00412600 push ebp 00412601 mov ebp,esp 00412603 sub esp,0Ch 00412606 push 00401476h 0041260B mov eax,fs:[00000000h] 00412611 push eax 00412612 mov fs:[00000000h],esp 00412619 sub esp,000000F8h 0041261F mov eax,[ebp+00000008h] 00412622 push ebx 00412623 mov ecx,eax 00412625 push esi 00412626 and al,FEh 00412628 push edi 00412629 mov [ebp-0000000Ch],esp 0041262C and ecx,01h 0041262F mov edx,[eax] * Possible string reference 4011C8h "" | 00412631 mov dword ptr [ebp-00000008h],004011C8h 00412638 push eax 00412639 mov [ebp-00000004h],ecx 0041263C mov [ebp+00000008h],eax 0041263F call dword ptr [edx+00000004h] 00412642 mov eax,[0041B02Ch] 00412647 xor esi,esi 00412649 cmp eax,esi 0041264B mov [ebp-00000018h],esi 0041264E mov [ebp-0000001Ch],esi 00412651 mov [ebp-00000020h],esi 00412654 mov [ebp-00000024h],esi 00412657 mov [ebp-00000028h],esi 0041265A mov [ebp-0000002Ch],esi 0041265D mov [ebp-00000030h],esi 00412660 mov [ebp-00000040h],esi 00412663 mov [ebp-00000050h],esi 00412666 mov [ebp-00000060h],esi 00412669 mov [ebp-00000070h],esi 0041266C mov [ebp-00000080h],esi 0041266F mov [ebp-000000A0h],esi 00412675 mov [ebp-000000B0h],esi 0041267B mov [ebp-00000100h],esi 00412681 jnz 00412698h 00412683 push 0041B02Ch * Possible string reference 40685Ch "" | 00412688 push 0040685Ch * Reference to MSVBVM50.__vbaNew2 | 0041268D call dword ptr [0041F2F0h] 00412693 mov eax,[0041B02Ch] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412681(C) | 00412698 mov ecx,[eax] 0041269A push eax 0041269B call dword ptr [ecx+00000310h] 004126A1 lea edx,[ebp-00000100h] 004126A7 push eax 004126A8 push edx * Reference to MSVBVM50.__vbaObjSet | 004126A9 call dword ptr [0041F23Ch] 004126AF mov eax,[ebp-00000100h] 004126B5 lea edx,[ebp-0000001Ch] * Possible string reference 4095CCh "Notas de " | 004126B8 mov dword ptr [ebp-00000098h],004095CCh 004126C2 mov dword ptr [ebp-000000A0h],00000008h 004126CC mov ecx,[eax] 004126CE push edx 004126CF push eax 004126D0 call dword ptr [ecx+000000F0h] 004126D6 cmp eax,esi 004126D8 jnl 004126F6h 004126DA mov ecx,[ebp-00000100h] * Reference to MSVBVM50.__vbaHresultCheckObj | 004126E0 mov edi,[0041F220h] 004126E6 push 000000F0h * Possible string reference 4093ECh "" | 004126EB push 004093ECh 004126F0 push ecx 004126F1 push eax 004126F2 call edi 004126F4 jmp 004126FCh * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004126D8(C) | * Reference to MSVBVM50.__vbaHresultCheckObj | 004126F6 mov edi,[0041F220h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004126F4(U) | 004126FC mov eax,[ebp-0000001Ch] 004126FF lea ecx,[ebp-00000020h] 00412702 push ecx 00412703 push eax 00412704 mov edx,[eax] 00412706 mov ebx,eax 00412708 call dword ptr [edx+000000B4h] 0041270E cmp eax,esi 00412710 jnl 00412720h 00412712 push 000000B4h * Possible string reference 408BA0h "1" | 00412717 push 00408BA0h 0041271C push ebx 0041271D push eax 0041271E call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412710(C) | 00412720 lea ebx,[ebp-00000024h] 00412723 mov eax,[ebp-00000020h] 00412726 push ebx 00412727 mov edx,00000008h 0041272C sub esp,10h 0041272F mov esi,[eax] 00412731 mov ebx,esp * Possible string reference 4095E4h "nombres" | 00412733 mov ecx,004095E4h 00412738 push eax 00412739 mov [ebp-000000D0h],eax 0041273F mov [ebx],edx 00412741 mov edx,[ebp-0000008Ch] 00412747 mov [ebx+00000004h],edx 0041274A mov [ebx+00000008h],ecx 0041274D mov ecx,[ebp-00000084h] 00412753 mov [ebx+0000000Ch],ecx 00412756 call dword ptr [esi+00000030h] 00412759 test eax,eax 0041275B jnl 0041276Eh 0041275D mov edx,[ebp-000000D0h] 00412763 push 30h * Possible string reference 408BB0h "S" | 00412765 push 00408BB0h 0041276A push edx 0041276B push eax 0041276C call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041275B(C) | 0041276E mov eax,[ebp-00000024h] 00412771 lea edx,[ebp-00000040h] 00412774 push edx 00412775 push eax 00412776 mov ecx,[eax] 00412778 mov esi,eax 0041277A call dword ptr [ecx+00000044h] 0041277D test eax,eax 0041277F jnl 0041278Ch 00412781 push 44h * Possible string reference 408BE0h "Q" | 00412783 push 00408BE0h 00412788 push esi 00412789 push eax 0041278A call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041277F(C) | 0041278C mov eax,[ebp-00000100h] 00412792 lea edx,[ebp-00000028h] * Possible string reference 4095F8h " " | 00412795 mov dword ptr [ebp-000000A8h],004095F8h 0041279F mov dword ptr [ebp-000000B0h],00000008h 004127A9 mov ecx,[eax] 004127AB push edx 004127AC push eax 004127AD call dword ptr [ecx+000000F0h] 004127B3 test eax,eax 004127B5 jnl 004127CBh 004127B7 mov ecx,[ebp-00000100h] 004127BD push 000000F0h * Possible string reference 4093ECh "" | 004127C2 push 004093ECh 004127C7 push ecx 004127C8 push eax 004127C9 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004127B5(C) | 004127CB mov eax,[ebp-00000028h] 004127CE lea ecx,[ebp-0000002Ch] 004127D1 push ecx 004127D2 push eax 004127D3 mov edx,[eax] 004127D5 mov esi,eax 004127D7 call dword ptr [edx+000000B4h] 004127DD test eax,eax 004127DF jnl 004127EFh 004127E1 push 000000B4h * Possible string reference 408BA0h "1" | 004127E6 push 00408BA0h 004127EB push esi 004127EC push eax 004127ED call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004127DF(C) | 004127EF lea ebx,[ebp-00000030h] 004127F2 mov eax,[ebp-0000002Ch] 004127F5 push ebx 004127F6 mov edx,00000008h 004127FB sub esp,10h 004127FE mov esi,[eax] 00412800 mov ebx,esp * Possible string reference 409600h "apellidos" | 00412802 mov ecx,00409600h 00412807 push eax 00412808 mov [ebp-000000ECh],eax 0041280E mov [ebx],edx 00412810 mov edx,[ebp-000000BCh] 00412816 mov [ebx+00000004h],edx 00412819 mov [ebx+00000008h],ecx 0041281C mov ecx,[ebp-000000B4h] 00412822 mov [ebx+0000000Ch],ecx 00412825 call dword ptr [esi+00000030h] 00412828 test eax,eax 0041282A jnl 0041283Dh 0041282C mov edx,[ebp-000000ECh] 00412832 push 30h * Possible string reference 408BB0h "S" | 00412834 push 00408BB0h 00412839 push edx 0041283A push eax 0041283B call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041282A(C) | 0041283D mov eax,[ebp-00000030h] 00412840 lea edx,[ebp-00000070h] 00412843 push edx 00412844 push eax 00412845 mov ecx,[eax] 00412847 mov esi,eax 00412849 call dword ptr [ecx+00000044h] 0041284C test eax,eax 0041284E jnl 0041285Bh 00412850 push 44h * Possible string reference 408BE0h "Q" | 00412852 push 00408BE0h 00412857 push esi 00412858 push eax 00412859 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041284E(C) | 0041285B mov eax,[ebp+00000008h] * Reference to MSVBVM50.__vbaVarAdd | 0041285E mov esi,[0041F330h] 00412864 lea ecx,[ebp-000000A0h] 0041286A lea edx,[ebp-00000040h] 0041286D mov ebx,[eax] 0041286F push ecx 00412870 lea eax,[ebp-00000050h] 00412873 push edx 00412874 push eax 00412875 call esi 00412877 lea ecx,[ebp-000000B0h] 0041287D push eax 0041287E lea edx,[ebp-00000060h] 00412881 push ecx 00412882 push edx 00412883 call esi 00412885 push eax 00412886 lea eax,[ebp-00000070h] 00412889 lea ecx,[ebp-00000080h] 0041288C push eax 0041288D push ecx 0041288E call esi 00412890 lea edx,[ebp-00000018h] 00412893 push eax 00412894 push edx * Reference to MSVBVM50.__vbaStrVarVal | 00412895 call dword ptr [0041F2D4h] 0041289B mov esi,[ebp+00000008h] 0041289E push eax 0041289F push esi 004128A0 call dword ptr [ebx+00000054h] 004128A3 test eax,eax 004128A5 jnl 004128B2h 004128A7 push 54h * Possible string reference 409570h "" | 004128A9 push 00409570h 004128AE push esi 004128AF push eax 004128B0 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004128A5(C) | 004128B2 lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaFreeStr | 004128B5 call dword ptr [0041F368h] 004128BB lea eax,[ebp-00000030h] 004128BE lea ecx,[ebp-0000002Ch] 004128C1 push eax 004128C2 lea edx,[ebp-00000028h] 004128C5 push ecx 004128C6 lea eax,[ebp-00000024h] 004128C9 push edx 004128CA lea ecx,[ebp-00000020h] 004128CD push eax 004128CE lea edx,[ebp-0000001Ch] 004128D1 push ecx 004128D2 push edx 004128D3 push 06h * Reference to MSVBVM50.__vbaFreeObjList | 004128D5 call dword ptr [0041F1F8h] 004128DB add esp,1Ch 004128DE lea eax,[ebp-00000080h] 004128E1 lea ecx,[ebp-00000070h] 004128E4 lea edx,[ebp-00000060h] 004128E7 push eax 004128E8 push ecx 004128E9 lea eax,[ebp-00000050h] 004128EC push edx 004128ED lea ecx,[ebp-00000040h] 004128F0 push eax 004128F1 push ecx 004128F2 push 05h * Reference to MSVBVM50.__vbaFreeVarList | 004128F4 call dword ptr [0041F1F0h] 004128FA mov eax,[ebp-00000100h] 00412900 add esp,18h 00412903 lea ecx,[ebp-0000001Ch] 00412906 mov edx,[eax] 00412908 push ecx 00412909 push eax 0041290A call dword ptr [edx+000000F0h] 00412910 test eax,eax 00412912 jnl 00412928h 00412914 mov edx,[ebp-00000100h] 0041291A push 000000F0h * Possible string reference 4093ECh "" | 0041291F push 004093ECh 00412924 push edx 00412925 push eax 00412926 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412912(C) | 00412928 mov eax,[ebp-0000001Ch] 0041292B lea edx,[ebp-00000020h] 0041292E push edx 0041292F push eax 00412930 mov ecx,[eax] 00412932 mov esi,eax 00412934 call dword ptr [ecx+000000B4h] 0041293A test eax,eax 0041293C jnl 0041294Ch 0041293E push 000000B4h * Possible string reference 408BA0h "1" | 00412943 push 00408BA0h 00412948 push esi 00412949 push eax 0041294A call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 0041293C(C) | 0041294C lea ebx,[ebp-00000024h] 0041294F mov eax,[ebp-00000020h] 00412952 push ebx 00412953 mov edx,00000008h 00412958 sub esp,10h 0041295B mov esi,[eax] 0041295D mov ebx,esp * Possible string reference 409618h "notas" | 0041295F mov ecx,00409618h 00412964 push eax 00412965 mov [ebp-000000D0h],eax 0041296B mov [ebx],edx 0041296D mov edx,[ebp-0000008Ch] 00412973 mov [ebx+00000004h],edx 00412976 mov [ebx+00000008h],ecx 00412979 mov ecx,[ebp-00000084h] 0041297F mov [ebx+0000000Ch],ecx 00412982 call dword ptr [esi+00000030h] 00412985 test eax,eax 00412987 jnl 0041299Ah 00412989 mov edx,[ebp-000000D0h] 0041298F push 30h * Possible string reference 408BB0h "S" | 00412991 push 00408BB0h 00412996 push edx 00412997 push eax 00412998 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412987(C) | 0041299A mov eax,[ebp-00000024h] 0041299D mov dword ptr [ebp-00000024h],00000000h 004129A4 mov [ebp-00000038h],eax 004129A7 lea eax,[ebp-00000040h] 004129AA push eax 004129AB mov dword ptr [ebp-00000040h],00000009h * Reference to MSVBVM50.560 | 004129B2 call dword ptr [0041F288h] 004129B8 mov si,ax 004129BB lea ecx,[ebp-00000020h] 004129BE neg si 004129C1 sbb esi,esi 004129C3 lea edx,[ebp-0000001Ch] 004129C6 push ecx 004129C7 inc esi 004129C8 push edx 004129C9 push 02h 004129CB neg esi * Reference to MSVBVM50.__vbaFreeObjList | 004129CD call dword ptr [0041F1F8h] 004129D3 add esp,0Ch 004129D6 lea ecx,[ebp-00000040h] * Reference to MSVBVM50.__vbaFreeVar | 004129D9 call dword ptr [0041F1E0h] 004129DF test si,si 004129E2 jz 00412B24h 004129E8 mov eax,[ebp+00000008h] 004129EB push eax 004129EC mov ecx,[eax] 004129EE call dword ptr [ecx+000002FCh] 004129F4 lea edx,[ebp-00000028h] 004129F7 push eax 004129F8 push edx * Reference to MSVBVM50.__vbaObjSet | 004129F9 call dword ptr [0041F23Ch] 004129FF mov [ebp-000000E0h],eax 00412A05 mov eax,[ebp-00000100h] 00412A0B lea edx,[ebp-0000001Ch] 00412A0E mov ecx,[eax] 00412A10 push edx 00412A11 push eax 00412A12 call dword ptr [ecx+000000F0h] 00412A18 test eax,eax 00412A1A jnl 00412A30h 00412A1C mov ecx,[ebp-00000100h] 00412A22 push 000000F0h * Possible string reference 4093ECh "" | 00412A27 push 004093ECh 00412A2C push ecx 00412A2D push eax 00412A2E call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412A1A(C) | 00412A30 mov eax,[ebp-0000001Ch] 00412A33 lea ecx,[ebp-00000020h] 00412A36 push ecx 00412A37 push eax 00412A38 mov edx,[eax] 00412A3A mov esi,eax 00412A3C call dword ptr [edx+000000B4h] 00412A42 test eax,eax 00412A44 jnl 00412A54h 00412A46 push 000000B4h * Possible string reference 408BA0h "1" | 00412A4B push 00408BA0h 00412A50 push esi 00412A51 push eax 00412A52 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412A44(C) | 00412A54 lea ebx,[ebp-00000024h] 00412A57 mov eax,[ebp-00000020h] 00412A5A push ebx 00412A5B mov edx,00000008h 00412A60 sub esp,10h 00412A63 mov esi,[eax] 00412A65 mov ebx,esp * Possible string reference 409618h "notas" | 00412A67 mov ecx,00409618h 00412A6C push eax 00412A6D mov [ebp-000000D0h],eax 00412A73 mov [ebx],edx 00412A75 mov edx,[ebp-0000008Ch] 00412A7B mov [ebx+00000004h],edx 00412A7E mov [ebx+00000008h],ecx 00412A81 mov ecx,[ebp-00000084h] 00412A87 mov [ebx+0000000Ch],ecx 00412A8A call dword ptr [esi+00000030h] 00412A8D test eax,eax 00412A8F jnl 00412AA2h 00412A91 mov edx,[ebp-000000D0h] 00412A97 push 30h * Possible string reference 408BB0h "S" | 00412A99 push 00408BB0h 00412A9E push edx 00412A9F push eax 00412AA0 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412A8F(C) | 00412AA2 mov eax,[ebp-00000024h] 00412AA5 lea edx,[ebp-00000040h] 00412AA8 push edx 00412AA9 push eax 00412AAA mov ecx,[eax] 00412AAC mov esi,eax 00412AAE call dword ptr [ecx+00000044h] 00412AB1 test eax,eax 00412AB3 jnl 00412AC0h 00412AB5 push 44h * Possible string reference 408BE0h "Q" | 00412AB7 push 00408BE0h 00412ABC push esi 00412ABD push eax 00412ABE call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412AB3(C) | 00412AC0 mov esi,[ebp-000000E0h] 00412AC6 lea eax,[ebp-00000040h] 00412AC9 push eax 00412ACA mov ebx,[esi] * Reference to MSVBVM50.__vbaStrVarMove | 00412ACC call dword ptr [0041F1E8h] 00412AD2 mov edx,eax 00412AD4 lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaStrMove | 00412AD7 call dword ptr [0041F34Ch] 00412ADD push eax 00412ADE push esi 00412ADF call dword ptr [ebx+000000A4h] 00412AE5 test eax,eax 00412AE7 jnl 00412AF7h 00412AE9 push 000000A4h * Possible string reference 409104h "" | 00412AEE push 00409104h 00412AF3 push esi 00412AF4 push eax 00412AF5 call edi * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412AE7(C) | 00412AF7 lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaFreeStr | 00412AFA call dword ptr [0041F368h] 00412B00 lea ecx,[ebp-00000028h] 00412B03 lea edx,[ebp-00000024h] 00412B06 push ecx 00412B07 lea eax,[ebp-00000020h] 00412B0A push edx 00412B0B lea ecx,[ebp-0000001Ch] 00412B0E push eax 00412B0F push ecx 00412B10 push 04h * Reference to MSVBVM50.__vbaFreeObjList | 00412B12 call dword ptr [0041F1F8h] 00412B18 add esp,14h 00412B1B lea ecx,[ebp-00000040h] * Reference to MSVBVM50.__vbaFreeVar | 00412B1E call dword ptr [0041F1E0h] * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 004129E2(C) | 00412B24 lea edx,[ebp-00000100h] 00412B2A push 00h 00412B2C push edx * Reference to MSVBVM50.__vbaObjSetAddref | 00412B2D call dword ptr [0041F248h] 00412B33 mov dword ptr [ebp-00000004h],00000000h * Possible string reference 412B9Ah "" | 00412B3A push 00412B9Ah 00412B3F jmp 00412B8Dh 00412B41 lea ecx,[ebp-00000018h] * Reference to MSVBVM50.__vbaFreeStr | 00412B44 call dword ptr [0041F368h] 00412B4A lea eax,[ebp-00000030h] 00412B4D lea ecx,[ebp-0000002Ch] 00412B50 push eax 00412B51 lea edx,[ebp-00000028h] 00412B54 push ecx 00412B55 lea eax,[ebp-00000024h] 00412B58 push edx 00412B59 lea ecx,[ebp-00000020h] 00412B5C push eax 00412B5D lea edx,[ebp-0000001Ch] 00412B60 push ecx 00412B61 push edx 00412B62 push 06h * Reference to MSVBVM50.__vbaFreeObjList | 00412B64 call dword ptr [0041F1F8h] 00412B6A add esp,1Ch 00412B6D lea eax,[ebp-00000080h] 00412B70 lea ecx,[ebp-00000070h] 00412B73 lea edx,[ebp-00000060h] 00412B76 push eax 00412B77 push ecx 00412B78 lea eax,[ebp-00000050h] 00412B7B push edx 00412B7C lea ecx,[ebp-00000040h] 00412B7F push eax 00412B80 push ecx 00412B81 push 05h * Reference to MSVBVM50.__vbaFreeVarList | 00412B83 call dword ptr [0041F1F0h] 00412B89 add esp,18h 00412B8C ret * Referenced by a (U)nconditional or (C)onditional Jump or (c)all at Address: | 00412B3F(U) | 00412B8D lea ecx,[ebp-00000100h] * Reference to MSVBVM50.__vbaFreeObj | 00412B93 jmp dword ptr [0041F36Ch] 00412B99 ret 00412B9A mov eax,[ebp+00000008h] 00412B9D push eax 00412B9E mov edx,[eax] 00412BA0 call dword ptr [edx+00000008h] 00412BA3 mov ecx,[ebp-00000014h] 00412BA6 mov eax,[ebp-00000004h] 00412BA9 pop edi 00412BAA pop esi 00412BAB mov fs:[00000000h],ecx 00412BB2 pop ebx 00412BB3 mov esp,ebp 00412BB5 pop ebp 00412BB6 ret 0004h 00412BB9 nop 00412BBA nop 00412BBB nop 00412BBC nop 00412BBD nop 00412BBE nop 00412BBF nop