Function at 0x18081b3
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2a0
mov eax, dword [0x18122e8]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor esi, esi
xor edi, edi
push 6
inc esi
push edi
mov dword [ebp - 4], eax
mov dword [0x1812b5c], esi
mov dword [0x1812b60], edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, edi
jge 0x18081f5
cmp eax, 0x80010106
jne 0x18086c0
lea eax, [ebp - 0x22c]
push eax
push 0x180191c
push esi
push edi
push 0x18019ec
mov dword [ebp - 0x22c], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x18086c0
cmp ebx, edi
jne 0x1808225
mov ebx, 0x18018b8
push ebx
lea eax, [ebp - 0x20c]
push 0x1801898
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
lea edx, [ebp - 0x220]
push edx
push edi
push edi
push edi
push edi
push edi
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x230]
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jl 0x1808647
push 0x800
push edi
push 3
push 3
push edi
push edi
push 0xa
push dword [ebp - 0x220]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov esi, eax
cmp esi, edi
jl 0x1808647
push 0x1801890
mov dword [ebp - 0x218], edi
call ebx
push 0x1801848
mov dword [ebp - 0x228], eax
call ebx
lea edx, [ebp - 0x218]
push edx
push edi
push 0x20
mov dword [ebp - 0x21c], eax
push dword [ebp - 0x21c]
mov eax, dword [ebp - 0x220]
push dword [ebp - 0x228]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x50]
mov esi, eax
cmp esi, edi
jl 0x180854e
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
lea edx, [ebp - 0x224]
push edx
lea edx, [ebp - 0x210]
push edx
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808542
cmp dword [ebp - 0x224], edi
je 0x1808531
mov eax, dword [ebp - 0x210]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x2a0]
push edx
push edi
push 0x1801838
mov dword [0x1812b60], 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808529
push 0x17
push edi
lea eax, [ebp - 0x2a0]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808529
mov eax, dword [ebp - 0x298]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x250]
push edx
push edi
mov dword [0x1812b50], eax
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
push 0x1801828
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808529
push 8
push edi
lea eax, [ebp - 0x250]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808529
push dword [ebp - 0x248]
push 0x1812330
call dword [sym.imp.msvcrt.dll_wcscpy]
mov eax, dword [ebp - 0x210]
pop ecx
pop ecx
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x240]
push edx
push edi
push 0x1801808
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808529
cmp word [ebp - 0x240], 1
je 0x180842c
push 0x17
push edi
lea eax, [ebp - 0x240]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808529
mov eax, dword [ebp - 0x238]
mov dword [0x1812b54], eax
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x270]
push edx
push edi
push 0x18017f0
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808529
push 8
push edi
lea eax, [ebp - 0x270]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808529
push dword [ebp - 0x268]
push 0x1812740
call dword [sym.imp.msvcrt.dll_wcscpy]
mov eax, dword [ebp - 0x210]
pop ecx
pop ecx
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x290]
push edx
push edi
push 0x18017c0
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808529
push 8
push edi
lea eax, [ebp - 0x290]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808529
push dword [ebp - 0x288]
push 0x1812538
call dword [sym.imp.msvcrt.dll_wcscpy]
mov eax, dword [ebp - 0x210]
pop ecx
pop ecx
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x260]
push edx
push edi
push 0x1801790
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808529
push 8
push edi
lea eax, [ebp - 0x260]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov esi, eax
cmp esi, edi
jl 0x1808529
push dword [ebp - 0x258]
push 0x1812948
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
jmp 0x1808536
mov dword [0x1812b60], edi
jmp 0x1808536
mov esi, 0x8000ffff
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x21c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp esi, edi
jl 0x180862f
push 0x1801754
call ebx
lea edx, [ebp - 0x218]
push edx
push edi
push 0x20
mov ebx, eax
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x228]
push eax
call dword [ecx + 0x50]
mov esi, eax
cmp esi, edi
jl 0x1808628
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
lea edx, [ebp - 0x224]
push edx
lea edx, [ebp - 0x21c]
push edx
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x180861c
cmp dword [ebp - 0x224], edi
je 0x180860b
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x280]
push edx
push edi
push 0x1801738
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, edi
jl 0x1808603
push 0x17
push edi
lea eax, [ebp - 0x280]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov eax, dword [ebp - 0x278]
mov dword [0x1812b58], eax
jmp 0x1808610
mov dword [0x1812b60], edi
jmp 0x1808610
mov esi, 0x8000ffff
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x228]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x230]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, 0x80041002
je 0x18086a8
cmp esi, 0x80041003
je 0x18086a1
cmp esi, 0x80041004
je 0x180869a
cmp esi, 0x80041005
je 0x180868c
mov eax, 0x80041006
cmp esi, eax
je 0x1808693
jle 0x18086ad
cmp esi, 0x80041008
jg 0x18086ad
mov esi, 0x80070057
jmp 0x18086be
mov esi, 0x8007000e
jmp 0x18086be
mov esi, 0x80004005
jmp 0x18086be
mov esi, 0x80070005
jmp 0x18086be
mov esi, 0x800704d0
cmp esi, edi
jne 0x18086be
cmp dword [0x1812b60], edi
mov eax, 0x80004005
je 0x18086c0
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.01808747
leave
ret 4