Function at 0x4e4e60
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405216
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd4
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4040e8
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x90]
xor edi, edi
push eax
push ecx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], edi
call esi
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp + 8]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x8c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp + 0xc]
mov ebx, dword [eax + 0x14]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0x18]
shl ecx, 7
add ecx, ebx
mov word [eax], di
mov dword [ebp - 0xa0], ecx
mov al, byte [ecx + 0x18]
test al, al
jbe 0x4e5145
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
and eax, 0xff
mov edx, 1
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x14], edx
cmp edx, dword [ebp - 0xb4]
jg 0x4e5153
mov eax, dword [ecx + 0x14]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ax, word [eax + edx*2]
cmp ax, 1
jl 0x4e4fec
cmp ax, 0x3e7
jg 0x4e4fec
push eax
call fcn.004e4bf0
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
push eax
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov edx, eax
lea ecx, [ebp - 0x30]
call edi
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x34]
call edi
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0x1c]
push ecx
push edx
call fcn.004e4e10
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x30]
push eax
lea edx, [ebp - 0x2c]
push ecx
push edx
push 3
call ebx
add esp, 0x10
cmp word [ebp - 0x88], 0
je 0x4e512d
add dword [ebp - 0x20], 0x11
jmp 0x4e512d
cmp ax, 0x3e8
jl 0x4e504a
cmp ax, 0x5208
jg 0x4e504a
add eax, 0xffffd508
push eax
call fcn.004d8090
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
push eax
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov edx, eax
lea ecx, [ebp - 0x30]
call edi
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x34]
call edi
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x24]
push eax
push ecx
call fcn.004e4e10
mov dword [ebp - 0x88], eax
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x2c]
push eax
push ecx
jmp 0x4e50a6
cmp ax, 0x5209
jl 0x4e50b9
cmp ax, 0x7919
jg 0x4e50b9
add eax, 0xffffadf7
push eax
call fcn.004d8090
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
push eax
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov edx, eax
lea ecx, [ebp - 0x30]
call edi
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x34]
call edi
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x24]
push edx
push eax
call fcn.004e4e10
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x88], eax
lea edx, [ebp - 0x30]
push ecx
lea eax, [ebp - 0x2c]
push edx
push eax
push 3
call ebx
add esp, 0x10
cmp word [ebp - 0x88], 0
je 0x4e512d
jmp 0x4e5126
cmp ax, 0x86e7
jl 0x4e5133
cmp ax, 0xadf7
jg 0x4e5133
add eax, 0x5209
push eax
call fcn.004d8090
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
push eax
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov edx, eax
lea ecx, [ebp - 0x30]
call edi
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x34]
call edi
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0x24]
push ecx
push edx
call fcn.004e4e10
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x30]
push eax
lea edx, [ebp - 0x2c]
push ecx
push edx
push 3
call ebx
add esp, 0x10
cmp word [ebp - 0x88], 0
je 0x4e512d
mov eax, dword [ebp + 0x18]
add word [eax], 0x11
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x14]
mov eax, 1
add edx, eax
mov dword [ebp - 0x14], edx
jmp 0x4e4f5e
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
jmp 0x4e5159
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp byte [ecx + 0xc], 1
ja 0x4e566b
mov ax, word [ecx + 4]
mov word [ebp - 0x18], ax
mov al, byte [ecx + 0x74]
test al, al
jbe 0x4e529c
and eax, 0xff
mov dword [ebp - 0x14], 1
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x14]
cmp eax, edx
jg 0x4e529c
mov eax, dword [ecx + 0x70]
lea ecx, [ebp - 0x94]
push eax
push ecx
call esi
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, ecx
mov cl, byte [eax + edx*8 + 6]
lea eax, [eax + edx*8]
cmp cl, 3
jne 0x4e5277
movsx ecx, word [eax + 4]
push ecx
call fcn.0049f200
mov edx, eax
lea ecx, [ebp - 0x30]
call edi
mov eax, dword [ebp - 0x30]
push 0
mov dword [ebp - 0x3c], eax
lea edx, [ebp - 0x44]
push 3
lea eax, [ebp - 0x54]
mov esi, 8
push edx
push eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x44], esi
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x64]
push ecx
lea eax, [ebp - 0x74]
push edx
push eax
mov dword [ebp - 0x64], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x1c]
push ecx
push edx
call fcn.004e4e10
mov esi, eax
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2c]
push eax
push ecx
push 2
call ebx
lea edx, [ebp - 0x74]
lea eax, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x54]
push eax
lea edx, [ebp - 0x44]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x4e5271
add dword [ebp - 0x20], 0x11
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [ebp - 0x14]
mov eax, 1
add ecx, eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0xa0]
jmp 0x4e5188
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x8c]
push ecx
call ebx
lea edx, [ebp - 0x90]
push edx
call ebx
movsx eax, word [0x539848]
mov ecx, dword [0x539840]
mov edx, 1
mov dword [ebp - 0xc4], eax
mov dword [ebp + 8], edx
cmp edx, dword [ebp - 0xc4]
jg 0x4e566b
mov ebx, dword [ecx + 0x14]
mov eax, edx
sub eax, ebx
mov ebx, eax
shl ebx, 5
add ebx, eax
mov eax, dword [ecx + 0xc]
mov ax, word [eax + ebx*8 + 8]
test ax, ax
jle 0x4e543c
movsx edx, ax
mov ebx, 1
mov dword [ebp - 0xcc], edx
mov dword [ebp + 0xc], ebx
cmp ebx, dword [ebp - 0xcc]
jg 0x4e5439
lea eax, [ebp - 0x9c]
push ecx
push eax
call esi
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp + 8]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x98]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x98]
mov esi, ebx
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub esi, ecx
shl esi, 7
add esi, edx
mov al, byte [esi + 0x5c]
test al, al
jbe 0x4e539f
and eax, 0xff
mov edx, 1
cmp edx, eax
jg 0x4e539f
mov ecx, dword [esi + 0x58]
mov ebx, edx
sub ebx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + ebx*4]
mov bx, word [ebp - 0x18]
cmp word [ecx], bx
jne 0x4e5396
cmp byte [ecx + 3], 1
jne 0x4e5396
cmp byte [ecx + 2], 1
ja 0x4e544b
mov ecx, 1
add edx, ecx
jmp 0x4e536b
mov al, byte [esi + 0x7c]
test al, al
jbe 0x4e5403
and eax, 0xff
mov edx, 1
mov ebx, eax
cmp edx, ebx
jg 0x4e5403
mov ecx, dword [esi + 0x78]
mov eax, edx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea eax, [eax + eax*8]
cmp word [ecx + eax*4 + 0x12], 0xfffa
lea eax, [ecx + eax*4]
jne 0x4e53fa
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [ecx + ecx*2]
shl ecx, 2
sub eax, ecx
movsx ecx, word [ebp - 0x18]
cmp dword [eax + 0x10], ecx
jne 0x4e53fa
cmp byte [eax + 0xc], 1
jne 0x4e53fa
cmp word [eax + 0x14], 1
jg 0x4e5500
mov eax, 1
add edx, eax
jmp 0x4e53b2
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x98]
push edx
call esi
lea eax, [ebp - 0x9c]
push eax
call esi
mov ebx, dword [ebp + 0xc]
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, 1
add ebx, eax
mov dword [ebp + 0xc], ebx
jmp 0x4e530b
mov edx, dword [ebp + 8]
mov eax, 1
add edx, eax
mov dword [ebp + 8], edx
jmp 0x4e52cf
mov ecx, dword [esi]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4e546a
mov edx, dword [0x539840]
lea eax, [ebp - 0x28]
push edx
push eax
jmp 0x4e551d
push 0
lea ecx, [ebp - 0x84]
push 3
lea edx, [ebp - 0x44]
push ecx
push edx
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x84], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x54]
push eax
lea edx, [ebp - 0x64]
push ecx
push edx
mov dword [ebp - 0x54], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call fcn.004e4e10
lea ecx, [ebp - 0x2c]
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x44]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
test si, si
je 0x4e566b
jmp 0x4e5667
mov edx, dword [esi]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4e55da
mov eax, dword [0x539840]
lea ecx, [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
push 0
push 3
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x84], 0x4008
lea ecx, [eax + edx*8 + 0x14]
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x44]
push edx
push eax
mov dword [ebp - 0x7c], ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x64]
push eax
push ecx
mov dword [ebp - 0x54], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x1c]
push edx
push eax
call fcn.004e4e10
lea ecx, [ebp - 0x2c]
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x64]
lea edx, [ebp - 0x54]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
test si, si
je 0x4e566b
jmp 0x4e5667
push 0
lea ecx, [ebp - 0x84]
push 3
lea edx, [ebp - 0x44]
push ecx
push edx
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x84], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
push 0x538a0a
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaStrFixstr]
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x54]
push eax
lea edx, [ebp - 0x64]
push ecx
push edx
mov dword [ebp - 0x54], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call edi
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call fcn.004e4e10
lea ecx, [ebp - 0x2c]
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x44]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
test si, si
je 0x4e566b
add dword [ebp - 0x20], 0x11
mov edx, dword [ebp - 0x1c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
push edx
call esi
test eax, eax
jle 0x4e568c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0x10]
push eax
push ecx
call fcn.00486ed0
add dword [ebp - 0x20], 0xa
mov edx, dword [ebp - 0x24]
push edx
call esi
test eax, eax
jle 0x4e56aa
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + 0x14]
push eax
push ecx
call fcn.00486ed0
mov eax, dword [ebp + 0x18]
add word [eax], 0xa
push 0x4e572f
jmp 0x4e56eb
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x8c]
push ecx
call esi
lea edx, [ebp - 0x90]
push edx
call esi
lea eax, [ebp - 0x94]
push eax
call esi
lea ecx, [ebp - 0x98]
push ecx
call esi
lea edx, [ebp - 0x9c]
push edx
call esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x24]
call esi
ret