Function at 0x682600
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push 0xffffffffffffffff
push 0x775359
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x7c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x94]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x18], ebx
push 0x161b
mov dword [esp + 0x24], 0x161c
call fcn.00606650
mov ecx, eax
call fcn.00606640
mov ecx, eax
call fcn.005fca70
cmp dword [ebx + 8], 0
lea edi, [ebx + 8]
mov dword [esp + 0x9c], 0
je 0x682679
mov bl, 1
jmp 0x682823
push edi
push 0x7ab524
push 1
push 0
push 0x7ab514
xor bl, bl
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x682806
push 0
push str.Connecting_to_WMI_took_longer_than_expected__2_._n
push 0
push 0x2710
lea ecx, [esp + 0x50]
call fcn.00683fd0
push 0xc
mov byte [esp + 0xa0], 1
call fcn.006f7558
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov byte [esp + 0x9c], 2
test esi, esi
je 0x6826fc
push str.ROOTCIMV2
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x6826fe
push 0x8007000e
call fcn.007333f0
xor esi, esi
mov byte [esp + 0x9c], 1
mov dword [esp + 0x1c], esi
test esi, esi
jne 0x682718
push 0x8007000e
call fcn.007333f0
mov edx, dword [esp + 0x18]
mov ecx, dword [edi]
add edx, 0xc
push edx
push 0
push 0
mov eax, dword [ecx]
push 0x80
push 0
push 0
push 0
push dword [esi]
mov byte [esp + 0xbc], 3
push ecx
mov dword [esp + 0x38], edx
call dword [eax + 0xc]
mov ebp, eax
mov byte [esp + 0x9c], 1
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
jne 0x68278f
mov ecx, dword [esi]
test ecx, ecx
je 0x68276f
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x682786
push eax
call fcn.006f8afe
add esp, 4
mov dword [esi + 4], 0
push esi
call fcn.006f75a9
add esp, 4
lea ecx, [esp + 0x40]
call fcn.006841b0
test ebp, ebp
jns 0x68286d
lea eax, [esp + 0x24]
push ebp
push eax
call fcn.006066c0
add esp, 8
add eax, 4
mov byte [esp + 0x9c], 4
cmp dword [eax + 0x14], 0x10
jb 0x6827c1
mov eax, dword [eax]
push eax
push 0x1614
call fcn.00606650
mov ecx, eax
call fcn.00606640
mov ecx, eax
call fcn.005fcaa0
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x24], vtable.wbs::StringBase_char_.0
jb 0x6827f5
push dword [esp + 0x28]
call fcn.006f75a9
add esp, 4
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0
call fcn.006840d0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x682817
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [edi]
test ecx, ecx
je 0x682823
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push 0x161c
mov dword [esp + 0xa0], 0xffffffff
call fcn.00606650
mov ecx, eax
call fcn.00606640
mov ecx, eax
call fcn.005fca70
mov al, bl
mov ecx, dword [esp + 0x94]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x7c]
xor ecx, esp
call fcn.006f7ca4
add esp, 0x8c
ret
mov eax, dword [esp + 0x14]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [eax]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x6828fa
push eax
lea eax, [esp + 0x28]
push eax
call fcn.006066c0
add esp, 8
add eax, 4
mov byte [esp + 0x9c], 5
cmp dword [eax + 0x14], 0x10
jb 0x6828ac
mov eax, dword [eax]
push eax
push 0x1615
call fcn.00606650
mov ecx, eax
call fcn.00606640
mov ecx, eax
call fcn.005fcaa0
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x24], vtable.wbs::StringBase_char_.0
jb 0x6828e0
push dword [esp + 0x28]
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
jmp 0x6827f5
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0
mov bl, 1
call fcn.006840d0
jmp 0x682823