Function at 0x1808b89
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x6b0
mov eax, dword [0x180b044]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x624], eax
mov eax, dword [ebp + 0x10]
xor edi, edi
xor ebx, ebx
push 6
inc edi
push ebx
mov dword [ebp - 0x628], eax
mov dword [0x180b064], edi
mov dword [0x180b068], ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, ebx
jge 0x1808bdf
cmp eax, 0x80010106
jne 0x1809114
lea eax, [ebp - 0x648]
push eax
push 0x1809254
push edi
push ebx
push 0x1809264
mov dword [ebp - 0x648], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jl 0x1809114
mov dword [ebp - 0x630], ebx
mov dword [ebp - 0x62c], ebx
mov dword [ebp - 0x638], ebx
cmp esi, ebx
jne 0x1808c21
mov esi, 0x1809250
push esi
push 0x1809230
mov esi, 0x104
lea eax, [ebp - 0x414]
push esi
push eax
call fcn.01801843
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
add esp, 0x10
lea eax, [ebp - 0x414]
push eax
call edi
mov dword [ebp - 0x63c], eax
cmp eax, ebx
je 0x1808cef
cmp dword [ebp - 0x624], ebx
je 0x1808cd5
push esi
lea eax, [ebp - 0x61c]
push eax
push esi
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x624]
call dword [sym.imp.credui.dll_CredUIParseUserNameW]
cmp eax, ebx
jle 0x1808c8b
and eax, 0xffff
or eax, 0x80070000
cmp eax, ebx
mov dword [ebp - 0x620], eax
jl 0x1808cf9
lea eax, [ebp - 0x61c]
push eax
call edi
mov dword [ebp - 0x630], eax
lea eax, [ebp - 0x20c]
push eax
call edi
push dword [ebp - 0x624]
mov dword [ebp - 0x62c], eax
call edi
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x630], ebx
je 0x1808cef
cmp dword [ebp - 0x62c], ebx
je 0x1808cef
cmp eax, ebx
je 0x1808cef
push dword [ebp - 0x628]
call edi
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x628], ebx
je 0x1808d2d
cmp eax, ebx
jne 0x1808d2d
mov dword [ebp - 0x620], 0x8007000e
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ebx
call esi
push dword [ebp - 0x62c]
call esi
push dword [ebp - 0x638]
call esi
push dword [ebp - 0x630]
call esi
push dword [ebp - 0x63c]
call esi
mov eax, dword [ebp - 0x620]
jmp 0x1809114
mov eax, dword [ebp - 0x648]
mov ecx, dword [eax]
lea edx, [ebp - 0x640]
push edx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x634]
push dword [ebp - 0x638]
push dword [ebp - 0x63c]
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, ebx
jl 0x1809079
push dword [ebp - 0x634]
push dword [ebp - 0x62c]
push dword [ebp - 0x630]
push dword [ebp - 0x640]
call fcn.01808aec
mov esi, eax
cmp esi, ebx
jl 0x1809079
push 0x1809228
mov dword [ebp - 0x624], ebx
call edi
push 0x18091e0
mov dword [ebp - 0x64c], eax
call edi
lea edx, [ebp - 0x624]
push edx
push ebx
push 0x20
mov dword [ebp - 0x644], eax
push dword [ebp - 0x644]
mov eax, dword [ebp - 0x640]
push dword [ebp - 0x64c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x50]
mov esi, eax
cmp esi, ebx
jl 0x1809055
push dword [ebp - 0x634]
push dword [ebp - 0x62c]
push dword [ebp - 0x630]
push dword [ebp - 0x624]
call fcn.01808aec
mov esi, eax
cmp esi, ebx
jl 0x1809055
mov eax, dword [ebp - 0x624]
mov ecx, dword [eax]
lea edx, [ebp - 0x650]
push edx
lea edx, [ebp - 0x620]
push edx
xor edi, edi
inc edi
push edi
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, ebx
jl 0x1809049
cmp dword [ebp - 0x650], ebx
je 0x1809038
mov eax, dword [ebp - 0x620]
push ebx
lea edx, [ebp - 0x628]
push edx
lea edx, [ebp - 0x6b0]
push edx
push ebx
push 0x18091d0
mov dword [0x180b068], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, ebx
jl 0x1809030
mov edi, dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
push 0x17
push ebx
lea eax, [ebp - 0x6b0]
push eax
push eax
call edi
mov esi, eax
cmp esi, ebx
jl 0x1809030
mov eax, dword [ebp - 0x6a8]
push ebx
lea edx, [ebp - 0x628]
push edx
lea edx, [ebp - 0x680]
push edx
push ebx
mov dword [0x180b05c], eax
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax]
push 0x18091c0
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, ebx
jl 0x1809030
push 8
push ebx
lea eax, [ebp - 0x680]
push eax
push eax
call edi
mov esi, eax
cmp esi, ebx
jl 0x1809030
push dword [ebp - 0x678]
push 0x104
push 0x180b338
call fcn.01801e5f
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0x628]
push edx
lea edx, [ebp - 0x660]
push edx
push ebx
push 0x18091a0
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, ebx
jl 0x1809030
xor eax, eax
inc eax
cmp ax, word [ebp - 0x660]
je 0x1808f39
push 0x17
push ebx
lea eax, [ebp - 0x660]
push eax
push eax
call edi
mov esi, eax
cmp esi, ebx
jl 0x1809030
mov eax, dword [ebp - 0x658]
mov dword [0x180b060], eax
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0x628]
push edx
lea edx, [ebp - 0x690]
push edx
push ebx
push 0x1809188
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, ebx
jl 0x1809030
push 8
push ebx
lea eax, [ebp - 0x690]
push eax
push eax
call edi
mov esi, eax
cmp esi, ebx
jl 0x1809030
push dword [ebp - 0x688]
push 0x104
push 0x180b748
call fcn.01801e5f
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0x628]
push edx
lea edx, [ebp - 0x670]
push edx
push ebx
push 0x1809158
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, ebx
jl 0x1809030
push 8
push ebx
lea eax, [ebp - 0x670]
push eax
push eax
call edi
mov esi, eax
cmp esi, ebx
jl 0x1809030
push dword [ebp - 0x668]
push 0x104
push 0x180b540
call fcn.01801e5f
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0x628]
push edx
lea edx, [ebp - 0x6a0]
push edx
push ebx
push 0x1809128
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp esi, ebx
jl 0x1809030
push 8
push ebx
lea eax, [ebp - 0x6a0]
push eax
push eax
call edi
mov esi, eax
cmp esi, ebx
jl 0x1809030
push dword [ebp - 0x698]
push 0x104
push 0x180b950
call fcn.01801e5f
jmp 0x180903d
mov dword [0x180b068], ebx
jmp 0x180903d
mov esi, 0x8000ffff
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x624]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x644]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
push dword [ebp - 0x64c]
call edi
mov eax, dword [ebp - 0x640]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x180907f
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x634]
call edi
push dword [ebp - 0x62c]
call edi
push dword [ebp - 0x638]
call edi
push dword [ebp - 0x630]
call edi
push dword [ebp - 0x63c]
call edi
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, 0x80041002
je 0x18090fc
cmp esi, 0x80041003
je 0x18090f5
cmp esi, 0x80041004
je 0x18090ee
cmp esi, 0x80041005
je 0x18090e0
mov eax, 0x80041006
cmp esi, eax
je 0x18090e7
jle 0x1809101
cmp esi, 0x80041008
jg 0x1809101
mov esi, 0x80070057
jmp 0x1809112
mov esi, 0x8007000e
jmp 0x1809112
mov esi, 0x80004005
jmp 0x1809112
mov esi, 0x80070005
jmp 0x1809112
mov esi, 0x800704d0
cmp esi, ebx
jne 0x1809112
mov eax, 0x80004005
cmp dword [0x180b068], ebx
je 0x1809114
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01801579
leave
ret 0xc