Function at 0x572989
Capabilities:
Parse pe header

Disassembly:
adc eax, sym.imp.MSVBVM60.DLL___vbaLenBstrB
test eax, eax
je 0x57293d
mov dword [ebp - 4], 0x27
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x150]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
test eax, eax
je 0x572919
mov dword [ebp - 4], 0x28
push 0
push 0xffffffffffffffff
push 0x422fd4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcInStrRev]
mov dword [ebp - 0x58], eax
mov dword [ebp - 4], 0x29
add byte [ebx - 0x7774f7bb], cl
mov ah, 1
add byte [eax], al
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov edx, dword [ebp - 0x58]
sub edx, 0xa
cmp eax, edx
jl 0x572877
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0xc0], 0xa
mov dword [ebp - 0xc8], 2
lea eax, [ebp - 0xc8]
push eax
mov ecx, dword [ebp - 0x58]
sub ecx, 0xa
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1b4]
push eax
call dword [fcn.004011b0]
mov edx, eax
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x54]
push ecx
push 0x42e314
call dword [sym.imp.MSVBVM60.DLL___vbaStrLike]
adc eax, sym.imp.MSVBVM60.DLL___vbaStrLike
movsx edx, ax
test edx, edx
je 0x572877
mov dword [ebp - 4], 0x2c
mov eax, dword [ebp - 0x58]
sub eax, 0xa
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 3
lea ecx, [ebp - 0xc8]
push ecx
push 1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1b4]
push eax
call dword [fcn.004011b0]
mov edx, eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [ebp + 8]
add ecx, 0x1b4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x2d
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1b4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x150]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [ebp + 8]
add ecx, 0x1b4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x144], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x150]
push eax
push 0x422fd4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, 0x422fd4
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x144]
push edx
push 0x7fffffff
push 1
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x7c]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x1b4
push edx
mov eax, dword [0x5ae51c]
push eax
call 0x62bc88
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp + 8]
add ecx, 0x1b4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
jmp 0x572938
mov dword [ebp - 4], 0x32
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1b4]
mov ecx, dword [ebp + 8]
add ecx, 0x1b4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x6e53d9
mov dword [ebp - 4], 0x35
lea edx, [ebp - 0xc8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
cmp dword [0x5b0c30], 0
jne 0x572976
push 0x5b0c30
push 0x4255e0
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x26c], 0x5b0c30
jmp 0x572980
mov dword [ebp - 0x26c], 0x5b0c30
mov eax, dword [ebp - 0x26c]
mov ecx, dword [eax]
mov dword [ebp - 0x14c], ecx
lea esi, [esi + edi*8 + 0x558dffff]
test byte [edx + 0x6a], dl
js 0x572920
test dword [esi + edi*8 + 0x88bffff], esi
mov edx, dword [ebp - 0x14c]
push edx
call dword [ecx + 0x48]
fnclex
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jge 0x5729da
push 0x48
push 0x4255d0
mov eax, dword [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x150]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
adc byte [eax], al
mov dword [ebp - 0x270], eax
jmp 0x5729e4
mov dword [ebp - 0x270], 0
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x1e8], edx
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], 8
mov ecx, dword [0x5aea60]
mov edx, 0x162