0EE: mov var_110, eax
  2493. loc_0072B0F4: cmp var_110, 00000000h
  2494. loc_0072B0FB: jge 0072B11Dh
  2495. loc_0072B0FD: push 0000001Ch
  2496. loc_0072B0FF: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  2497. loc_0072B104: mov ecx, Me
  2498. loc_0072B107: push ecx
  2499. loc_0072B108: mov edx, var_110
  2500. loc_0072B10E: push edx
  2501. loc_0072B10F: call [004010CCh] ; __vbaHresultCheckObj
  2502. loc_0072B115: mov var_32C, eax
  2503. loc_0072B11B: jmp 0072B127h
  2504. loc_0072B11D: mov var_32C, 00000000h
  2505. loc_0072B127: mov eax, var_94
  2506. loc_0072B12D: mov var_114, eax
  2507. loc_0072B133: lea ecx, var_80
  2508. loc_0072B136: push ecx
  2509. loc_0072B137: mov edx, var_114
  2510. loc_0072B13D: mov eax, [edx]
  2511. loc_0072B13F: mov ecx, var_114
  2512. loc_0072B145: push ecx
  2513. loc_0072B146: call [eax+00000040h]
  2514. loc_0072B149: fnclex
  2515. loc_0072B14B: mov var_118, eax
  2516. loc_0072B151: cmp var_118, 00000000h
  2517. loc_0072B158: jge 0072B17Dh
  2518. loc_0072B15A: push 00000040h
  2519. loc_0072B15C: push 00475D6Ch
  2520. loc_0072B161: mov edx, var_114
  2521. loc_0072B167: push edx
  2522. loc_0072B168: mov eax, var_118
  2523. loc_0072B16E: push eax
  2524. loc_0072B16F: call [004010CCh] ; __vbaHresultCheckObj
  2525. loc_0072B175: mov var_330, eax
  2526. loc_0072B17B: jmp 0072B187h
  2527. loc_0072B17D: mov var_330, 00000000h
  2528. loc_0072B187: push 00000001h
  2529. loc_0072B189: mov ecx, var_80
  2530. loc_0072B18C: push ecx
  2531. loc_0072B18D: push 00472CF4h ; "product"
  2532. loc_0072B192: push 00000001h
  2533. loc_0072B194: call [004012ECh] ; __vbaInStr
  2534. loc_0072B19A: neg eax
  2535. loc_0072B19C: sbb eax, eax
  2536. loc_0072B19E: neg eax
  2537. loc_0072B1A0: neg eax
  2538. loc_0072B1A2: mov var_11C, ax
  2539. loc_0072B1A9: lea ecx, var_80
  2540. loc_0072B1AC: call [00401430h] ; __vbaFreeStr
  2541. loc_0072B1B2: lea ecx, var_94
  2542. loc_0072B1B8: call [0040142Ch] ; __vbaFreeObj
  2543. loc_0072B1BE: movsx edx, var_11C
  2544. loc_0072B1C5: test edx, edx
  2545. loc_0072B1C7: jz 0072B377h
  2546. loc_0072B1CD: mov var_4, 0000003Ch
  2547. loc_0072B1D4: mov var_E8, 0043C9F4h
  2548. loc_0072B1DE: mov var_F0, 00000008h
  2549. loc_0072B1E8: mov eax, 00000010h
  2550. loc_0072B1ED: call 00412850h ; __vbaChkstk
  2551. loc_0072B1F2: mov eax, esp
  2552. loc_0072B1F4: mov ecx, var_F0
  2553. loc_0072B1FA: mov [eax], ecx
  2554. loc_0072B1FC: mov edx, var_EC
  2555. loc_0072B202: mov [eax+00000004h], edx
  2556. loc_0072B205: mov ecx, var_E8
  2557. loc_0072B20B: mov [eax+00000008h], ecx
  2558. loc_0072B20E: mov edx, var_E4
  2559. loc_0072B214: mov [eax+0000000Ch], edx
  2560. loc_0072B217: push 0044A160h ; "UserRegistrationNum"
  2561. loc_0072B21C: push 0044317Ch ; "UserInfo"
  2562. loc_0072B221: push 0043B010h ; "BONZIBUDDY"
  2563. loc_0072B226: call [00401354h] ; rtcGetSetting
  2564. loc_0072B22C: mov var_A8, eax
  2565. loc_0072B232: mov var_B0, 00000008h
  2566. loc_0072B23C: lea edx, var_B0
  2567. loc_0072B242: lea ecx, var_50
  2568. loc_0072B245: call [00401020h] ; __vbaVarMove
  2569. loc_0072B24B: mov var_4, 0000003Dh
  2570. loc_0072B252: mov var_104, 0000h
  2571. loc_0072B25B: lea eax, var_80
  2572. loc_0072B25E: push eax
  2573. loc_0072B25F: mov ecx, var_28
  2574. loc_0072B262: mov edx, [ecx]
  2575. loc_0072B264: mov eax, var_28
  2576. loc_0072B267: push eax
  2577. loc_0072B268: call [edx+00000020h]
  2578. loc_0072B26B: fnclex
  2579. loc_0072B26D: mov var_110, eax
  2580. loc_0072B273: cmp var_110, 00000000h
  2581. loc_0072B27A: jge 0072B29Ch
  2582. loc_0072B27C: push 00000020h
  2583. loc_0072B27E: push 004765CCh
  2584. loc_0072B283: mov ecx, var_28
  2585. loc_0072B286: push ecx
  2586. loc_0072B287: mov edx, var_110
  2587. loc_0072B28D: push edx
  2588. loc_0072B28E: call [004010CCh] ; __vbaHresultCheckObj
  2589. loc_0072B294: mov var_334, eax
  2590. loc_0072B29A: jmp 0072B2A6h
  2591. loc_0072B29C: mov var_334, 00000000h
  2592. loc_0072B2A6: mov eax, var_80
  2593. loc_0072B2A9: push eax
  2594. loc_0072B2AA: push 0046B030h
  2595. loc_0072B2AF: call [00401098h] ; __vbaStrCat
  2596. loc_0072B2B5: mov var_A8, eax
  2597. loc_0072B2BB: mov var_B0, 00000008h
  2598. loc_0072B2C5: lea ecx, var_B0
  2599. loc_0072B2CB: push ecx
  2600. loc_0072B2CC: lea edx, var_50
  2601. loc_0072B2CF: push edx
  2602. loc_0072B2D0: lea eax, var_C0
  2603. loc_0072B2D6: push eax
  2604. loc_0072B2D7: call [004012B0h] ; __vbaVarCat
  2605. loc_0072B2DD: push eax
  2606. loc_0072B2DE: call [00401040h] ; __vbaStrVarMove
  2607. loc_0072B2E4: mov edx, eax
  2608. loc_0072B2E6: lea ecx, var_84
  2609. loc_0072B2EC: call [004013C0h] ; __vbaStrMove
  2610. loc_0072B2F2: cmp [0073A254h], 00000000h
  2611. loc_0072B2F9: jnz 0072B317h
  2612. loc_0072B2FB: push 0073A254h
  2613. loc_0072B300: push 00431838h
  2614. loc_0072B305: call [004012FCh] ; __vbaNew2
  2615. loc_0072B30B: mov var_338, 0073A254h
  2616. loc_0072B315: jmp 0072B321h
  2617. loc_0072B317: mov var_338, 0073A254h
  2618. loc_0072B321: lea ecx, var_104
  2619. loc_0072B327: push ecx
  2620. loc_0072B328: push 00000000h
  2621. loc_0072B32A: push 00000000h
  2622. loc_0072B32C: push 00000000h
  2623. loc_0072B32E: lea edx, var_84
  2624. loc_0072B334: push edx
  2625. loc_0072B335: mov eax, var_338
  2626. loc_0072B33B: mov ecx, [eax]
  2627. loc_0072B33D: push ecx
  2628. loc_0072B33E: call 00679A40h
  2629. loc_0072B343: lea edx, var_84
  2630. loc_0072B349: push edx
  2631. loc_0072B34A: lea eax, var_80
  2632. loc_0072B34D: push eax
  2633. loc_0072B34E: push 00000002h
  2634. loc_0072B350: call [00401324h] ; __vbaFreeStrList
  2635. loc_0072B356: add esp, 0000000Ch
  2636. loc_0072B359: lea ecx, var_C0
  2637. loc_0072B35F: push ecx
  2638. loc_0072B360: lea edx, var_B0
  2639. loc_0072B366: push edx
  2640. loc_0072B367: push 00000002h
  2641. loc_0072B369: call [00401050h] ; __vbaFreeVarList
  2642. loc_0072B36F: add esp, 0000000Ch
  2643. loc_0072B372: jmp 0072B451h
  2644. loc_0072B377: mov var_4, 0000003Fh
  2645. loc_0072B37E: mov var_104, 0000h
  2646. loc_0072B387: lea eax, var_80
  2647. loc_0072B38A: push eax
  2648. loc_0072B38B: mov ecx, var_28
  2649. loc_0072B38E: mov edx, [ecx]
  2650. loc_0072B390: mov eax, var_28
  2651. loc_0072B393: push eax
  2652. loc_0072B394: call [edx+00000020h]
  2653. loc_0072B397: fnclex
  2654. loc_0072B399: mov var_110, eax
  2655. loc_0072B39F: cmp var_110, 00000000h
  2656. loc_0072B3A6: jge 0072B3C8h
  2657. loc_0072B3A8: push 00000020h
  2658. loc_0072B3AA: push 004765CCh
  2659. loc_0072B3AF: mov ecx, var_28
  2660. loc_0072B3B2: push ecx
  2661. loc_0072B3B3: mov edx, var_110
  2662. loc_0072B3B9: push edx
  2663. loc_0072B3BA: call [004010CCh] ; __vbaHresultCheckObj
  2664. loc_0072B3C0: mov var_33C, eax
  2665. loc_0072B3C6: jmp 0072B3D2h
  2666. loc_0072B3C8: mov var_33C, 00000000h
  2667. loc_0072B3D2: mov eax, var_80
  2668. loc_0072B3D5: mov var_1A4, eax
  2669. loc_0072B3DB: mov var_80, 00000000h
  2670. loc_0072B3E2: mov edx, var_1A4
  2671. loc_0072B3E8: lea ecx, var_84
  2672. loc_0072B3EE: call [004013C0h] ; __vbaStrMove
  2673. loc_0072B3F4: cmp [0073A254h], 00000000h
  2674. loc_0072B3FB: jnz 0072B419h
  2675. loc_0072B3FD: push 0073A254h
  2676. loc_0072B402: push 00431838h
  2677. loc_0072B407: call [004012FCh] ; __vbaNew2
  2678. loc_0072B40D: mov var_340, 0073A254h
  2679. loc_0072B417: jmp 0072B423h
  2680. loc_0072B419: mov var_340, 0073A254h
  2681. loc_0072B423: lea ecx, var_104
  2682. loc_0072B429: push ecx
  2683. loc_0072B42A: push 00000000h
  2684. loc_0072B42C: push 00000000h
  2685. loc_0072B42E: push 00000000h
  2686. loc_0072B430: lea edx, var_84
  2687. loc_0072B436: push edx
  2688. loc_0072B437: mov eax, var_340
  2689. loc_0072B43D: mov ecx, [eax]
  2690. loc_0072B43F: push ecx
  2691. loc_0072B440: call 00679A40h
  2692. loc_0072B445: lea ecx, var_84
  2693. loc_0072B44B: call [00401430h] ; __vbaFreeStr
  2694. loc_0072B451: mov var_4, 00000041h
  2695. loc_0072B458: lea edx, var_94
  2696. loc_0072B45E: push edx
  2697. loc_0072B45F: mov eax, var_28
  2698. loc_0072B462: mov ecx, [eax]
  2699. loc_0072B464: mov edx, var_28
  2700. loc_0072B467: push edx
  2701. loc_0072B468: call [ecx+00000028h]
  2702. loc_0072B46B: fnclex
  2703. loc_0072B46D: mov var_114, eax
  2704. loc_0072B473: cmp var_114, 00000000h
  2705. loc_0072B47A: jge 0072B49Ch
  2706. loc_0072B47C: push 00000028h
  2707. loc_0072B47E: push 004765CCh
  2708. loc_0072B483: mov eax, var_28
  2709. loc_0072B486: push eax
  2710. loc_0072B487: mov ecx, var_114
  2711. loc_0072B48D: push ecx
  2712. loc_0072B48E: call [004010CCh] ; __vbaHresultCheckObj
  2713. loc_0072B494: mov var_344, eax
  2714. loc_0072B49A: jmp 0072B4A6h
  2715. loc_0072B49C: mov var_344, 00000000h
  2716. loc_0072B4A6: mov edx, Me
  2717. loc_0072B4A9: cmp [edx+00000038h], 00000000h
  2718. loc_0072B4AD: jz 0072B50Bh
  2719. loc_0072B4AF: mov eax, Me
  2720. loc_0072B4B2: mov ecx, [eax+00000038h]
  2721. loc_0072B4B5: cmp [ecx], 0001h
  2722. loc_0072B4B9: jnz 0072B50Bh
  2723. loc_0072B4BB: mov edx, Me
  2724. loc_0072B4BE: movsx eax, [edx+0000003Ch]
  2725. loc_0072B4C2: mov ecx, Me
  2726. loc_0072B4C5: mov edx, [ecx+00000038h]
  2727. loc_0072B4C8: sub eax, [edx+00000014h]
  2728. loc_0072B4CB: mov var_110, eax
  2729. loc_0072B4D1: mov eax, Me
  2730. loc_0072B4D4: mov ecx, [eax+00000038h]
  2731. loc_0072B4D7: mov edx, var_110
  2732. loc_0072B4DD: cmp edx, [ecx+00000010h]
  2733. loc_0072B4E0: jae 0072B4EEh
  2734. loc_0072B4E2: mov var_348, 00000000h
  2735. loc_0072B4EC: jmp 0072B4FAh
  2736. loc_0072B4EE: call [004011A8h] ; __vbaGenerateBoundsError
  2737. loc_0072B4F4: mov var_348, eax
  2738. loc_0072B4FA: mov eax, var_110
  2739. loc_0072B500: shl eax, 02h
  2740. loc_0072B503: mov var_34C, eax
  2741. loc_0072B509: jmp 0072B517h
  2742. loc_0072B50B: call [004011A8h] ; __vbaGenerateBoundsError
  2743. loc_0072B511: mov var_34C, eax
  2744. loc_0072B517: mov ecx, var_94
  2745. loc_0072B51D: push ecx
  2746. loc_0072B51E: mov edx, Me
  2747. loc_0072B521: mov eax, [edx+00000038h]
  2748. loc_0072B524: mov ecx, [eax+0000000Ch]
  2749. loc_0072B527: add ecx, var_34C
  2750. loc_0072B52D: push ecx
  2751. loc_0072B52E: call [00401130h] ; __vbaObjSetAddref
  2752. loc_0072B534: lea ecx, var_94
  2753. loc_0072B53A: call [0040142Ch] ; __vbaFreeObj
  2754. loc_0072B540: mov var_4, 00000042h
  2755. loc_0072B547: mov edx, Me
  2756. loc_0072B54A: mov eax, [edx]
  2757. loc_0072B54C: mov ecx, Me
  2758. loc_0072B54F: push ecx
  2759. loc_0072B550: call [eax+00000024h]
  2760. loc_0072B553: mov var_110, eax
  2761. loc_0072B559: cmp var_110, 00000000h
  2762. loc_0072B560: jge 0072B582h
  2763. loc_0072B562: push 00000024h
  2764. loc_0072B564: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  2765. loc_0072B569: mov edx, Me
  2766. loc_0072B56C: push edx
  2767. loc_0072B56D: mov eax, var_110
  2768. loc_0072B573: push eax
  2769. loc_0072B574: call [004010CCh] ; __vbaHresultCheckObj
  2770. loc_0072B57A: mov var_350, eax
  2771. loc_0072B580: jmp 0072B58Ch
  2772. loc_0072B582: mov var_350, 00000000h
  2773. loc_0072B58C: jmp 0072CBA7h
  2774. loc_0072B591: mov var_4, 00000043h
  2775. loc_0072B598: mov ecx, var_144
  2776. loc_0072B59E: push ecx
  2777. loc_0072B59F: push 004765E4h ; "clsCommandSetIEHomePage"
  2778. loc_0072B5A4: call [004011B8h] ; __vbaStrCmp
  2779. loc_0072B5AA: test eax, eax
  2780. loc_0072B5AC: jnz 0072B8ADh
  2781. loc_0072B5B2: mov var_4, 00000044h
  2782. loc_0072B5B9: mov edx, Me
  2783. loc_0072B5BC: cmp [edx+00000038h], 00000000h
  2784. loc_0072B5C0: jz 0072B61Eh
  2785. loc_0072B5C2: mov eax, Me
  2786. loc_0072B5C5: mov ecx, [eax+00000038h]
  2787. loc_0072B5C8: cmp [ecx], 0001h
  2788. loc_0072B5CC: jnz 0072B61Eh
  2789. loc_0072B5CE: mov edx, Me
  2790. loc_0072B5D1: movsx eax, [edx+0000003Ch]
  2791. loc_0072B5D5: mov ecx, Me
  2792. loc_0072B5D8: mov edx, [ecx+00000038h]
  2793. loc_0072B5DB: sub eax, [edx+00000014h]
  2794. loc_0072B5DE: mov var_110, eax
  2795. loc_0072B5E4: mov eax, Me
  2796. loc_0072B5E7: mov ecx, [eax+00000038h]
  2797. loc_0072B5EA: mov edx, var_110
  2798. loc_0072B5F0: cmp edx, [ecx+00000010h]
  2799. loc_0072B5F3: jae 0072B601h
  2800. loc_0072B5F5: mov var_354, 00000000h
  2801. loc_0072B5FF: jmp 0072B60Dh
  2802. loc_0072B601: call [004011A8h] ; __vbaGenerateBoundsError
  2803. loc_0072B607: mov var_354, eax
  2804. loc_0072B60D: mov eax, var_110
  2805. loc_0072B613: shl eax, 02h
  2806. loc_0072B616: mov var_358, eax
  2807. loc_0072B61C: jmp 0072B62Ah
  2808. loc_0072B61E: call [004011A8h] ; __vbaGenerateBoundsError
  2809. loc_0072B624: mov var_358, eax
  2810. loc_0072B62A: push 00476614h
  2811. loc_0072B62F: mov ecx, Me
  2812. loc_0072B632: mov edx, [ecx+00000038h]
  2813. loc_0072B635: mov eax, [edx+0000000Ch]
  2814. loc_0072B638: mov ecx, var_358
  2815. loc_0072B63E: mov edx, [eax+ecx]
  2816. loc_0072B641: push edx
  2817. loc_0072B642: call [004013C4h] ; __vbaCastObj
  2818. loc_0072B648: push eax
  2819. loc_0072B649: lea eax, var_54
  2820. loc_0072B64C: push eax
  2821. loc_0072B64D: call [00401128h] ; __vbaObjSet
  2822. loc_0072B653: mov var_4, 00000045h
  2823. loc_0072B65A: cmp [0073A254h], 00000000h
  2824. loc_0072B661: jnz 0072B67Fh
  2825. loc_0072B663: push 0073A254h
  2826. loc_0072B668: push 00431838h
  2827. loc_0072B66D: call [004012FCh] ; __vbaNew2
  2828. loc_0072B673: mov var_35C, 0073A254h
  2829. loc_0072B67D: jmp 0072B689h
  2830. loc_0072B67F: mov var_35C, 0073A254h
  2831. loc_0072B689: mov ecx, var_35C
  2832. loc_0072B68F: mov edx, [ecx]
  2833. loc_0072B691: mov var_114, edx
  2834. loc_0072B697: lea eax, var_80
  2835. loc_0072B69A: push eax
  2836. loc_0072B69B: mov ecx, var_54
  2837. loc_0072B69E: mov edx, [ecx]
  2838. loc_0072B6A0: mov eax, var_54
  2839. loc_0072B6A3: push eax
  2840. loc_0072B6A4: call [edx+00000020h]
  2841. loc_0072B6A7: fnclex
  2842. loc_0072B6A9: mov var_110, eax
  2843. loc_0072B6AF: cmp var_110, 00000000h
  2844. loc_0072B6B6: jge 0072B6D8h
  2845. loc_0072B6B8: push 00000020h
  2846. loc_0072B6BA: push 00476614h
  2847. loc_0072B6BF: mov ecx, var_54
  2848. loc_0072B6C2: push ecx
  2849. loc_0072B6C3: mov edx, var_110
  2850. loc_0072B6C9: push edx
  2851. loc_0072B6CA: call [004010CCh] ; __vbaHresultCheckObj
  2852. loc_0072B6D0: mov var_360, eax
  2853. loc_0072B6D6: jmp 0072B6E2h
  2854. loc_0072B6D8: mov var_360, 00000000h
  2855. loc_0072B6E2: mov eax, var_80
  2856. loc_0072B6E5: mov var_1A8, eax
  2857. loc_0072B6EB: mov var_80, 00000000h
  2858. loc_0072B6F2: mov edx, var_1A8
  2859. loc_0072B6F8: lea ecx, var_84
  2860. loc_0072B6FE: call [004013C0h] ; __vbaStrMove
  2861. loc_0072B704: lea ecx, var_84
  2862. loc_0072B70A: push ecx
  2863. loc_0072B70B: mov edx, var_114
  2864. loc_0072B711: mov eax, [edx]
  2865. loc_0072B713: mov ecx, var_114
  2866. loc_0072B719: push ecx
  2867. loc_0072B71A: call [eax+00000718h]
  2868. loc_0072B720: fnclex
  2869. loc_0072B722: mov var_118, eax
  2870. loc_0072B728: cmp var_118, 00000000h
  2871. loc_0072B72F: jge 0072B757h
  2872. loc_0072B731: push 00000718h
  2873. loc_0072B736: push 004408D0h
  2874. loc_0072B73B: mov edx, var_114
  2875. loc_0072B741: push edx
  2876. loc_0072B742: mov eax, var_118
  2877. loc_0072B748: push eax
  2878. loc_0072B749: call [004010CCh] ; __vbaHresultCheckObj
  2879. loc_0072B74F: mov var_364, eax
  2880. loc_0072B755: jmp 0072B761h
  2881. loc_0072B757: mov var_364, 00000000h
  2882. loc_0072B761: lea ecx, var_84
  2883. loc_0072B767: call [00401430h] ; __vbaFreeStr
  2884. loc_0072B76D: mov var_4, 00000046h
  2885. loc_0072B774: lea ecx, var_94
  2886. loc_0072B77A: push ecx
  2887. loc_0072B77B: mov edx, var_54
  2888. loc_0072B77E: mov eax, [edx]
  2889. loc_0072B780: mov ecx, var_54
  2890. loc_0072B783: push ecx
  2891. loc_0072B784: call [eax+00000028h]
  2892. loc_0072B787: fnclex
  2893. loc_0072B789: mov var_114, eax
  2894. loc_0072B78F: cmp var_114, 00000000h
  2895. loc_0072B796: jge 0072B7B8h
  2896. loc_0072B798: push 00000028h
  2897. loc_0072B79A: push 00476614h
  2898. loc_0072B79F: mov edx, var_54
  2899. loc_0072B7A2: push edx
  2900. loc_0072B7A3: mov eax, var_114
  2901. loc_0072B7A9: push eax
  2902. loc_0072B7AA: call [004010CCh] ; __vbaHresultCheckObj
  2903. loc_0072B7B0: mov var_368, eax
  2904. loc_0072B7B6: jmp 0072B7C2h
  2905. loc_0072B7B8: mov var_368, 00000000h
  2906. loc_0072B7C2: mov ecx, Me
  2907. loc_0072B7C5: cmp [ecx+00000038h], 00000000h
  2908. loc_0072B7C9: jz 0072B827h
  2909. loc_0072B7CB: mov edx, Me
  2910. loc_0072B7CE: mov eax, [edx+00000038h]
  2911. loc_0072B7D1: cmp [eax], 0001h
  2912. loc_0072B7D5: jnz 0072B827h
  2913. loc_0072B7D7: mov ecx, Me
  2914. loc_0072B7DA: movsx edx, [ecx+0000003Ch]
  2915. loc_0072B7DE: mov eax, Me
  2916. loc_0072B7E1: mov ecx, [eax+00000038h]
  2917. loc_0072B7E4: sub edx, [ecx+00000014h]
  2918. loc_0072B7E7: mov var_110, edx
  2919. loc_0072B7ED: mov edx, Me
  2920. loc_0072B7F0: mov eax, [edx+00000038h]
  2921. loc_0072B7F3: mov ecx, var_110
  2922. loc_0072B7F9: cmp ecx, [eax+00000010h]
  2923. loc_0072B7FC: jae 0072B80Ah
  2924. loc_0072B7FE: mov var_36C, 00000000h
  2925. loc_0072B808: jmp 0072B816h
  2926. loc_0072B80A: call [004011A8h] ; __vbaGenerateBoundsError
  2927. loc_0072B810: mov var_36C, eax
  2928. loc_0072B816: mov edx, var_110
  2929. loc_0072B81C: shl edx, 02h
  2930. loc_0072B81F: mov var_370, edx
  2931. loc_0072B825: jmp 0072B833h
  2932. loc_0072B827: call [004011A8h] ; __vbaGenerateBoundsError
  2933. loc_0072B82D: mov var_370, eax
  2934. loc_0072B833: mov eax, var_94
  2935. loc_0072B839: push eax
  2936. loc_0072B83A: mov ecx, Me
  2937. loc_0072B83D: mov edx, [ecx+00000038h]
  2938. loc_0072B840: mov eax, [edx+0000000Ch]
  2939. loc_0072B843: add eax, var_370
  2940. loc_0072B849: push eax
  2941. loc_0072B84A: call [00401130h] ; __vbaObjSetAddref
  2942. loc_0072B850: lea ecx, var_94
  2943. loc_0072B856: call [0040142Ch] ; __vbaFreeObj
  2944. loc_0072B85C: mov var_4, 00000047h
  2945. loc_0072B863: mov ecx, Me
  2946. loc_0072B866: mov edx, [ecx]
  2947. loc_0072B868: mov eax, Me
  2948. loc_0072B86B: push eax
  2949. loc_0072B86C: call [edx+00000024h]
  2950. loc_0072B86F: mov var_110, eax
  2951. loc_0072B875: cmp var_110, 00000000h
  2952. loc_0072B87C: jge 0072B89Eh
  2953. loc_0072B87E: push 00000024h
  2954. loc_0072B880: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  2955. loc_0072B885: mov ecx, Me
  2956. loc_0072B888: push ecx
  2957. loc_0072B889: mov edx, var_110
  2958. loc_0072B88F: push edx
  2959. loc_0072B890: call [004010CCh] ; __vbaHresultCheckObj
  2960. loc_0072B896: mov var_374, eax
  2961. loc_0072B89C: jmp 0072B8A8h
  2962. loc_0072B89E: mov var_374, 00000000h
  2963. loc_0072B8A8: jmp 0072CBA7h
  2964. loc_0072B8AD: mov var_4, 00000048h
  2965. loc_0072B8B4: mov eax, var_144
  2966. loc_0072B8BA: push eax
  2967. loc_0072B8BB: push 00476628h ; "clsCommandPlay"
  2968. loc_0072B8C0: call [004011B8h] ; __vbaStrCmp
  2969. loc_0072B8C6: test eax, eax
  2970. loc_0072B8C8: jnz 0072C104h
  2971. loc_0072B8CE: mov var_4, 00000049h
  2972. loc_0072B8D5: call 00621930h
  2973. loc_0072B8DA: mov var_4, 0000004Ah
  2974. loc_0072B8E1: mov ecx, Me
  2975. loc_0072B8E4: cmp [ecx+00000038h], 00000000h
  2976. loc_0072B8E8: jz 0072B946h
  2977. loc_0072B8EA: mov edx, Me
  2978. loc_0072B8ED: mov eax, [edx+00000038h]
  2979. loc_0072B8F0: cmp [eax], 0001h
  2980. loc_0072B8F4: jnz 0072B946h
  2981. loc_0072B8F6: mov ecx, Me
  2982. loc_0072B8F9: movsx edx, [ecx+0000003Ch]
  2983. loc_0072B8FD: mov eax, Me
  2984. loc_0072B900: mov ecx, [eax+00000038h]
  2985. loc_0072B903: sub edx, [ecx+00000014h]
  2986. loc_0072B906: mov var_110, edx
  2987. loc_0072B90C: mov edx, Me
  2988. loc_0072B90F: mov eax, [edx+00000038h]
  2989. loc_0072B912: mov ecx, var_110
  2990. loc_0072B918: cmp ecx, [eax+00000010h]
  2991. loc_0072B91B: jae 0072B929h
  2992. loc_0072B91D: mov var_378, 00000000h
  2993. loc_0072B927: jmp 0072B935h
  2994. loc_0072B929: call [004011A8h] ; __vbaGenerateBoundsError
  2995. loc_0072B92F: mov var_378, eax
  2996. loc_0072B935: mov edx, var_110
  2997. loc_0072B93B: shl edx, 02h
  2998. loc_0072B93E: mov var_37C, edx
  2999. loc_0072B944: jmp 0072B952h
  3000. loc_0072B946: call [004011A8h] ; __vbaGenerateBoundsError
  3001. loc_0072B94C: mov var_37C, eax
  3002. loc_0072B952: push 00476648h
  3003. loc_0072B957: mov eax, Me
  3004. loc_0072B95A: mov ecx, [eax+00000038h]
  3005. loc_0072B95D: mov edx, [ecx+0000000Ch]
  3006. loc_0072B960: mov eax, var_37C
  3007. loc_0072B966: mov ecx, [edx+eax]
  3008. loc_0072B969: push ecx
  3009. loc_0072B96A: call [004013C4h] ; __vbaCastObj
  3010. loc_0072B970: push eax
  3011. loc_0072B971: lea edx, var_24
  3012. loc_0072B974: push edx
  3013. loc_0072B975: call [00401128h] ; __vbaObjSet
  3014. loc_0072B97B: mov var_4, 0000004Bh
  3015. loc_0072B982: lea eax, var_80
  3016. loc_0072B985: push eax
  3017. loc_0072B986: mov ecx, var_24
  3018. loc_0072B989: mov edx, [ecx]
  3019. loc_0072B98B: mov eax, var_24
  3020. loc_0072B98E: push eax
  3021. loc_0072B98F: call [edx+00000028h]
  3022. loc_0072B992: fnclex
  3023. loc_0072B994: mov var_110, eax
  3024. loc_0072B99A: cmp var_110, 00000000h
  3025. loc_0072B9A1: jge 0072B9C3h
  3026. loc_0072B9A3: push 00000028h
  3027. loc_0072B9A5: push 00476648h
  3028. loc_0072B9AA: mov ecx, var_24
  3029. loc_0072B9AD: push ecx
  3030. loc_0072B9AE: mov edx, var_110
  3031. loc_0072B9B4: push edx
  3032. loc_0072B9B5: call [004010CCh] ; __vbaHresultCheckObj
  3033. loc_0072B9BB: mov var_380, eax
  3034. loc_0072B9C1: jmp 0072B9CDh
  3035. loc_0072B9C3: mov var_380, 00000000h
  3036. loc_0072B9CD: mov var_E8, 0044DE78h ; "|"
  3037. loc_0072B9D7: mov var_F0, 00000008h
  3038. loc_0072B9E1: lea edx, var_F0
  3039. loc_0072B9E7: lea ecx, var_B0
  3040. loc_0072B9ED: call [00401374h] ; __vbaVarDup
  3041. loc_0072B9F3: push 00000000h
  3042. loc_0072B9F5: push FFFFFFFFh
  3043. loc_0072B9F7: lea eax, var_B0
  3044. loc_0072B9FD: push eax
  3045. loc_0072B9FE: mov ecx, var_80
  3046. loc_0072BA01: push ecx
  3047. loc_0072BA02: lea edx, var_C0
  3048. loc_0072BA08: push edx
  3049. loc_0072BA09: call [00401250h] ; rtcSplit
  3050. loc_0072BA0F: lea eax, var_C0
  3051. loc_0072BA15: push eax
  3052. loc_0072BA16: push 00002008h
  3053. loc_0072BA1B: call [004010E4h] ; __vbaAryVar
  3054. loc_0072BA21: mov var_10C, eax
  3055. loc_0072BA27: lea ecx, var_10C
  3056. loc_0072BA2D: push ecx
  3057. loc_0072BA2E: lea edx, var_34
  3058. loc_0072BA31: push edx
  3059. loc_0072BA32: call [004013BCh] ; __vbaAryCopy
  3060. loc_0072BA38: lea ecx, var_80
  3061. loc_0072BA3B: call [00401430h] ; __vbaFreeStr
  3062. loc_0072BA41: lea eax, var_C0
  3063. loc_0072BA47: push eax
  3064. loc_0072BA48: lea ecx, var_B0
  3065. loc_0072BA4E: push ecx
  3066. loc_0072BA4F: push 00000002h
  3067. loc_0072BA51: call [00401050h] ; __vbaFreeVarList
  3068. loc_0072BA57: add esp, 0000000Ch
  3069. loc_0072BA5A: mov var_4, 0000004Ch
  3070. loc_0072BA61: mov edx, var_34
  3071. loc_0072BA64: push edx
  3072. loc_0072BA65: push 00000001h
  3073. loc_0072BA67: call [004012A4h] ; __vbaUbound
  3074. loc_0072BA6D: mov ecx, eax
  3075. loc_0072BA6F: call [004011E4h] ; __vbaI2I4
  3076. loc_0072BA75: mov var_108, ax
  3077. loc_0072BA7C: mov eax, var_34
  3078. loc_0072BA7F: push eax
  3079. loc_0072BA80: push 00000001h
  3080. loc_0072BA82: call [004011FCh] ; __vbaLbound
  3081. loc_0072BA88: mov ecx, eax
  3082. loc_0072BA8A: call [004011E4h] ; __vbaI2I4
  3083. loc_0072BA90: mov var_104, ax
  3084. loc_0072BA97: lea ecx, var_108
  3085. loc_0072BA9D: push ecx
  3086. loc_0072BA9E: lea edx, var_104
  3087. loc_0072BAA4: push edx
  3088. loc_0072BAA5: call 00737F40h
  3089. loc_0072BAAA: mov var_64, ax
  3090. loc_0072BAAE: mov var_4, 0000004Dh
  3091. loc_0072BAB5: mov eax, Me
  3092. loc_0072BAB8: movsx ecx, [eax+0000003Eh]
  3093. loc_0072BABC: test ecx, ecx
  3094. loc_0072BABE: jnz 0072BFB4h
  3095. loc_0072BAC4: mov var_4, 0000004Eh
  3096. loc_0072BACB: mov var_E8, 004473A0h
  3097. loc_0072BAD5: mov var_F0, 00000008h
  3098. loc_0072BADF: lea edx, var_F0
  3099. loc_0072BAE5: lea ecx, var_B0
  3100. loc_0072BAEB: call [00401374h] ; __vbaVarDup
  3101. loc_0072BAF1: cmp var_34, 00000000h
  3102. loc_0072BAF5: jz 0072BB47h
  3103. loc_0072BAF7: mov edx, var_34
  3104. loc_0072BAFA: cmp [edx], 0001h
  3105. loc_0072BAFE: jnz 0072BB47h
  3106. loc_0072BB00: movsx eax, var_64
  3107. loc_0072BB04: mov ecx, var_34
  3108. loc_0072BB07: sub eax, [ecx+00000014h]
  3109. loc_0072BB0A: mov var_110, eax
  3110. loc_0072BB10: mov edx, var_34
  3111. loc_0072BB13: mov eax, var_110
  3112. loc_0072BB19: cmp eax, [edx+00000010h]
  3113. loc_0072BB1C: jae 0072BB2Ah
  3114. loc_0072BB1E: mov var_384, 00000000h
  3115. loc_0072BB28: jmp 0072BB36h
  3116. loc_0072BB2A: call [004011A8h] ; __vbaGenerateBoundsError
  3117. loc_0072BB30: mov var_384, eax
  3118. loc_0072BB36: mov ecx, var_110
  3119. loc_0072BB3C: shl ecx, 02h
  3120. loc_0072BB3F: mov var_388, ecx
  3121. loc_0072BB45: jmp 0072BB53h
  3122. loc_0072BB47: call [004011A8h] ; __vbaGenerateBoundsError
  3123. loc_0072BB4D: mov var_388, eax
  3124. loc_0072BB53: push 00000000h
  3125. loc_0072BB55: push FFFFFFFFh
  3126. loc_0072BB57: lea edx, var_B0
  3127. loc_0072BB5D: push edx
  3128. loc_0072BB5E: mov eax, var_34
  3129. loc_0072BB61: mov ecx, [eax+0000000Ch]
  3130. loc_0072BB64: mov edx, var_388
  3131. loc_0072BB6A: mov eax, [ecx+edx]
  3132. loc_0072BB6D: push eax
  3133. loc_0072BB6E: lea ecx, var_C0
  3134. loc_0072BB74: push ecx
  3135. loc_0072BB75: call [00401250h] ; rtcSplit
  3136. loc_0072BB7B: lea edx, var_C0
  3137. loc_0072BB81: push edx
  3138. loc_0072BB82: push 00002008h
  3139. loc_0072BB87: call [004010E4h] ; __vbaAryVar
  3140. loc_0072BB8D: mov var_10C, eax
  3141. loc_0072BB93: lea eax, var_10C
  3142. loc_0072BB99: push eax
  3143. loc_0072BB9A: lea ecx, var_70
  3144. loc_0072BB9D: push ecx
  3145. loc_0072BB9E: call [004013BCh] ; __vbaAryCopy
  3146. loc_0072BBA4: lea edx, var_C0
  3147. loc_0072BBAA: push edx
  3148. loc_0072BBAB: lea eax, var_B0
  3149. loc_0072BBB1: push eax
  3150. loc_0072BBB2: push 00000002h
  3151. loc_0072BBB4: call [00401050h] ; __vbaFreeVarList
  3152. loc_0072BBBA: add esp, 0000000Ch
  3153. loc_0072BBBD: mov var_4, 0000004Fh
  3154. loc_0072BBC4: mov ecx, var_70
  3155. loc_0072BBC7: push ecx
  3156. loc_0072BBC8: push 00000001h
  3157. loc_0072BBCA: call [004012A4h] ; __vbaUbound
  3158. loc_0072BBD0: mov ecx, eax
  3159. loc_0072BBD2: call [004011E4h] ; __vbaI2I4
  3160. loc_0072BBD8: mov var_15C, ax
  3161. loc_0072BBDF: mov var_158, 0001h
  3162. loc_0072BBE8: mov edx, var_70
  3163. loc_0072BBEB: push edx
  3164. loc_0072BBEC: push 00000001h
  3165. loc_0072BBEE: call [004011FCh] ; __vbaLbound
  3166. loc_0072BBF4: mov ecx, eax
  3167. loc_0072BBF6: call [004011E4h] ; __vbaI2I4
  3168. loc_0072BBFC: mov var_30, ax
  3169. loc_0072BC00: jmp 0072BC17h
  3170. loc_0072BC02: mov ax, var_30
  3171. loc_0072BC06: add ax, var_158
  3172. loc_0072BC0D: jo 0072CDEAh
  3173. loc_0072BC13: mov var_30, ax
  3174. loc_0072BC17: mov cx, var_30
  3175. loc_0072BC1B: cmp cx, var_15C
  3176. loc_0072BC22: jg 0072BFAFh
  3177. loc_0072BC28: mov var_4, 00000050h
  3178. loc_0072BC2F: movsx esi, var_30
  3179. loc_0072BC33: mov edx, var_70
  3180. loc_0072BC36: push edx
  3181. loc_0072BC37: push 00000001h
  3182. loc_0072BC39: call [004012A4h] ; __vbaUbound
  3183. loc_0072BC3F: cmp esi, eax
  3184. loc_0072BC41: jge 0072BD86h
  3185. loc_0072BC47: mov var_4, 00000051h
  3186. loc_0072BC4E: mov eax, var_70
  3187. loc_0072BC51: push eax
  3188. loc_0072BC52: lea ecx, var_7C
  3189. loc_0072BC55: push ecx
  3190. loc_0072BC56: call [00401364h] ; __vbaAryLock
  3191. loc_0072BC5C: cmp var_7C, 00000000h
  3192. loc_0072BC60: jz 0072BCB2h
  3193. loc_0072BC62: mov edx, var_7C
  3194. loc_0072BC65: cmp [edx], 0001h
  3195. loc_0072BC69: jnz 0072BCB2h
  3196. loc_0072BC6B: movsx eax, var_30
  3197. loc_0072BC6F: mov ecx, var_7C
  3198. loc_0072BC72: sub eax, [ecx+00000014h]
  3199. loc_0072BC75: mov var_110, eax
  3200. loc_0072BC7B: mov edx, var_7C
  3201. loc_0072BC7E: mov eax, var_110
  3202. loc_0072BC84: cmp eax, [edx+00000010h]
  3203. loc_0072BC87: jae 0072BC95h
  3204. loc_0072BC89: mov var_38C, 00000000h
  3205. loc_0072BC93: jmp 0072BCA1h
  3206. loc_0072BC95: call [004011A8h] ; __vbaGenerateBoundsError
  3207. loc_0072BC9B: mov var_38C, eax
  3208. loc_0072BCA1: mov ecx, var_110
  3209. loc_0072BCA7: shl ecx, 02h
  3210. loc_0072BCAA: mov var_390, ecx
  3211. loc_0072BCB0: jmp 0072BCBEh
  3212. loc_0072BCB2: call [004011A8h] ; __vbaGenerateBoundsError
  3213. loc_0072BCB8: mov var_390, eax
  3214. loc_0072BCBE: mov edx, var_7C
  3215. loc_0072BCC1: mov eax, [edx+0000000Ch]
  3216. loc_0072BCC4: add eax, var_390
  3217. loc_0072BCCA: mov var_E8, eax
  3218. loc_0072BCD0: mov var_F0, 00004008h
  3219. loc_0072BCDA: lea ecx, var_F0
  3220. loc_0072BCE0: push ecx
  3221. loc_0072BCE1: lea edx, var_B0
  3222. loc_0072BCE7: push edx
  3223. loc_0072BCE8: call [00401154h] ; rtcTrimVar
  3224. loc_0072BCEE: lea eax, var_7C
  3225. loc_0072BCF1: push eax
  3226. loc_0072BCF2: call [00401410h] ; __vbaAryUnlock
  3227. loc_0072BCF8: lea ecx, var_94
  3228. loc_0072BCFE: push ecx
  3229. loc_0072BCFF: lea edx, var_B0
  3230. loc_0072BD05: push edx
  3231. loc_0072BD06: lea eax, var_80
  3232. loc_0072BD09: push eax
  3233. loc_0072BD0A: call [004012A8h] ; __vbaStrVarVal
  3234. loc_0072BD10: push eax
  3235. loc_0072BD11: mov ecx, [0073A08Ch]
  3236. loc_0072BD17: mov edx, [ecx]
  3237. loc_0072BD19: mov eax, [0073A08Ch]
  3238. loc_0072BD1E: push eax
  3239. loc_0072BD1F: call [edx+00000064h]
  3240. loc_0072BD22: fnclex
  3241. loc_0072BD24: mov var_114, eax
  3242. loc_0072BD2A: cmp var_114, 00000000h
  3243. loc_0072BD31: jge 0072BD56h
  3244. loc_0072BD33: push 00000064h
  3245. loc_0072BD35: push 004419ACh
  3246. loc_0072BD3A: mov ecx, [0073A08Ch]
  3247. loc_0072BD40: push ecx
  3248. loc_0072BD41: mov edx, var_114
  3249. loc_0072BD47: push edx
  3250. loc_0072BD48: call [004010CCh] ; __vbaHresultCheckObj
  3251. loc_0072BD4E: mov var_394, eax
  3252. loc_0072BD54: jmp 0072BD60h
  3253. loc_0072BD56: mov var_394, 00000000h
  3254. loc_0072BD60: lea ecx, var_80
  3255. loc_0072BD63: call [00401430h] ; __vbaFreeStr
  3256. loc_0072BD69: lea ecx, var_94
  3257. loc_0072BD6F: call [0040142Ch] ; __vbaFreeObj
  3258. loc_0072BD75: lea ecx, var_B0
  3259. loc_0072BD7B: call [00401030h] ; __vbaFreeVar
  3260. loc_0072BD81: jmp 0072BFA3h
  3261. loc_0072BD86: mov var_4, 00000053h
  3262. loc_0072BD8D: mov eax, Me
  3263. loc_0072BD90: mov [eax+0000003Eh], FFFFFFh
  3264. loc_0072BD96: mov var_4, 00000054h
  3265. loc_0072BD9D: cmp [0073A254h], 00000000h
  3266. loc_0072BDA4: jnz 0072BDC2h
  3267. loc_0072BDA6: push 0073A254h
  3268. loc_0072BDAB: push 00431838h
  3269. loc_0072BDB0: call [004012FCh] ; __vbaNew2
  3270. loc_0072BDB6: mov var_398, 0073A254h
  3271. loc_0072BDC0: jmp 0072BDCCh
  3272. loc_0072BDC2: mov var_398, 0073A254h
  3273. loc_0072BDCC: mov ecx, var_398
  3274. loc_0072BDD2: mov edx, [ecx]
  3275. loc_0072BDD4: mov var_110, edx
  3276. loc_0072BDDA: mov eax, var_110
  3277. loc_0072BDE0: mov ecx, [eax]
  3278. loc_0072BDE2: mov edx, var_110
  3279. loc_0072BDE8: push edx
  3280. loc_0072BDE9: call [ecx+0000074Ch]
  3281. loc_0072BDEF: fnclex
  3282. loc_0072BDF1: mov var_114, eax
  3283. loc_0072BDF7: cmp var_114, 00000000h
  3284. loc_0072BDFE: jge 0072BE26h
  3285. loc_0072BE00: push 0000074Ch
  3286. loc_0072BE05: push 004408D0h
  3287. loc_0072BE0A: mov eax, var_110
  3288. loc_0072BE10: push eax
  3289. loc_0072BE11: mov ecx, var_114
  3290. loc_0072BE17: push ecx
  3291. loc_0072BE18: call [004010CCh] ; __vbaHresultCheckObj
  3292. loc_0072BE1E: mov var_39C, eax
  3293. loc_0072BE24: jmp 0072BE30h
  3294. loc_0072BE26: mov var_39C, 00000000h
  3295. loc_0072BE30: mov var_4, 00000055h
  3296. loc_0072BE37: push 00000001h
  3297. loc_0072BE39: call [00401124h] ; __vbaOnError
  3298. loc_0072BE3F: mov var_4, 00000056h
  3299. loc_0072BE46: mov edx, var_70
  3300. loc_0072BE49: push edx
  3301. loc_0072BE4A: lea eax, var_7C
  3302. loc_0072BE4D: push eax
  3303. loc_0072BE4E: call [00401364h] ; __vbaAryLock
  3304. loc_0072BE54: cmp var_7C, 00000000h
  3305. loc_0072BE58: jz 0072BEAAh
  3306. loc_0072BE5A: mov ecx, var_7C
  3307. loc_0072BE5D: cmp [ecx], 0001h
  3308. loc_0072BE61: jnz 0072BEAAh
  3309. loc_0072BE63: movsx edx, var_30
  3310. loc_0072BE67: mov eax, var_7C
  3311. loc_0072BE6A: sub edx, [eax+00000014h]
  3312. loc_0072BE6D: mov var_110, edx
  3313. loc_0072BE73: mov ecx, var_7C
  3314. loc_0072BE76: mov edx, var_110
  3315. loc_0072BE7C: cmp edx, [ecx+00000010h]
  3316. loc_0072BE7F: jae 0072BE8Dh
  3317. loc_0072BE81: mov var_3A0, 00000000h
  3318. loc_0072BE8B: jmp 0072BE99h
  3319. loc_0072BE8D: call [004011A8h] ; __vbaGenerateBoundsError
  3320. loc_0072BE93: mov var_3A0, eax
  3321. loc_0072BE99: mov eax, var_110
  3322. loc_0072BE9F: shl eax, 02h
  3323. loc_0072BEA2: mov var_3A4, eax
  3324. loc_0072BEA8: jmp 0072BEB6h
  3325. loc_0072BEAA: call [004011A8h] ; __vbaGenerateBoundsError
  3326. loc_0072BEB0: mov var_3A4, eax
  3327. loc_0072BEB6: mov ecx, var_7C
  3328. loc_0072BEB9: mov edx, [ecx+0000000Ch]
  3329. loc_0072BEBC: add edx, var_3A4
  3330. loc_0072BEC2: mov var_E8, edx
  3331. loc_0072BEC8: mov var_F0, 00004008h
  3332. loc_0072BED2: lea eax, var_F0
  3333. loc_0072BED8: push eax
  3334. loc_0072BED9: lea ecx, var_B0
  3335. loc_0072BEDF: push ecx
  3336. loc_0072BEE0: call [00401154h] ; rtcTrimVar
  3337. loc_0072BEE6: lea edx, var_7C
  3338. loc_0072BEE9: push edx
  3339. loc_0072BEEA: call [00401410h] ; __vbaAryUnlock
  3340. loc_0072BEF0: lea eax, var_94
  3341. loc_0072BEF6: push eax
  3342. loc_0072BEF7: lea ecx, var_B0
  3343. loc_0072BEFD: push ecx
  3344. loc_0072BEFE: lea edx, var_80
  3345. loc_0072BF01: push edx
  3346. loc_0072BF02: call [004012A8h] ; __vbaStrVarVal
  3347. loc_0072BF08: push eax
  3348. loc_0072BF09: mov eax, [0073A08Ch]
  3349. loc_0072BF0E: mov ecx, [eax]
  3350. loc_0072BF10: mov edx, [0073A08Ch]
  3351. loc_0072BF16: push edx
  3352. loc_0072BF17: call [ecx+00000064h]
  3353. loc_0072BF1A: fnclex
  3354. loc_0072BF1C: mov var_114, eax
  3355. loc_0072BF22: cmp var_114, 00000000h
  3356. loc_0072BF29: jge 0072BF4Dh
  3357. loc_0072BF2B: push 00000064h
  3358. loc_0072BF2D: push 004419ACh
  3359. loc_0072BF32: mov eax, [0073A08Ch]
  3360. loc_0072BF37: push eax
  3361. loc_0072BF38: mov ecx, var_114
  3362. loc_0072BF3E: push ecx
  3363. loc_0072BF3F: call [004010CCh] ; __vbaHresultCheckObj
  3364. loc_0072BF45: mov var_3A8, eax
  3365. loc_0072BF4B: jmp 0072BF57h
  3366. loc_0072BF4D: mov var_3A8, 00000000h
  3367. loc_0072BF57: mov edx, var_94
  3368. loc_0072BF5D: mov var_1AC, edx
  3369. loc_0072BF63: mov var_94, 00000000h
  3370. loc_0072BF6D: mov eax, var_1AC
  3371. loc_0072BF73: push eax
  3372. loc_0072BF74: push 0073A208h
  3373. loc_0072BF79: call [00401128h] ; __vbaObjSet
  3374. loc_0072BF7F: lea ecx, var_80
  3375. loc_0072BF82: call [00401430h] ; __vbaFreeStr
  3376. loc_0072BF88: lea ecx, var_B0
  3377. loc_0072BF8E: call [00401030h] ; __vbaFreeVar
  3378. loc_0072BF94: mov var_4, 00000057h
  3379. loc_0072BF9B: push FFFFFFFFh
  3380. loc_0072BF9D: call [00401124h] ; __vbaOnError
  3381. loc_0072BFA3: mov var_4, 00000059h
  3382. loc_0072BFAA: jmp 0072BC02h
  3383. loc_0072BFAF: jmp 0072C0FFh
  3384. loc_0072BFB4: mov var_4, 0000005Bh
  3385. loc_0072BFBB: lea ecx, var_94
  3386. loc_0072BFC1: push ecx
  3387. loc_0072BFC2: mov edx, var_24
  3388. loc_0072BFC5: mov eax, [edx]
  3389. loc_0072BFC7: mov ecx, var_24
  3390. loc_0072BFCA: push ecx
  3391. loc_0072BFCB: call [eax+00000020h]
  3392. loc_0072BFCE: fnclex
  3393. loc_0072BFD0: mov var_114, eax
  3394. loc_0072BFD6: cmp var_114, 00000000h
  3395. loc_0072BFDD: jge 0072BFFFh
  3396. loc_0072BFDF: push 00000020h
  3397. loc_0072BFE1: push 00476648h
  3398. loc_0072BFE6: mov edx, var_24
  3399. loc_0072BFE9: push edx
  3400. loc_0072BFEA: mov eax, var_114
  3401. loc_0072BFF0: push eax
  3402. loc_0072BFF1: call [004010CCh] ; __vbaHresultCheckObj
  3403. loc_0072BFF7: mov var_3AC, eax
  3404. loc_0072BFFD: jmp 0072C009h
  3405. loc_0072BFFF: mov var_3AC, 00000000h
  3406. loc_0072C009: mov ecx, Me
  3407. loc_0072C00C: cmp [ecx+00000038h], 00000000h
  3408. loc_0072C010: jz 0072C06Eh
  3409. loc_0072C012: mov edx, Me
  3410. loc_0072C015: mov eax, [edx+00000038h]
  3411. loc_0072C018: cmp [eax], 0001h
  3412. loc_0072C01C: jnz 0072C06Eh
  3413. loc_0072C01E: mov ecx, Me
  3414. loc_0072C021: movsx edx, [ecx+0000003Ch]
  3415. loc_0072C025: mov eax, Me
  3416. loc_0072C028: mov ecx, [eax+00000038h]
  3417. loc_0072C02B: sub edx, [ecx+00000014h]
  3418. loc_0072C02E: mov var_110, edx
  3419. loc_0072C034: mov edx, Me
  3420. loc_0072C037: mov eax, [edx+00000038h]
  3421. loc_0072C03A: mov ecx, var_110
  3422. loc_0072C040: cmp ecx, [eax+00000010h]
  3423. loc_0072C043: jae 0072C051h
  3424. loc_0072C045: mov var_3B0, 00000000h
  3425. loc_0072C04F: jmp 0072C05Dh
  3426. loc_0072C051: call [004011A8h] ; __vbaGenerateBoundsError
  3427. loc_0072C057: mov var_3B0, eax
  3428. loc_0072C05D: mov edx, var_110
  3429. loc_0072C063: shl edx, 02h
  3430. loc_0072C066: mov var_3B4, edx
  3431. loc_0072C06C: jmp 0072C07Ah
  3432. loc_0072C06E: call [004011A8h] ; __vbaGenerateBoundsError
  3433. loc_0072C074: mov var_3B4, eax
  3434. loc_0072C07A: mov eax, var_94
  3435. loc_0072C080: push eax
  3436. loc_0072C081: mov ecx, Me
  3437. loc_0072C084: mov edx, [ecx+00000038h]
  3438. loc_0072C087: mov eax, [edx+0000000Ch]
  3439. loc_0072C08A: add eax, var_3B4
  3440. loc_0072C090: push eax
  3441. loc_0072C091: call [00401130h] ; __vbaObjSetAddref
  3442. loc_0072C097: lea ecx, var_94
  3443. loc_0072C09D: call [0040142Ch] ; __vbaFreeObj
  3444. loc_0072C0A3: mov var_4, 0000005Ch
  3445. loc_0072C0AA: mov ecx, Me
  3446. loc_0072C0AD: mov [ecx+0000003Eh], 0000h
  3447. loc_0072C0B3: mov var_4, 0000005Dh
  3448. loc_0072C0BA: mov edx, Me
  3449. loc_0072C0BD: mov eax, [edx]
  3450. loc_0072C0BF: mov ecx, Me
  3451. loc_0072C0C2: push ecx
  3452. loc_0072C0C3: call [eax+00000024h]
  3453. loc_0072C0C6: mov var_110, eax
  3454. loc_0072C0CC: cmp var_110, 00000000h
  3455. loc_0072C0D3: jge 0072C0F5h
  3456. loc_0072C0D5: push 00000024h
  3457. loc_0072C0D7: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  3458. loc_0072C0DC: mov edx, Me
  3459. loc_0072C0DF: push edx
  3460. loc_0072C0E0: mov eax, var_110
  3461. loc_0072C0E6: push eax
  3462. loc_0072C0E7: call [004010CCh] ; __vbaHresultCheckObj
  3463. loc_0072C0ED: mov var_3B8, eax
  3464. loc_0072C0F3: jmp 0072C0FFh
  3465. loc_0072C0F5: mov var_3B8, 00000000h
  3466. loc_0072C0FF: jmp 0072CBA7h
  3467. loc_0072C104: mov var_4, 0000005Fh
  3468. loc_0072C10B: mov ecx, var_144
  3469. loc_0072C111: push ecx
  3470. loc_0072C112: push 0047665Ch ; "clsCommandRaiseEvent"
  3471. loc_0072C117: call [004011B8h] ; __vbaStrCmp
  3472. loc_0072C11D: test eax, eax
  3473. loc_0072C11F: jnz 0072C70Fh
  3474. loc_0072C125: mov var_4, 00000060h
  3475. loc_0072C12C: mov edx, Me
  3476. loc_0072C12F: cmp [edx+00000038h], 00000000h
  3477. loc_0072C133: jz 0072C191h
  3478. loc_0072C135: mov eax, Me
  3479. loc_0072C138: mov ecx, [eax+00000038h]
  3480. loc_0072C13B: cmp [ecx], 0001h
  3481. loc_0072C13F: jnz 0072C191h
  3482. loc_0072C141: mov edx, Me
  3483. loc_0072C144: movsx eax, [edx+0000003Ch]
  3484. loc_0072C148: mov ecx, Me
  3485. loc_0072C14B: mov edx, [ecx+00000038h]
  3486. loc_0072C14E: sub eax, [edx+00000014h]
  3487. loc_0072C151: mov var_110, eax
  3488. loc_0072C157: mov eax, Me
  3489. loc_0072C15A: mov ecx, [eax+00000038h]
  3490. loc_0072C15D: mov edx, var_110
  3491. loc_0072C163: cmp edx, [ecx+00000010h]
  3492. loc_0072C166: jae 0072C174h
  3493. loc_0072C168: mov var_3BC, 00000000h
  3494. loc_0072C172: jmp 0072C180h
  3495. loc_0072C174: call [004011A8h] ; __vbaGenerateBoundsError
  3496. loc_0072C17A: mov var_3BC, eax
  3497. loc_0072C180: mov eax, var_110
  3498. loc_0072C186: shl eax, 02h
  3499. loc_0072C189: mov var_3C0, eax
  3500. loc_0072C18F: jmp 0072C19Dh
  3501. loc_0072C191: call [004011A8h] ; __vbaGenerateBoundsError
  3502. loc_0072C197: mov var_3C0, eax
  3503. loc_0072C19D: push 00476688h
  3504. loc_0072C1A2: mov ecx, Me
  3505. loc_0072C1A5: mov edx, [ecx+00000038h]
  3506. loc_0072C1A8: mov eax, [edx+0000000Ch]
  3507. loc_0072C1AB: mov ecx, var_3C0
  3508. loc_0072C1B1: mov edx, [eax+ecx]
  3509. loc_0072C1B4: push edx
  3510. loc_0072C1B5: call [004013C4h] ; __vbaCastObj
  3511. loc_0072C1BB: push eax
  3512. loc_0072C1BC: lea eax, var_60
  3513. loc_0072C1BF: push eax
  3514. loc_0072C1C0: call [00401128h] ; __vbaObjSet
  3515. loc_0072C1C6: mov var_4, 00000061h
  3516. loc_0072C1CD: lea ecx, var_94
  3517. loc_0072C1D3: push ecx
  3518. loc_0072C1D4: mov edx, Me
  3519. loc_0072C1D7: mov eax, [edx]
  3520. loc_0072C1D9: mov ecx, Me
  3521. loc_0072C1DC: push ecx
  3522. loc_0072C1DD: call [eax+0000001Ch]
  3523. loc_0072C1E0: mov var_110, eax
  3524. loc_0072C1E6: cmp var_110, 00000000h
  3525. loc_0072C1ED: jge 0072C20Fh
  3526. loc_0072C1EF: push 0000001Ch
  3527. loc_0072C1F1: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  3528. loc_0072C1F6: mov edx, Me
  3529. loc_0072C1F9: push edx
  3530. loc_0072C1FA: mov eax, var_110
  3531. loc_0072C200: push eax
  3532. loc_0072C201: call [004010CCh] ; __vbaHresultCheckObj
  3533. loc_0072C207: mov var_3C4, eax
  3534. loc_0072C20D: jmp 0072C219h
  3535. loc_0072C20F: mov var_3C4, 00000000h
  3536. loc_0072C219: mov ecx, var_94
  3537. loc_0072C21F: mov var_114, ecx
  3538. loc_0072C225: lea edx, var_98
  3539. loc_0072C22B: push edx
  3540. loc_0072C22C: mov eax, var_114
  3541. loc_0072C232: mov ecx, [eax]
  3542. loc_0072C234: mov edx, var_114
  3543. loc_0072C23A: push edx
  3544. loc_0072C23B: call [ecx+00000038h]
  3545. loc_0072C23E: fnclex
  3546. loc_0072C240: mov var_118, eax
  3547. loc_0072C246: cmp var_118, 00000000h
  3548. loc_0072C24D: jge 0072C272h
  3549. loc_0072C24F: push 00000038h
  3550. loc_0072C251: push 00475D6Ch
  3551. loc_0072C256: mov eax, var_114
  3552. loc_0072C25C: push eax
  3553. loc_0072C25D: mov ecx, var_118
  3554. loc_0072C263: push ecx
  3555. loc_0072C264: call [004010CCh] ; __vbaHresultCheckObj
  3556. loc_0072C26A: mov var_3C8, eax
  3557. loc_0072C270: jmp 0072C27Ch
  3558. loc_0072C272: mov var_3C8, 00000000h
  3559. loc_0072C27C: push 0047599Ch
  3560. loc_0072C281: mov edx, var_98
  3561. loc_0072C287: push edx
  3562. loc_0072C288: call [004013C4h] ; __vbaCastObj
  3563. loc_0072C28E: push eax
  3564. loc_0072C28F: lea eax, var_74
  3565. loc_0072C292: push eax
  3566. loc_0072C293: call [00401128h] ; __vbaObjSet
  3567. loc_0072C299: lea ecx, var_98
  3568. loc_0072C29F: push ecx
  3569. loc_0072C2A0: lea edx, var_94
  3570. loc_0072C2A6: push edx
  3571. loc_0072C2A7: push 00000002h
  3572. loc_0072C2A9: call [00401068h] ; __vbaFreeObjList
  3573. loc_0072C2AF: add esp, 0000000Ch
  3574. loc_0072C2B2: mov var_4, 00000062h
  3575. loc_0072C2B9: push 00000000h
  3576. loc_0072C2BB: mov eax, var_74
  3577. loc_0072C2BE: push eax
  3578. loc_0072C2BF: call [00401238h] ; __vbaObjIs
  3579. loc_0072C2C5: movsx ecx, ax
  3580. loc_0072C2C8: test ecx, ecx
  3581. loc_0072C2CA: jnz 0072C531h
  3582. loc_0072C2D0: mov var_4, 00000063h
  3583. loc_0072C2D7: lea edx, var_80
  3584. loc_0072C2DA: push edx
  3585. loc_0072C2DB: mov eax, var_60
  3586. loc_0072C2DE: mov ecx, [eax]
  3587. loc_0072C2E0: mov edx, var_60
  3588. loc_0072C2E3: push edx
  3589. loc_0072C2E4: call [ecx+00000020h]
  3590. loc_0072C2E7: fnclex
  3591. loc_0072C2E9: mov var_110, eax
  3592. loc_0072C2EF: cmp var_110, 00000000h
  3593. loc_0072C2F6: jge 0072C318h
  3594. loc_0072C2F8: push 00000020h
  3595. loc_0072C2FA: push 00476688h
  3596. loc_0072C2FF: mov eax, var_60
  3597. loc_0072C302: push eax
  3598. loc_0072C303: mov ecx, var_110
  3599. loc_0072C309: push ecx
  3600. loc_0072C30A: call [004010CCh] ; __vbaHresultCheckObj
  3601. loc_0072C310: mov var_3CC, eax
  3602. loc_0072C316: jmp 0072C322h
  3603. loc_0072C318: mov var_3CC, 00000000h
  3604. loc_0072C322: lea edx, var_84
  3605. loc_0072C328: push edx
  3606. loc_0072C329: mov eax, var_74
  3607. loc_0072C32C: mov ecx, [eax]
  3608. loc_0072C32E: mov edx, var_74
  3609. loc_0072C331: push edx
  3610. loc_0072C332: call [ecx+00000020h]
  3611. loc_0072C335: fnclex
  3612. loc_0072C337: mov var_114, eax
  3613. loc_0072C33D: cmp var_114, 00000000h
  3614. loc_0072C344: jge 0072C366h
  3615. loc_0072C346: push 00000020h
  3616. loc_0072C348: push 0047599Ch
  3617. loc_0072C34D: mov eax, var_74
  3618. loc_0072C350: push eax
  3619. loc_0072C351: mov ecx, var_114
  3620. loc_0072C357: push ecx
  3621. loc_0072C358: call [004010CCh] ; __vbaHresultCheckObj
  3622. loc_0072C35E: mov var_3D0, eax
  3623. loc_0072C364: jmp 0072C370h
  3624. loc_0072C366: mov var_3D0, 00000000h
  3625. loc_0072C370: mov edx, var_80
  3626. loc_0072C373: push edx
  3627. loc_0072C374: mov eax, var_84
  3628. loc_0072C37A: push eax
  3629. loc_0072C37B: call [004011B8h] ; __vbaStrCmp
  3630. loc_0072C381: neg eax
  3631. loc_0072C383: sbb eax, eax
  3632. loc_0072C385: inc eax
  3633. loc_0072C386: neg eax
  3634. loc_0072C388: mov var_118, ax
  3635. loc_0072C38F: lea ecx, var_84
  3636. loc_0072C395: push ecx
  3637. loc_0072C396: lea edx, var_80
  3638. loc_0072C399: push edx
  3639. loc_0072C39A: push 00000002h
  3640. loc_0072C39C: call [00401324h] ; __vbaFreeStrList
  3641. loc_0072C3A2: add esp, 0000000Ch
  3642. loc_0072C3A5: movsx eax, var_118
  3643. loc_0072C3AC: test eax, eax
  3644. loc_0072C3AE: jz 0072C4AEh
  3645. loc_0072C3B4: mov var_4, 00000064h
  3646. loc_0072C3BB: lea ecx, var_94
  3647. loc_0072C3C1: push ecx
  3648. loc_0072C3C2: mov edx, var_74
  3649. loc_0072C3C5: mov eax, [edx]
  3650. loc_0072C3C7: mov ecx, var_74
  3651. loc_0072C3CA: push ecx
  3652. loc_0072C3CB: call [eax+00000030h]
  3653. loc_0072C3CE: fnclex
  3654. loc_0072C3D0: mov var_110, eax
  3655. loc_0072C3D6: cmp var_110, 00000000h
  3656. loc_0072C3DD: jge 0072C3FFh
  3657. loc_0072C3DF: push 00000030h
  3658. loc_0072C3E1: push 0047599Ch
  3659. loc_0072C3E6: mov edx, var_74
  3660. loc_0072C3E9: push edx
  3661. loc_0072C3EA: mov eax, var_110
  3662. loc_0072C3F0: push eax
  3663. loc_0072C3F1: call [004010CCh] ; __vbaHresultCheckObj
  3664. loc_0072C3F7: mov var_3D4, eax
  3665. loc_0072C3FD: jmp 0072C409h
  3666. loc_0072C3FF: mov var_3D4, 00000000h
  3667. loc_0072C409: mov ecx, var_94
  3668. loc_0072C40F: mov var_1B0, ecx
  3669. loc_0072C415: mov var_94, 00000000h
  3670. loc_0072C41F: mov edx, var_1B0
  3671. loc_0072C425: push edx
  3672. loc_0072C426: lea eax, var_98
  3673. loc_0072C42C: push eax
  3674. loc_0072C42D: call [00401128h] ; __vbaObjSet
  3675. loc_0072C433: lea ecx, var_98
  3676. loc_0072C439: push ecx
  3677. loc_0072C43A: mov edx, var_60
  3678. loc_0072C43D: mov eax, [edx]
  3679. loc_0072C43F: mov ecx, var_60
  3680. loc_0072C442: push ecx
  3681. loc_0072C443: call [eax+0000002Ch]
  3682. loc_0072C446: fnclex
  3683. loc_0072C448: mov var_114, eax
  3684. loc_0072C44E: cmp var_114, 00000000h
  3685. loc_0072C455: jge 0072C477h
  3686. loc_0072C457: push 0000002Ch
  3687. loc_0072C459: push 00476688h
  3688. loc_0072C45E: mov edx, var_60
  3689. loc_0072C461: push edx
  3690. loc_0072C462: mov eax, var_114
  3691. loc_0072C468: push eax
  3692. loc_0072C469: call [004010CCh] ; __vbaHresultCheckObj
  3693. loc_0072C46F: mov var_3D8, eax
  3694. loc_0072C475: jmp 0072C481h
  3695. loc_0072C477: mov var_3D8, 00000000h
  3696. loc_0072C481: lea ecx, var_98
  3697. loc_0072C487: call [0040142Ch] ; __vbaFreeObj
  3698. loc_0072C48D: mov var_4, 00000065h
  3699. loc_0072C494: push 0047599Ch
  3700. loc_0072C499: push 00000000h
  3701. loc_0072C49B: call [004013C4h] ; __vbaCastObj
  3702. loc_0072C4A1: push eax
  3703. loc_0072C4A2: lea ecx, var_74
  3704. loc_0072C4A5: push ecx
  3705. loc_0072C4A6: call [00401128h] ; __vbaObjSet
  3706. loc_0072C4AC: jmp 0072C52Ch
  3707. loc_0072C4AE: mov var_4, 00000067h
  3708. loc_0072C4B5: lea edx, var_94
  3709. loc_0072C4BB: push edx
  3710. loc_0072C4BC: mov eax, var_74
  3711. loc_0072C4BF: mov ecx, [eax]
  3712. loc_0072C4C1: mov edx, var_74
  3713. loc_0072C4C4: push edx
  3714. loc_0072C4C5: call [ecx+00000028h]
  3715. loc_0072C4C8: fnclex
  3716. loc_0072C4CA: mov var_110, eax
  3717. loc_0072C4D0: cmp var_110, 00000000h
  3718. loc_0072C4D7: jge 0072C4F9h
  3719. loc_0072C4D9: push 00000028h
  3720. loc_0072C4DB: push 0047599Ch
  3721. loc_0072C4E0: mov eax, var_74
  3722. loc_0072C4E3: push eax
  3723. loc_0072C4E4: mov ecx, var_110
  3724. loc_0072C4EA: push ecx
  3725. loc_0072C4EB: call [004010CCh] ; __vbaHresultCheckObj
  3726. loc_0072C4F1: mov var_3DC, eax
  3727. loc_0072C4F7: jmp 0072C503h
  3728. loc_0072C4F9: mov var_3DC, 00000000h
  3729. loc_0072C503: push 0047599Ch
  3730. loc_0072C508: mov edx, var_94
  3731. loc_0072C50E: push edx
  3732. loc_0072C50F: call [004013C4h] ; __vbaCastObj
  3733. loc_0072C515: push eax
  3734. loc_0072C516: lea eax, var_74
  3735. loc_0072C519: push eax
  3736. loc_0072C51A: call [00401128h] ; __vbaObjSet
  3737. loc_0072C520: lea ecx, var_94
  3738. loc_0072C526: call [0040142Ch] ; __vbaFreeObj
  3739. loc_0072C52C: jmp 0072C2B2h
  3740. loc_0072C531: mov var_4, 0000006Ah
  3741. loc_0072C538: lea ecx, var_94
  3742. loc_0072C53E: push ecx
  3743. loc_0072C53F: mov edx, var_60
  3744. loc_0072C542: mov eax, [edx]
  3745. loc_0072C544: mov ecx, var_60
  3746. loc_0072C547: push ecx
  3747. loc_0072C548: call [eax+00000030h]
  3748. loc_0072C54B: fnclex
  3749. loc_0072C54D: mov var_114, eax
  3750. loc_0072C553: cmp var_114, 00000000h
  3751. loc_0072C55A: jge 0072C57Ch
  3752. loc_0072C55C: push 00000030h
  3753. loc_0072C55E: push 00476688h
  3754. loc_0072C563: mov edx, var_60
  3755. loc_0072C566: push edx
  3756. loc_0072C567: mov eax, var_114
  3757. loc_0072C56D: push eax
  3758. loc_0072C56E: call [004010CCh] ; __vbaHresultCheckObj
  3759. loc_0072C574: mov var_3E0, eax
  3760. loc_0072C57A: jmp 0072C586h
  3761. loc_0072C57C: mov var_3E0, 00000000h
  3762. loc_0072C586: mov ecx, Me
  3763. loc_0072C589: cmp [ecx+00000038h], 00000000h
  3764. loc_0072C58D: jz 0072C5EBh
  3765. loc_0072C58F: mov edx, Me
  3766. loc_0072C592: mov eax, [edx+00000038h]
  3767. loc_0072C595: cmp [eax], 0001h
  3768. loc_0072C599: jnz 0072C5EBh
  3769. loc_0072C59B: mov ecx, Me
  3770. loc_0072C59E: movsx edx, [ecx+0000003Ch]
  3771. loc_0072C5A2: mov eax, Me
  3772. loc_0072C5A5: mov ecx, [eax+00000038h]
  3773. loc_0072C5A8: sub edx, [ecx+00000014h]
  3774. loc_0072C5AB: mov var_110, edx
  3775. loc_0072C5B1: mov edx, Me
  3776. loc_0072C5B4: mov eax, [edx+00000038h]
  3777. loc_0072C5B7: mov ecx, var_110
  3778. loc_0072C5BD: cmp ecx, [eax+00000010h]
  3779. loc_0072C5C0: jae 0072C5CEh
  3780. loc_0072C5C2: mov var_3E4, 00000000h
  3781. loc_0072C5CC: jmp 0072C5DAh
  3782. loc_0072C5CE: call [004011A8h] ; __vbaGenerateBoundsError
  3783. loc_0072C5D4: mov var_3E4, eax
  3784. loc_0072C5DA: mov edx, var_110
  3785. loc_0072C5E0: shl edx, 02h
  3786. loc_0072C5E3: mov var_3E8, edx
  3787. loc_0072C5E9: jmp 0072C5F7h
  3788. loc_0072C5EB: call [004011A8h] ; __vbaGenerateBoundsError
  3789. loc_0072C5F1: mov var_3E8, eax
  3790. loc_0072C5F7: mov eax, var_94
  3791. loc_0072C5FD: push eax
  3792. loc_0072C5FE: mov ecx, Me
  3793. loc_0072C601: mov edx, [ecx+00000038h]
  3794. loc_0072C604: mov eax, [edx+0000000Ch]
  3795. loc_0072C607: add eax, var_3E8
  3796. loc_0072C60D: push eax
  3797. loc_0072C60E: call [00401130h] ; __vbaObjSetAddref
  3798. loc_0072C614: lea ecx, var_94
  3799. loc_0072C61A: call [0040142Ch] ; __vbaFreeObj
  3800. loc_0072C620: mov var_4, 0000006Bh
  3801. loc_0072C627: lea ecx, var_94
  3802. loc_0072C62D: push ecx
  3803. loc_0072C62E: mov edx, var_60
  3804. loc_0072C631: mov eax, [edx]
  3805. loc_0072C633: mov ecx, var_60
  3806. loc_0072C636: push ecx
  3807. loc_0072C637: call [eax+00000028h]
  3808. loc_0072C63A: fnclex
  3809. loc_0072C63C: mov var_110, eax
  3810. loc_0072C642: cmp var_110, 00000000h
  3811. loc_0072C649: jge 0072C66Bh
  3812. loc_0072C64B: push 00000028h
  3813. loc_0072C64D: push 00476688h
  3814. loc_0072C652: mov edx, var_60
  3815. loc_0072C655: push edx
  3816. loc_0072C656: mov eax, var_110
  3817. loc_0072C65C: push eax
  3818. loc_0072C65D: call [004010CCh] ; __vbaHresultCheckObj
  3819. loc_0072C663: mov var_3EC, eax
  3820. loc_0072C669: jmp 0072C675h
  3821. loc_0072C66B: mov var_3EC, 00000000h
  3822. loc_0072C675: mov ecx, var_94
  3823. loc_0072C67B: mov var_1B4, ecx
  3824. loc_0072C681: mov var_94, 00000000h
  3825. loc_0072C68B: mov edx, var_1B4
  3826. loc_0072C691: push edx
  3827. loc_0072C692: lea eax, var_98
  3828. loc_0072C698: push eax
  3829. loc_0072C699: call [00401128h] ; __vbaObjSet
  3830. loc_0072C69F: lea ecx, var_98
  3831. loc_0072C6A5: push ecx
  3832. loc_0072C6A6: mov edx, Me
  3833. loc_0072C6A9: mov eax, [edx]
  3834. loc_0072C6AB: mov ecx, Me
  3835. loc_0072C6AE: push ecx
  3836. loc_0072C6AF: call [eax+0000003Ch]
  3837. loc_0072C6B2: lea ecx, var_98
  3838. loc_0072C6B8: call [0040142Ch] ; __vbaFreeObj
  3839. loc_0072C6BE: mov var_4, 0000006Ch
  3840. loc_0072C6C5: mov edx, Me
  3841. loc_0072C6C8: mov eax, [edx]
  3842. loc_0072C6CA: mov ecx, Me
  3843. loc_0072C6CD: push ecx
  3844. loc_0072C6CE: call [eax+00000024h]
  3845. loc_0072C6D1: mov var_110, eax
  3846. loc_0072C6D7: cmp var_110, 00000000h
  3847. loc_0072C6DE: jge 0072C700h
  3848. loc_0072C6E0: push 00000024h
  3849. loc_0072C6E2: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  3850. loc_0072C6E7: mov edx, Me
  3851. loc_0072C6EA: push edx
  3852. loc_0072C6EB: mov eax, var_110
  3853. loc_0072C6F1: push eax
  3854. loc_0072C6F2: call [004010CCh] ; __vbaHresultCheckObj
  3855. loc_0072C6F8: mov var_3F0, eax
  3856. loc_0072C6FE: jmp 0072C70Ah
  3857. loc_0072C700: mov var_3F0, 00000000h
  3858. loc_0072C70A: jmp 0072CBA7h
  3859. loc_0072C70F: mov var_4, 0000006Dh
  3860. loc_0072C716: mov ecx, var_144
  3861. loc_0072C71C: push ecx
  3862. loc_0072C71D: push 0047669Ch ; "clsCommandSpeak"
  3863. loc_0072C722: call [004011B8h] ; __vbaStrCmp
  3864. loc_0072C728: test eax, eax
  3865. loc_0072C72A: jnz 0072CBA7h
  3866. loc_0072C730: mov var_4, 0000006Eh
  3867. loc_0072C737: call 00621930h
  3868. loc_0072C73C: mov var_4, 0000006Fh
  3869. loc_0072C743: mov edx, Me
  3870. loc_0072C746: cmp [edx+00000038h], 00000000h
  3871. loc_0072C74A: jz 0072C7A8h
  3872. loc_0072C74C: mov eax, Me
  3873. loc_0072C74F: mov ecx, [eax+00000038h]
  3874. loc_0072C752: cmp [ecx], 0001h
  3875. loc_0072C756: jnz 0072C7A8h
  3876. loc_0072C758: mov edx, Me
  3877. loc_0072C75B: movsx eax, [edx+0000003Ch]
  3878. loc_0072C75F: mov ecx, Me
  3879. loc_0072C762: mov edx, [ecx+00000038h]
  3880. loc_0072C765: sub eax, [edx+00000014h]
  3881. loc_0072C768: mov var_110, eax
  3882. loc_0072C76E: mov eax, Me
  3883. loc_0072C771: mov ecx, [eax+00000038h]
  3884. loc_0072C774: mov edx, var_110
  3885. loc_0072C77A: cmp edx, [ecx+00000010h]
  3886. loc_0072C77D: jae 0072C78Bh
  3887. loc_0072C77F: mov var_3F4, 00000000h
  3888. loc_0072C789: jmp 0072C797h
  3889. loc_0072C78B: call [004011A8h] ; __vbaGenerateBoundsError
  3890. loc_0072C791: mov var_3F4, eax
  3891. loc_0072C797: mov eax, var_110
  3892. loc_0072C79D: shl eax, 02h
  3893. loc_0072C7A0: mov var_3F8, eax
  3894. loc_0072C7A6: jmp 0072C7B4h
  3895. loc_0072C7A8: call [004011A8h] ; __vbaGenerateBoundsError
  3896. loc_0072C7AE: mov var_3F8, eax
  3897. loc_0072C7B4: push 004766BCh
  3898. loc_0072C7B9: mov ecx, Me
  3899. loc_0072C7BC: mov edx, [ecx+00000038h]
  3900. loc_0072C7BF: mov eax, [edx+0000000Ch]
  3901. loc_0072C7C2: mov ecx, var_3F8
  3902. loc_0072C7C8: mov edx, [eax+ecx]
  3903. loc_0072C7CB: push edx
  3904. loc_0072C7CC: call [004013C4h] ; __vbaCastObj
  3905. loc_0072C7D2: push eax
  3906. loc_0072C7D3: lea eax, var_5C
  3907. loc_0072C7D6: push eax
  3908. loc_0072C7D7: call [00401128h] ; __vbaObjSet
  3909. loc_0072C7DD: mov var_4, 00000070h
  3910. loc_0072C7E4: mov ecx, Me
  3911. loc_0072C7E7: movsx edx, [ecx+0000003Eh]
  3912. loc_0072C7EB: test edx, edx
  3913. loc_0072C7ED: jnz 0072CA5Ch
  3914. loc_0072C7F3: mov var_4, 00000071h
  3915. loc_0072C7FA: mov eax, Me
  3916. loc_0072C7FD: mov [eax+0000003Eh], FFFFFFh
  3917. loc_0072C803: mov var_4, 00000072h
  3918. loc_0072C80A: cmp [0073A254h], 00000000h
  3919. loc_0072C811: jnz 0072C82Fh
  3920. loc_0072C813: push 0073A254h
  3921. loc_0072C818: push 00431838h
  3922. loc_0072C81D: call [004012FCh] ; __vbaNew2
  3923. loc_0072C823: mov var_3FC, 0073A254h
  3924. loc_0072C82D: jmp 0072C839h
  3925. loc_0072C82F: mov var_3FC, 0073A254h
  3926. loc_0072C839: mov ecx, var_3FC
  3927. loc_0072C83F: mov edx, [ecx]
  3928. loc_0072C841: mov var_110, edx
  3929. loc_0072C847: mov eax, var_110
  3930. loc_0072C84D: mov ecx, [eax]
  3931. loc_0072C84F: mov edx, var_110
  3932. loc_0072C855: push edx
  3933. loc_0072C856: call [ecx+0000074Ch]
  3934. loc_0072C85C: fnclex
  3935. loc_0072C85E: mov var_114, eax
  3936. loc_0072C864: cmp var_114, 00000000h
  3937. loc_0072C86B: jge 0072C893h
  3938. loc_0072C86D: push 0000074Ch
  3939. loc_0072C872: push 004408D0h
  3940. loc_0072C877: mov eax, var_110
  3941. loc_0072C87D: push eax
  3942. loc_0072C87E: mov ecx, var_114
  3943. loc_0072C884: push ecx
  3944. loc_0072C885: call [004010CCh] ; __vbaHresultCheckObj
  3945. loc_0072C88B: mov var_400, eax
  3946. loc_0072C891: jmp 0072C89Dh
  3947. loc_0072C893: mov var_400, 00000000h
  3948. loc_0072C89D: mov var_4, 00000073h
  3949. loc_0072C8A4: lea edx, var_80
  3950. loc_0072C8A7: push edx
  3951. loc_0072C8A8: mov eax, var_5C
  3952. loc_0072C8AB: mov ecx, [eax]
  3953. loc_0072C8AD: mov edx, var_5C
  3954. loc_0072C8B0: push edx
  3955. loc_0072C8B1: call [ecx+00000028h]
  3956. loc_0072C8B4: fnclex
  3957. loc_0072C8B6: mov var_110, eax
  3958. loc_0072C8BC: cmp var_110, 00000000h
  3959. loc_0072C8C3: jge 0072C8E5h
  3960. loc_0072C8C5: push 00000028h
  3961. loc_0072C8C7: push 004766BCh
  3962. loc_0072C8CC: mov eax, var_5C
  3963. loc_0072C8CF: push eax
  3964. loc_0072C8D0: mov ecx, var_110
  3965. loc_0072C8D6: push ecx
  3966. loc_0072C8D7: call [004010CCh] ; __vbaHresultCheckObj
  3967. loc_0072C8DD: mov var_404, eax
  3968. loc_0072C8E3: jmp 0072C8EFh
  3969. loc_0072C8E5: mov var_404, 00000000h
  3970. loc_0072C8EF: push 00000000h
  3971. loc_0072C8F1: push FFFFFFFFh
  3972. loc_0072C8F3: push 00000001h
  3973. loc_0072C8F5: mov edx, [0073A040h]
  3974. loc_0072C8FB: push edx
  3975. loc_0072C8FC: push 00443B44h ; "[username]"
  3976. loc_0072C901: mov eax, var_80
  3977. loc_0072C904: push eax
  3978. loc_0072C905: call [00401258h] ; rtcReplace
  3979. loc_0072C90B: mov edx, eax
  3980. loc_0072C90D: lea ecx, var_84
  3981. loc_0072C913: call [004013C0h] ; __vbaStrMove
  3982. loc_0072C919: mov var_E8, 80020004h
  3983. loc_0072C923: mov var_F0, 0000000Ah
  3984. loc_0072C92D: mov ecx, var_84
  3985. loc_0072C933: mov var_1B8, ecx
  3986. loc_0072C939: mov var_84, 00000000h
  3987. loc_0072C943: mov edx, var_1B8
  3988. loc_0072C949: mov var_A8, edx
  3989. loc_0072C94F: mov var_B0, 00000008h
  3990. loc_0072C959: lea eax, var_94
  3991. loc_0072C95F: push eax
  3992. loc_0072C960: mov eax, 00000010h
  3993. loc_0072C965: call 00412850h ; __vbaChkstk
  3994. loc_0072C96A: mov ecx, esp
  3995. loc_0072C96C: mov edx, var_F0
  3996. loc_0072C972: mov [ecx], edx
  3997. loc_0072C974: mov eax, var_EC
  3998. loc_0072C97A: mov [ecx+00000004h], eax
  3999. loc_0072C97D: mov edx, var_E8
  4000. loc_0072C983: mov [ecx+00000008h], edx
  4001. loc_0072C986: mov eax, var_E4
  4002. loc_0072C98C: mov [ecx+0000000Ch], eax
  4003. loc_0072C98F: mov eax, 00000010h
  4004. loc_0072C994: call 00412850h ; __vbaChkstk
  4005. loc_0072C999: mov ecx, esp
  4006. loc_0072C99B: mov edx, var_B0
  4007. loc_0072C9A1: mov [ecx], edx
  4008. loc_0072C9A3: mov eax, var_AC
  4009. loc_0072C9A9: mov [ecx+00000004h], eax
  4010. loc_0072C9AC: mov edx, var_A8
  4011. loc_0072C9B2: mov [ecx+00000008h], edx
  4012. loc_0072C9B5: mov eax, var_A4
  4013. loc_0072C9BB: mov [ecx+0000000Ch], eax
  4014. loc_0072C9BE: mov ecx, [0073A08Ch]
  4015. loc_0072C9C4: mov edx, [ecx]
  4016. loc_0072C9C6: mov eax, [0073A08Ch]
  4017. loc_0072C9CB: push eax
  4018. loc_0072C9CC: call [edx+00000078h]
  4019. loc_0072C9CF: fnclex
  4020. loc_0072C9D1: mov var_114, eax
  4021. loc_0072C9D7: cmp var_114, 00000000h
  4022. loc_0072C9DE: jge 0072CA03h
  4023. loc_0072C9E0: push 00000078h
  4024. loc_0072C9E2: push 004419ACh
  4025. loc_0072C9E7: mov ecx, [0073A08Ch]
  4026. loc_0072C9ED: push ecx
  4027. loc_0072C9EE: mov edx, var_114
  4028. loc_0072C9F4: push edx
  4029. loc_0072C9F5: call [004010CCh] ; __vbaHresultCheckObj
  4030. loc_0072C9FB: mov var_408, eax
  4031. loc_0072CA01: jmp 0072CA0Dh
  4032. loc_0072CA03: mov var_408, 00000000h
  4033. loc_0072CA0D: mov eax, var_94
  4034. loc_0072CA13: mov var_1BC, eax
  4035. loc_0072CA19: mov var_94, 00000000h
  4036. loc_0072CA23: mov ecx, var_1BC
  4037. loc_0072CA29: push ecx
  4038. loc_0072CA2A: push 0073A208h
  4039. loc_0072CA2F: call [00401128h] ; __vbaObjSet
  4040. loc_0072CA35: lea edx, var_84
  4041. loc_0072CA3B: push edx
  4042. loc_0072CA3C: lea eax, var_80
  4043. loc_0072CA3F: push eax
  4044. loc_0072CA40: push 00000002h
  4045. loc_0072CA42: call [00401324h] ; __vbaFreeStrList
  4046. loc_0072CA48: add esp, 0000000Ch
  4047. loc_0072CA4B: lea ecx, var_B0
  4048. loc_0072CA51: call [00401030h] ; __vbaFreeVar
  4049. loc_0072CA57: jmp 0072CBA7h
  4050. loc_0072CA5C: mov var_4, 00000075h
  4051. loc_0072CA63: lea ecx, var_94
  4052. loc_0072CA69: push ecx
  4053. loc_0072CA6A: mov edx, var_5C
  4054. loc_0072CA6D: mov eax, [edx]
  4055. loc_0072CA6F: mov ecx, var_5C
  4056. loc_0072CA72: push ecx
  4057. loc_0072CA73: call [eax+00000020h]
  4058. loc_0072CA76: fnclex
  4059. loc_0072CA78: mov var_114, eax
  4060. loc_0072CA7E: cmp var_114, 00000000h
  4061. loc_0072CA85: jge 0072CAA7h
  4062. loc_0072CA87: push 00000020h
  4063. loc_0072CA89: push 004766BCh
  4064. loc_0072CA8E: mov edx, var_5C
  4065. loc_0072CA91: push edx
  4066. loc_0072CA92: mov eax, var_114
  4067. loc_0072CA98: push eax
  4068. loc_0072CA99: call [004010CCh] ; __vbaHresultCheckObj
  4069. loc_0072CA9F: mov var_40C, eax
  4070. loc_0072CAA5: jmp 0072CAB1h
  4071. loc_0072CAA7: mov var_40C, 00000000h
  4072. loc_0072CAB1: mov ecx, Me
  4073. loc_0072CAB4: cmp [ecx+00000038h], 00000000h
  4074. loc_0072CAB8: jz 0072CB16h
  4075. loc_0072CABA: mov edx, Me
  4076. loc_0072CABD: mov eax, [edx+00000038h]
  4077. loc_0072CAC0: cmp [eax], 0001h
  4078. loc_0072CAC4: jnz 0072CB16h
  4079. loc_0072CAC6: mov ecx, Me
  4080. loc_0072CAC9: movsx edx, [ecx+0000003Ch]
  4081. loc_0072CACD: mov eax, Me
  4082. loc_0072CAD0: mov ecx, [eax+00000038h]
  4083. loc_0072CAD3: sub edx, [ecx+00000014h]
  4084. loc_0072CAD6: mov var_110, edx
  4085. loc_0072CADC: mov edx, Me
  4086. loc_0072CADF: mov eax, [edx+00000038h]
  4087. loc_0072CAE2: mov ecx, var_110
  4088. loc_0072CAE8: cmp ecx, [eax+00000010h]
  4089. loc_0072CAEB: jae 0072CAF9h
  4090. loc_0072CAED: mov var_410, 00000000h
  4091. loc_0072CAF7: jmp 0072CB05h
  4092. loc_0072CAF9: call [004011A8h] ; __vbaGenerateBoundsError
  4093. loc_0072CAFF: mov var_410, eax
  4094. loc_0072CB05: mov edx, var_110
  4095. loc_0072CB0B: shl edx, 02h
  4096. loc_0072CB0E: mov var_414, edx
  4097. loc_0072CB14: jmp 0072CB22h
  4098. loc_0072CB16: call [004011A8h] ; __vbaGenerateBoundsError
  4099. loc_0072CB1C: mov var_414, eax
  4100. loc_0072CB22: mov eax, var_94
  4101. loc_0072CB28: push eax
  4102. loc_0072CB29: mov ecx, Me
  4103. loc_0072CB2C: mov edx, [ecx+00000038h]
  4104. loc_0072CB2F: mov eax, [edx+0000000Ch]
  4105. loc_0072CB32: add eax, var_414
  4106. loc_0072CB38: push eax
  4107. loc_0072CB39: call [00401130h] ; __vbaObjSetAddref
  4108. loc_0072CB3F: lea ecx, var_94
  4109. loc_0072CB45: call [0040142Ch] ; __vbaFreeObj
  4110. loc_0072CB4B: mov var_4, 00000076h
  4111. loc_0072CB52: mov ecx, Me
  4112. loc_0072CB55: mov [ecx+0000003Eh], 0000h
  4113. loc_0072CB5B: mov var_4, 00000077h
  4114. loc_0072CB62: mov edx, Me
  4115. loc_0072CB65: mov eax, [edx]
  4116. loc_0072CB67: mov ecx, Me
  4117. loc_0072CB6A: push ecx
  4118. loc_0072CB6B: call [eax+00000024h]
  4119. loc_0072CB6E: mov var_110, eax
  4120. loc_0072CB74: cmp var_110, 00000000h
  4121. loc_0072CB7B: jge 0072CB9Dh
  4122. loc_0072CB7D: push 00000024h
  4123. loc_0072CB7F: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4124. loc_0072CB84: mov edx, Me
  4125. loc_0072CB87: push edx
  4126. loc_0072CB88: mov eax, var_110
  4127. loc_0072CB8E: push eax
  4128. loc_0072CB8F: call [004010CCh] ; __vbaHresultCheckObj
  4129. loc_0072CB95: mov var_418, eax
  4130. loc_0072CB9B: jmp 0072CBA7h
  4131. loc_0072CB9D: mov var_418, 00000000h
  4132. loc_0072CBA7: jmp 0072CC85h
  4133. loc_0072CBAC: mov var_4, 0000007Dh
  4134. loc_0072CBB3: lea ecx, var_94
  4135. loc_0072CBB9: push ecx
  4136. loc_0072CBBA: push 00448C7Ch ; "RestPose"
  4137. loc_0072CBBF: mov edx, [0073A08Ch]
  4138. loc_0072CBC5: mov eax, [edx]
  4139. loc_0072CBC7: mov ecx, [0073A08Ch]
  4140. loc_0072CBCD: push ecx
  4141. loc_0072CBCE: call [eax+00000064h]
  4142. loc_0072CBD1: fnclex
  4143. loc_0072CBD3: mov var_110, eax
  4144. loc_0072CBD9: cmp var_110, 00000000h
  4145. loc_0072CBE0: jge 0072CC05h
  4146. loc_0072CBE2: push 00000064h
  4147. loc_0072CBE4: push 004419ACh
  4148. loc_0072CBE9: mov edx, [0073A08Ch]
  4149. loc_0072CBEF: push edx
  4150. loc_0072CBF0: mov eax, var_110
  4151. loc_0072CBF6: push eax
  4152. loc_0072CBF7: call [004010CCh] ; __vbaHresultCheckObj
  4153. loc_0072CBFD: mov var_41C, eax
  4154. loc_0072CC03: jmp 0072CC0Fh
  4155. loc_0072CC05: mov var_41C, 00000000h
  4156. loc_0072CC0F: mov ecx, var_94
  4157. loc_0072CC15: mov var_1C0, ecx
  4158. loc_0072CC1B: mov var_94, 00000000h
  4159. loc_0072CC25: mov edx, var_1C0
  4160. loc_0072CC2B: push edx
  4161. loc_0072CC2C: push 0073A208h
  4162. loc_0072CC31: call [00401128h] ; __vbaObjSet
  4163. loc_0072CC37: mov var_4, 0000007Eh
  4164. loc_0072CC3E: call [00401340h] ; rtcErrObj
  4165. loc_0072CC44: push eax
  4166. loc_0072CC45: lea eax, var_94
  4167. loc_0072CC4B: push eax
  4168. loc_0072CC4C: call [00401128h] ; __vbaObjSet
  4169. loc_0072CC52: mov var_420, eax
  4170. loc_0072CC58: mov ecx, var_420
  4171. loc_0072CC5E: mov edx, [ecx]
  4172. loc_0072CC60: mov eax, var_420
  4173. loc_0072CC66: push eax
  4174. loc_0072CC67: call [edx+00000048h]
  4175. loc_0072CC6A: lea ecx, var_94
  4176. loc_0072CC70: call [0040142Ch] ; __vbaFreeObj
  4177. loc_0072CC76: mov var_4, 0000007Fh
  4178. loc_0072CC7D: push FFFFFFFFh
  4179. loc_0072CC7F: call [00401090h] ; __vbaResume
  4180. loc_0072CC85: call [00401114h] ; __vbaExitProc
  4181. loc_0072CC8B: push 0072CDC8h
  4182. loc_0072CC90: jmp 0072CD19h
  4183. loc_0072CC95: lea ecx, var_7C
  4184. loc_0072CC98: push ecx
  4185. loc_0072CC99: call [00401410h] ; __vbaAryUnlock
  4186. loc_0072CC9F: lea edx, var_90
  4187. loc_0072CCA5: push edx
  4188. loc_0072CCA6: lea eax, var_8C
  4189. loc_0072CCAC: push eax
  4190. loc_0072CCAD: lea ecx, var_88
  4191. loc_0072CCB3: push ecx
  4192. loc_0072CCB4: lea edx, var_84
  4193. loc_0072CCBA: push edx
  4194. loc_0072CCBB: lea eax, var_80
  4195. loc_0072CCBE: push eax
  4196. loc_0072CCBF: push 00000005h
  4197. loc_0072CCC1: call [00401324h] ; __vbaFreeStrList
  4198. loc_0072CCC7: add esp, 00000018h
  4199. loc_0072CCCA: lea ecx, var_A0
  4200. loc_0072CCD0: push ecx
  4201. loc_0072CCD1: lea edx, var_9C
  4202. loc_0072CCD7: push edx
  4203. loc_0072CCD8: lea eax, var_98
  4204. loc_0072CCDE: push eax
  4205. loc_0072CCDF: lea ecx, var_94
  4206. loc_0072CCE5: push ecx
  4207. loc_0072CCE6: push 00000004h
  4208. loc_0072CCE8: call [00401068h] ; __vbaFreeObjList
  4209. loc_0072CCEE: add esp, 00000014h
  4210. loc_0072CCF1: lea edx, var_E0
  4211. loc_0072CCF7: push edx
  4212. loc_0072CCF8: lea eax, var_D0
  4213. loc_0072CCFE: push eax
  4214. loc_0072CCFF: lea ecx, var_C0
  4215. loc_0072CD05: push ecx
  4216. loc_0072CD06: lea edx, var_B0
  4217. loc_0072CD0C: push edx
  4218. loc_0072CD0D: push 00000004h
  4219. loc_0072CD0F: call [00401050h] ; __vbaFreeVarList
  4220. loc_0072CD15: add esp, 00000014h
  4221. loc_0072CD18: ret
  4222. loc_0072CD19: lea ecx, var_144
  4223. loc_0072CD1F: call [00401430h] ; __vbaFreeStr
  4224. loc_0072CD25: lea ecx, var_154
  4225. loc_0072CD2B: call [00401030h] ; __vbaFreeVar
  4226. loc_0072CD31: lea ecx, var_24
  4227. loc_0072CD34: call [0040142Ch] ; __vbaFreeObj
  4228. loc_0072CD3A: lea ecx, var_28
  4229. loc_0072CD3D: call [0040142Ch] ; __vbaFreeObj
  4230. loc_0072CD43: lea eax, var_34
  4231. loc_0072CD46: push eax
  4232. loc_0072CD47: push 00000000h
  4233. loc_0072CD49: call [004010F0h] ; __vbaAryDestruct
  4234. loc_0072CD4F: lea ecx, var_38
  4235. loc_0072CD52: call [0040142Ch] ; __vbaFreeObj
  4236. loc_0072CD58: lea ecx, var_3C
  4237. loc_0072CD5B: call [0040142Ch] ; __vbaFreeObj
  4238. loc_0072CD61: lea ecx, var_40
  4239. loc_0072CD64: call [0040142Ch] ; __vbaFreeObj
  4240. loc_0072CD6A: lea ecx, var_50
  4241. loc_0072CD6D: call [00401030h] ; __vbaFreeVar
  4242. loc_0072CD73: lea ecx, var_54
  4243. loc_0072CD76: call [0040142Ch] ; __vbaFreeObj
  4244. loc_0072CD7C: lea ecx, var_58
  4245. loc_0072CD7F: call [00401430h] ; __vbaFreeStr
  4246. loc_0072CD85: lea ecx, var_5C
  4247. loc_0072CD88: call [0040142Ch] ; __vbaFreeObj
  4248. loc_0072CD8E: lea ecx, var_60
  4249. loc_0072CD91: call [0040142Ch] ; __vbaFreeObj
  4250. loc_0072CD97: lea ecx, var_68
  4251. loc_0072CD9A: call [00401430h] ; __vbaFreeStr
  4252. loc_0072CDA0: lea ecx, var_6C
  4253. loc_0072CDA3: call [0040142Ch] ; __vbaFreeObj
  4254. loc_0072CDA9: lea ecx, var_70
  4255. loc_0072CDAC: push ecx
  4256. loc_0072CDAD: push 00000000h
  4257. loc_0072CDAF: call [004010F0h] ; __vbaAryDestruct
  4258. loc_0072CDB5: lea ecx, var_74
  4259. loc_0072CDB8: call [0040142Ch] ; __vbaFreeObj
  4260. loc_0072CDBE: lea ecx, var_78
  4261. loc_0072CDC1: call [0040142Ch] ; __vbaFreeObj
  4262. loc_0072CDC7: ret
  4263. loc_0072CDC8: mov edx, Me
  4264. loc_0072CDCB: mov eax, [edx]
  4265. loc_0072CDCD: mov ecx, Me
  4266. loc_0072CDD0: push ecx
  4267. loc_0072CDD1: call [eax+00000008h]
  4268. loc_0072CDD4: mov eax, var_10
  4269. loc_0072CDD7: mov ecx, var_20
  4270. loc_0072CDDA: mov fs:[00000000h], ecx
  4271. loc_0072CDE1: pop edi
  4272. loc_0072CDE2: pop esi
  4273. loc_0072CDE3: pop ebx
  4274. loc_0072CDE4: mov esp, ebp
  4275. loc_0072CDE6: pop ebp
  4276. loc_0072CDE7: retn 0004h
  4277. End Sub
  4278. Public Sub SetParentReference(ParentObject) '72CDF0
  4279. loc_0072CDF0: push ebp
  4280. loc_0072CDF1: mov ebp, esp
  4281. loc_0072CDF3: sub esp, 0000000Ch
  4282. loc_0072CDF6: push 00412856h ; __vbaExceptHandler
  4283. loc_0072CDFB: mov eax, fs:[00000000h]
  4284. loc_0072CE01: push eax
  4285. loc_0072CE02: mov fs:[00000000h], esp
  4286. loc_0072CE09: sub esp, 00000014h
  4287. loc_0072CE0C: push ebx
  4288. loc_0072CE0D: push esi
  4289. loc_0072CE0E: push edi
  4290. loc_0072CE0F: mov var_C, esp
  4291. loc_0072CE12: mov var_8, 004123D0h
  4292. loc_0072CE19: xor ebx, ebx
  4293. loc_0072CE1B: mov var_4, ebx
  4294. loc_0072CE1E: mov esi, Me
  4295. loc_0072CE21: push esi
  4296. loc_0072CE22: mov eax, [esi]
  4297. loc_0072CE24: call [eax+00000004h]
  4298. loc_0072CE27: mov ecx, ParentObject
  4299. loc_0072CE2A: mov edi, [00401130h] ; __vbaObjSetAddref
  4300. loc_0072CE30: lea edx, var_18
  4301. loc_0072CE33: push ecx
  4302. loc_0072CE34: push edx
  4303. loc_0072CE35: mov var_18, ebx
  4304. loc_0072CE38: mov var_1C, ebx
  4305. loc_0072CE3B: call edi
  4306. loc_0072CE3D: mov eax, var_18
  4307. loc_0072CE40: add esi, 00000044h
  4308. loc_0072CE43: push eax
  4309. loc_0072CE44: push esi
  4310. loc_0072CE45: call edi
  4311. loc_0072CE47: mov ecx, [esi]
  4312. loc_0072CE49: push ebx
  4313. loc_0072CE4A: push ecx
  4314. loc_0072CE4B: call [00401238h] ; __vbaObjIs
  4315. loc_0072CE51: test ax, ax
  4316. loc_0072CE54: jnz 0072CE7Ch
  4317. loc_0072CE56: mov eax, [esi]
  4318. loc_0072CE58: lea ecx, var_1C
  4319. loc_0072CE5B: mov var_1C, ebx
  4320. loc_0072CE5E: push ecx
  4321. loc_0072CE5F: mov edx, [eax]
  4322. loc_0072CE61: push eax
  4323. loc_0072CE62: call [edx+00000038h]
  4324. loc_0072CE65: cmp eax, ebx
  4325. loc_0072CE67: fnclex
  4326. loc_0072CE69: jge 0072CE7Ch
  4327. loc_0072CE6B: mov edx, [esi]
  4328. loc_0072CE6D: push 00000038h
  4329. loc_0072CE6F: push 004523F0h ; "�" & Chr(37) & "�R���@�" & Chr(13) & "�X�Y�'BBEvent"
  4330. loc_0072CE74: push edx
  4331. loc_0072CE75: push eax
  4332. loc_0072CE76: call [004010CCh] ; __vbaHresultCheckObj
  4333. loc_0072CE7C: push 0072CE8Bh
  4334. loc_0072CE81: lea ecx, var_18
  4335. loc_0072CE84: call [0040142Ch] ; __vbaFreeObj
  4336. loc_0072CE8A: ret
  4337. loc_0072CE8B: mov eax, Me
  4338. loc_0072CE8E: push eax
  4339. loc_0072CE8F: mov ecx, [eax]
  4340. loc_0072CE91: call [ecx+00000008h]
  4341. loc_0072CE94: mov eax, var_4
  4342. loc_0072CE97: mov ecx, var_14
  4343. loc_0072CE9A: pop edi
  4344. loc_0072CE9B: pop esi
  4345. loc_0072CE9C: mov fs:[00000000h], ecx
  4346. loc_0072CEA3: pop ebx
  4347. loc_0072CEA4: mov esp, ebp
  4348. loc_0072CEA6: pop ebp
  4349. loc_0072CEA7: retn 0008h
  4350. End Sub
  4351. Public Function ShouldBeHeard(NewAction) '72CEB0
  4352. loc_0072CEB0: push ebp
  4353. loc_0072CEB1: mov ebp, esp
  4354. loc_0072CEB3: sub esp, 0000000Ch
  4355. loc_0072CEB6: push 00412856h ; __vbaExceptHandler
  4356. loc_0072CEBB: mov eax, fs:[00000000h]
  4357. loc_0072CEC1: push eax
  4358. loc_0072CEC2: mov fs:[00000000h], esp
  4359. loc_0072CEC9: sub esp, 0000000Ch
  4360. loc_0072CECC: push ebx
  4361. loc_0072CECD: push esi
  4362. loc_0072CECE: push edi
  4363. loc_0072CECF: mov var_C, esp
  4364. loc_0072CED2: mov var_8, 004123E0h
  4365. loc_0072CED9: xor esi, esi
  4366. loc_0072CEDB: mov var_4, esi
  4367. loc_0072CEDE: mov eax, Me
  4368. loc_0072CEE1: push eax
  4369. loc_0072CEE2: mov ecx, [eax]
  4370. loc_0072CEE4: call [ecx+00000004h]
  4371. loc_0072CEE7: mov var_18, esi
  4372. loc_0072CEEA: mov var_18, FFFFFFFFh
  4373. loc_0072CEF1: mov eax, Me
  4374. loc_0072CEF4: push eax
  4375. loc_0072CEF5: mov edx, [eax]
  4376. loc_0072CEF7: call [edx+00000008h]
  4377. loc_0072CEFA: mov eax, arg_10
  4378. loc_0072CEFD: mov cx, var_18
  4379. loc_0072CF01: mov [eax], cx
  4380. loc_0072CF04: mov eax, var_4
  4381. loc_0072CF07: mov ecx, var_14
  4382. loc_0072CF0A: pop edi
  4383. loc_0072CF0B: pop esi
  4384. loc_0072CF0C: mov fs:[00000000h], ecx
  4385. loc_0072CF13: pop ebx
  4386. loc_0072CF14: mov esp, ebp
  4387. loc_0072CF16: pop ebp
  4388. loc_0072CF17: retn 000Ch
  4389. End Function
  4390. Private Sub Proc_75_5_7284F0
  4391. loc_007284F0: push ebp
  4392. loc_007284F1: mov ebp, esp
  4393. loc_007284F3: sub esp, 00000008h
  4394. loc_007284F6: push 00412856h ; __vbaExceptHandler
  4395. loc_007284FB: mov eax, fs:[00000000h]
  4396. loc_00728501: push eax
  4397. loc_00728502: mov fs:[00000000h], esp
  4398. loc_00728509: sub esp, 00000070h
  4399. loc_0072850C: push ebx
  4400. loc_0072850D: push esi
  4401. loc_0072850E: push edi
  4402. loc_0072850F: mov var_8, esp
  4403. loc_00728512: mov var_4, 00412180h
  4404. loc_00728519: mov ebx, Me
  4405. loc_0072851C: lea ecx, var_1C
  4406. loc_0072851F: xor esi, esi
  4407. loc_00728521: push ecx
  4408. loc_00728522: mov eax, [ebx]
  4409. loc_00728524: push ebx
  4410. loc_00728525: mov var_14, esi
  4411. loc_00728528: mov var_18, esi
  4412. loc_0072852B: mov var_1C, esi
  4413. loc_0072852E: mov var_20, esi
  4414. loc_00728531: mov var_24, esi
  4415. loc_00728534: mov var_34, esi
  4416. loc_00728537: mov var_44, esi
  4417. loc_0072853A: mov var_54, esi
  4418. loc_0072853D: mov var_64, esi
  4419. loc_00728540: call [eax+0000001Ch]
  4420. loc_00728543: cmp eax, esi
  4421. loc_00728545: jge 0072855Ah
  4422. loc_00728547: mov edi, [004010CCh] ; __vbaHresultCheckObj
  4423. loc_0072854D: push 0000001Ch
  4424. loc_0072854F: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4425. loc_00728554: push ebx
  4426. loc_00728555: push eax
  4427. loc_00728556: call edi
  4428. loc_00728558: jmp 00728560h
  4429. loc_0072855A: mov edi, [004010CCh] ; __vbaHresultCheckObj
  4430. loc_00728560: mov edx, var_1C
  4431. loc_00728563: push esi
  4432. loc_00728564: push edx
  4433. loc_00728565: call [00401238h] ; __vbaObjIs
  4434. loc_0072856B: mov si, ax
  4435. loc_0072856E: lea ecx, var_1C
  4436. loc_00728571: not esi
  4437. loc_00728573: call [0040142Ch] ; __vbaFreeObj
  4438. loc_00728579: test si, si
  4439. loc_0072857C: jz 007287A8h
  4440. loc_00728582: mov eax, [ebx]
  4441. loc_00728584: lea ecx, var_1C
  4442. loc_00728587: push ecx
  4443. loc_00728588: push ebx
  4444. loc_00728589: call [eax+0000001Ch]
  4445. loc_0072858C: test eax, eax
  4446. loc_0072858E: jge 0072859Bh
  4447. loc_00728590: push 0000001Ch
  4448. loc_00728592: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4449. loc_00728597: push ebx
  4450. loc_00728598: push eax
  4451. loc_00728599: call edi
  4452. loc_0072859B: mov eax, var_1C
  4453. loc_0072859E: lea ecx, var_20
  4454. loc_007285A1: push ecx
  4455. loc_007285A2: push eax
  4456. loc_007285A3: mov edx, [eax]
  4457. loc_007285A5: mov esi, eax
  4458. loc_007285A7: call [edx+00000030h]
  4459. loc_007285AA: test eax, eax
  4460. loc_007285AC: fnclex
  4461. loc_007285AE: jge 007285BBh
  4462. loc_007285B0: push 00000030h
  4463. loc_007285B2: push 00475D6Ch
  4464. loc_007285B7: push esi
  4465. loc_007285B8: push eax
  4466. loc_007285B9: call edi
  4467. loc_007285BB: mov edx, var_20
  4468. loc_007285BE: push 00000000h
  4469. loc_007285C0: push edx
  4470. loc_007285C1: call [00401238h] ; __vbaObjIs
  4471. loc_007285C7: mov si, ax
  4472. loc_007285CA: lea eax, var_20
  4473. loc_007285CD: lea ecx, var_1C
  4474. loc_007285D0: push eax
  4475. loc_007285D1: push ecx
  4476. loc_007285D2: push 00000002h
  4477. loc_007285D4: call [00401068h] ; __vbaFreeObjList
  4478. loc_007285DA: add esp, 0000000Ch
  4479. loc_007285DD: test si, si
  4480. loc_007285E0: jz 007287A8h
  4481. loc_007285E6: mov edx, [ebx]
  4482. loc_007285E8: lea eax, var_1C
  4483. loc_007285EB: push eax
  4484. loc_007285EC: push ebx
  4485. loc_007285ED: call [edx+0000001Ch]
  4486. loc_007285F0: test eax, eax
  4487. loc_007285F2: jge 007285FFh
  4488. loc_007285F4: push 0000001Ch
  4489. loc_007285F6: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4490. loc_007285FB: push ebx
  4491. loc_007285FC: push eax
  4492. loc_007285FD: call edi
  4493. loc_007285FF: mov eax, var_1C
  4494. loc_00728602: lea edx, var_20
  4495. loc_00728605: push edx
  4496. loc_00728606: push eax
  4497. loc_00728607: mov ecx, [eax]
  4498. loc_00728609: mov esi, eax
  4499. loc_0072860B: call [ecx+00000038h]
  4500. loc_0072860E: test eax, eax
  4501. loc_00728610: fnclex
  4502. loc_00728612: jge 0072861Fh
  4503. loc_00728614: push 00000038h
  4504. loc_00728616: push 00475D6Ch
  4505. loc_0072861B: push esi
  4506. loc_0072861C: push eax
  4507. loc_0072861D: call edi
  4508. loc_0072861F: mov eax, var_20
  4509. loc_00728622: push 0047599Ch
  4510. loc_00728627: push eax
  4511. loc_00728628: call [004013C4h] ; __vbaCastObj
  4512. loc_0072862E: lea ecx, var_14
  4513. loc_00728631: push eax
  4514. loc_00728632: push ecx
  4515. loc_00728633: call [00401128h] ; __vbaObjSet
  4516. loc_00728639: lea edx, var_20
  4517. loc_0072863C: lea eax, var_1C
  4518. loc_0072863F: push edx
  4519. loc_00728640: push eax
  4520. loc_00728641: push 00000002h
  4521. loc_00728643: call [00401068h] ; __vbaFreeObjList
  4522. loc_00728649: add esp, 0000000Ch
  4523. loc_0072864C: mov ecx, var_14
  4524. loc_0072864F: push 00000000h
  4525. loc_00728651: push ecx
  4526. loc_00728652: call [00401238h] ; __vbaObjIs
  4527. loc_00728658: test ax, ax
  4528. loc_0072865B: jnz 007287A8h
  4529. loc_00728661: mov eax, var_14
  4530. loc_00728664: lea ecx, var_18
  4531. loc_00728667: push ecx
  4532. loc_00728668: push eax
  4533. loc_00728669: mov edx, [eax]
  4534. loc_0072866B: call [edx+00000020h]
  4535. loc_0072866E: test eax, eax
  4536. loc_00728670: fnclex
  4537. loc_00728672: jge 00728682h
  4538. loc_00728674: mov edx, var_14
  4539. loc_00728677: push 00000020h
  4540. loc_00728679: push 0047599Ch
  4541. loc_0072867E: push edx
  4542. loc_0072867F: push eax
  4543. loc_00728680: call edi
  4544. loc_00728682: mov eax, var_18
  4545. loc_00728685: lea ecx, var_44
  4546. loc_00728688: mov var_2C, eax
  4547. loc_0072868B: lea eax, var_34
  4548. loc_0072868E: push eax
  4549. loc_0072868F: push ecx
  4550. loc_00728690: mov var_18, 00000000h
  4551. loc_00728697: mov var_34, 00000008h
  4552. loc_0072869E: call [00401080h] ; rtcLowerCaseVar
  4553. loc_007286A4: lea edx, var_44
  4554. loc_007286A7: lea eax, var_64
  4555. loc_007286AA: push edx
  4556. loc_007286AB: push eax
  4557. loc_007286AC: mov var_5C, 004759B0h ; "main"
  4558. loc_007286B3: mov var_64, 00008008h
  4559. loc_007286BA: call [004011C0h] ; __vbaVarTstEq
  4560. loc_007286C0: lea ecx, var_44
  4561. loc_007286C3: lea edx, var_34
  4562. loc_007286C6: push ecx
  4563. loc_007286C7: push edx
  4564. loc_007286C8: push 00000002h
  4565. loc_007286CA: mov si, ax
  4566. loc_007286CD: call [00401050h] ; __vbaFreeVarList
  4567. loc_007286D3: add esp, 0000000Ch
  4568. loc_007286D6: test si, si
  4569. loc_007286D9: jz 0072875Fh
  4570. loc_007286DF: mov eax, [ebx]
  4571. loc_007286E1: lea ecx, var_20
  4572. loc_007286E4: push ecx
  4573. loc_007286E5: push ebx
  4574. loc_007286E6: call [eax+0000001Ch]
  4575. loc_007286E9: test eax, eax
  4576. loc_007286EB: jge 007286F8h
  4577. loc_007286ED: push 0000001Ch
  4578. loc_007286EF: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4579. loc_007286F4: push ebx
  4580. loc_007286F5: push eax
  4581. loc_007286F6: call edi
  4582. loc_007286F8: mov eax, var_14
  4583. loc_007286FB: mov esi, var_20
  4584. loc_007286FE: lea ecx, var_1C
  4585. loc_00728701: mov edx, [eax]
  4586. loc_00728703: push ecx
  4587. loc_00728704: push eax
  4588. loc_00728705: call [edx+00000030h]
  4589. loc_00728708: test eax, eax
  4590. loc_0072870A: fnclex
  4591. loc_0072870C: jge 0072871Ch
  4592. loc_0072870E: mov edx, var_14
  4593. loc_00728711: push 00000030h
  4594. loc_00728713: push 0047599Ch
  4595. loc_00728718: push edx
  4596. loc_00728719: push eax
  4597. loc_0072871A: call edi
  4598. loc_0072871C: mov eax, var_1C
  4599. loc_0072871F: mov var_1C, 00000000h
  4600. loc_00728726: push eax
  4601. loc_00728727: lea eax, var_24
  4602. loc_0072872A: push eax
  4603. loc_0072872B: call [00401128h] ; __vbaObjSet
  4604. loc_00728731: mov ecx, [esi]
  4605. loc_00728733: lea edx, var_24
  4606. loc_00728736: push edx
  4607. loc_00728737: push esi
  4608. loc_00728738: call [ecx+00000034h]
  4609. loc_0072873B: test eax, eax
  4610. loc_0072873D: fnclex
  4611. loc_0072873F: jge 0072874Ch
  4612. loc_00728741: push 00000034h
  4613. loc_00728743: push 00475D6Ch
  4614. loc_00728748: push esi
  4615. loc_00728749: push eax
  4616. loc_0072874A: call edi
  4617. loc_0072874C: lea eax, var_20
  4618. loc_0072874F: lea ecx, var_24
  4619. loc_00728752: push eax
  4620. loc_00728753: push ecx
  4621. loc_00728754: push 00000002h
  4622. loc_00728756: call [00401068h] ; __vbaFreeObjList
  4623. loc_0072875C: add esp, 0000000Ch
  4624. loc_0072875F: mov eax, var_14
  4625. loc_00728762: lea ecx, var_1C
  4626. loc_00728765: push ecx
  4627. loc_00728766: push eax
  4628. loc_00728767: mov edx, [eax]
  4629. loc_00728769: call [edx+00000028h]
  4630. loc_0072876C: test eax, eax
  4631. loc_0072876E: fnclex
  4632. loc_00728770: jge 00728780h
  4633. loc_00728772: mov edx, var_14
  4634. loc_00728775: push 00000028h
  4635. loc_00728777: push 0047599Ch
  4636. loc_0072877C: push edx
  4637. loc_0072877D: push eax
  4638. loc_0072877E: call edi
  4639. loc_00728780: mov eax, var_1C
  4640. loc_00728783: push 0047599Ch
  4641. loc_00728788: push eax
  4642. loc_00728789: call [004013C4h] ; __vbaCastObj
  4643. loc_0072878F: lea ecx, var_14
  4644. loc_00728792: push eax
  4645. loc_00728793: push ecx
  4646. loc_00728794: call [00401128h] ; __vbaObjSet
  4647. loc_0072879A: lea ecx, var_1C
  4648. loc_0072879D: call [0040142Ch] ; __vbaFreeObj
  4649. loc_007287A3: jmp 0072864Ch
  4650. loc_007287A8: push 007287EEh
  4651. loc_007287AD: jmp 007287E4h
  4652. loc_007287AF: lea ecx, var_18
  4653. loc_007287B2: call [00401430h] ; __vbaFreeStr
  4654. loc_007287B8: lea edx, var_24
  4655. loc_007287BB: lea eax, var_20
  4656. loc_007287BE: push edx
  4657. loc_007287BF: lea ecx, var_1C
  4658. loc_007287C2: push eax
  4659. loc_007287C3: push ecx
  4660. loc_007287C4: push 00000003h
  4661. loc_007287C6: call [00401068h] ; __vbaFreeObjList
  4662. loc_007287CC: lea edx, var_54
  4663. loc_007287CF: lea eax, var_44
  4664. loc_007287D2: push edx
  4665. loc_007287D3: lea ecx, var_34
  4666. loc_007287D6: push eax
  4667. loc_007287D7: push ecx
  4668. loc_007287D8: push 00000003h
  4669. loc_007287DA: call [00401050h] ; __vbaFreeVarList
  4670. loc_007287E0: add esp, 00000020h
  4671. loc_007287E3: ret
  4672. loc_007287E4: lea ecx, var_14
  4673. loc_007287E7: call [0040142Ch] ; __vbaFreeObj
  4674. loc_007287ED: ret
  4675. loc_007287EE: mov ecx, var_10
  4676. loc_007287F1: pop edi
  4677. loc_007287F2: pop esi
  4678. loc_007287F3: xor eax, eax
  4679. loc_007287F5: mov fs:[00000000h], ecx
  4680. loc_007287FC: pop ebx
  4681. loc_007287FD: mov esp, ebp
  4682. loc_007287FF: pop ebp
  4683. loc_00728800: retn 0004h
  4684. End Sub
  4685. Private Sub Proc_75_6_728810
  4686. loc_00728810: push ebp
  4687. loc_00728811: mov ebp, esp
  4688. loc_00728813: sub esp, 00000008h
  4689. loc_00728816: push 00412856h ; __vbaExceptHandler
  4690. loc_0072881B: mov eax, fs:[00000000h]
  4691. loc_00728821: push eax
  4692. loc_00728822: mov fs:[00000000h], esp
  4693. loc_00728829: sub esp, 0000001Ch
  4694. loc_0072882C: push ebx
  4695. loc_0072882D: push esi
  4696. loc_0072882E: push edi
  4697. loc_0072882F: mov var_8, esp
  4698. loc_00728832: mov var_4, 00412190h
  4699. loc_00728839: mov esi, Me
  4700. loc_0072883C: lea ecx, var_14
  4701. loc_0072883F: xor edi, edi
  4702. loc_00728841: push ecx
  4703. loc_00728842: mov eax, [esi]
  4704. loc_00728844: push esi
  4705. loc_00728845: mov var_14, edi
  4706. loc_00728848: mov var_18, edi
  4707. loc_0072884B: call [eax+0000001Ch]
  4708. loc_0072884E: cmp eax, edi
  4709. loc_00728850: jge 00728865h
  4710. loc_00728852: mov ebx, [004010CCh] ; __vbaHresultCheckObj
  4711. loc_00728858: push 0000001Ch
  4712. loc_0072885A: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4713. loc_0072885F: push esi
  4714. loc_00728860: push eax
  4715. loc_00728861: call ebx
  4716. loc_00728863: jmp 0072886Bh
  4717. loc_00728865: mov ebx, [004010CCh] ; __vbaHresultCheckObj
  4718. loc_0072886B: mov edx, var_14
  4719. loc_0072886E: push edi
  4720. loc_0072886F: push edx
  4721. loc_00728870: call [00401238h] ; __vbaObjIs
  4722. loc_00728876: mov di, ax
  4723. loc_00728879: lea ecx, var_14
  4724. loc_0072887C: not edi
  4725. loc_0072887E: call [0040142Ch] ; __vbaFreeObj
  4726. loc_00728884: test di, di
  4727. loc_00728887: jz 00728945h
  4728. loc_0072888D: push 00000001h
  4729. loc_0072888F: push 00000001h
  4730. loc_00728891: lea eax, [esi+00000038h]
  4731. loc_00728894: push 00000001h
  4732. loc_00728896: push 004757E8h
  4733. loc_0072889B: push eax
  4734. loc_0072889C: push 00000004h
  4735. loc_0072889E: push 00000440h
  4736. loc_007288A3: call [00401220h] ; __vbaRedim
  4737. loc_007288A9: mov eax, [esi]
  4738. loc_007288AB: add esp, 0000001Ch
  4739. loc_007288AE: lea ecx, var_14
  4740. loc_007288B1: mov [esi+0000003Ch], 0001h
  4741. loc_007288B7: push ecx
  4742. loc_007288B8: push esi
  4743. loc_007288B9: call [eax+0000001Ch]
  4744. loc_007288BC: test eax, eax
  4745. loc_007288BE: jge 007288CBh
  4746. loc_007288C0: push 0000001Ch
  4747. loc_007288C2: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4748. loc_007288C7: push esi
  4749. loc_007288C8: push eax
  4750. loc_007288C9: call ebx
  4751. loc_007288CB: mov eax, var_14
  4752. loc_007288CE: lea ecx, var_18
  4753. loc_007288D1: push ecx
  4754. loc_007288D2: push eax
  4755. loc_007288D3: mov edx, [eax]
  4756. loc_007288D5: mov edi, eax
  4757. loc_007288D7: call [edx+00000030h]
  4758. loc_007288DA: test eax, eax
  4759. loc_007288DC: fnclex
  4760. loc_007288DE: jge 007288EBh
  4761. loc_007288E0: push 00000030h
  4762. loc_007288E2: push 00475D6Ch
  4763. loc_007288E7: push edi
  4764. loc_007288E8: push eax
  4765. loc_007288E9: call ebx
  4766. loc_007288EB: mov eax, [esi+00000038h]
  4767. loc_007288EE: lea edi, [esi+00000038h]
  4768. loc_007288F1: test eax, eax
  4769. loc_007288F3: jz 0072891Ah
  4770. loc_007288F5: cmp [eax], 0001h
  4771. loc_007288F9: jnz 0072891Ah
  4772. loc_007288FB: movsx esi, [esi+0000003Ch]
  4773. loc_007288FF: mov edx, [eax+00000014h]
  4774. loc_00728902: mov ecx, [eax+00000010h]
  4775. loc_00728905: sub esi, edx
  4776. loc_00728907: cmp esi, ecx
  4777. loc_00728909: jb 00728911h
  4778. loc_0072890B: call [004011A8h] ; __vbaGenerateBoundsError
  4779. loc_00728911: lea eax, [esi*4]
  4780. loc_00728918: jmp 00728920h
  4781. loc_0072891A: call [004011A8h] ; __vbaGenerateBoundsError
  4782. loc_00728920: mov edx, var_18
  4783. loc_00728923: mov ecx, [edi]
  4784. loc_00728925: push edx
  4785. loc_00728926: mov edx, [ecx+0000000Ch]
  4786. loc_00728929: add edx, eax
  4787. loc_0072892B: push edx
  4788. loc_0072892C: call [00401130h] ; __vbaObjSetAddref
  4789. loc_00728932: lea eax, var_18
  4790. loc_00728935: lea ecx, var_14
  4791. loc_00728938: push eax
  4792. loc_00728939: push ecx
  4793. loc_0072893A: push 00000002h
  4794. loc_0072893C: call [00401068h] ; __vbaFreeObjList
  4795. loc_00728942: add esp, 0000000Ch
  4796. loc_00728945: push 00728961h
  4797. loc_0072894A: jmp 00728960h
  4798. loc_0072894C: lea edx, var_18
  4799. loc_0072894F: lea eax, var_14
  4800. loc_00728952: push edx
  4801. loc_00728953: push eax
  4802. loc_00728954: push 00000002h
  4803. loc_00728956: call [00401068h] ; __vbaFreeObjList
  4804. loc_0072895C: add esp, 0000000Ch
  4805. loc_0072895F: ret
  4806. loc_00728960: ret
  4807. loc_00728961: mov ecx, var_10
  4808. loc_00728964: pop edi
  4809. loc_00728965: pop esi
  4810. loc_00728966: xor eax, eax
  4811. loc_00728968: mov fs:[00000000h], ecx
  4812. loc_0072896F: pop ebx
  4813. loc_00728970: mov esp, ebp
  4814. loc_00728972: pop ebp
  4815. loc_00728973: retn 0004h
  4816. End Sub
  4817. Private Sub Proc_75_7_728980
  4818. loc_00728980: mov ecx, var_4
  4819. loc_00728984: mov ax, [ecx+0000003Ch]
  4820. loc_00728988: sub ax, 0001h
  4821. loc_0072898C: jo 007289BDh
  4822. loc_0072898E: test ax, ax
  4823. loc_00728991: mov [ecx+0000003Ch], ax
  4824. loc_00728995: jle 007289B8h
  4825. loc_00728997: movsx eax, ax
  4826. loc_0072899A: push 00000001h
  4827. loc_0072899C: push eax
  4828. loc_0072899D: push 00000001h
  4829. loc_0072899F: add ecx, 00000038h
  4830. loc_007289A2: push 004757E8h
  4831. loc_007289A7: push ecx
  4832. loc_007289A8: push 00000004h
  4833. loc_007289AA: push 00000440h
  4834. loc_007289AF: call [00401200h] ; __vbaRedimPreserve
  4835. loc_007289B5: add esp, 0000001Ch
  4836. loc_007289B8: xor eax, eax
  4837. loc_007289BA: retn 0004h
  4838. End Sub
  4839. Private Sub Proc_75_8_7289D0
  4840. loc_007289D0: push esi
  4841. loc_007289D1: mov esi, [esp+00000008h]
  4842. loc_007289D5: push edi
  4843. loc_007289D6: push 00000001h
  4844. loc_007289D8: mov ax, [esi+0000003Ch]
  4845. loc_007289DC: lea edi, [esi+00000038h]
  4846. loc_007289DF: add ax, 0001h
  4847. loc_007289E3: jo 00728A52h
  4848. loc_007289E5: mov [esi+0000003Ch], ax
  4849. loc_007289E9: movsx eax, ax
  4850. loc_007289EC: push eax
  4851. loc_007289ED: push 00000001h
  4852. loc_007289EF: push 004757E8h
  4853. loc_007289F4: push edi
  4854. loc_007289F5: push 00000004h
  4855. loc_007289F7: push 00000440h
  4856. loc_007289FC: call [00401200h] ; __vbaRedimPreserve
  4857. loc_00728A02: mov eax, [edi]
  4858. loc_00728A04: add esp, 0000001Ch
  4859. loc_00728A07: test eax, eax
  4860. loc_00728A09: jz 00728A30h
  4861. loc_00728A0B: cmp [eax], 0001h
  4862. loc_00728A0F: jnz 00728A30h
  4863. loc_00728A11: movsx esi, [esi+0000003Ch]
  4864. loc_00728A15: mov edx, [eax+00000014h]
  4865. loc_00728A18: mov ecx, [eax+00000010h]
  4866. loc_00728A1B: sub esi, edx
  4867. loc_00728A1D: cmp esi, ecx
  4868. loc_00728A1F: jb 00728A27h
  4869. loc_00728A21: call [004011A8h] ; __vbaGenerateBoundsError
  4870. loc_00728A27: lea eax, [esi*4]
  4871. loc_00728A2E: jmp 00728A36h
  4872. loc_00728A30: call [004011A8h] ; __vbaGenerateBoundsError
  4873. loc_00728A36: mov ecx, Me
  4874. loc_00728A3A: mov edx, [ecx]
  4875. loc_00728A3C: mov ecx, [edi]
  4876. loc_00728A3E: push edx
  4877. loc_00728A3F: mov edx, [ecx+0000000Ch]
  4878. loc_00728A42: add edx, eax
  4879. loc_00728A44: push edx
  4880. loc_00728A45: call [00401130h] ; __vbaObjSetAddref
  4881. loc_00728A4B: pop edi
  4882. loc_00728A4C: xor eax, eax
  4883. loc_00728A4E: pop esi
  4884. loc_00728A4F: retn 0008h
  4885. End Sub
  4886. Private Sub Proc_75_9_72CF20
  4887. loc_0072CF20: push ebp
  4888. loc_0072CF21: mov ebp, esp
  4889. loc_0072CF23: sub esp, 0000000Ch
  4890. loc_0072CF26: push 00412856h ; __vbaExceptHandler
  4891. loc_0072CF2B: mov eax, fs:[00000000h]
  4892. loc_0072CF31: push eax
  4893. loc_0072CF32: mov fs:[00000000h], esp
  4894. loc_0072CF39: sub esp, 00000008h
  4895. loc_0072CF3C: push ebx
  4896. loc_0072CF3D: push esi
  4897. loc_0072CF3E: push edi
  4898. loc_0072CF3F: mov var_C, esp
  4899. loc_0072CF42: mov var_8, 004123E8h
  4900. loc_0072CF49: mov esi, Me
  4901. loc_0072CF4C: mov eax, esi
  4902. loc_0072CF4E: and eax, 00000001h
  4903. loc_0072CF51: mov var_4, eax
  4904. loc_0072CF54: and esi, FFFFFFFEh
  4905. loc_0072CF57: push esi
  4906. loc_0072CF58: mov Me, esi
  4907. loc_0072CF5B: mov ecx, [esi]
  4908. loc_0072CF5D: call [ecx+00000004h]
  4909. loc_0072CF60: mov [esi+00000040h], 0001h
  4910. loc_0072CF66: mov var_4, 00000000h
  4911. loc_0072CF6D: mov eax, Me
  4912. loc_0072CF70: push eax
  4913. loc_0072CF71: mov edx, [eax]
  4914. loc_0072CF73: call [edx+00000008h]
  4915. loc_0072CF76: mov eax, var_4
  4916. loc_0072CF79: mov ecx, var_14
  4917. loc_0072CF7C: pop edi
  4918. loc_0072CF7D: pop esi
  4919. loc_0072CF7E: mov fs:[00000000h], ecx
  4920. loc_0072CF85: pop ebx
  4921. loc_0072CF86: mov esp, ebp
  4922. loc_0072CF88: pop ebp
  4923. loc_0072CF89: retn 0004h
  4924. End Sub
  4925. Private Sub Proc_75_10_72CF90
  4926. loc_0072CF90: push ebp
  4927. loc_0072CF91: mov ebp, esp
  4928. loc_0072CF93: sub esp, 0000000Ch
  4929. loc_0072CF96: push 00412856h ; __vbaExceptHandler
  4930. loc_0072CF9B: mov eax, fs:[00000000h]
  4931. loc_0072CFA1: push eax
  4932. loc_0072CFA2: mov fs:[00000000h], esp
  4933. loc_0072CFA9: sub esp, 00000018h
  4934. loc_0072CFAC: push ebx
  4935. loc_0072CFAD: push esi
  4936. loc_0072CFAE: push edi
  4937. loc_0072CFAF: mov var_C, esp
  4938. loc_0072CFB2: mov var_8, 004123F0h
  4939. loc_0072CFB9: mov esi, Me
  4940. loc_0072CFBC: mov eax, esi
  4941. loc_0072CFBE: and eax, 00000001h
  4942. loc_0072CFC1: mov var_4, eax
  4943. loc_0072CFC4: and esi, FFFFFFFEh
  4944. loc_0072CFC7: push esi
  4945. loc_0072CFC8: mov Me, esi
  4946. loc_0072CFCB: mov ecx, [esi]
  4947. loc_0072CFCD: call [ecx+00000004h]
  4948. loc_0072CFD0: mov edx, [esi]
  4949. loc_0072CFD2: lea eax, var_18
  4950. loc_0072CFD5: push eax
  4951. loc_0072CFD6: push esi
  4952. loc_0072CFD7: mov var_18, 00000000h
  4953. loc_0072CFDE: call [edx+0000001Ch]
  4954. loc_0072CFE1: test eax, eax
  4955. loc_0072CFE3: jge 0072CFF8h
  4956. loc_0072CFE5: mov ebx, [004010CCh] ; __vbaHresultCheckObj
  4957. loc_0072CFEB: push 0000001Ch
  4958. loc_0072CFED: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4959. loc_0072CFF2: push esi
  4960. loc_0072CFF3: push eax
  4961. loc_0072CFF4: call ebx
  4962. loc_0072CFF6: jmp 0072CFFEh
  4963. loc_0072CFF8: mov ebx, [004010CCh] ; __vbaHresultCheckObj
  4964. loc_0072CFFE: mov ecx, var_18
  4965. loc_0072D001: push 00000000h
  4966. loc_0072D003: push ecx
  4967. loc_0072D004: call [00401238h] ; __vbaObjIs
  4968. loc_0072D00A: mov di, ax
  4969. loc_0072D00D: lea ecx, var_18
  4970. loc_0072D010: not edi
  4971. loc_0072D012: call [0040142Ch] ; __vbaFreeObj
  4972. loc_0072D018: test di, di
  4973. loc_0072D01B: jz 0072D093h
  4974. loc_0072D01D: mov edx, [esi]
  4975. loc_0072D01F: lea eax, var_18
  4976. loc_0072D022: push eax
  4977. loc_0072D023: push esi
  4978. loc_0072D024: call [edx+0000001Ch]
  4979. loc_0072D027: test eax, eax
  4980. loc_0072D029: jge 0072D036h
  4981. loc_0072D02B: push 0000001Ch
  4982. loc_0072D02D: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  4983. loc_0072D032: push esi
  4984. loc_0072D033: push eax
  4985. loc_0072D034: call ebx
  4986. loc_0072D036: mov eax, var_18
  4987. loc_0072D039: push eax
  4988. loc_0072D03A: mov edi, eax
  4989. loc_0072D03C: mov ecx, [eax]
  4990. loc_0072D03E: call [ecx+00000024h]
  4991. loc_0072D041: test eax, eax
  4992. loc_0072D043: fnclex
  4993. loc_0072D045: jge 0072D052h
  4994. loc_0072D047: push 00000024h
  4995. loc_0072D049: push 00475D6Ch
  4996. loc_0072D04E: push edi
  4997. loc_0072D04F: push eax
  4998. loc_0072D050: call ebx
  4999. loc_0072D052: mov edi, [0040142Ch] ; __vbaFreeObj
  5000. loc_0072D058: lea ecx, var_18
  5001. loc_0072D05B: call edi
  5002. loc_0072D05D: push 00475D6Ch
  5003. loc_0072D062: push 00000000h
  5004. loc_0072D064: call [004013C4h] ; __vbaCastObj
  5005. loc_0072D06A: lea edx, var_18
  5006. loc_0072D06D: push eax
  5007. loc_0072D06E: push edx
  5008. loc_0072D06F: call [00401128h] ; __vbaObjSet
  5009. loc_0072D075: mov eax, [esi]
  5010. loc_0072D077: lea ecx, var_18
  5011. loc_0072D07A: push ecx
  5012. loc_0072D07B: push esi
  5013. loc_0072D07C: call [eax+00000020h]
  5014. loc_0072D07F: test eax, eax
  5015. loc_0072D081: jge 0072D08Eh
  5016. loc_0072D083: push 00000020h
  5017. loc_0072D085: push 0047639Ch ; "�6�c��:I���s��Xu�������E�L��ҷ��C:\WINNT\System32\BonziTapFilters.dll"
  5018. loc_0072D08A: push esi
  5019. loc_0072D08B: push eax
  5020. loc_0072D08C: call ebx
  5021. loc_0072D08E: lea ecx, var_18
  5022. loc_0072D091: call edi
  5023. loc_0072D093: mov var_4, 00000000h
  5024. loc_0072D09A: push 0072D0ACh
  5025. loc_0072D09F: jmp 0072D0ABh
  5026. loc_0072D0A1: lea ecx, var_18
  5027. loc_0072D0A4: call [0040142Ch] ; __vbaFreeObj
  5028. loc_0072D0AA: ret
  5029. loc_0072D0AB: ret
  5030. loc_0072D0AC: mov eax, Me
  5031. loc_0072D0AF: push eax
  5032. loc_0072D0B0: mov edx, [eax]
  5033. loc_0072D0B2: call [edx+00000008h]
  5034. loc_0072D0B5: mov eax, var_4
  5035. loc_0072D0B8: mov ecx, var_14
  5036. loc_0072D0BB: pop edi
  5037. loc_0072D0BC: pop esi
  5038. loc_0072D0BD: mov fs:[00000000h], ecx
  5039. loc_0072D0C4: pop ebx
  5040. loc_0072D0C5: mov esp, ebp
  5041. loc_0072D0C7: pop ebp
  5042. loc_0072D0C8: retn 0004h
  5043. End Sub