Function at 0x4e6f90
Capabilities:
Check http status code
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405426
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x74
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x404058
mov eax, dword [0x544b3c]
xor edi, edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov ecx, dword [eax]
xor esi, esi
push eax
mov dword [ebp - 0x18], esi
call dword [ecx + 0x54]
cmp eax, edi
fnclex
jge 0x4e6ff9
mov edx, dword [0x544b3c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x54
push 0x42099c
push edx
push eax
call ebx
jmp 0x4e6fff
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x544b3c]
lea edx, [ebp - 0x34]
push edx
push 0x3f800000
mov ecx, dword [eax]
push 0x1f9
push 0x294
push edi
push edi
push 0x2f
push 0x46
push 7
push eax
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e703c
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
push ecx
push 0x3f800000
mov edx, dword [eax]
push 0x1da
push 0x280
push 0x1194
push 0x2d
push 0x45
push 0x50
push 7
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e707e
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov edx, 0x428618
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x37
lea eax, [ebp - 0x2c]
push 0x177
push eax
push 0x11
call fcn.00438110
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [0x546360], di
jle 0x4e7cfe
mov eax, dword [0x544b3c]
lea edx, [ebp - 0x34]
push edx
mov edx, dword [0x546358]
mov ecx, dword [eax]
push 0x3f800000
push 0x13
push edx
mov edx, dword [0x54635c]
push 0x137e
push 0x2d
add edx, 0xfffffff6
push 0x4d
push edx
push 7
push eax
mov word [0x5463dc], 0xfffc
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7106
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov esi, dword [0x54635c]
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
mov edx, dword [eax]
push ecx
mov ecx, dword [0x546358]
push 0x3f800000
push 0x13
push 0x14
push 0x137e
push 0x299
lea ecx, [esi + ecx - 0xa]
push 0x4d
push ecx
push 7
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7154
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov eax, dword [0x54635c]
push 0x50
push eax
push 0x546340
call fcn.004eede0
push 0x35
push 0x2d2
push 0x546370
push 4
call fcn.00435e10
mov eax, dword [0x544b3c]
lea edx, [ebp - 0x34]
push edx
push 0x3f800000
mov ecx, dword [eax]
push 6
push 0x29
push 0x173
push 0x320
push 0xcf
push 0x7e
push 2
push eax
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e71bb
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
push ecx
push 0x3f800000
mov edx, dword [eax]
push 0x78
push 0x78
push 0x6b0
push 0x1e0
push 0x65
push 0x56
push 7
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e71fa
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov eax, dword [0x546374]
cmp eax, 4
ja case.default.0x4e7208
jmp dword [eax*4 + 0x4e8440]
movsx edx, word [0x54636e]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x3f800000
push edx
movsx edx, word [0x54636a]
mov eax, dword [0x544b3c]
push edx
movsx edx, word [0x54636c]
mov ecx, dword [eax]
push edi
push edi
push edx
movsx edx, word [0x546368]
push edx
push 0x546364
push eax
call dword [ecx + 0xd4]
cmp eax, edi
fnclex
jge case.default.0x4e7208
push 0xd4
jmp 0x4e72bd
mov eax, dword [0x544b3c]
push 0xffffffffffffffff
push edi
push 0x3f000000
mov edx, dword [eax]
push 0x3f800000
push 0xf0
push 0xf0
push 0x65
push 0x56
push 1
push eax
call dword [edx + 0xf4]
cmp eax, edi
fnclex
jge case.default.0x4e7208
jmp 0x4e72b8
mov eax, dword [0x544b3c]
push 0xffffffffffffffff
push edi
push 0x3f800000
mov edx, dword [eax]
push 0x3f800000
push 0x78
push 0x78
push 0x65
push 0x56
push 1
push eax
call dword [edx + 0xf4]
cmp eax, edi
fnclex
jge case.default.0x4e7208
push 0xf4
mov ecx, dword [0x544b3c]
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
push ecx
push 0x3f800000
mov edx, dword [eax]
push 6
push 0x274
push 0x1391
push 0x39
push 0xdd
push 0x56
push 7
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e730e
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov eax, dword [0x544b3c]
lea edx, [ebp - 0x34]
push edx
push 0x3f800000
mov ecx, dword [eax]
push 6
push 0x274
push 0x1397
push 0x39
push 0xf1
push 0x56
push 7
push eax
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7350
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
push ecx
push 0x3f800000
mov edx, dword [eax]
push 0x78
push 8
push 0x6e4
push 0xea
push 0x65
push 0xcc
push 7
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7392
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov eax, dword [0x544b3c]
lea edx, [ebp - 0x34]
push edx
push 0x3f800000
mov ecx, dword [eax]
push 3
push 3
push 0x136f
push 0x36
push 0x65
push 0x56
push 7
push eax
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e73ce
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov ecx, dword [0x54633c]
movsx eax, word [0x546360]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 0xb2], di
je 0x4e7406
push 0x6c
push 0xda
push 0x546348
call fcn.004ef160
jmp 0x4e7444
mov edx, 0x428634
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push edi
push 6
push 4
push edi
push 0x6c
lea ecx, [ebp - 0x2c]
push 0xda
push ecx
call fcn.0043b830
lea ecx, [ebp - 0x2c]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp si, di
je 0x4e7444
mov word [0x5463dc], 0x752f
mov eax, dword [0x544a04]
cmp eax, 0xdd
jle 0x4e745e
cmp eax, 0xf7
jge 0x4e745e
mov dword [ebp - 0x18], 0xffffffff
mov eax, dword [0x546378]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
and eax, 0xff
mov dword [ebp - 0x50], eax
mov esi, 1
cmp esi, eax
jg 0x4e75f8
movsx edx, word [0x546380]
cmp esi, edx
jne 0x4e7545
mov eax, dword [0x54637c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call edi
mov ecx, dword [0x54633c]
push 0xffffffffffffffff
movsx eax, word [0x546360]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x20]
mov edx, dword [0x54637c]
mov eax, esi
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub eax, ebx
mov ebx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea eax, [eax + eax*2]
lea edx, [edx + eax*4]
mov eax, dword [ebp - 0x18]
push eax
mov eax, esi
sub eax, ebx
lea ebx, [eax + eax*4]
lea eax, [eax + ebx*2]
xor ebx, ebx
mov bl, byte [ecx + eax*4]
mov ecx, dword [ebp - 0x28]
push ebx
mov eax, esi
mov ebx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, ebx
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4 + 4]
movsx ecx, word [edx + 2]
movsx edx, word [edx]
push eax
push ecx
push edx
call fcn.004e6ce0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x28]
push eax
call ebx
cmp word [ebp - 0x34], 0
je 0x4e75e9
mov eax, 1
mov word [0x5463dc], 0xfffb
add esi, eax
mov eax, dword [ebp - 0x50]
jmp 0x4e747c
mov ecx, dword [0x54637c]
lea edx, [ebp - 0x28]
push ecx
push edx
call edi
mov ecx, dword [0x54633c]
push 0
movsx eax, word [0x546360]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x20]
mov edx, dword [0x54637c]
mov eax, esi
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub eax, ebx
mov ebx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea eax, [eax + eax*2]
lea edx, [edx + eax*4]
mov eax, dword [ebp - 0x18]
push eax
mov eax, esi
sub eax, ebx
lea ebx, [eax + eax*4]
lea eax, [eax + ebx*2]
xor ebx, ebx
mov bl, byte [ecx + eax*4]
mov ecx, dword [ebp - 0x28]
push ebx
mov eax, esi
mov ebx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, ebx
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4 + 4]
movsx ecx, word [edx + 2]
movsx edx, word [edx]
push eax
push ecx
push edx
call fcn.004e6ce0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x28]
push eax
call ebx
cmp word [ebp - 0x34], 0
je 0x4e75e9
lea ecx, [esi + 0x2710]
mov word [0x5463dc], cx
mov eax, 1
add esi, eax
mov eax, dword [ebp - 0x50]
jmp 0x4e747c
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
push ecx
push 0x3f800000
mov edx, dword [eax]
push 0x121
push 0x274
push 0x1439
push 0x39
push 0xf8
push 0x56
push 7
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x4e7641
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
movsx esi, word [0x5463ac]
mov ecx, dword [0x544ea8]
mov eax, dword [0x544b3c]
push 0xc
push 2
sub esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [eax]
push 0xb
movsx ecx, word [ecx + esi*2]
push ecx
push 0xfd
push 0x190
push eax
call dword [edx + 0x5c]
test eax, eax
fnclex
jge 0x4e768f
mov edx, dword [0x544b3c]
push 0x5c
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x544e5c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call edi
mov eax, dword [ebp - 0x28]
push 0x44b
movsx edx, word [0x5463ac]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
push 0x398
push 0xfd
push 0x192
lea ecx, [eax + edx*8]
push ecx
call fcn.004376a0
lea edx, [ebp - 0x28]
push edx
call ebx
mov ecx, dword [0x544ea8]
mov esi, 0x22
mov eax, dword [0x544b3c]
push 0xc
sub esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [eax]
push 2
push 0xb
movsx ecx, word [ecx + esi*2]
push ecx
push 0x125
push 0x190
push eax
call dword [edx + 0x5c]
test eax, eax
fnclex
jge 0x4e771c
mov edx, dword [0x544b3c]
push 0x5c
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x544e5c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call edi
mov eax, dword [ebp - 0x28]
mov edx, 0x22
push 0x44b
push 0x398
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
push 0x125
push 0x192
lea ecx, [eax + edx*8]
push ecx
call fcn.004376a0
lea edx, [ebp - 0x28]
push edx
call ebx
mov ecx, dword [0x5463d0]
mov eax, 0x407
test ecx, ecx
mov esi, eax
jle 0x4e77ce
mov edx, dword [0x544a00]
cmp edx, 0x190
jle 0x4e77ce
mov ecx, dword [0x5463d4]
cmp edx, ecx
mov ecx, dword [0x544a04]
jge 0x4e77a8
cmp ecx, 0x109
jle 0x4e77a8
cmp ecx, 0x11b
jge 0x4e77a8
mov eax, 0x429
mov word [0x5463dc], 0x7530
cmp edx, dword [0x5463d8]
jge 0x4e77ce
cmp ecx, 0x131
jle 0x4e77ce
cmp ecx, 0x143
jge 0x4e77ce
mov esi, 0x429
mov word [0x5463dc], 0x7531
push eax
push 0x408
push 0x10a
push 0x192
push 0x5463a4
call fcn.00437090
push esi
push 0x408
push 0x132
push 0x192
push 0x54639c
call fcn.00437090
mov ecx, dword [0x544ea8]
mov esi, 0x1b
mov eax, dword [0x544b3c]
push 0xc
sub esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [eax]
push 2
push 0xb
movsx ecx, word [ecx + esi*2]
push ecx
push 0x14d
push 0x190
push eax
call dword [edx + 0x5c]
test eax, eax
fnclex
jge 0x4e784e
mov edx, dword [0x544b3c]
push 0x5c
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x544e5c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call edi
mov eax, dword [ebp - 0x28]
mov edx, 0x1b
push 0x44b
push 0x398
mov esi, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, esi
push 0x14d
push 0x192
lea ecx, [eax + edx*8]
push ecx
call fcn.004376a0
lea edx, [ebp - 0x28]
push edx
call ebx
mov ecx, dword [0x54633c]
mov edx, 0x546340
movsx eax, word [edx + 0x20]
sub eax, dword [ecx + 0x14]
lea esi, [eax + eax*2]
shl esi, 4
sub esi, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + esi*4 + 0x20]
movsx eax, word [edx + 0x40]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, esi
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
cmp word [ecx + eax*4 + 0x28], 0
je 0x4e78de
push 0x15a
push 0x192
push 0x546350
call fcn.004ef3b0
jmp 0x4e7921
mov edx, 0x428634
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 4
push 0
push 0x15a
lea edx, [ebp - 0x2c]
push 0x192
push edx
call fcn.0043b830
lea ecx, [ebp - 0x2c]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test si, si
je 0x4e7921
mov word [0x5463dc], 0x752e
mov ecx, dword [0x544ea8]
mov esi, 0x1e
mov eax, dword [0x544b3c]
push 0xc
sub esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [eax]
push 2
push 0xb
movsx ecx, word [ecx + esi*2]
push ecx
push 0xfd
push 0x58
push eax
call dword [edx + 0x5c]
test eax, eax
fnclex
jge 0x4e796a
mov edx, dword [0x544b3c]
push 0x5c
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x544e5c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call edi
mov eax, dword [ebp - 0x28]
mov edx, 0x1e
push 0x44b
push 0x398
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
push 0xfd
push 0x5a
lea ecx, [eax + edx*8]
push ecx
call fcn.004376a0
lea edx, [ebp - 0x28]
push edx
call ebx
movsx eax, word [0x54638c]
push 0x407
push eax
push 0x10a
push 0x5a
push 0x546384
call fcn.00437090
mov ecx, dword [0x544ea8]
mov esi, 0x1f
mov eax, dword [0x544b3c]
push 0xc
sub esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [eax]
push 2
push 0xb
movsx ecx, word [ecx + esi*2]
push ecx
push 0x125
push 0x58
push eax
call dword [edx + 0x5c]
test eax, eax
fnclex
jge 0x4e7a0d
mov edx, dword [0x544b3c]
push 0x5c
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x544e5c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call edi
mov eax, dword [ebp - 0x28]
mov edx, 0x1f
push 0x44b
push 0x398
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
push 0x125
push 0x5a
lea ecx, [eax + edx*8]
push ecx
call fcn.004376a0
lea edx, [ebp - 0x28]
push edx
call ebx
movsx eax, word [0x546398]
push 0x407
push eax
push 0x132
push 0x5a
push 0x546390
call fcn.00437090
cmp word [0x5463ae], 0
mov esi, 0x14d
jle 0x4e7b27
mov ecx, dword [0x544ea8]
mov esi, 0x23
mov eax, dword [0x544b3c]
push 0xc
sub esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [eax]
push 2
push 0xb
movsx ecx, word [ecx + esi*2]
push ecx
push 0x14d
push 0x58
push eax
call dword [edx + 0x5c]
test eax, eax
fnclex
jge 0x4e7ac3
mov edx, dword [0x544b3c]
push 0x5c
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x544e5c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call edi
mov eax, dword [ebp - 0x28]
mov edx, 0x23
push 0x44b
push 0x398
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
push 0x14d
push 0x5a
lea ecx, [eax + edx*8]
push ecx
call fcn.004376a0
lea edx, [ebp - 0x28]
push edx
call ebx
push 0x407
push 0x408
push 0x15a
push 0x5a
push 0x5463b0
call fcn.00437090
movsx esi, word [0x5463ae]
add esi, 0x15a
cmp word [0x5463b8], 0
jle 0x4e7bde
mov eax, dword [0x544b3c]
push 0xc
movsx edx, word [0x5463c4]
mov ecx, dword [eax]
mov eax, dword [0x544ea8]
push 2
push 0xb
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movsx edx, word [eax + edx*2]
mov eax, dword [0x544b3c]
push edx
push esi
push 0x58
push eax
call dword [ecx + 0x5c]
test eax, eax
fnclex
jge 0x4e7b80
mov ecx, dword [0x544b3c]
push 0x5c
push 0x42099c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x544e5c]
lea eax, [ebp - 0x28]
push edx
push eax
call edi
mov eax, dword [ebp - 0x28]
push 0x44b
movsx ecx, word [0x5463c4]
mov edx, dword [eax + 0x14]
push 0x398
sub ecx, edx
mov edx, dword [eax + 0xc]
push esi
push 0x5a
lea eax, [edx + ecx*8]
push eax
call fcn.004376a0
lea ecx, [ebp - 0x28]
push ecx
call ebx
add esi, 0xd
push 0x407
push 0x408
push esi
push 0x5a
push 0x5463bc
call fcn.00437090
movsx edx, word [0x5463b8]
add esi, edx
cmp word [0x5463c6], 0
je 0x4e7c88
mov eax, dword [0x544b3c]
mov edx, 0x24
push 0xc
push 2
mov ecx, dword [eax]
mov eax, dword [0x544ea8]
push 0xb
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movsx edx, word [eax + edx*2]
mov eax, dword [0x544b3c]
push edx
push esi
push 0x58
push eax
call dword [ecx + 0x5c]
test eax, eax
fnclex
jge 0x4e7c35
mov ecx, dword [0x544b3c]
push 0x5c
push 0x42099c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x544e5c]
lea eax, [ebp - 0x28]
push edx
push eax
call edi
mov eax, dword [ebp - 0x28]
mov ecx, 0x24
push 0x44b
push 0x398
mov edx, dword [eax + 0x14]
push esi
sub ecx, edx
mov edx, dword [eax + 0xc]
push 0x5a
lea eax, [edx + ecx*8]
push eax
call fcn.004376a0
lea ecx, [ebp - 0x28]
push ecx
call ebx
add esi, 0xd
push 0x407
push 0x408
push esi
push 0x5a
push 0x5463c8
call fcn.00437090
cmp word [0x5463dc], 0x7530
jl 0x4e8406
mov edx, dword [0x5463d0]
push 0x428654
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
mov eax, dword [0x544a04]
mov ecx, dword [0x544a00]
add eax, 8
add ecx, 0x19
push eax
lea edx, [ebp - 0x30]
push ecx
push edx
call fcn.00435630
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
wait
push 0x4e842d
jmp 0x4e842c
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
push ecx
push 0x3f800000
mov edx, dword [eax]
push 0x10
push 0x272
push 0x136e
push 0x3b
push 0x66
push 0x57
push 7
push eax
mov word [0x5463dc], 0xfc19
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7d46
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov eax, dword [0x544a04]
cmp eax, 0x68
jle 0x4e7d5b
cmp eax, 0x73
jge 0x4e7d5b
or esi, 0xffffffff
mov dword [ebp - 0x18], esi
mov eax, dword [0x544b3c]
lea edx, [ebp - 0x34]
push edx
push 0x3f800000
mov ecx, dword [eax]
push 7
push 0x13
push 0x10e
push 0x5f8
push 0x6a
push 0x5a
push 5
push eax
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7d9a
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x34]
push ecx
push 0x3f800000
mov edx, dword [eax]
push 7
push 0xe
push 0xfb
push 0x5fd
push 0x6a
push 0x7d
push 5
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7dd9
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov eax, dword [0x544b3c]
lea edx, [ebp - 0x34]
push edx
push 0x3f800000
mov ecx, dword [eax]
push 8
push 0x15
push 0x104
push 0x5f6
push 0x6a
push 0x12c
push 5
push eax
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7e1b
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544a00]
cmp eax, 0x59
jle 0x4e7e3f
cmp eax, 0x6e
jge 0x4e7e3f
cmp si, di
je 0x4e7e3f
mov ecx, 0x5ca
mov word [0x5463dc], 0x4e20
jmp 0x4e7e44
mov ecx, 0x5e1
mov eax, dword [0x544b3c]
lea esi, [ebp - 0x34]
push esi
push 0x3f800000
mov edx, dword [eax]
push 9
push 0x15
push 0x10d
push ecx
push 0x69
push 0x59
push 5
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7e7f
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544a00]
cmp eax, 0x7c
jle 0x4e7ea6
cmp eax, 0x8c
jge 0x4e7ea6
cmp word [ebp - 0x18], di
je 0x4e7ea6
mov ecx, 0x5cf
mov word [0x5463dc], 0x4e21
jmp 0x4e7eab
mov ecx, 0x5e6
mov eax, dword [0x544b3c]
lea esi, [ebp - 0x34]
push esi
push 0x3f800000
mov edx, dword [eax]
push 9
push 0x10
push 0xfa
push ecx
push 0x69
push 0x7c
push 5
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7ee6
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov eax, dword [0x544a00]
cmp eax, 0x12b
jle 0x4e7f0f
cmp eax, 0x142
jge 0x4e7f0f
cmp word [ebp - 0x18], di
je 0x4e7f0f
mov ecx, 0x5c8
mov word [0x5463dc], 0x4e22
jmp 0x4e7f14
mov ecx, 0x5df
mov eax, dword [0x544b3c]
lea esi, [ebp - 0x34]
push esi
push 0x3f800000
mov edx, dword [eax]
push 0xa
push 0x17
push 0x103
push ecx
push 0x69
push 0x12b
push 5
push eax
call dword [edx + 0x7c]
cmp eax, edi
fnclex
jge 0x4e7f52
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov ecx, dword [0x544a04]
mov edi, 0x6b
cmp ecx, 0x4d
jle 0x4e7f6e
cmp ecx, 0x64
mov dword [ebp - 0x18], 0xffffffff
jl 0x4e7f75
mov dword [ebp - 0x18], 0
xor esi, esi
mov eax, 3
cmp esi, eax
jg 0x4e812a
movsx edx, word [0x5463e0]
mov eax, dword [0x544b3c]
cmp esi, edx
lea edx, [ebp - 0x34]
mov ecx, dword [eax]
push edx
push 0x3f800000
jne 0x4e8024
push 0x1b
push 0x6d
push 0x110
push 0x60b
push 0x4a
push edi
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x4e7fd1
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
lea ecx, [ebp - 0x34]
mov eax, dword [0x544b3c]
push ecx
lea ecx, [esi*8]
sub ecx, esi
mov edx, dword [eax]
push 0x3f800000
push 0xe
lea ecx, [ecx + ecx + 0x12b]
push 0x54
push ecx
push 0x61c
lea ecx, [edi + 0xc]
push 0x53
push ecx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x4e8112
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
jmp 0x4e810f
push 0x16
push 0x6d
push 0xfa
push 0x60b
push 0x4e
push edi
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x4e8052
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
cmp word [ebp - 0x18], 0
je 0x4e80c5
mov eax, dword [0x544a00]
lea edx, [edi + 1]
cmp eax, edx
jle 0x4e80c5
lea ecx, [edi + 0x6c]
cmp eax, ecx
jge 0x4e80c5
lea ecx, [ebp - 0x34]
mov eax, dword [0x544b3c]
push ecx
lea ecx, [esi*8]
sub ecx, esi
mov edx, dword [eax]
push 0x3f800000
push 0xe
lea ecx, [ecx + ecx + 0x12b]
push 0x54
push ecx
push 0x5bb
lea ecx, [edi + 0xc]
push 0x54
push ecx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x4e80b9
mov edx, dword [0x544b3c]
push 0x7c
push 0x42099c
push edx
push eax
call ebx
mov eax, esi
neg eax
mov word [0x5463dc], ax
jmp 0x4e8112
lea edx, [ebp - 0x34]
mov eax, dword [0x544b3c]
push edx
lea edx, [esi*8]
sub edx, esi
mov ecx, dword [eax]
push 0x3f800000
push 0xe
lea edx, [edx + edx + 0x12b]
push 0x54
push edx
push 0x61c
lea edx, [edi + 0xc]
push 0x54
push edx
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x4e8112
mov ecx, dword [0x544b3c]
push 0x7c
push 0x42099c
push ecx
push eax
call ebx
mov ecx, dword [0x544a04]
mov eax, 1
add edi, 0x9f
add esi, eax
jmp 0x4e7f77
mov eax, dword [0x544a00]
cmp eax, 0x58
jle 0x4e814f
cmp eax, 0x2bf
jge 0x4e814f
cmp ecx, 0x74
jle 0x4e814f
cmp ecx, 0x21a
mov dword [ebp - 0x18], 0xffffffff
jl 0x4e8156
mov dword [ebp - 0x18], 0
movsx edx, word [0x5456f8]
mov esi, dword [0x5463f4]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [0x54633c]
mov dword [ebp - 0x60], edx
mov edi, 1
cmp edi, dword [ebp - 0x60]
jg 0x4e833c
mov edx, dword [ecx + 0x14]
mov eax, edi
sub eax, edx
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dx, word [eax + edx*4 + 0x26]
cmp dx, word [0x5463e0]
jne 0x4e8330
cmp word [ebp - 0x18], 0
je 0x4e81fb
mov eax, dword [0x544a04]
lea edx, [esi - 5]
cmp eax, edx
jle 0x4e81fb
lea edx, [esi + 0x10]
cmp eax, edx
jge 0x4e81fb
mov eax, dword [0x544b3c]
lea edx, [esi - 4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x90]
test eax, eax
fnclex
jge 0x4e81ee
mov ecx, dword [0x544b3c]
push 0x90
push 0x42099c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [0x54633c]
mov word [0x5463dc], di
lea edx, [ebp - 0x28]
push ecx
push edx
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, edi
push 0x2ee
push esi
mov edx, dword [ecx + 0x14]
push 0x5a
sub eax, edx
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x18]
push ecx
call fcn.004ee880
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [0x54633c]
lea ecx, [ebp - 0x28]
push eax
push ecx
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, edi
push 0x2ee
push esi
mov edx, dword [ecx + 0x14]
push 0x7d
sub eax, edx
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 8]
push ecx
call fcn.004ee880
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [0x54633c]
mov eax, edi
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 0xb8], 0
je 0x4e82ab
push esi
call fcn.004e6be0
mov ecx, dword [0x54633c]
lea edx, [ebp - 0x28]
push ecx
push edx
call ebx
push 0x2a7
jmp 0x4e82b7
lea eax, [ebp - 0x28]
push ecx
push eax
call ebx
push 0x2ee
mov ecx, dword [ebp - 0x28]
mov eax, edi
push esi
push 0x12c
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.004ee880
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [0x544b3c]
push 0x219
push 0x76
push 1
mov ecx, dword [eax]
push 0x265
push 0x774
lea edx, [esi + 0xf]
push 0
push edx
push 0x59
push 7
push eax
call dword [ecx + 0x74]
test eax, eax
fnclex
jge 0x4e8327
mov ecx, dword [0x544b3c]
push 0x74
push 0x42099c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [0x54633c]
add esi, 0x14
mov eax, 1
add edi, eax
jmp 0x4e8177
cmp word [0x5463f0], 0
je 0x4e8406
mov eax, dword [0x544b3c]
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [0x5463e8]
mov edx, dword [eax]
push 0x2c7
push 0x2bf
push ecx
mov ecx, dword [0x5463ec]
push ecx
push eax
call dword [edx + 0x98]
test eax, eax
fnclex
jge 0x4e8392
mov edx, dword [0x544b3c]
push 0x98
push 0x42099c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
jle 0x4e8406
mov eax, dword [0x544a04]
sub eax, ecx
cmp eax, 0x78
mov dword [0x5463ec], eax
jge 0x4e83b4
mov eax, 0x78
mov dword [0x5463ec], eax
mov ecx, dword [0x5463f8]
cmp eax, ecx
jle 0x4e83c5
mov eax, ecx
mov dword [0x5463ec], eax
add eax, 0xffffff88
add ecx, 0xffffff88
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x74], ecx
fild dword [ebp - 0x68]
fstp qword [ebp - 0x70]
fild dword [ebp - 0x74]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x70]
fdiv qword [ebp - 0x7c]
fild dword [0x5463fc]
fstp qword [ebp - 0x84]
fmul qword [ebp - 0x84]
fsubr qword [0x402d10]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [0x5463f4], eax
wait
push 0x4e842d
jmp 0x4e842c
ret