Function at 0x180819e
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2a0
mov eax, dword [0x18122e8]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor esi, esi
xor edi, edi
push 6
inc esi
push edi
mov dword [ebp - 4], eax
mov dword [0x1812b5c], esi
mov dword [0x1812b60], edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, edi
jge 0x18081e0
cmp eax, 0x80010106
jne 0x18086ab
lea eax, [ebp - 0x22c]
push eax
push 0x180191c
push esi
push edi
push 0x18019ec
mov dword [ebp - 0x22c], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x18086ab
cmp ebx, edi
jne 0x1808210
mov ebx, 0x18018b8
push ebx
lea eax, [ebp - 0x20c]
push 0x1801898
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
lea edx, [ebp - 0x220]
push edx
push edi
push edi
push edi
push edi
push edi
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x230]
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jl 0x1808632
push 0x800
push edi
push 3
push 3
push edi
push edi
push 0xa
push dword [ebp - 0x220]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov esi, eax
cmp esi, edi
jl 0x1808632
push 0x1801890
mov dword [ebp - 0x218], edi
call ebx
push 0x1801848
mov dword [ebp - 0x228], eax
call ebx
lea edx, [ebp - 0x218]
push edx
push edi
push 0x20
mov dword [ebp - 0x21c], eax
push dword [ebp - 0x21c]
mov eax, dword [ebp - 0x220]
push dword [ebp - 0x228]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x50]
mov esi, eax
cmp esi, edi
jl 0x1808539
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
lea edx, [ebp - 0x224]
push edx
lea edx, [ebp - 0x210]
push edx
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x180852d
cmp dword [ebp - 0x224], edi
je 0x180851c
mov eax, dword [ebp - 0x210]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x2a0]
push edx
push edi
push 0x1801838
mov dword [0x1812b60], 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808514
push 0x17
push edi
lea eax, [ebp - 0x2a0]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808514
mov eax, dword [ebp - 0x298]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x250]
push edx
push edi
mov dword [0x1812b50], eax
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
push 0x1801828
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808514
push 8
push edi
lea eax, [ebp - 0x250]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808514
push dword [ebp - 0x248]
push 0x1812330
call dword [sym.imp.msvcrt.dll_wcscpy]
mov eax, dword [ebp - 0x210]
pop ecx
pop ecx
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x240]
push edx
push edi
push 0x1801808
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808514
cmp word [ebp - 0x240], 1
je 0x1808417
push 0x17
push edi
lea eax, [ebp - 0x240]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808514
mov eax, dword [ebp - 0x238]
mov dword [0x1812b54], eax
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x270]
push edx
push edi
push 0x18017f0
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808514
push 8
push edi
lea eax, [ebp - 0x270]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808514
push dword [ebp - 0x268]
push 0x1812740
call dword [sym.imp.msvcrt.dll_wcscpy]
mov eax, dword [ebp - 0x210]
pop ecx
pop ecx
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x290]
push edx
push edi
push 0x18017c0
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808514
push 8
push edi
lea eax, [ebp - 0x290]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808514
push dword [ebp - 0x288]
push 0x1812538
call dword [sym.imp.msvcrt.dll_wcscpy]
mov eax, dword [ebp - 0x210]
pop ecx
pop ecx
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x260]
push edx
push edi
push 0x1801790
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808514
push 8
push edi
lea eax, [ebp - 0x260]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808514
push dword [ebp - 0x258]
push 0x1812948
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
jmp 0x1808521
mov dword [0x1812b60], edi
jmp 0x1808521
mov esi, 0x8000ffff
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x21c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp esi, edi
jl 0x180861a
push 0x1801754
call ebx
lea edx, [ebp - 0x218]
push edx
push edi
push 0x20
mov ebx, eax
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x228]
push eax
call dword [ecx + 0x50]
mov esi, eax
cmp esi, edi
jl 0x1808613
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
lea edx, [ebp - 0x224]
push edx
lea edx, [ebp - 0x21c]
push edx
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808607
cmp dword [ebp - 0x224], edi
je 0x18085f6
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x280]
push edx
push edi
push 0x1801738
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x18085ee
push 0x17
push edi
lea eax, [ebp - 0x280]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov eax, dword [ebp - 0x278]
mov dword [0x1812b58], eax
jmp 0x18085fb
mov dword [0x1812b60], edi
jmp 0x18085fb
mov esi, 0x8000ffff
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x228]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x230]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, 0x80041002
je 0x1808693
cmp esi, 0x80041003
je 0x180868c
cmp esi, 0x80041004
je 0x1808685
cmp esi, 0x80041005
je 0x1808677
mov eax, 0x80041006
cmp esi, eax
je 0x180867e
jle 0x1808698
cmp esi, 0x80041008
jg 0x1808698
mov esi, 0x80070057
jmp 0x18086a9
mov esi, 0x8007000e
jmp 0x18086a9
mov esi, 0x80004005
jmp 0x18086a9
mov esi, 0x80070005
jmp 0x18086a9
mov esi, 0x800704d0
cmp esi, edi
jne 0x18086a9
cmp dword [0x1812b60], edi
mov eax, 0x80004005
je 0x18086ab
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.01808732
leave
ret 4