Function at 0x4329d0
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x401f86
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401668
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x5c], edi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
push edi
push 0x40a588
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
push 0x40a5c0
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
push eax
lea edx, [ebp - 0x20]
push edx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call esi
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
lea ecx, [ebp - 0x44]
push ecx
push edi
lea edx, [ebp - 0x40]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
call edi
push eax
push 0
push 0x4054dc
push 0x4054dc
push 0x4054dc
push 0x4054dc
push 0x40a5d4
push 0x405970
mov eax, dword [ebp - 0x20]
push eax
call dword [ebx + 0x1c]
fnclex
test eax, eax
jge 0x432ac4
push 0x1c
push 0x40a5c0
mov ecx, dword [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x408d40
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x30]
push eax
call esi
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
lea ecx, [ebp - 0x44]
push ecx
push 0
lea edx, [ebp - 0x40]
push edx
call edi
push eax
push 0x10
push 0x408d90
push 0x40a5f0
mov eax, dword [ebp - 0x34]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call esi
push eax
push 0x40a55c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [ebx + 0x3c]
fnclex
test eax, eax
jge 0x432b53
push 0x3c
push 0x408d40
mov edx, dword [ebp - 0x30]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x408d98
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x38]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x18
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x5c]
push edx
push 0x408da8
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
test eax, eax
je 0x432c2d
push 0
push 0x40a45c
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x54]
push ecx
call ebx
add esp, 0x10
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x5c]
push eax
push 0x408da8
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
jmp 0x432bb3
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x432c9f
jmp 0x432c76
lea ecx, [ebp - 0x5c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret