Function at 0x4ee180
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405216
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4042c0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], eax
mov edi, 1
movsx eax, word [0x53abc8]
mov dword [ebp - 0x44], eax
cmp edi, dword [ebp - 0x44]
jg 0x4ee87c
mov ecx, dword [0x53abc4]
lea edx, [ebp - 0x2c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2c]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea esi, [eax + edx*4]
mov al, byte [eax + edx*4 + 0x38]
test al, al
jne 0x4ee2a7
mov ecx, dword [0x53abc4]
lea edx, [ebp - 0x20]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebd60
lea edx, [ebp - 0x20]
push edx
call ebx
mov eax, dword [0x53abc4]
lea ecx, [ebp - 0x20]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebeb0
lea edx, [ebp - 0x20]
push edx
call ebx
fld dword [esi + 0x3c]
fsub dword [0x538b58]
fst dword [esi + 0x3c]
fcomp dword [0x4014d8]
fnstsw ax
test ah, 1
je 0x4ee31e
push 0xfa
mov byte [esi + 0x38], 1
call fcn.004304b0
add eax, 0xfa
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
jmp 0x4ee31b
cmp al, 1
jne 0x4ee344
mov eax, dword [0x53abc4]
lea ecx, [ebp - 0x20]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebd60
lea edx, [ebp - 0x20]
push edx
call ebx
fld dword [esi + 0x3c]
fsub dword [0x538b58]
fst dword [esi + 0x3c]
mov byte [esi + 0x24], 4
fcomp dword [0x4014d8]
fnstsw ax
test ah, 1
je 0x4ee31e
push 0x7d0
mov byte [esi + 0x38], 0
mov byte [esi + 0x24], 0
call fcn.004304b0
add eax, 0x7d0
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp dword [esi + 0x3c]
push edi
call fcn.004edb80
test ax, ax
je 0x4ee7e3
cmp word [0x53abd2], 0
jne 0x4ee7e3
mov byte [esi + 0x38], 2
jmp 0x4ee7e3
cmp al, 2
jne 0x4ee408
mov eax, dword [0x53abc4]
lea ecx, [ebp - 0x20]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebd60
lea edx, [ebp - 0x20]
push edx
call ebx
push edi
mov byte [esi + 0x24], 6
mov dword [esi + 0x3c], 0x42480000
call fcn.004edb80
test ax, ax
jne 0x4ee39d
mov byte [esi + 0x38], 3
jmp 0x4ee7e3
cmp word [0x538a5c], 0
je 0x4ee7e3
mov eax, dword [0x538ae4]
mov ecx, dword [0x538a1c]
add ecx, eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 0x54], ecx
mov byte [esi + 0x38], 4
fild dword [ebp - 0x54]
fsub dword [esi + 0x18]
call ebx
mov edx, dword [0x538ae8]
mov dword [esi + 0x30], eax
mov eax, dword [0x538a20]
add eax, edx
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
fsub dword [esi + 0x1c]
call ebx
push edi
mov dword [esi + 0x34], eax
mov byte [esi + 0x24], 0
call fcn.004ee020
mov cx, word [0x53abc8]
mov word [0x53abd2], cx
jmp 0x4ee7e3
cmp al, 3
jne 0x4ee494
mov edx, dword [0x53abc4]
lea eax, [ebp - 0x20]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebd60
lea edx, [ebp - 0x20]
push edx
call ebx
fld dword [esi + 0x3c]
fsub dword [0x538b58]
fst dword [esi + 0x3c]
fcomp dword [0x4014d8]
fnstsw ax
test ah, 1
je 0x4ee47c
push 0x7d0
mov byte [esi + 0x38], 0
mov byte [esi + 0x24], 0
call fcn.004304b0
add eax, 0x7d0
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [esi + 0x3c]
push edi
call fcn.004edb80
test ax, ax
je 0x4ee7e3
mov byte [esi + 0x38], 2
jmp 0x4ee7e3
cmp al, 4
jne 0x4ee6eb
mov eax, dword [0x538a1c]
mov edx, dword [esi + 0x30]
mov ecx, dword [0x538ae4]
sub eax, edx
mov edx, dword [0x538ae8]
add eax, ecx
mov ecx, dword [0x538a20]
mov dword [ebp - 0x60], eax
mov eax, dword [esi + 0x34]
fild dword [ebp - 0x60]
sub ecx, eax
add ecx, edx
fstp dword [esi + 0x18]
movsx edx, word [esi + 0x10]
movsx eax, word [esi + 0x14]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], edx
fild dword [ebp - 0x64]
movsx ecx, word [esi + 0x20]
fst dword [esi + 0x1c]
fild dword [ebp - 0x68]
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x1c]
push edx
fadd st(1)
fisub dword [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
fstp st(0)
fild dword [ebp - 0x70]
push eax
fadd dword [esi + 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
push eax
call fcn.004edcb0
cmp word [0x538a5c], 0
jne 0x4ee60a
mov byte [esi + 0x25], 7
movsx eax, word [ebp - 0x18]
sub eax, 0
je 0x4ee5f2
sub eax, 2
je 0x4ee598
dec eax
jne 0x4ee5fc
cmp word [ebp - 0x1c], 0
jle 0x4ee55d
movsx ecx, word [esi + 0x40]
push ecx
call fcn.004eddb0
mov word [0x53abd2], 0
jmp 0x4ee7e3
fild dword [ebp - 0x68]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov byte [esi + 0x38], 6
mov byte [esi + 0x24], 0
fadd dword [esi + 0x1c]
fisub dword [ebp - 0x6c]
call ebx
fild dword [ebp - 0x70]
push eax
fadd dword [esi + 0x18]
call ebx
movsx edx, word [esi + 0x40]
push eax
push edx
call fcn.004edf30
mov word [0x53abd2], 0
jmp 0x4ee7e3
cmp word [ebp - 0x1c], 0
jle 0x4ee5b7
movsx eax, word [esi + 0x40]
push eax
call fcn.004eddb0
mov word [0x53abd2], 0
jmp 0x4ee7e3
fild dword [ebp - 0x68]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov byte [esi + 0x38], 5
mov byte [esi + 0x25], 8
fadd dword [esi + 0x1c]
fisub dword [ebp - 0x6c]
call ebx
fild dword [ebp - 0x70]
push eax
fadd dword [esi + 0x18]
call ebx
movsx ecx, word [esi + 0x40]
push eax
push ecx
call fcn.004edf30
mov word [0x53abd2], 0
jmp 0x4ee7e3
movsx edx, word [esi + 0x40]
push edx
call fcn.004eddb0
mov word [0x53abd2], 0
jmp 0x4ee7e3
movsx eax, word [ebp - 0x18]
sub eax, 0
je 0x4ee6a5
sub eax, 2
je 0x4ee679
dec eax
jne 0x4ee7e3
mov eax, dword [ebp - 0x1c]
test ax, ax
jle 0x4ee63e
cmp ax, word [esi + 0x40]
je 0x4ee63e
mov byte [esi + 0x24], 5
mov byte [esi + 0x25], 7
jmp 0x4ee7e3
mov eax, dword [0x53abc4]
lea ecx, [ebp - 0x20]
push eax
push ecx
mov byte [esi + 0x24], 6
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebd20
lea edx, [ebp - 0x20]
push edx
call ebx
jmp 0x4ee7e3
mov byte [esi + 0x25], 7
mov eax, dword [ebp - 0x1c]
test ax, ax
jle 0x4ee694
cmp ax, word [esi + 0x40]
je 0x4ee694
mov byte [esi + 0x24], 5
jmp 0x4ee7e3
push 0
push edi
mov byte [esi + 0x24], 7
call fcn.004edab0
jmp 0x4ee7e3
mov al, byte [esi + 0x24]
mov byte [esi + 0x25], 7
cmp al, 2
jbe 0x4ee6b4
mov byte [esi + 0x24], 0
mov eax, dword [0x53abc4]
lea ecx, [ebp - 0x20]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebeb0
lea edx, [ebp - 0x20]
push edx
call ebx
jmp 0x4ee7e3
cmp al, 5
jne 0x4ee774
push edi
call fcn.004edb80
test ax, ax
je 0x4ee7e3
cmp word [0x53abd2], 0
jne 0x4ee7e3
cmp word [0x538a5c], 0
je 0x4ee7e3
mov eax, dword [0x538ae4]
mov ecx, dword [0x538a1c]
add ecx, eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 0x74], ecx
mov byte [esi + 0x38], 4
fild dword [ebp - 0x74]
fsub dword [esi + 0x18]
call ebx
mov edx, dword [0x538ae8]
mov dword [esi + 0x30], eax
mov eax, dword [0x538a20]
add eax, edx
mov dword [ebp - 0x78], eax
fild dword [ebp - 0x78]
fsub dword [esi + 0x1c]
call ebx
push edi
mov dword [esi + 0x34], eax
call fcn.004ee020
mov cx, word [0x53abc8]
mov word [0x53abd2], cx
jmp 0x4ee7e3
cmp al, 6
jne 0x4ee7e3
mov edx, dword [0x53abc4]
lea eax, [ebp - 0x20]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebd60
lea edx, [ebp - 0x20]
push edx
call ebx
mov eax, dword [0x53abc4]
lea ecx, [ebp - 0x20]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 4
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x24]
push ecx
call fcn.004ebeb0
lea edx, [ebp - 0x20]
push edx
call ebx
push edi
call fcn.004ed980
mov edx, dword [0x538c1c]
mov ax, word [esi + 0x10]
mov cx, word [esi + 0x12]
mov ebx, dword [edx]
lea edx, [ebp - 0x24]
push edx
push 0x3f800000
movsx edx, ax
fld dword [esi + 0x1c]
fisub dword [0x538a20]
push edx
movsx edx, cx
push edx
movzx dx, byte [esi + 0x24]
imul edx, eax
movsx eax, dx
movzx dx, byte [esi + 0x25]
imul edx, ecx
push eax
movsx eax, dx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
fld dword [esi + 0x18]
fisub dword [0x538a1c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, dword [esi]
mov edx, dword [0x538c1c]
push eax
push ecx
push edx
call dword [ebx + 0x78]
test eax, eax
fnclex
jge 0x4ee864
mov ecx, dword [0x538c1c]
push 0x78
push 0x420690
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x2c]
push edx
call ebx
mov eax, 1
add edi, eax
jmp 0x4ee1cf
wait
push 0x4ee89a
jmp 0x4ee88f
lea ecx, [ebp - 0x2c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
ret