Function at 0x417cf8
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x401296
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcc
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401268
xor esi, esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0xc4], esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrCopy
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x28]
call sub.MSVBVM60.DLL___vbaStrCopy
push 1
call sub.MSVBVM60.DLL___vbaOnError
push esi
lea eax, [ebp - 0x20]
push eax
push esi
push 0x20006
push esi
push esi
call sub.MSVBVM60.DLL___vbaStrI4
mov edx, eax
lea ecx, [ebp - 0x38]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
lea eax, [ebp - 0x3c]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push esi
push 0x412abc
lea eax, [ebp - 0x34]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push 0x80000001
call fcn.00411bd0
mov dword [ebp - 0xc4], eax
call sub.MSVBVM60.DLL___vbaSetSystemError
xor eax, eax
cmp dword [ebp - 0xc4], esi
setne al
neg eax
mov di, ax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 3
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x10
cmp di, si
jne 0x4180ae
movsx eax, word [ebp + 0x10]
cmp eax, 0xffffffff
je 0x417e41
cmp eax, esi
jne 0x41809f
push dword [ebp - 0x24]
lea eax, [ebp - 0x34]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push dword [ebp - 0x20]
call fcn.00411c70
call sub.MSVBVM60.DLL___vbaSetSystemError
push dword [ebp - 0x34]
lea eax, [ebp - 0x24]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaFreeStr
jmp 0x41809f
push 0x22
call sub.MSVBVM60.DLL_rtcBstrFromAnsi
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push dword [ebp - 0x28]
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x38]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x411ef8
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push dword [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x44]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x412b1c
push 0x22
call sub.MSVBVM60.DLL_rtcBstrFromAnsi
mov edx, eax
lea ecx, [ebp - 0x40]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x48]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 6
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x1c
push dword [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaLenBstr
push eax
push dword [ebp - 0x30]
lea eax, [ebp - 0x38]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push 1
push esi
push dword [ebp - 0x24]
lea eax, [ebp - 0x34]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
push dword [ebp - 0x20]
call fcn.00411c28
mov dword [ebp - 0xc4], eax
call sub.MSVBVM60.DLL___vbaSetSystemError
push dword [ebp - 0x34]
lea eax, [ebp - 0x24]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
push dword [ebp - 0x38]
lea eax, [ebp - 0x30]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
mov edi, dword [ebp - 0xc4]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0xc
cmp edi, esi
je 0x41809f
mov ecx, 0x80020004
mov dword [ebp - 0x88], ecx
push 0xa
pop eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x70], eax
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x4c]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov edi, eax
mov eax, dword [edi]
lea ecx, [ebp - 0xc4]
push ecx
push edi
call dword [eax + 0x1c]
fnclex
cmp eax, esi
jge 0x417fa9
push 0x1c
push 0x412b3c
push edi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x50]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov edi, eax
mov eax, dword [edi]
lea ecx, [ebp - 0x40]
push ecx
push edi
call dword [eax + 0x2c]
fnclex
cmp eax, esi
jge 0x417fd8
push 0x2c
push 0x412b3c
push edi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
push 0x412b2c
push dword [ebp - 0xc4]
call sub.MSVBVM60.DLL___vbaStrI4
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x38]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x412b50
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x41193c
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x44]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push dword [ebp - 0x40]
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], 8
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
push esi
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL_rtcMsgBox
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 5
call sub.MSVBVM60.DLL___vbaFreeStrList
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeObjList
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x38
push dword [ebp - 0x20]
call fcn.00411cb4
call sub.MSVBVM60.DLL___vbaSetSystemError
jmp 0x4180ae
call sub.MSVBVM60.DLL___vbaExitProc
push 0x41811f
jmp 0x418106
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x28]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaFreeStr
ret