Function at 0x4aabf7
Capabilities:
Parse pe header

Disassembly:
add byte [ebx - 0x57b27230], cl
call edi
mov edx, dword [ebp - 0x140]
push eax
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x5c]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x60]
dec ebp
mov al, byte [0xff50d7ff]
adc eax, sym.imp.MSVBVM60.DLL___vbaI4Str
push eax
call 0x655278
mov edx, eax
lea ecx, [ebp - 0x64]
call edi
push 3
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov ecx, 8
add byte [eax], al
mov edx, esp
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x78], eax
push 0x4296e4
mov dword [edx], ecx
mov ecx, dword [ebp - 0x7c]
push 0x42970c
mov dword [ebp - 0x64], ebx
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x4c]
push ecx
mov dword [ebp - 0x144], 0x80000000
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x74]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x144]
push edx
call fcn.00553e9c
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x60]
push ecx
lea eax, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x58]
push eax
lea edx, [ebp - 0x54]
push ecx
lea eax, [ebp - 0x50]
push edx
push eax
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x70]
lea edx, [ebp - 0x6c]
push ecx
push edx
lea eax, [ebp - 0x68]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x30
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0xc0]
sub esp, 0x10
mov eax, dword [ebp - 0xbc]
mov ecx, esp
push 1
push 0x4296cc
mov dword [ecx], ebx
push 0x42970c
mov dword [ebp - 0xc4], ebx
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xb8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
push eax
push 0x4296fc
mov dword [ecx + 0xc], edx
lea ecx, [ebp - 0x80]
push 0x80000000
push ecx
call 0x553811
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x90]
push edx
push eax
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xd4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaLenVarB]
lea ecx, [ebp - 0xd4]
push eax
lea edx, [ebp - 0xa0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVar]
xor ecx, ecx
cmp ax, 0xffff
sete cl
neg ecx
mov dword [ebp - 0x138], ecx
lea ecx, [ebp - 0x80]
call esi
cmp word [ebp - 0x138], bx
je 0x4aae00
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
mov edx, dword [ebp - 0x28]
push eax
push edx
call fcn.00556d03
mov edx, eax
lea ecx, [ebp - 0x14]
call edi
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x80]
call esi
mov ecx, dword [ebp - 0x2c]
mov edx, dword [0x5ae528]
lea eax, [ebp - 0x4c]
push eax
push ecx
push 0x4296fc
push edx
call fcn.005852a1
push 3
mov eax, dword [ebp - 0x14]
sub esp, 0x10
mov ecx, 8
mov edx, esp
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xbc], eax
push 0x4296cc
mov dword [edx], ecx
mov ecx, dword [ebp - 0xc0]
push 0x42970c
mov dword [ebp - 0x144], 0x80000000
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x4c]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xb8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x144]
push edx
call 0x554037
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, dword [ebp - 0xc0]
sub esp, 0x10
mov edx, dword [ebp - 0xbc]
mov eax, esp
push 1
push 0x4296d4
mov dword [eax], ebx
push 0x42970c
mov dword [ebp - 0xc4], ebx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x2c]
push edx
push 0x4296fc
mov dword [eax + 0xc], ecx
lea eax, [ebp - 0x80]
push 0x80000000
push eax
call fcn.0055396b
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x90]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVarB]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x80]
mov word [ebp - 0x148], ax
call esi
cmp word [ebp - 0x148], bx
je 0x4ab079
mov ecx, dword [ebp - 0xc0]
sub esp, 0x10
mov edx, dword [ebp - 0xbc]
mov eax, esp
push 3
push 0x4296d4
mov dword [eax], ebx
push 0x42970c
mov dword [ebp - 0xc4], ebx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x2c]
push edx
push 0x4296fc
mov dword [eax + 0xc], ecx
lea eax, [ebp - 0x80]
push 0x80000000
push eax
call fcn.005539e7
push ebx
lea ecx, [ebp - 0x80]
push 0x40
lea edx, [ebp - 0x90]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x14]
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x80]
push ecx
push edx
push 2
call esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push eax
push ecx
call fcn.00556ea4
mov edx, eax
lea ecx, [ebp - 0x60]
call edi
push 0x2d
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromChar]
mov edx, eax
lea ecx, [ebp - 0x64]
call edi
mov edx, dword [ebp - 0x64]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x64], ebx
call edi
mov edx, 0x423044
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x60]
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x60], ebx
call edi
lea edx, [ebp - 0x58]
lea eax, [ebp - 0x144]
push edx
push eax
push 0x7fffffff
lea ecx, [ebp - 0x54]
push 1
lea edx, [ebp - 0x50]
push ecx
mov ecx, dword [0x5ae51c]
lea eax, [ebp - 0x4c]
push edx
push eax
push ecx
call fcn.0056431e
mov edx, dword [0x5aecc0]
mov eax, dword [ebp - 0x58]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x5c]
call edi
mov ecx, dword [0x5aecc4]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x34]
call edi
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x60]
push edx
lea ecx, [ebp - 0x5c]
push eax
lea edx, [ebp - 0x58]
push ecx
lea eax, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x50]
push eax
lea edx, [ebp - 0x4c]
push ecx
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov edx, dword [ebp - 0x14]
add esp, 0x20
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0xc0]
sub esp, 0x10
mov edx, dword [ebp - 0xbc]
mov eax, esp
push 3
push 0x4296dc
mov dword [eax], ebx
push 0x42970c
mov dword [ebp - 0xc4], ebx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x2c]
push edx
push 0x4296fc
mov dword [eax + 0xc], ecx
lea eax, [ebp - 0x80]
push 0x80000000
push eax
call fcn.00553b49
push ebx
lea ecx, [ebp - 0x80]
push 0x40
lea edx, [ebp - 0x90]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call edi
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x80]
push ecx
push edx
push 2
call esi
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
add esp, 0xc
push eax
push ecx
call 0x557000
mov edx, eax
lea ecx, [ebp - 0x3c]
call edi
jmp 0x4ab07f
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp - 0xc0]
sub esp, 0x10
mov ecx, dword [ebp - 0xbc]
mov edx, esp
push 1
push 0x4296cc
mov dword [edx], ebx
push 0x42970c
mov dword [ebp - 0xc4], ebx
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xb8]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x2c]
push ecx
push 0x4296fc
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x80]
push 0x80000000
push edx
call fcn.00553bea
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x90]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVarB]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x80]
mov word [ebp - 0x148], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0x148], bx
je 0x4ab198
mov eax, dword [ebp - 0xc0]
sub esp, 0x10
mov ecx, dword [ebp - 0xbc]
mov edx, esp
push 3
push 0x4296cc
mov dword [edx], ebx
push 0x42970c
mov dword [ebp - 0xc4], ebx
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xb8]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x2c]
push ecx
push 0x4296fc
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x80]
push 0x80000000
push edx
call fcn.00553c6a
push ebx
lea eax, [ebp - 0x80]
push 0x40
lea ecx, [ebp - 0x90]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x14]
call edi
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x80]
push eax
push ecx
push 2
call esi
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
add esp, 0xc
push edx
push eax
call fcn.00557121
mov edx, eax
lea ecx, [ebp - 0x1c]
call edi
lea edx, [ebp - 0xc4]
lea ecx, [ebp - 0x1c]
push edx
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc4], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcIsDate]
test ax, ax
je 0x4ab448
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea ecx, [ebp - 0x1c]
push 1
lea edx, [ebp - 0x80]
push 1
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xbc], ecx
push edx
push eax
lea ecx, [ebp - 0x90]
push 0x429720
push ecx
mov dword [ebp - 0xc4], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcDateDiff]
movsx eax, word [ebp + 8]
mov dword [ebp - 0xcc], eax
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xd4]
push edx
lea ecx, [ebp - 0xa0]
push eax
push ecx
mov dword [ebp - 0xd4], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x80]
push edx
push eax
push 2
call esi
mov edx, dword [ebp - 0x24]
mov eax, 0x16e
sub eax, edx
add esp, 0xc
cmp eax, 1
jl 0x4ab396
cmp eax, 0xa
jg 0x4ab396
push eax
mov dword [ebp - 0x144], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x50]
call edi
mov edx, 0x422eac
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [0x5aea60]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x144]
push eax