Function at 0x496f80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x64
xor eax, eax
push ebx
mov dword [esp + 0x3c], eax
push esi
mov dword [esp + 0x44], eax
push edi
mov dword [esp + 0x4c], eax
mov ecx, 7
lea edi, [esp + 0x54]
mov dword [esp + 0x50], eax
rep stosd dword es:[edi], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], eax
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], edx
cmp eax, 1
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], edx
jne 0x497000
xor eax, eax
mov edx, dword [0x569588]
add eax, 1
mov dword [edx + eax*4 - 4], ecx
mov edx, dword [0x569588]
mov dword [edx + eax*4 + 4], ecx
jo 0x497282
cmp eax, 1
jle 0x496fd5
pop edi
pop esi
pop ebx
add esp, 0x64
ret 0x10
mov edi, dword [esp + 0x74]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
test edi, edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x54], 0x1c
mov dword [esp + 0x58], 7
je 0x497279
lea edx, [esp + 0x44]
push edx
push edi
call dword [sym.imp.USER32.DLL_GetClientRect]
lea edx, [esp + 0x44]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
push edx
push edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call dword [sym.imp.USER32.DLL_GetWindowRect]
mov esi, dword [sym.imp.USER32.DLL_GetSystemMetrics]
push 3
call esi
push 2
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub ecx, edx
jo 0x497282
sub ecx, eax
jo 0x497282
mov dword [esp + 0x28], ecx
call esi
mov edx, dword [esp + 0x50]
mov esi, dword [esp + 0x48]
sub edx, esi
jo 0x497282
sub edx, eax
jo 0x497282
mov dword [esp + 0x28], edx
xor eax, eax
mov ecx, dword [esp + eax*4 + 0x14]
mov edx, dword [esp + eax*4 + 0xc]
cmp ecx, edx
jg 0x497279
add eax, 1
jo 0x497282
cmp eax, 1
jle 0x49709c
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
push ebp
xor esi, esi
jmp 0x4970c9
mov edi, dword [esp + 0x78]
lea edx, [esp + 0x58]
push edx
push esi
push edi
call dword [sym.imp.USER32.DLL_GetScrollInfo]
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x68]
sub ecx, eax
mov eax, esi
mov edx, dword [esp + 0x6c]
mov dword [esp + esi*4 + 0x38], edi
not eax
jo 0x497282
and eax, 1
mov dword [esp + esi*4 + 0x30], edx
shl eax, 2
mov dword [esp + esi*4 + 0x40], ecx
mov ebp, dword [esp + eax + 0x28]
cmp ebp, dword [esp + eax + 0x10]
jl 0x497222
mov eax, dword [esp + esi*4 + 0x18]
cmp eax, 0xb
jge 0x497132
cmp edx, edi
jle 0x497123
xor eax, eax
jmp 0x49715d
cmp edx, ecx
jne 0x497208
mov eax, 6
jmp 0x49715d
mov edi, dword [esp + esi*4 + 0x10]
sub edi, 0xb
jo 0x497282
cmp eax, edi
jle 0x497208
cmp edx, ecx
jge 0x497152
mov eax, 1
jmp 0x49715d
jne 0x497208
mov eax, 7
mov ecx, dword [0x569588]
cmp eax, dword [ecx + esi*4]
je 0x497176
mov dword [ecx + esi*4 + 8], 0
mov ecx, dword [0x569588]
mov dword [ecx + esi*4], eax
mov eax, dword [0x569588]
mov ecx, dword [eax + esi*4 + 8]
test ecx, ecx
je 0x4971d5
call fcn.004256e4
mov edi, eax
call ebx
mov ecx, dword [0x569588]
mov edx, dword [ecx + esi*4 + 8]
push edx
push edi
call fcn.0048c620
xor ecx, ecx
cmp eax, 0x32
setge cl
neg ecx
test cx, cx
je 0x497222
call fcn.004256e4
mov edi, eax
call ebx
mov edx, dword [0x569588]
mov eax, esi
add eax, 0x114
jo 0x497282
mov dword [edx + esi*4 + 8], edi
mov dword [esp + esi*4 + 0x20], eax
jmp 0x497222
call fcn.004256e4
mov edi, eax
call ebx
mov ecx, dword [0x569588]
mov dword [ecx + esi*4 + 8], edi
mov ecx, dword [0x569588]
mov eax, dword [ecx + esi*4 + 8]
cmp eax, 0x7fffffcd
jge 0x497222
add eax, 0x32
jo 0x497282
mov dword [ecx + esi*4 + 8], eax
jmp 0x497222
mov edx, dword [0x569588]
mov dword [edx + esi*4], 0
mov eax, dword [0x569588]
mov dword [eax + esi*4 + 8], 0
add esi, 1
jo 0x497282
cmp esi, 1
jle 0x4970c5
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
or eax, ecx
pop ebp
je 0x497279
push 0
call fcn.00496f30
mov edi, dword [sym.imp.USER32.DLL_SendMessageA]
xor esi, esi
mov ebx, dword [esp + 0x74]
mov eax, dword [esp + esi*4 + 0x1c]
test eax, eax
je 0x497268
mov ecx, dword [0x569588]
push 0
mov edx, dword [ecx + esi*4]
push edx
push eax
push ebx
call edi
add esi, 1
jo 0x497282
cmp esi, 1
jle 0x497250
push 0xffffffffffffffff
call fcn.00496f30
pop edi
pop esi
pop ebx
add esp, 0x64
ret 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop