Function at 0x5a6e30
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xac
mov eax, dword [ebp + 8]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, esp
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10], 0xffffffff
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], 0x5a8c80
mov edx, dword fs:[0]
mov dword [ebp - 0x18], edx
mov dword fs:[0], ecx
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x80], 0
cmp dword [eax + 8], 1
je 0x5a6e9b
jmp 0x5a6f6c
mov eax, dword [ebp - 0x84]
add eax, 0xc
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], 0x60c4ca
mov dword [ebp - 0x54], 4
mov dword [ebp - 0x24], 0x60c4ca
mov dword [ebp - 0x20], 4
mov eax, esp
mov dword [eax], 0x60c4ca
call sub.oleaut32.dll_SysAllocString
sub esp, 4
mov dword [ebp - 0x98], eax
mov ecx, eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], str.SELECT__FROM_MSAcpi_ThermalZoneTemperature
mov dword [ebp - 0x48], 0x2c
mov dword [ebp - 0x2c], str.SELECT__FROM_MSAcpi_ThermalZoneTemperature
mov dword [ebp - 0x28], 0x2c
mov eax, esp
mov dword [eax], str.SELECT__FROM_MSAcpi_ThermalZoneTemperature
call sub.oleaut32.dll_SysAllocString
sub esp, 4
mov edx, dword [ebp - 0x98]
mov esi, eax
mov eax, dword [ebp - 0x84]
mov ecx, esi
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x44], esi
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x10], 0
mov eax, esp
lea edi, [ebp - 0x80]
mov dword [eax + 0x14], edi
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0x30
call fcn.00577260
mov dword [ebp - 0x90], eax
jmp 0x5a6f7d
mov eax, dword [ebp - 0x8c]
mov dword [eax], 2
jmp 0x5a7064
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x40], eax
mov eax, esp
mov dword [eax], ecx
call sub.oleaut32.dll_SysFreeString
sub esp, 4
mov ecx, dword [ebp - 0x94]
mov eax, esp
mov dword [eax], ecx
call sub.oleaut32.dll_SysFreeString
sub esp, 4
mov ecx, dword [ebp - 0x90]
mov eax, esp
mov dword [eax], ecx
call fcn.0057e4c0
mov byte [ebp - 0x9d], al
jmp 0x5a6fc1
mov al, byte [ebp - 0x9d]
test al, 1
jne 0x5a6ff5
jmp 0x5a6fcd
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], 1
add ecx, 0x10
mov dword [ebp - 0x10], 1
mov eax, esp
mov dword [eax], ecx
call fcn.0057e150
jmp 0x5a7003
mov eax, dword [ebp - 0x8c]
mov dword [eax], 2
jmp 0x5a7064
mov eax, dword [ebp - 0x84]
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x78]
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
lea ecx, [ebp - 0x74]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x18
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [ebp - 0x8c]
lea eax, [ebp - 0x74]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x18
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x18]
mov dword fs:[0], ecx
add esp, 0xac
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x10], 0xffffffff
mov dword [esp], eax
call fcn.0057d3c0
jmp 0x5a7049