Function at 0x4acb60
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
xor esi, esi
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp byte [0x53b5fd], 0
je 0x4acc15
lea eax, [ebp - 0xc]
push eax
push 0x502118
push 1
push esi
push 0x5021e8
mov dword [ebp - 0xc], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4acc0f
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
push edx
push esi
push esi
push esi
push esi
push esi
push esi
mov dword [ebp - 8], esi
mov ecx, dword [eax]
push 0x52619c
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x4acc04
mov eax, dword [ebp - 8]
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
mov eax, dword [ebp - 8]
js 0x4acbfc
lea edx, [ebp - 0x14]
push edx
push esi
push 0x30
push str.SELECT__FROM_Win32_QuickFixEngineering
mov dword [ebp - 0x14], esi
mov ecx, dword [eax]
push 0x526208
push eax
mov eax, dword [ecx + 0x50]
call eax
test eax, eax
jns 0x4acc1e
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x800
mov dword [ebp - 0x18], esi
call fcn.004e4240
add esp, 4
mov ebx, eax
cmp dword [ebp - 0x14], esi
je 0x4ad048
jmp 0x4acc42
xor esi, esi
push 0x800
push esi
push ebx
call fcn.004e7d90
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [ebp - 0x18]
push edx
lea edx, [ebp - 0x10]
push edx
push 1
push 0xffffffffffffffff
push eax
mov eax, dword [ecx + 0x10]
call eax
cmp dword [ebp - 0x18], esi
je 0x4ad048
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push esi
push esi
lea edx, [ebp - 0x2c]
push edx
push esi
push str.HotFixID
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4ad01d
cmp word [ebp - 0x2c], 1
je 0x4ad01d
mov eax, dword [ebp - 0x24]
mov edx, ebx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, si
jne 0x4acca2
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
cmp ax, si
jne 0x4accb4
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push esi
push esi
lea edx, [ebp - 0x2c]
push edx
push esi
push str.Description
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4ad000
cmp word [ebp - 0x2c], 1
je 0x4ad000
mov eax, dword [ebp - 0x24]
mov edx, eax
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x4acd01
sub eax, edx
lea edi, [ebx - 2]
mov cx, word [edi + 2]
add edi, 2
cmp cx, si
jne 0x4acd11
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4acd30
mov ecx, dword [0x51d454]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call esi
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0
push 0
lea edx, [ebp - 0x2c]
push edx
push 0
push str.InstalledOn
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4acfe2
cmp word [ebp - 0x2c], 1
je 0x4acfe2
mov eax, dword [ebp - 0x24]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4acd82
sub eax, edx
lea edi, [ebx - 2]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4acd92
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4acdb1
mov ecx, dword [0x51d454]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call esi
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0
push 0
lea edx, [ebp - 0x2c]
push edx
push 0
push str.InstalledBy
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4acfc3
cmp word [ebp - 0x2c], 1
je 0x4acfc3
mov eax, dword [ebp - 0x24]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4ace03
sub eax, edx
lea edi, [ebx - 2]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4ace13
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4ace32
mov ecx, dword [0x51d454]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call esi
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0
push 0
lea edx, [ebp - 0x2c]
push edx
push 0
push 0x526254
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4acfa1
cmp word [ebp - 0x2c], 1
je 0x4acfa1
mov eax, dword [ebp - 0x24]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4ace84
sub eax, edx
lea edi, [ebx - 2]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4ace94
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4aceb3
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4aced6
sub eax, edx
sar eax, 1
mov ecx, 1
mov word [ebx + eax*2], cx
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4acef3
mov ecx, dword [ebp + 8]
sub eax, edx
sar eax, 1
lea esi, [ecx + 2]
jmp 0x4acf10
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4acf10
sub ecx, esi
sar ecx, 1
add ecx, eax
cmp ecx, 0x100000
jae 0x4ad048
mov esi, dword [ebp + 8]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4acf35
sub eax, edx
sar eax, 1
mov eax, ebx
jne 0x4acf64
mov edx, esi
sub edx, ebx
lea esp, [esp]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4acf50
jmp 0x4ad03e
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4acf66
mov edi, esi
sub eax, edx
add edi, 0xfffffffe
jmp 0x4acf80
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4acf80
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4ad03e
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4acfa4
mov edx, dword [0x51d454]
lea eax, [ebp - 0x2c]
push eax
mov dword [edi], edx
call esi
jmp 0x4ad03e
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4acfc6
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call esi
jmp 0x4ad03e
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4acfe5
mov eax, dword [0x51d454]
lea ecx, [ebp - 0x2c]
push ecx
mov dword [edi], eax
call esi
jmp 0x4ad03e
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
cmp ax, si
jne 0x4ad003
mov edx, dword [0x51d454]
lea eax, [ebp - 0x2c]
mov dword [edi], edx
push eax
jmp 0x4ad038
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
cmp ax, si
jne 0x4ad020
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
mov dword [edi], ecx
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x14], 0
jne 0x4acc40
push ebx
call fcn.004e424b
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret