Function at 0x41a92b
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x403486
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc4
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x4019f8
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xcc], ebx
push 1
call sub.MSVBVM60.DLL___vbaOnError
push dword [0x44801c]
push 0x40b040
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x20]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x20]
push eax
call fcn.00418b78
test ax, ax
jne 0x41aa2e
mov ecx, 0x80020004
mov dword [ebp - 0x74], ecx
push 0xa
pop eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x5c], eax
push 0x40a890
push dword [ebp - 0x20]
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x40a8b4
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 8
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x30
lea eax, [ebp - 0x4c]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaFreeStr
jmp 0x41b21b
push 0x40859c
push 0x40b06c
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrMove
mov edx, 0x40b084
lea ecx, [ebp - 0x28]
call sub.MSVBVM60.DLL___vbaStrCopy
push dword [ebp - 0x28]
lea eax, [ebp - 0x30]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x2c]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push 0x80000001
call fcn.004090b0
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
call sub.MSVBVM60.DLL___vbaSetSystemError
push dword [ebp - 0x2c]
lea eax, [ebp - 0x24]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
push dword [ebp - 0x30]
lea eax, [ebp - 0x28]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
push dword [ebp - 0x34]
lea eax, [ebp - 0x38]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
mov edx, eax
mov eax, dword [0x44815c]
lea ecx, [eax + 4]
call sub.MSVBVM60.DLL___vbaStrCopy
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2c]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x14
mov eax, dword [0x448094]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x30]
fnclex
cmp eax, ebx
jge 0x41aafc
push 0x30
push 0x40a06c
push dword [0x448094]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
push eax
lea eax, [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov eax, dword [0x44815c]
push dword [eax + 4]
call sub.MSVBVM60.DLL___vbaLenBstrB
test eax, eax
je 0x41ab46
mov eax, dword [0x44815c]
add eax, 4
push eax
call fcn.00418a54
test ax, ax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
je 0x41ab4e
mov edx, dword [0x44815c]
push dword [edx + 4]
jmp 0x41ab54
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push dword [0x448018]
push eax
call dword [ecx + 0xe0]
fnclex
cmp eax, ebx
jge 0x41ab7a
push 0xe0
mov esi, 0x40b0a4
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
jmp 0x41ab7f
mov esi, 0x40b0a4
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
or edi, 0xffffffff
push edi
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, ebx
jge 0x41aba4
push 0x50
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xa0]
fnclex
cmp eax, ebx
jge 0x41abcc
push 0xa0
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x98]
fnclex
cmp eax, ebx
jge 0x41abf4
push 0x98
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x30]
fnclex
cmp eax, ebx
jge 0x41ac16
push 0x30
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x90]
fnclex
cmp eax, ebx
jge 0x41ac3e
push 0x90
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x78]
fnclex
cmp eax, ebx
jge 0x41ac60
push 0x78
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push 0x40b0b8
push eax
call dword [ecx + pe_nt_image_headers32]
fnclex
cmp eax, ebx
jge 0x41ac8c
push pe_nt_image_headers32
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push 0x40b0ec
push eax
call dword [ecx + 0xf0]
fnclex
cmp eax, ebx
jge 0x41acb8
push 0xf0
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push 0x408550
push eax
call dword [ecx + 0xe8]
fnclex
cmp eax, ebx
jge 0x41ace4
push 0xe8
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
cmp dword [0x4481ac], ebx
jne 0x41acfb
push 0x4481ac
push 0x405d34
call sub.MSVBVM60.DLL___vbaNew2
mov eax, dword [0x448094]
mov edi, dword [eax]
lea eax, [ebp - 0xb0]
push eax
push dword [0x4481ac]
lea eax, [ebp - 0x3c]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
push eax
push dword [0x448094]
call dword [edi + 0x130]
fnclex
cmp eax, ebx
jge 0x41ad41
push 0x130
push 0x40a06c
push dword [0x448094]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
lea edx, [ebp - 0xb4]
push edx
push eax
call dword [ecx + 0x1c]
fnclex
cmp eax, ebx
jge 0x41ad75
push 0x1c
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaFreeObj
cmp dword [0x4481ac], ebx
jne 0x41ad94
push 0x4481ac
push 0x405d34
call sub.MSVBVM60.DLL___vbaNew2
mov eax, dword [0x448094]
mov edi, dword [eax]
lea eax, [ebp - 0xb0]
push eax
push dword [0x4481ac]
lea eax, [ebp - 0x3c]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
push eax
push dword [0x448094]
call dword [edi + 0x134]
fnclex
cmp eax, ebx
jge 0x41adda
push 0x134
push 0x40a06c
push dword [0x448094]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
lea edx, [ebp - 0xb4]
push edx
push eax
call dword [ecx + 0x20]
fnclex
cmp eax, ebx
jge 0x41ae0e
push 0x20
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaFreeObj
cmp dword [0x4481ac], ebx
jne 0x41ae2d
push 0x4481ac
push 0x405d34
call sub.MSVBVM60.DLL___vbaNew2
mov edi, dword [0x4481ac]
mov eax, dword [edi]
lea ecx, [ebp - 0xb0]
push ecx
push edi
call dword [eax + 0x58]
fnclex
cmp eax, ebx
jge 0x41ae54
push 0x58
push 0x40a1a0
push edi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
push dword [ebp - 0xb0]
push eax
call dword [ecx + 0x24]
fnclex
cmp eax, ebx
jge 0x41ae7b
push 0x24
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x114]
fnclex
cmp eax, ebx
jge 0x41aea6
push 0x114
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0x3c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xb0]
push edx
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, ebx
jge 0x41aecc
push 0x50
push 0x40b120
push edi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
xor eax, eax
cmp dword [ebp - 0xb0], ebx
sete al
neg eax
mov di, ax
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaFreeObj
cmp di, bx
je 0x41b12a
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [ecx + 0xf8]
fnclex
cmp eax, ebx
jge 0x41af18
push 0xf8
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
push dword [ebp - 0x2c]
lea eax, [ebp - 0x38]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x34]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push 0x80000001
call fcn.004090f0
call sub.MSVBVM60.DLL___vbaSetSystemError
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
push dword [ebp - 0x34]
lea eax, [ebp - 0x28]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x14
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [ecx + 0x100]
fnclex
cmp eax, ebx
jge 0x41afab
push 0x100
push esi
push dword [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x44815c]
lea ecx, [eax + 4]
call sub.MSVBVM60.DLL___vbaStrCopy
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaFreeStr
cmp dword [0x448c2c], ebx
jne 0x41afda
push 0x448c2c
push 0x409acc
call sub.MSVBVM60.DLL___vbaNew2
mov esi, dword [0x448c2c]
mov eax, dword [esi]
lea ecx, [ebp - 0x3c]
push ecx
push esi
call dword [eax + 0x14]
fnclex
cmp eax, ebx
jge 0x41affe
push 0x14
push 0x4098e4
push esi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov eax, dword [ebp - 0x3c]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [ecx + 0x60]
fnclex
cmp eax, ebx
jge 0x41b021
push 0x60
push 0x409adc
push esi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov ecx, 0x80020004
mov dword [ebp - 0x74], ecx
push 0xa
pop eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x2c]
push 0x40b134
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 8
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x41
lea eax, [ebp - 0x4c]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
mov esi, eax
dec esi
neg esi
sbb esi, esi
inc esi
neg esi
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaFreeObj
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x4c]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
cmp si, bx
je 0x41b12a
cmp dword [0x448c2c], ebx
jne 0x41b0bd
push 0x448c2c
push 0x409acc
call sub.MSVBVM60.DLL___vbaNew2
mov esi, dword [0x448c2c]
cmp dword [0x4481ac], ebx
jne 0x41b0da
push 0x4481ac
push 0x405d34
call sub.MSVBVM60.DLL___vbaNew2
mov edi, dword [esi]
push dword [0x4481ac]
lea eax, [ebp - 0x3c]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
push eax
push esi
call dword [edi + 0x10]
fnclex
cmp eax, ebx
jge 0x41b104
push 0x10
push 0x4098e4
push esi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaFreeObj
push 1
push dword [0x448018]
mov eax, dword [0x44815c]
push dword [eax + 4]
push dword [ebp - 0x20]
push 0x40b18c
push ebx
call sub.SHELL32.DLL_ShellExecuteW
push ebx
lea eax, [ebp - 0xcc]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
jmp 0x41b235
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x4c]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
call sub.MSVBVM60.DLL___vbaExitProc
wait
push 0x41b2a3
jmp 0x41b27f
lea ecx, [ebp - 0xcc]
call sub.MSVBVM60.DLL___vbaFreeObj
lea ecx, [ebp - 0x20]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x28]
call sub.MSVBVM60.DLL___vbaFreeStr
ret