Function at 0x55e890
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4051c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x404338
mov eax, dword [0x5733c8]
xor ecx, ecx
cmp eax, ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x5c], ecx
jne 0x55e8ef
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
jmp 0x55e8f5
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3a0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x38]
push eax
push edx
call ebx
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x55e932
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x34], 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edx, dword [ebp - 0x5c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
push edx
push 0x4223e0
call esi
test eax, eax
jne 0x55e9f0
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55e97c
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55e99c
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x398]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x55e9d7
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x42240c
push 0x80000002
push ebx
call dword [edx + 0x24]
jmp 0x55ee1e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x421f80
call esi
test eax, eax
jne 0x55ea88
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55ea18
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55ea38
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x398]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x55ea73
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x4203ec
push 0x80000002
jmp 0x55ee1a
mov edx, dword [ebp - 0x5c]
push edx
push 0x42247c
call esi
test eax, eax
jne 0x55eb24
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55eab0
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55ead0
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x398]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x55eb0b
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x4203ec
push 0x80000001
push ebx
call dword [edx + 0x24]
jmp 0x55ee1e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x422498
call esi
test eax, eax
jne 0x55ebb7
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55eb4c
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55eb6c
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x398]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x55eba7
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x4224c8
jmp 0x55ee15
mov edx, dword [ebp - 0x5c]
push edx
push 0x421d5c
call esi
test eax, eax
jne 0x55ec53
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55ebdf
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55ebff
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x398]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x55ec3a
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x4222e4
push 0x80000002
push ebx
call dword [edx + 0x24]
jmp 0x55ee1e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x42234c
call esi
test eax, eax
jne 0x55eceb
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55ec7b
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55ec9b
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x398]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x55ecd6
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x422374
push 0x80000002
jmp 0x55ee1a
mov edx, dword [ebp - 0x5c]
push edx
push 0x42254c
call esi
test eax, eax
jne 0x55ed87
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55ed13
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55ed33
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x398]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x55ed6e
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x4222e4
push 0x80000001
push ebx
call dword [edx + 0x24]
jmp 0x55ee1e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x422570
call esi
test eax, eax
jne 0x55ee35
mov eax, dword [0x5734e0]
test eax, eax
jne 0x55edaf
push 0x5734e0
push 0x409234
call edi
mov eax, dword [0x5733c8]
mov ebx, dword [0x5734e0]
test eax, eax
jne 0x55edcf
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x398]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x55ee0a
push 0xf8
push 0x41b084
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x422594
push 0x80000001
push ebx
call dword [eax + 0x24]
test eax, eax
fnclex
jge 0x55eebe
push 0x24
push 0x41f62c
push ebx
jmp 0x55eeb7
mov eax, dword [0x5733c8]
test eax, eax
jne 0x55ee4f
push 0x5733c8
push 0x410934
call edi
mov eax, dword [0x5733c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x390]
push eax
lea eax, [ebp - 0x38]
push eax
call ebx
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xa0]
test eax, eax
fnclex
jge 0x55ee86
push 0xa0
push 0x419e08
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x55ee9b
lea eax, [ebp - 0x2c]
push eax
push 0x41b0c4
call edi
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
mov ecx, dword [eax]
push 0xffffffffffffffff
push edx
push eax
mov esi, eax
call dword [ecx + 0x5c]
test eax, eax
fnclex
jge 0x55eebe
push 0x5c
push 0x41b0d4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
push 0x41b0b4
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x48]
push ecx
call fcn.0055aa90
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push 0x55ef3f
jmp 0x55ef2c
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
ret