Function at 0x431df0
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x401f86
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc0
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401608
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xc8], edi
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x20]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
push eax
call dword [edx + 0x1e8]
fnclex
cmp eax, edi
jge 0x431e97
push 0x1e8
push 0x4073ec
mov ecx, dword [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, 0x4054dc
mov ecx, 0x45a098
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call esi
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
lea ecx, [ebp - 0xb4]
push ecx
push eax
call dword [edx + 0x168]
fnclex
cmp eax, edi
jge 0x431ed7
push 0x168
push 0x4073ec
mov edx, dword [ebp - 0x20]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xb4]
push eax
call fcn.00405a70
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edx, 0x405970
mov ecx, 0x45a024
call esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x58], 0x80020004
mov dword [ebp - 0x60], 0xa
push 0x408d0c
mov ecx, dword [0x45a024]
push ecx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call esi
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x408d28
call esi
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x50], 8
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcGetObject]
push 0x408d40
lea edx, [ebp - 0x70]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
push eax
push 0x45a074
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call ebx
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x50]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x45a074]
mov esi, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push edi
lea edx, [ebp - 0x3c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
push 0x30
push 0x408d90
push 0x408d54
mov eax, dword [0x45a074]
push eax
call dword [esi + 0x3c]
fnclex
cmp eax, edi
jge 0x431fcd
push 0x3c
push 0x408d40
mov ecx, dword [0x45a074]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x408d98
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
push 0x45a084
call ebx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov edx, dword [0x45a084]
push edx
push 0x45a088
lea eax, [ebp - 0xc8]
push eax
push 0x408da8
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
test eax, eax
je 0x4321b4
mov eax, 0x80020004
mov dword [ebp - 0x88], eax
mov ecx, 0xa
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp - 0x20]
mov ebx, dword [edx]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x84]
mov dword [edx + 0xc], eax
push 0
push 0x40a394
mov ecx, dword [0x45a088]
push ecx
lea edx, [ebp - 0x50]
push edx
call esi
add esp, 0x10
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [ebx + 0x1ec]
fnclex
test eax, eax
jge 0x4320a8
push 0x1ec
push 0x4073ec
mov edx, dword [ebp - 0x20]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x50]
call edi
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x90], 0x800b
push 0
push 0x40a414
mov eax, dword [0x45a088]
push eax
lea ecx, [ebp - 0x50]
push ecx
call esi
add esp, 0x10
push eax
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov bx, ax
lea ecx, [ebp - 0x50]
call edi
test bx, bx
je 0x432181
push 0
push 0x40a394
mov eax, dword [0x45a088]
push eax
lea ecx, [ebp - 0x50]
push ecx
call esi
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x45a098
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
lea ecx, [ebp - 0x50]
call edi
push 0
push 0xffffffffffffffff
push 1
push 0x40a428
push 0x4096e8
mov edx, dword [0x45a098]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
mov ecx, 0x45a098
call ebx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
push eax
call dword [ecx + 0xe4]
fnclex
test eax, eax
jge 0x432181
push 0xe4
push 0x4073ec
mov ecx, dword [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dx, word [ebp - 0x24]
add dx, 1
jo 0x4323fb
mov dword [ebp - 0x24], edx
push 0x45a088
lea eax, [ebp - 0xc8]
push eax
push 0x408da8
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
jmp 0x432021
push 0
call fcn.00405a70
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
push 0x408da8
push 0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
call esi
push eax
push 0x45a088
call ebx
push 0x408d98
push 0
call esi
push eax
push 0x45a084
call ebx
push 0x408d40
push 0
call esi
push eax
push 0x45a074
call ebx
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x4323e8
jmp 0x4323d4
lea ecx, [ebp - 0xc8]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
lea ecx, [ebp - 0x20]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop