Function at 0x43fa0f
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x403486
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbc
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402e28
mov eax, dword [ebp + 8]
xor esi, esi
push esi
push esi
push 3
push esi
push esi
push 0x80000000
push dword [eax]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xc0], esi
call sub.KERNEL32.DLL_CreateFileW
cmp eax, 0xffffffff
mov dword [ebp - 0x28], eax
jne 0x43fb78
call sub.KERNEL32.DLL_GetLastError
push eax
mov dword [ebp - 0x1c], eax
call fcn.00408930
mov edx, eax
lea ecx, [ebp - 0x34]
call sub.MSVBVM60.DLL___vbaStrMove
call sub.MSVBVM60.DLL___vbaSetSystemError
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x3c]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
push 0xa
pop edi
push dword [ebp - 0x34]
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0x38]
mov ebx, 0x80020004
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x6c], edi
call sub.MSVBVM60.DLL___vbaStrToUnicode
lea edx, [ebp - 0x9c]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x9c], 8
call sub.MSVBVM60.DLL___vbaVarDup
lea ecx, [ebp - 0x7c]
push ecx
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], edi
mov edi, dword [ebp - 0xc4]
add ecx, 0x80040000
push ecx
mov dword [ebp - 0x44], ebx
mov eax, dword [edi]
push edi
call dword [eax + 0x44]
fnclex
cmp eax, esi
jge 0x43fb44
push 0x44
push 0x40a8d8
push edi
push eax
call sub.MSVBVM60.DLL___vbaHresultCheckObj
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0xc
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaFreeObj
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x4c]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_GetFileSize
mov edi, eax
cmp edi, esi
je 0x43fc8d
push esi
lea eax, [edi - 1]
push eax
push 1
push 0x11
lea eax, [ebp - 0x20]
push eax
push 1
push 0x80
call sub.MSVBVM60.DLL___vbaRedim
add esp, 0x1c
push dword [ebp - 0x20]
lea eax, [ebp - 0x30]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
push esi
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
push edi
push ecx
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_ReadFile
lea eax, [ebp - 0x30]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push esi
lea eax, [ebp - 0x20]
mov dword [ebp - 0x84], eax
push 0x40
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x8c], 0x6011
call sub.MSVBVM60.DLL_rtcStrConvVar2
lea eax, [ebp - 0x4c]
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrMove
lea ecx, [ebp - 0x4c]
call sub.MSVBVM60.DLL___vbaFreeVar
lea eax, [ebp - 0x20]
push eax
push esi
call sub.MSVBVM60.DLL___vbaErase
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x84], 0x40a884
mov dword [ebp - 0x8c], 8
call sub.MSVBVM60.DLL___vbaVarDup
push esi
push 0xffffffffffffffff
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x5c]
push eax
call sub.MSVBVM60.DLL_rtcSplit
lea eax, [ebp - 0x5c]
push eax
push 0x2008
call sub.MSVBVM60.DLL___vbaAryVar
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x2c]
push eax
call sub.MSVBVM60.DLL___vbaAryCopy
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x4c]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0xc
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
push 0x43fcff
jmp 0x43fceb
lea eax, [ebp - 0x20]
push eax
push 0
call sub.MSVBVM60.DLL___vbaAryDestruct
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaFreeStr
ret