Function at 0x43ec3e
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x403ab6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe8
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x402f50
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xbc], ebx
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
call sub.MSVBVM60.DLL___vbaStrCopy
push dword [ebp - 0x28]
push 0x40e9b8
call sub.MSVBVM60.DLL___vbaStrTextLike
test ax, ax
jne 0x43eced
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrCopy
jmp 0x43f027
push 1
pop edi
push edi
push dword [ebp - 0x28]
mov esi, 0x40acc0
push esi
push edi
call sub.MSVBVM60.DLL___vbaInStr
test eax, eax
jne 0x43ed1b
push dword [ebp - 0x28]
call fcn.0043f0c7
mov edx, eax
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrMove
jmp 0x43f027
lea eax, [ebp - 0x28]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 0x4008
push edi
push dword [ebp - 0x28]
push esi
push edi
call sub.MSVBVM60.DLL___vbaInStr
sub eax, edi
jo 0x43f0c2
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL_rtcLeftCharVar
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrMove
lea ecx, [ebp - 0x60]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 0x58], 0x80020004
mov dword [ebp - 0x60], 0xa
lea eax, [ebp - 0x28]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 0x4008
lea eax, [ebp - 0x60]
push eax
push edi
push dword [ebp - 0x28]
push esi
push edi
call sub.MSVBVM60.DLL___vbaInStr
add eax, edi
jo 0x43f0c2
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x70]
push eax
call sub.MSVBVM60.DLL_rtcMidCharVar
lea eax, [ebp - 0x70]
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x60]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0xc
push 0x40ec64
push ebx
call fcn.00422018
mov edx, eax
lea ecx, [ebp - 0x20]
call sub.MSVBVM60.DLL___vbaStrMove
push edi
call sub.MSVBVM60.DLL___vbaOnError
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
call fcn.0043ce17
push dword [ebp - 0x20]
call fcn.0043f0c7
mov edx, eax
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrMove
push dword [ebp - 0x30]
push dword [ebp - 0x20]
call sub.MSVBVM60.DLL___vbaStrTextCmp
test eax, eax
jne 0x43ee30
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x30]
call sub.MSVBVM60.DLL___vbaStrCopy
push dword [ebp - 0x20]
lea eax, [ebp - 0x34]
push eax
call sub.MSVBVM60.DLL___vbaStrToAnsi
push eax
call sub.KERNEL32.DLL_DeleteFileA
push dword [ebp - 0x34]
lea eax, [ebp - 0x20]
push eax
call sub.MSVBVM60.DLL___vbaStrToUnicode
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaFreeStr
jmp 0x43f027
call sub.MSVBVM60.DLL___vbaExitProc
push 0x43f0ae
jmp 0x43f08d
lea ecx, [ebp - 0x20]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x28]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x2c]
call sub.MSVBVM60.DLL___vbaFreeStr
ret
call sub.MSVBVM60.DLL___vbaErrorOverflow