Function at 0x107cdbf
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov eax, 0x10929d6
call fcn.01026ef8
sub esp, 0x38
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
push ebx
push esi
xor esi, esi
cmp eax, esi
push edi
mov dword [ebp - 0x14], ecx
jne 0x107cde3
mov eax, 0x1001ea8
push eax
lea ecx, [ebp - 0x44]
call fcn.0101d708
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
cmp eax, esi
mov dword [ebp - 4], esi
jne 0x107cdfe
mov eax, 0x1001ea8
push eax
lea ecx, [ebp - 0x38]
call fcn.0101d708
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 9
mov dword [eax], esi
call fcn.0107c4ca
mov edi, eax
cmp edi, esi
jl 0x107d2b3
mov ebx, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x34]
push eax
push 0x101376c
push 1
push esi
push 0x101374c
call ebx
mov edi, eax
cmp edi, esi
jl 0x107d2b3
lea eax, [ebp - 0x30]
push eax
push 0x10135fc
push 1
push esi
push 0x10136cc
call ebx
mov edi, eax
cmp edi, esi
jl 0x107d2b3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
cmp eax, esi
jne 0x107ce89
mov eax, 0x1001ea8
push eax
lea ecx, [ebp + 8]
call fcn.0101d708
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
lea edi, [ebp - 0x20]
push edi
push esi
push esi
push esi
push esi
push esi
push esi
push eax
push ecx
mov byte [ebp - 4], 0xa
call dword [edx + 0xc]
push dword [ebp + 8]
mov edi, eax
mov byte [ebp - 4], 9
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp edi, esi
jge 0x107cf36
push dword [ebp - 0x30]
lea ecx, [ebp + 0x10]
call fcn.0107bfbe
mov eax, dword [ebp + 0x10]
cmp eax, esi
mov byte [ebp - 4], 0xb
je 0x107cf25
mov ecx, dword [eax]
push 0x10135fc
push eax
call dword [ecx + 0xc]
test eax, eax
jl 0x107cf25
mov dword [ebp + 8], esi
lea eax, [ebp + 8]
push eax
push esi
mov byte [ebp - 4], 0xc
call dword [sym.imp.OLEAUT32.dll_SetErrorInfo]
test eax, eax
mov eax, dword [ebp + 8]
jl 0x107cf17
cmp eax, esi
je 0x107cf17
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0xa0]
mov ecx, dword [eax]
add edx, 0x30
push edx
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 0xb
cmp eax, esi
je 0x107cf25
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xa0]
mov dword [eax + 0x2c], edi
jmp 0x107d290
push 3
push dword [ebp - 0x20]
call fcn.01024d30
mov edi, eax
cmp edi, esi
jl 0x107d2b3
mov edi, str.Select
push edi
push dword [ebp - 0x38]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
mov ebx, eax
cmp ebx, esi
je 0x107cf8d
push edi
call dword [sym.imp.msvcrt.dll_wcslen]
lea ecx, [ebp - 0x2c]
lea edi, [ebx + eax*2]
mov dword [esp], 0x1012cd4
call fcn.01017edc
push edi
lea ecx, [ebp - 0x2c]
call fcn.0102ff25
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x38]
call fcn.0104ac77
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push edx
push esi
push 0x30
push dword [ebp - 0x38]
push dword [0x10a6d70]
push eax
call dword [ecx + 0x50]
mov edi, eax
cmp edi, esi
jge 0x107d015
push dword [ebp - 0x20]
lea ecx, [ebp + 0x10]
call fcn.0107bfbe
mov eax, dword [ebp + 0x10]
cmp eax, esi
mov byte [ebp - 4], 0xd
je 0x107cf25
mov ecx, dword [eax]
push 0x10135ec
push eax
call dword [ecx + 0xc]
test eax, eax
jl 0x107cf25
mov dword [ebp + 8], esi
lea eax, [ebp + 8]
push eax
push esi
mov byte [ebp - 4], 0xe
call dword [sym.imp.OLEAUT32.dll_SetErrorInfo]
test eax, eax
mov eax, dword [ebp + 8]
jl 0x107d00c
cmp eax, esi
je 0x107d00c
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0xa0]
mov ecx, dword [eax]
add edx, 0x30
push edx
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 0xd
jmp 0x107cf1b
push 3
push dword [ebp - 0x1c]
call fcn.01024d30
mov edi, eax
cmp edi, esi
jl 0x107d2b3
lea eax, [ebp - 0x24]
push eax
push 0x101363c
push 1
push esi
push 0x10136dc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, esi
jl 0x107d2b3
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push 0x10a62b0
push esi
push dword [0x10a6d74]
push eax
call dword [ecx + 0x20]
mov edi, eax
cmp edi, esi
jl 0x107d2b3
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push 0x10a62c0
push esi
push dword [0x10a6d78]
push eax
call dword [ecx + 0x20]
mov edi, eax
cmp edi, esi
jl 0x107d2b3
push str.__xml_version_1.0__encoding_unicode____CIM_CIMVERSION_2.0__DTDVERSION_2.0___DECLARATION__DECLGROUP.WITHPATH_
lea ecx, [ebp - 0x28]
call fcn.01017edc
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
xor ebx, ebx
inc ebx
jmp 0x107d0f9
cmp edi, ebx
je 0x107d1b2
cmp dword [ebp - 0x3c], esi
je 0x107d1b2
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp + 0xc]
push edx
push dword [ebp - 0x24]
push 2
push dword [ebp + 8]
push esi
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jl 0x107d11c
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x28]
call fcn.0107c126
push dword [ebp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp + 8]
cmp eax, esi
mov byte [ebp - 4], 9
je 0x107d0f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
lea edx, [ebp + 8]
push edx
push ebx
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 0x10
call dword [ecx + 0x10]
mov edi, eax
cmp edi, esi
jge 0x107d0a0
jmp 0x107d1a1
push dword [ebp - 0x34]
lea ecx, [ebp - 0x40]
call fcn.0107bfbe
mov eax, dword [ebp - 0x40]
cmp eax, esi
mov byte [ebp - 4], 0x11
je 0x107d182
mov ecx, dword [eax]
push 0x101376c
push eax
call dword [ecx + 0xc]
test eax, eax
jl 0x107d182
mov dword [ebp + 0x10], esi
lea eax, [ebp + 0x10]
push eax
push esi
mov byte [ebp - 4], 0x12
call dword [sym.imp.OLEAUT32.dll_SetErrorInfo]
test eax, eax
mov eax, dword [ebp + 0x10]
jl 0x107d174
cmp eax, esi
je 0x107d174
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0xa0]
mov ecx, dword [eax]
add edx, 0x30
push edx
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp + 0x10]
cmp eax, esi
mov byte [ebp - 4], 0x11
je 0x107d182
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xa0]
mov dword [eax + 0x2c], edi
mov eax, dword [ebp - 0x40]
cmp eax, esi
mov edi, ebx
mov byte [ebp - 4], 0x10
je 0x107d1a1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp + 8]
jmp 0x107d296
push dword [ebp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp + 8]
cmp eax, esi
mov byte [ebp - 4], 9
je 0x107d1cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push str.__DECLGROUP.WITHPATH___DECLARATION___CIM_
lea ecx, [ebp - 0x28]
call fcn.0102ff25
lea eax, [ebp - 0x18]
push eax
mov ebx, 0x100da48
push ebx
push 1
push esi
push 0x1010adc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, esi
jl 0x107d2b3
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0x104]
mov edi, eax
cmp edi, esi
jl 0x107d2b3
cmp word [ebp - 0x10], si
jne 0x107d2a6
push dword [ebp - 0x18]
lea ecx, [ebp + 0x10]
call fcn.0107bfbe
mov eax, dword [ebp + 0x10]
cmp eax, esi
mov byte [ebp - 4], 0x13
je 0x107d280
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0xc]
test eax, eax
jl 0x107d280
mov dword [ebp + 8], esi
lea eax, [ebp + 8]
push eax
push esi
mov byte [ebp - 4], 0x14
call dword [sym.imp.OLEAUT32.dll_SetErrorInfo]
test eax, eax
jl 0x107d26f
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0xa0]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add edx, 0x30
push edx
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp + 8]
cmp eax, esi
mov byte [ebp - 4], 0x13
je 0x107d280
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xa0]
mov dword [eax + 0x2c], 0xb
mov eax, dword [ebp + 0x10]
xor edi, edi
inc edi
cmp eax, esi
mov byte [ebp - 4], 9
je 0x107d2b3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x107d2b3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x18], esi
mov dword [ecx], eax
xor edi, edi
push dword [ebp - 0x2c]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call ebx
mov eax, dword [ebp - 0x30]
cmp eax, esi
mov byte [ebp - 4], 7
je 0x107d2cf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
cmp eax, esi
mov byte [ebp - 4], 6
je 0x107d2e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
cmp eax, esi
mov byte [ebp - 4], 5
je 0x107d2f1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
cmp eax, esi
mov byte [ebp - 4], 4
je 0x107d302
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
cmp eax, esi
mov byte [ebp - 4], 3
je 0x107d313
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x28]
call ebx
mov eax, dword [ebp - 0x18]
cmp eax, esi
mov byte [ebp - 4], 1
je 0x107d329
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x38]
call ebx
push dword [ebp - 0x44]
call ebx
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc