Function at 0x466db7
Capabilities:
Reference wmi statements

Disassembly:
push 0x64
mov eax, 0x55bb36
call fcn.004cd176
mov esi, dword [ebp + 8]
xor eax, eax
mov word [ebp - 0x44], ax
xor ebx, ebx
lea eax, [ebp - 0x44]
mov dword [ebp - 0x70], ebx
push eax
lea eax, [ebp - 0x55]
mov byte [ebp - 0x55], bl
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 7
push eax
mov dword [ebp - 0x34], ebx
call fcn.00466cb3
push ebx
push 1
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.0040779d
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0x17
push ebx
push 0x58ee94
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
call fcn.0046702b
test eax, eax
jns 0x466e9c
mov al, byte [ebp - 0x2c]
lea ecx, [esi + 4]
mov byte [esi], al
lea eax, [ebp - 0x28]
push eax
call fcn.004062bf
lea ecx, [ebp - 0x68]
call fcn.00466ce7
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 4], 3
test ecx, ecx
je 0x466e58
mov dword [ebp - 0x4c], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x50]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x466e6c
mov dword [ebp - 0x50], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x466e80
mov dword [ebp - 0x48], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], bl
test eax, eax
je 0x467018
mov dword [ebp - 0x54], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x467018
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x48]
push edx
push ebx
push ebx
mov ecx, dword [eax]
push ebx
push ebx
push ebx
push ebx
push str.ROOTCIMV2
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x466ec2
mov al, byte [ebp - 0x2c]
mov byte [esi], al
jmp 0x466fb5
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push dword [ebp - 0x48]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x466eb8
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x50]
push edx
push ebx
push 0x30
mov ecx, dword [eax]
push 0x58ee20
push 0x58ee10
push eax
call dword [ecx + 0x50]
test eax, eax
js 0x466eb8
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x6c]
push edx
lea edx, [ebp - 0x4c]
mov dword [ebp - 0x6c], ebx
push edx
mov ecx, dword [eax]
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x466eb8
cmp dword [ebp - 0x6c], 0
je 0x466eb8
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x68]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push 0x58eea4
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x466eb8
mov ecx, dword [ebp - 0x60]
mov eax, 0x58eeb0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x466f60
test dx, dx
je 0x466f5c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x466f60
add eax, 4
add ecx, 4
test dx, dx
jne 0x466f3a
mov eax, ebx
jmp 0x466f65
sbb eax, eax
or eax, 1
test eax, eax
je 0x466eb8
mov edi, 0x56f868
push edi
call fcn.00407e75
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00407a2e
push dword [ebp - 0x60]
call fcn.00407e75
pop ecx
push eax
push dword [ebp - 0x60]
lea ecx, [ebp - 0x28]
call fcn.004078f8
mov edi, 0x56f86c
push edi
call fcn.00407e75
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.004078f8
mov byte [ebp - 0x2c], 1
mov byte [esi], 1
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 4]
call fcn.004062bf
lea ecx, [ebp - 0x68]
call fcn.00466ce7
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 4], 3
test ecx, ecx
je 0x466fdd
mov dword [ebp - 0x4c], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x50]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x466ff1
mov dword [ebp - 0x50], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x467005
mov dword [ebp - 0x48], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x54]
mov byte [ebp - 4], bl
test ecx, ecx
je 0x467018
mov dword [ebp - 0x54], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.0040779d
mov eax, esi
call fcn.004cd128
ret