Function at 0x4e9ca0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x408f56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0xec
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401c98
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
lea eax, [ebp - 0x84]
push eax
call fcn.004e9900
lea ecx, [ebp - 0x84]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 4
push 0
push 0x439168
lea ecx, [ebp - 0x84]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetVar]
mov dword [ebp - 4], 5
push 0x43a24c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x43a2c8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov eax, dword [0x5a8150]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x43a300
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [0x5a814c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x43a330
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x12
call fcn.004e86e0
mov edx, eax
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x20
mov dword [ebp - 4], 6
mov dword [ebp - 0xac], 0x439c10
mov dword [ebp - 0xb4], 8
lea eax, [ebp - 0x58]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0x4008
mov dword [ebp - 0xdc], 0xffffffff
mov dword [ebp - 0xe4], 0xb
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0xb4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xac]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa8]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0xd4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xcc]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xc8]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0xe4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xe0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xdc]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd8]
mov dword [ecx + 0xc], eax
push 3
push 0x439188
lea ecx, [ebp - 0x34]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x3c
mov dword [ebp - 4], 7
mov dword [ebp - 0xac], 0x4391d0
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xcc], 0x43a3cc
mov dword [ebp - 0xd4], 8
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xb4]
mov dword [edx], eax
mov ecx, dword [ebp - 0xb0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xac]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa8]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xd4]
mov dword [edx], eax
mov ecx, dword [ebp - 0xd0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xcc]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xc8]
mov dword [edx + 0xc], ecx
push 2
push 0x4391a8
lea edx, [ebp - 0x34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 4], 8
mov dword [ebp - 0xac], 0x43a3fc
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xcc], 0x439d78
mov dword [ebp - 0xd4], 8
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0xb4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xb0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xac]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa8]
mov dword [eax + 0xc], edx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0xd4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xcc]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xc8]
mov dword [eax + 0xc], edx
push 2
push 0x4391a8
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 4], 9
mov dword [ebp - 0xac], 0x439204
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xcc], 0x43a418
mov dword [ebp - 0xd4], 8
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0xb4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xac]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa8]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0xd4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xcc]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xc8]
mov dword [ecx + 0xc], eax
push 2
push 0x4391a8
lea ecx, [ebp - 0x34]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xac], 0x43a42c
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xcc], 0x43a448
mov dword [ebp - 0xd4], 8
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xb4]
mov dword [edx], eax
mov ecx, dword [ebp - 0xb0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xac]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa8]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xd4]
mov dword [edx], eax
mov ecx, dword [ebp - 0xd0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xcc]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xc8]
mov dword [edx + 0xc], ecx
push 2
push 0x4391a8
lea edx, [ebp - 0x34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xac], 0x439198
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xcc], 0x43a604
mov dword [ebp - 0xd4], 8
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0xb4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xb0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xac]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa8]
mov dword [eax + 0xc], edx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0xd4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xcc]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xc8]
mov dword [eax + 0xc], edx
push 2
push 0x4391a8
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xac], 0x43a528
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xcc], 0x43a550
mov dword [ebp - 0xd4], 8
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0xb4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xac]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa8]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0xd4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xcc]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xc8]
mov dword [ecx + 0xc], eax
push 2
push 0x4391a8
lea ecx, [ebp - 0x34]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xac], 0x43a580
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xcc], 0x43a5a4
mov dword [ebp - 0xd4], 8
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xb4]
mov dword [edx], eax
mov ecx, dword [ebp - 0xb0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xac]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa8]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xd4]
mov dword [edx], eax
mov ecx, dword [ebp - 0xd0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xcc]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xc8]
mov dword [edx + 0xc], ecx
push 2
push 0x4391a8
lea edx, [ebp - 0x34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 4], 0xe
push 0
push 0x43933c
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0xc
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x84]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xac], 4
mov dword [ebp - 0xb4], 0x8002
push 0
push 0x439348
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
lea ecx, [ebp - 0xb4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0xf8], ax
lea ecx, [ebp - 0x84]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx edx, word [ebp - 0xf8]
test edx, edx
je 0x4ea4f6
mov dword [ebp - 4], 0x11
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x13
push 1
push 1
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x54]
push edx
push 0x439364
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcDateDiff]
mov dword [ebp - 0xac], 4
mov dword [ebp - 0xb4], 0x8002
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0xb4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov word [ebp - 0xf8], ax
lea ecx, [ebp - 0x84]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0xf8]
test eax, eax
je 0x4ea4f1
jmp 0x4ea6a0
jmp 0x4ea3eb
mov dword [ebp - 4], 0x17
push 0
push 0x439368
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x84]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x18
mov eax, dword [0x5a8100]
push eax
push 0x437e50
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4ea5db
mov dword [ebp - 4], 0x19
push 0
push 0x43a5c4
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x94]
push ecx
call fcn.004f15c0
lea edx, [ebp - 0x94]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x5a8100
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x84]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x4ea68d
mov dword [ebp - 4], 0x1b
mov edx, dword [0x5a8100]
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xb4], 8
push 0
push 0x43a5c4
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x84]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x94]
push eax
call fcn.004f15c0
lea ecx, [ebp - 0xb4]
push ecx
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x5a8100
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x84]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x1d
push 0
lea ecx, [ebp - 0x34]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetObjAddref]
push 0x4ea727
jmp 0x4ea702
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret