Function at 0x6b85c8
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x74
push 0
push 0
dec ecx
jne 0x6b85d0
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x6b9374
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebx + 0x574]
mov edx, dword [0x6b5624]
call fcn.0040da48
push 0x18
lea eax, [ebx + 0x574]
mov ecx, 1
mov edx, dword [0x6b5624]
call fcn.0040d924
add esp, 4
lea edx, [ebp - 0x7c]
mov eax, 0x6b9394
call fcn.00542c9c
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x18]
call fcn.0043f09c
push 0
push 0
push 0x6b93d8
push 0x6b93fc
push 0x6b9410
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00438a5c
add esp, 0x1c
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0x28]
call fcn.0043f18c
push 0x20
push 0x6b9434
push 0x6b9448
push 0x6b9484
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00438a5c
add esp, 0x18
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0x38]
call fcn.0043f18c
push 0x6b9494
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xa0]
call fcn.0043eb54
mov edx, dword [ebp - 0xa0]
lea eax, [ebp - 4]
mov ecx, 0x6b94a0
call fcn.0040f270
jmp 0x6b8dca
push 0x6b94b0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xd0]
call fcn.00441d64
lea edx, [ebp - 0xd0]
pop eax
call fcn.00441d78
je 0x6b8dca
push 0x6b94b8
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xf0]
call fcn.00441d64
lea edx, [ebp - 0xf0]
pop eax
call fcn.00441d78
je 0x6b8dca
push 0x6b94c4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x110]
call fcn.00441d64
lea edx, [ebp - 0x110]
pop eax
call fcn.00441d78
je 0x6b8dca
push 0x6b94d4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x130]
call fcn.00441d64
lea edx, [ebp - 0x130]
pop eax
call fcn.00441d78
je 0x6b8dca
push 7
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x144]
lea eax, [ebp - 0x134]
call fcn.0043e7ac
mov eax, dword [ebp - 0x134]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
lea eax, [edx + eax*4]
mov ecx, 1
mov edx, dword [0x6b55f8]
call fcn.0040d924
add esp, 4
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x158]
lea eax, [ebp - 0x148]
call fcn.0043e7ac
mov eax, dword [ebp - 0x148]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
push eax
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x168]
pop eax
call fcn.0043e7ac
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x17c]
lea eax, [ebp - 0x16c]
call fcn.0043e7ac
mov eax, dword [ebp - 0x16c]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
push 0x6b94f0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x18c]
pop eax
call fcn.0043e7ac
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x190]
call fcn.0043e7ac
mov eax, dword [ebp - 0x190]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 8
push eax
push 0x6b94b0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1b0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1b0]
pop eax
call fcn.0043e7ac
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x1b4]
call fcn.0043e7ac
mov eax, dword [ebp - 0x1b4]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0xc
push eax
push 0
push 0x400
push 0
push 0x400
push 0
push 0x400
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1dc]
lea eax, [ebp - 0x1cc]
call fcn.0043e7ac
mov eax, dword [ebp - 0x1cc]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 8]
call fcn.00427328
call fcn.0040d140
call fcn.0040d140
call fcn.0040d140
push edx
push eax
lea eax, [ebp - 0x1c8]
call fcn.00426f44
mov edx, dword [ebp - 0x1c8]
pop eax
call fcn.0040b0bc
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x1f0]
lea eax, [ebp - 0x1e0]
call fcn.0043e7ac
mov eax, dword [ebp - 0x1e0]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x10
push eax
push 0x6b94c4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x200]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x200]
pop eax
call fcn.0043e7ac
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x214]
lea eax, [ebp - 0x204]
call fcn.0043e7ac
mov eax, dword [ebp - 0x204]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x18
push eax
push 0x6b94d4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x224]
pop eax
call fcn.0043e7ac
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x238]
lea eax, [ebp - 0x228]
call fcn.0043e7ac
mov eax, dword [ebp - 0x228]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
movzx eax, byte [0x6b94fc]
push eax
lea eax, [ebp - 0x23c]
push eax
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x240]
call fcn.0043e7ac
mov eax, dword [ebp - 0x240]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
mov ecx, 0x6b950c
mov edx, 0x6b951c
call fcn.0042f6e8
mov edx, dword [ebp - 0x23c]
pop eax
call fcn.0040b0bc
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x264]
lea eax, [ebp - 0x254]
call fcn.0043e7ac
mov eax, dword [ebp - 0x254]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
movzx eax, byte [0x6b94fc]
push eax
lea eax, [ebp - 0x268]
push eax
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x27c]
lea eax, [ebp - 0x26c]
call fcn.0043e7ac
mov eax, dword [ebp - 0x26c]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
xor ecx, ecx
mov edx, 0x6b9530
call fcn.0042f6e8
mov edx, dword [ebp - 0x268]
pop eax
call fcn.0040b0bc
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x280]
call fcn.0043e7ac
mov eax, dword [ebp - 0x280]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
push eax
movzx eax, byte [0x6b94fc]
push eax
lea eax, [ebp - 0x294]
push eax
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x2a8]
lea eax, [ebp - 0x298]
call fcn.0043e7ac
mov eax, dword [ebp - 0x298]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
xor ecx, ecx
mov edx, 0x6b9560
call fcn.0042f6e8
mov edx, dword [ebp - 0x294]
pop eax
call fcn.0040b0bc
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x2bc]
lea eax, [ebp - 0x2ac]
call fcn.0043e7ac
mov eax, dword [ebp - 0x2ac]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov edx, dword [eax + 0x18]
mov ecx, 1
mov eax, 0x6b9584
call fcn.0040bd50
test eax, eax
jle 0x6b8db7
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x2d0]
lea eax, [ebp - 0x2c0]
call fcn.0043e7ac
mov eax, dword [ebp - 0x2c0]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 4
mov edx, 0x6b95c8
call fcn.0040b0bc
push 0x6b94e4
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x2e4]
lea eax, [ebp - 0x2d4]
call fcn.0043e7ac
mov eax, dword [ebp - 0x2d4]
call fcn.004272b4
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x10
mov edx, 0x6b95f8
call fcn.0040b0bc
lea eax, [ebp - 0x58]
call fcn.00438960
lea eax, [ebp - 0x48]
lea edx, [ebp - 0x58]
call fcn.0043f18c
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x6b86d6
push 0x20
push 0x6b9434
push 0x6b9638
push 0x6b9484
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.00438a5c
add esp, 0x18
lea edx, [ebp - 0x2f4]
lea eax, [ebp - 0x38]
call fcn.0043f18c
push 0x6b9494
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x308]
lea eax, [ebp - 0x2f8]
call fcn.0043eb54
mov edx, dword [ebp - 0x2f8]
lea eax, [ebp - 4]
mov ecx, 0x6b94a0
call fcn.0040f270
jmp 0x6b9099
push 0x6b94b0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x318]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x328]
call fcn.00441d64
lea edx, [ebp - 0x328]
pop eax
call fcn.00441d78
je 0x6b9099
push 0x6b9678
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x338]
push eax
call fcn.00438a5c
add esp, 0xc
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x348]
mov edx, 0x6b9694
call fcn.0043f044
lea edx, [ebp - 0x348]
pop eax
call fcn.00441d78
je 0x6b9099
push 0
push 0x6b96a0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x35c]
push eax
call fcn.00438a5c
add esp, 0x10
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x34c]
call fcn.0043e7ac
mov eax, dword [ebp - 0x34c]
movzx esi, word [eax]
mov eax, esi
call fcn.006b809c
cmp eax, 0x3e8
je 0x6b9099
mov eax, esi
call fcn.006b809c
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x70], eax
mov edi, dword [ebp - 0x70]
test edi, edi
je 0x6b8f3d
sub edi, 4
mov edi, dword [edi]
test edi, edi
jne 0x6b8f7e
mov eax, esi
call fcn.006b809c
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x14
push eax
push 0x6b94f0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x36c]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x36c]
pop eax
call fcn.0043e7ac
jmp 0x6b9086
mov eax, esi
call fcn.006b809c
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x6b8fab
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jle 0x6b9086
mov eax, esi
call fcn.006b809c
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x14]
push eax
push 0x6b94f0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x380]
lea eax, [ebp - 0x370]
call fcn.0043e7ac
mov eax, dword [ebp - 0x370]
mov ecx, 1
pop edx
call fcn.0040bd50
test eax, eax
jne 0x6b9086
mov eax, esi
call fcn.006b809c
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
add eax, 0x14
push eax
mov eax, esi
call fcn.006b809c
mov edx, dword [ebx + 0x574]
mov eax, dword [edx + eax*4]
mov edx, dword [eax + 0x14]
lea eax, [ebp - 0x394]
mov ecx, 0x6b950c
call fcn.0040ba84
mov edx, dword [ebp - 0x394]
lea eax, [ebp - 0x390]
call fcn.0043f044
lea eax, [ebp - 0x390]
push eax
push 0x6b94f0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x3a4]
push eax
call fcn.00438a5c
add esp, 0xc
lea edx, [ebp - 0x3a4]
pop eax
call fcn.00441d6c
lea edx, [ebp - 0x390]
pop eax
call fcn.0043e7ac
lea eax, [ebp - 0x68]
call fcn.00438960
lea eax, [ebp - 0x48]
lea edx, [ebp - 0x68]
call fcn.0043f18c
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x6b8e58
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6b937e
lea eax, [ebp - 0x3a4]
call fcn.00438974
lea eax, [ebp - 0x394]
call fcn.0040acdc
lea eax, [ebp - 0x390]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x370]
call fcn.0040acdc
lea eax, [ebp - 0x36c]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x34c]
call fcn.0040acdc
lea eax, [ebp - 0x348]
mov edx, dword [0x401300]
mov ecx, 5
call fcn.0040c438
lea eax, [ebp - 0x2f8]
call fcn.0040f22c
lea eax, [ebp - 0x2f4]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x2d4]
call fcn.0040acdc
lea eax, [ebp - 0x2d0]
call fcn.00438974
lea eax, [ebp - 0x2c0]
call fcn.0040acdc
lea eax, [ebp - 0x2bc]
call fcn.00438974
lea eax, [ebp - 0x2ac]
call fcn.0040acdc
lea eax, [ebp - 0x2a8]
call fcn.00438974
lea eax, [ebp - 0x298]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x290]
call fcn.00438974
lea eax, [ebp - 0x280]
call fcn.0040acdc
lea eax, [ebp - 0x27c]
call fcn.00438974
lea eax, [ebp - 0x26c]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x264]
call fcn.00438974
lea eax, [ebp - 0x254]
call fcn.0040acdc
lea eax, [ebp - 0x250]
call fcn.00438974
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x238]
call fcn.00438974
lea eax, [ebp - 0x228]
call fcn.0040acdc
lea eax, [ebp - 0x224]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x204]
call fcn.0040acdc
lea eax, [ebp - 0x200]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x1e0]
call fcn.0040acdc
lea eax, [ebp - 0x1dc]
call fcn.00438974
lea eax, [ebp - 0x1cc]
mov edx, 2
call fcn.0040ad3c
lea eax, [ebp - 0x1c4]
call fcn.00438974
lea eax, [ebp - 0x1b4]
call fcn.0040acdc
lea eax, [ebp - 0x1b0]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x190]
call fcn.0040acdc
lea eax, [ebp - 0x18c]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x16c]
call fcn.0040acdc
lea eax, [ebp - 0x168]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x148]
call fcn.0040acdc
lea eax, [ebp - 0x144]
call fcn.00438974
lea eax, [ebp - 0x134]
call fcn.0040acdc
lea eax, [ebp - 0x130]
mov edx, dword [0x401300]
mov ecx, 9
call fcn.0040c438
lea eax, [ebp - 0xa0]
call fcn.0040f22c
lea eax, [ebp - 0x9c]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x7c]
call fcn.0040f22c
lea eax, [ebp - 0x68]
mov edx, dword [0x401300]
mov ecx, 2
call fcn.0040c438
lea eax, [ebp - 0x48]
mov edx, dword [0x401310]
mov ecx, 4
call fcn.0040c438
lea eax, [ebp - 4]
call fcn.0040f22c
ret