Anonymous ID: b42eff May 5, 2020, 5:38 p.m. No.9045328   🗄️.is 🔗kun

LAB_0040e4e9 XREF[1]: 0040e7ee(j)

0040e4e9 8b 0d d4 MOV ECX,dword ptr [DAT_004251d4]

51 42 00

0040e4ef a1 88 50 MOV EAX,[DAT_00425088]

42 00

0040e4f4 41 INC ECX

0040e4f5 3b c8 CMP ECX,EAX

0040e4f7 89 0d d4 MOV dword ptr [DAT_004251d4],ECX

51 42 00

0040e4fd 7e 39 JLE LAB_0040e538

0040e4ff 6a 00 PUSH 0x0

0040e501 05 e8 03 ADD EAX,0x3e8

00 00

0040e506 50 PUSH EAX

0040e507 6a 01 PUSH 0x1

0040e509 6a 00 PUSH 0x0

0040e50b 68 80 50 PUSH DAT_00425080

42 00

0040e510 6a 04 PUSH 0x4

0040e512 6a 00 PUSH 0x0

0040e514 a3 88 50 MOV [DAT_00425088],EAX

42 00

0040e519 ff d7 CALL EDI=>MSVBVM50.DLL::__vbaRedimPreserve

0040e51b a1 88 50 MOV EAX,[DAT_00425088]

42 00

0040e520 83 c4 1c ADD ESP,0x1c

0040e523 6a 00 PUSH 0x0

0040e525 50 PUSH EAX

0040e526 6a 01 PUSH 0x1

0040e528 6a 00 PUSH 0x0

0040e52a 68 84 50 PUSH DAT_00425084

42 00

0040e52f 6a 04 PUSH 0x4

0040e531 6a 00 PUSH 0x0

0040e533 ff d7 CALL EDI=>MSVBVM50.DLL::__vbaRedimPreserve

0040e535 83 c4 1c ADD ESP,0x1c

LAB_0040e538 XREF[1]: 0040e4fd(j)

0040e538 8d 4c 24 1c LEA ECX,[ESP + 0x1c]

0040e53c 51 PUSH ECX

0040e53d 6a 01 PUSH 0x1

0040e53f 68 fc 31 PUSH DAT_004031fc = 01h

40 00

0040e544 83 cb ff OR EBX,0xffffffff

0040e547 ff d6 CALL ESI=>MSVBVM50.DLL::__vbaInputFile

0040e549 83 c4 0c ADD ESP,0xc

0040e54c 8d 54 24 28 LEA EDX,[ESP + 0x28]

0040e550 52 PUSH EDX

0040e551 6a 01 PUSH 0x1

0040e553 68 fc 31 PUSH DAT_004031fc = 01h

40 00

0040e558 ff d6 CALL ESI=>MSVBVM50.DLL::__vbaInputFile

0040e55a 8b 44 24 28 MOV EAX,dword ptr [ESP + 0x28]

0040e55e 8b 0d 80 MOV ECX,dword ptr [DAT_00425080]

50 42 00

0040e564 8d 50 01 LEA EDX,[EAX + 0x1]

0040e567 a1 d4 51 MOV EAX,[DAT_004251d4]

42 00

0040e56c 8b e8 MOV EBP,EAX

0040e56e 2b 69 14 SUB EBP,dword ptr [ECX + 0x14]

0040e571 8b 49 0c MOV ECX,dword ptr [ECX + 0xc]

0040e574 89 14 a9 MOV dword ptr [ECX + EBP*0x4],EDX

0040e577 8b 0d 84 MOV ECX,dword ptr [DAT_00425084]

50 42 00

0040e57d 2b 41 14 SUB