Function at 0x6b74fc
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x68
push 0
push 0
dec ecx
jne 0x6b7504
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x6b81f4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebx + 0x574]
mov edx, dword [0x6b4958]
call fcn.0040da48
push 0x18
lea eax, [ebx + 0x574]
mov ecx, 1
mov edx, dword [0x6b4958]
call fcn.0040d924
add esp, 4
lea edx, [ebp - 0x7c]
mov eax, 0x6b8214
call fcn.00542c9c
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x18]
call fcn.0043f09c
push 0
push 0
push 0x6b8258
push 0x6b827c
push 0x6b8290
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00438a5c
add esp, 0x1c
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0x28]
call fcn.0043f18c
push 0x20
push 0x6b82b4
push 0x6b82c8
push 0x6b8304
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00438a5c
add esp, 0x18
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0x38]
call fcn.0043f18c
push 0x6b8314
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xa0]
call fcn.0043eb54
mov edx, dword [ebp - 0xa0]
lea eax, [ebp - 4]
mov ecx, 0x6b8320
call fcn.0040f270
jmp 0x6b7c4a
push 0x6b8330
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xd0]
call fcn.00441d64
lea edx, [ebp - 0xd0]
pop eax
call fcn.00441d78
je 0x6b7c4a
push 7
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0xe4]
lea eax, [ebp - 0xd4]
call fcn.0043e7ac
mov eax, dword [ebp - 0xd4]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
lea eax, [edx + eax*4]
mov ecx, 1
mov edx, dword [0x6b492c]
call fcn.0040d924
add esp, 4
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0xe8]
call fcn.0043e7ac
mov eax, dword [ebp - 0xe8]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
push eax
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x108]
pop eax
call fcn.0043e7ac
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x11c]
lea eax, [ebp - 0x10c]
call fcn.0043e7ac
mov eax, dword [ebp - 0x10c]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
push 0x6b8344
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x12c]
pop eax
call fcn.0043e7ac
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x130]
call fcn.0043e7ac
mov eax, dword [ebp - 0x130]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 8
push eax
push 0x6b8330
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x150]
pop eax
call fcn.0043e7ac
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x164]
lea eax, [ebp - 0x154]
call fcn.0043e7ac
mov eax, dword [ebp - 0x154]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0xc
push eax
push 0
push 0x400
push 0
push 0x400
push 0
push 0x400
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x17c]
lea eax, [ebp - 0x16c]
call fcn.0043e7ac
mov eax, dword [ebp - 0x16c]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 8]
call fcn.00427328
call fcn.0040d140
call fcn.0040d140
call fcn.0040d140
push edx
push eax
lea eax, [ebp - 0x168]
call fcn.00426f44
mov edx, dword [ebp - 0x168]
pop eax
call fcn.0040b0bc
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x180]
call fcn.0043e7ac
mov eax, dword [ebp - 0x180]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x10
push eax
push 0x6b8350
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1a0]
pop eax
call fcn.0043e7ac
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x1a4]
call fcn.0043e7ac
mov eax, dword [ebp - 0x1a4]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x18
push eax
push 0x6b8360
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1c4]
pop eax
call fcn.0043e7ac
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1d8]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1d8]
lea eax, [ebp - 0x1c8]
call fcn.0043e7ac
mov eax, dword [ebp - 0x1c8]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
movzx eax, byte [0x6b8370]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1f0]
lea eax, [ebp - 0x1e0]
call fcn.0043e7ac
mov eax, dword [ebp - 0x1e0]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
mov ecx, 0x6b8380
mov edx, 0x6b8390
call fcn.0042f6e8
mov edx, dword [ebp - 0x1dc]
pop eax
call fcn.0040b0bc
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x204]
lea eax, [ebp - 0x1f4]
call fcn.0043e7ac
mov eax, dword [ebp - 0x1f4]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
movzx eax, byte [0x6b8370]
push eax
lea eax, [ebp - 0x208]
push eax
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x21c]
lea eax, [ebp - 0x20c]
call fcn.0043e7ac
mov eax, dword [ebp - 0x20c]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
xor ecx, ecx
mov edx, 0x6b83a4
call fcn.0042f6e8
mov edx, dword [ebp - 0x208]
pop eax
call fcn.0040b0bc
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x230]
lea eax, [ebp - 0x220]
call fcn.0043e7ac
mov eax, dword [ebp - 0x220]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
movzx eax, byte [0x6b8370]
push eax
lea eax, [ebp - 0x234]
push eax
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x238]
call fcn.0043e7ac
mov eax, dword [ebp - 0x238]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
xor ecx, ecx
mov edx, 0x6b83d4
call fcn.0042f6e8
mov edx, dword [ebp - 0x234]
pop eax
call fcn.0040b0bc
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x25c]
lea eax, [ebp - 0x24c]
call fcn.0043e7ac
mov eax, dword [ebp - 0x24c]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov edx, dword [eax + 0x18]
mov ecx, 1
mov eax, 0x6b83f8
call fcn.0040bd50
test eax, eax
jle 0x6b7c37
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x270]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x270]
lea eax, [ebp - 0x260]
call fcn.0043e7ac
mov eax, dword [ebp - 0x260]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
mov edx, 0x6b843c
call fcn.0040b0bc
push 0x6b8338
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x284]
lea eax, [ebp - 0x274]
call fcn.0043e7ac
mov eax, dword [ebp - 0x274]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x10
mov edx, 0x6b846c
call fcn.0040b0bc
lea eax, [ebp - 0x58]
call fcn.00438960
lea eax, [ebp - 0x48]
lea edx, [ebp - 0x58]
call fcn.0043f18c
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x6b760a
push 0x20
push 0x6b82b4
push 0x6b84ac
push 0x6b8304
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.00438a5c
add esp, 0x18
lea edx, [ebp - 0x294]
lea eax, [ebp - 0x38]
call fcn.0043f18c
push 0x6b8314
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x2a8]
lea eax, [ebp - 0x298]
call fcn.0043eb54
mov edx, dword [ebp - 0x298]
lea eax, [ebp - 4]
mov ecx, 0x6b8320
call fcn.0040f270
jmp 0x6b7f19
push 0x6b8330
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x2c8]
call fcn.00441d64
lea edx, [ebp - 0x2c8]
pop eax
call fcn.00441d78
je 0x6b7f19
push 0x6b84ec
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2d8]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x2e8]
mov edx, 0x6b8508
call fcn.0043f044
lea edx, [ebp - 0x2e8]
pop eax
call fcn.00441d78
je 0x6b7f19
push 0
push 0x6b8514
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.00438a5c
add esp, 0x10
lea edx, [ebp - 0x2fc]
lea eax, [ebp - 0x2ec]
call fcn.0043e7ac
mov eax, dword [ebp - 0x2ec]
movzx esi, word [eax]
mov eax, esi
call fcn.006b7154
cmp eax, 0x3e8
je 0x6b7f19
mov eax, esi
call fcn.006b7154
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x70], eax
mov edi, dword [ebp - 0x70]
test edi, edi
je 0x6b7dbd
sub edi, 4
mov edi, dword [edi]
test edi, edi
jne 0x6b7dfe
mov eax, esi
call fcn.006b7154
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x14
push eax
push 0x6b8344
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x30c]
pop eax
call fcn.0043e7ac
jmp 0x6b7f06
mov eax, esi
call fcn.006b7154
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x6b7e2b
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jle 0x6b7f06
mov eax, esi
call fcn.006b7154
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x14]
push eax
push 0x6b8344
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x320]
lea eax, [ebp - 0x310]
call fcn.0043e7ac
mov eax, dword [ebp - 0x310]
mov ecx, 1
pop edx
call fcn.0040bd50
test eax, eax
jne 0x6b7f06
mov eax, esi
call fcn.006b7154
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x14
push eax
mov eax, esi
call fcn.006b7154
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov edx, dword [eax + 0x14]
lea eax, [ebp - 0x334]
mov ecx, 0x6b8380
call fcn.0040ba84
mov edx, dword [ebp - 0x334]
lea eax, [ebp - 0x330]
call fcn.0043f044
lea eax, [ebp - 0x330]
push eax
push 0x6b8344
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x344]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x344]
pop eax
call fcn.00441d6c
lea edx, [ebp - 0x330]
pop eax
call fcn.0043e7ac
lea eax, [ebp - 0x68]
call fcn.00438960
lea eax, [ebp - 0x48]
lea edx, [ebp - 0x68]
call fcn.0043f18c
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x6b7cd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6b81fe
lea eax, [ebp - 0x344]
call fcn.00438974
lea eax, [ebp - 0x334]
call fcn.0040acdc
lea eax, [ebp - 0x330]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x310]
call fcn.0040acdc
lea eax, [ebp - 0x30c]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x2ec]
call fcn.0040acdc
lea eax, [ebp - 0x2e8]
mov edx, dword [0x401300]
mov ecx, 5
call fcn.0040c438
lea eax, [ebp - 0x298]
call fcn.0040f22c
lea eax, [ebp - 0x294]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x274]
call fcn.0040acdc
lea eax, [ebp - 0x270]
call fcn.00438974
lea eax, [ebp - 0x260]
call fcn.0040acdc
lea eax, [ebp - 0x25c]
call fcn.00438974
lea eax, [ebp - 0x24c]
call fcn.0040acdc
lea eax, [ebp - 0x248]
call fcn.00438974
lea eax, [ebp - 0x238]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x230]
call fcn.00438974
lea eax, [ebp - 0x220]
call fcn.0040acdc
lea eax, [ebp - 0x21c]
call fcn.00438974
lea eax, [ebp - 0x20c]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x204]
call fcn.00438974
lea eax, [ebp - 0x1f4]
call fcn.0040acdc
lea eax, [ebp - 0x1f0]
call fcn.00438974
lea eax, [ebp - 0x1e0]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x1d8]
call fcn.00438974
lea eax, [ebp - 0x1c8]
call fcn.0040acdc
lea eax, [ebp - 0x1c4]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x1a4]
call fcn.0040acdc
lea eax, [ebp - 0x1a0]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x180]
call fcn.0040acdc
lea eax, [ebp - 0x17c]
call fcn.00438974
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x164]
call fcn.00438974
lea eax, [ebp - 0x154]
call fcn.0040acdc
lea eax, [ebp - 0x150]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x130]
call fcn.0040acdc
lea eax, [ebp - 0x12c]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x10c]
call fcn.0040acdc
lea eax, [ebp - 0x108]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0xe8]
call fcn.0040acdc
lea eax, [ebp - 0xe4]
call fcn.00438974
lea eax, [ebp - 0xd4]
call fcn.0040acdc
lea eax, [ebp - 0xd0]
mov edx, dword [0x401300]
mov ecx, 3
call fcn.0040c438
lea eax, [ebp - 0xa0]
call fcn.0040f22c
lea eax, [ebp - 0x9c]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x7c]
call fcn.0040f22c
lea eax, [ebp - 0x68]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x48]
mov edx, dword [0x401310]
mov ecx, 4
call fcn.0040c438
lea eax, [ebp - 4]
call fcn.0040f22c
ret