Function at 0x6ae6f0
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4052f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x404328
mov eax, dword [0x6c43c8]
xor ecx, ecx
cmp eax, ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x5c], ecx
jne 0x6ae74f
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
jmp 0x6ae755
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x38]
push eax
push edx
call ebx
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x6ae792
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x34], 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edx, dword [ebp - 0x5c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
push edx
push 0x421f14
call esi
test eax, eax
jne 0x6ae850
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6ae7dc
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6ae7fc
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x394]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x6ae837
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x421f40
push 0x80000002
push ebx
call dword [edx + 0x24]
jmp 0x6aec7e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x4207d0
call esi
test eax, eax
jne 0x6ae8e8
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6ae878
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6ae898
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x394]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x6ae8d3
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x41ff14
push 0x80000002
jmp 0x6aec7a
mov edx, dword [ebp - 0x5c]
push edx
push 0x421fb0
call esi
test eax, eax
jne 0x6ae984
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6ae910
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6ae930
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x394]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x6ae96b
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x41ff14
push 0x80000001
push ebx
call dword [edx + 0x24]
jmp 0x6aec7e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x421fcc
call esi
test eax, eax
jne 0x6aea17
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6ae9ac
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6ae9cc
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x394]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x6aea07
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x421ffc
jmp 0x6aec75
mov edx, dword [ebp - 0x5c]
push edx
push 0x4207ec
call esi
test eax, eax
jne 0x6aeab3
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6aea3f
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6aea5f
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x394]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x6aea9a
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x421e18
push 0x80000002
push ebx
call dword [edx + 0x24]
jmp 0x6aec7e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x421e80
call esi
test eax, eax
jne 0x6aeb4b
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6aeadb
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6aeafb
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x394]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x6aeb36
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x421ea8
push 0x80000002
jmp 0x6aec7a
mov edx, dword [ebp - 0x5c]
push edx
push 0x422080
call esi
test eax, eax
jne 0x6aebe7
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6aeb73
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6aeb93
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x394]
lea edx, [ebp - 0x38]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x34]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xf8]
test eax, eax
fnclex
jge 0x6aebce
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx]
push eax
push 0x421e18
push 0x80000001
push ebx
call dword [edx + 0x24]
jmp 0x6aec7e
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x4220a4
call esi
test eax, eax
jne 0x6aec95
mov eax, dword [0x6c44e0]
test eax, eax
jne 0x6aec0f
push 0x6c44e0
push 0x409578
call edi
mov eax, dword [0x6c43c8]
mov ebx, dword [0x6c44e0]
test eax, eax
jne 0x6aec2f
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x394]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xf8]
test eax, eax
fnclex
jge 0x6aec6a
push 0xf8
push 0x41a678
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx]
push ecx
push 0x4220c8
push 0x80000001
push ebx
call dword [eax + 0x24]
test eax, eax
fnclex
jge 0x6aed1e
push 0x24
push 0x41f154
push ebx
jmp 0x6aed17
mov eax, dword [0x6c43c8]
test eax, eax
jne 0x6aecaf
push 0x6c43c8
push 0x4109d8
call edi
mov eax, dword [0x6c43c8]
mov edx, dword [eax]
push eax
call dword [edx + 0x38c]
push eax
lea eax, [ebp - 0x38]
push eax
call ebx
mov esi, eax
lea edx, [ebp - 0x34]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xa0]
test eax, eax
fnclex
jge 0x6aece6
push 0xa0
push 0x4199fc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x6aecfb
lea eax, [ebp - 0x2c]
push eax
push 0x41ac54
call edi
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
mov ecx, dword [eax]
push 0xffffffffffffffff
push edx
push eax
mov esi, eax
call dword [ecx + 0x5c]
test eax, eax
fnclex
jge 0x6aed1e
push 0x5c
push 0x41ac64
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
push 0x41ac44
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x48]
push ecx
call fcn.006aa8f0
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push 0x6aed9f
jmp 0x6aed8c
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
ret