Function at 0x10008dc8
Capabilities:
Connect to wmi namespace via wbemlocator
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1008109e
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x100b02c0]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
xor ebx, ebx
push ebx
push ebx
mov byte [esp + 0x1b], bl
call dword [sym.imp.ole32.dll_CoInitializeEx]
lea eax, [esp + 0x18]
push eax
push 0x1008f9b4
xor esi, esi
inc esi
push esi
push ebx
push 0x1008fa84
mov dword [esp + 0x2c], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jl 0x1000915f
cmp dword [esp + 0x18], ebx
je 0x1000915f
lea eax, [esp + 0x4c]
push eax
mov ecx, 0x10099d04
mov dword [esp + 0x18], ebx
call fcn.10002a34
lea eax, [esp + 0x50]
push eax
mov ecx, 0x10099d2c
mov dword [esp + 0x84], ebx
call fcn.10002a34
lea eax, [esp + 0x4c]
mov dword [esp + 0x80], esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x18]
mov esi, dword [eax]
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x30]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
add esi, 0xc
call fcn.1000a965
push eax
push dword [esp + 0x38]
call dword [esi]
cmp eax, ebx
jl 0x10009122
cmp dword [esp + 0x14], ebx
je 0x10009122
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push dword [esp + 0x30]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
lea eax, [esp + 0x3c]
push eax
mov ecx, 0x10099d58
call fcn.10002a34
push str.SELECT__FROM_AntiVirusProduct
mov byte [esp + 0x84], 2
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
lea ecx, [esp + 0x38]
push ecx
mov ecx, eax
call fcn.10002a34
mov byte [esp + 0x80], 3
mov eax, dword [esp + 0x38]
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [esp + 0x1c], ebx
push dword [eax - 0xc]
push eax
call esi
mov edi, eax
cmp edi, ebx
je 0x1000917c
mov eax, dword [esp + 0x3c]
push dword [eax - 0xc]
push eax
call esi
cmp eax, ebx
je 0x1000917c
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea esi, [esp + 0x1c]
push esi
push ebx
push 0x20
push edi
push eax
push ecx
call dword [edx + 0x50]
cmp eax, ebx
jl 0x100090f4
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x100090f4
mov dword [esp + 0x24], ebx
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
lea edx, [esp + 0x34]
push edx
lea edx, [esp + 0x28]
push edx
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
cmp eax, ebx
jl 0x100090e6
cmp dword [esp + 0x34], ebx
je 0x100090e6
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push ebx
push ebx
lea edx, [esp + 0x6c]
push edx
push ebx
mov byte [esp + 0x90], 4
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
push str.displayName
push eax
call dword [ecx + 0x10]
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.1000aab6
lea eax, [esp + 0x28]
mov byte [esp + 0x80], 5
call fcn.1000a6f6
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
push ecx
mov byte [esp + 0x84], 6
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, 0x10099db8
call fcn.10002a34
push ecx
mov byte [esp + 0x88], 7
mov eax, esp
mov dword [esp + 0x48], esp
push eax
mov ecx, 0x10099dbc
call fcn.10002a34
push ecx
mov byte [esp + 0x8c], 8
mov eax, esp
mov dword [esp + 0x50], esp
push eax
mov ecx, 0x10099dc0
call fcn.10002a34
push ecx
mov eax, esp
mov dword [esp + 0x58], esp
push eax
mov ecx, 0x10099dc4
mov byte [esp + 0x94], 9
call fcn.10002a34
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x94], 6
call fcn.1000918c
add esp, 0x14
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x58], ebx
jbe 0x100090b0
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x58]
jae 0x10009181
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + eax*4]
sub eax, 0x10
call fcn.10002aac
lea edi, [eax + 0x10]
push edi
lea esi, [esp + 0x2c]
call fcn.100041e8
cmp eax, 0xffffffff
lea eax, [edi - 0x10]
jne 0x100090a6
call fcn.10002b29
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x58]
jb 0x1000905f
jmp 0x100090b0
mov byte [esp + 0x13], 1
call fcn.10002b29
lea esi, [esp + 0x54]
call fcn.1000258e
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
call fcn.10002b29
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x84], 3
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jne 0x10008f4e
jmp 0x100090ea
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov dword [esp + 0x14], ebx
call fcn.10002b29
mov byte [esp + 0x80], 1
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
call fcn.10002b29
inc dword [esp + 0x30]
add dword [esp + 0x2c], 4
cmp dword [esp + 0x30], 2
jl 0x10008e6e
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [esp + 0x80], 0xffffffff
push 0x10002b04
push 2
push 4
lea eax, [esp + 0x58]
push eax
mov dword [esp + 0x28], ebx
call fcn.10060877
call dword [sym.imp.ole32.dll_CoUninitialize]
mov al, byte [esp + 0x13]
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.1002c260
push 0x80070057
call fcn.10002b60
int3