Function at 0x4326a0
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x401f86
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401640
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x5c], edi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
push edi
push 0x40a588
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
push 0x40a5c0
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
push eax
lea edx, [ebp - 0x20]
push edx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call esi
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
lea ecx, [ebp - 0x44]
push ecx
push edi
lea edx, [ebp - 0x40]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
call edi
push eax
push 0
push 0x4054dc
push 0x4054dc
push 0x4054dc
push 0x4054dc
push 0x40a5d4
push 0x405970
mov eax, dword [ebp - 0x20]
push eax
call dword [ebx + 0x1c]
fnclex
test eax, eax
jge 0x432794
push 0x1c
push 0x40a5c0
mov ecx, dword [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x408d40
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x2c]
push eax
call esi
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov ebx, dword [eax]
lea ecx, [ebp - 0x44]
push ecx
push 0
lea edx, [ebp - 0x40]
push edx
call edi
push eax
push 0x10
push 0x408d90
push 0x40a5f0
mov eax, dword [ebp - 0x30]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call esi
push eax
push 0x40a55c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [ebx + 0x3c]
fnclex
test eax, eax
jge 0x432823
push 0x3c
push 0x408d40
mov edx, dword [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x408d98
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x38]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x18
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x5c]
push edx
push 0x408da8
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
test eax, eax
je 0x43293d
push 0
push 0x40a644
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x54]
push ecx
call ebx
add esp, 0x10
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x5c]
push eax
push 0x408da8
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
jmp 0x432883
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x4329af
jmp 0x432986
lea ecx, [ebp - 0x5c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret