Function at 0x465bb0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x586174
mov eax, dword fs:[0]
push eax
sub esp, 0x164
mov eax, dword [0x615000]
xor eax, ebp
mov dword [ebp - 0x60], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x11c], 0
lea ecx, [ebp - 0x44]
call fcn.0046a4d0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.0046a740
mov dword [ebp - 0x2c], 1
movzx eax, byte [0x63a453]
test eax, eax
jne 0x465c13
call fcn.00465b00
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x24]
push ecx
push 0x58e8e4
push 1
push 0
push 0x58e9b4
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jge 0x465c83
mov edx, dword [ebp - 0x20]
push edx
push 0x5e46b0
push 0x5e4700
call fcn.0040c050
add esp, 0xc
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp + 8]
call fcn.0046a540
mov ecx, dword [ebp - 0x11c]
or ecx, 1
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0046a640
mov eax, dword [ebp + 8]
jmp 0x46635d
call fcn.00402270
mov dword [ebp - 0x1c], eax
push 0x5e4724
lea ecx, [ebp - 0x110]
call fcn.004144e0
mov dword [ebp - 0x120], eax
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x124], edx
mov byte [ebp - 4], 1
lea eax, [ebp - 0x14]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x124]
call fcn.004145a0
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x110]
call fcn.00414580
cmp dword [ebp - 0x20], 0
jl 0x4662c1
mov dword [ebp - 0x50], 0
call fcn.00402270
mov dword [ebp - 0x58], eax
push str.Select_CSName_HotFixID_InstalledOn_InstalledBy_Description_from_Win32_QuickFixEngineering
lea ecx, [ebp - 0x114]
call fcn.00414440
mov dword [ebp - 0x128], eax
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x12c], edx
mov byte [ebp - 4], 2
push 0x5e479c
lea ecx, [ebp - 0x118]
call fcn.00414440
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x134], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x50]
push ecx
push 0
push 0x10
mov ecx, dword [ebp - 0x12c]
call fcn.004145a0
push eax
mov ecx, dword [ebp - 0x134]
call fcn.004145a0
push eax
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x118]
call fcn.00414580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x114]
call fcn.00414580
mov dword [ebp - 0x54], 0
cmp dword [ebp - 0x20], 0
jl 0x4662b1
cmp dword [ebp - 0x2c], 0
jbe 0x4662b1
lea ecx, [ebp - 0xf4]
call fcn.0041f850
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x54]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x50]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x46628c
cmp dword [ebp - 0x2c], 0
jbe 0x46628c
push 0
push 0
lea eax, [ebp - 0x10c]
push eax
push 0
push 0x5e47a0
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x465eda
movzx edx, word [ebp - 0x10c]
cmp edx, 1
je 0x465eda
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x465e5a
mov dword [ebp - 0x138], 0
jmp 0x465ebb
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x3fffffff
jle 0x465e7f
mov dword [ebp - 0x13c], 0
jmp 0x465eaf
mov eax, dword [ebp - 0x48]
shl eax, 1
call fcn.0056a8e0
mov dword [ebp - 0x140], esp
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x48]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x140]
push edx
call fcn.004022d0
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x138]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.00405fb0
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
push 0
lea eax, [ebp - 0x10c]
push eax
push 0
push str.HotFixID
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x465fb8
movzx edx, word [ebp - 0x10c]
cmp edx, 1
je 0x465fb8
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x465f38
mov dword [ebp - 0x144], 0
jmp 0x465f99
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x3fffffff
jle 0x465f5d
mov dword [ebp - 0x148], 0
jmp 0x465f8d
mov eax, dword [ebp - 0x48]
shl eax, 1
call fcn.0056a8e0
mov dword [ebp - 0x14c], esp
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x48]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x14c]
push edx
call fcn.004022d0
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x144], eax
mov ecx, dword [ebp - 0x144]
push ecx
lea ecx, [ebp - 0xf4]
call fcn.00405fb0
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
push 0
lea eax, [ebp - 0x10c]
push eax
push 0
push str.InstalledOn
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x466096
movzx edx, word [ebp - 0x10c]
cmp edx, 1
je 0x466096
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x466016
mov dword [ebp - 0x150], 0
jmp 0x466077
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x3fffffff
jle 0x46603b
mov dword [ebp - 0x154], 0
jmp 0x46606b
mov eax, dword [ebp - 0x48]
shl eax, 1
call fcn.0056a8e0
mov dword [ebp - 0x158], esp
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x48]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x158]
push edx
call fcn.004022d0
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
push ecx
lea ecx, [ebp - 0xd8]
call fcn.00405fb0
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
push 0
lea eax, [ebp - 0x10c]
push eax
push 0
push str.InstalledBy
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x466174
movzx edx, word [ebp - 0x10c]
cmp edx, 8
jne 0x466174
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x4660f4
mov dword [ebp - 0x15c], 0
jmp 0x466155
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x3fffffff
jle 0x466119
mov dword [ebp - 0x160], 0
jmp 0x466149
mov eax, dword [ebp - 0x48]
shl eax, 1
call fcn.0056a8e0
mov dword [ebp - 0x164], esp
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x48]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x164]
push edx
call fcn.004022d0
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0xa0]
call fcn.00405fb0
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
push 0
lea eax, [ebp - 0x10c]
push eax
push 0
push 0x5e47f4
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x466252
movzx edx, word [ebp - 0x10c]
cmp edx, 8
jne 0x466252
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x4661d2
mov dword [ebp - 0x168], 0
jmp 0x466233
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x3fffffff
jle 0x4661f7
mov dword [ebp - 0x16c], 0
jmp 0x466227
mov eax, dword [ebp - 0x48]
shl eax, 1
call fcn.0056a8e0
mov dword [ebp - 0x170], esp
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x48]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x170]
push edx
call fcn.004022d0
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x168]
push ecx
lea ecx, [ebp - 0x84]
call fcn.00405fb0
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ecx + 8]
call eax
push 0x59484f
lea ecx, [ebp - 0xf4]
push ecx
call fcn.00407c60
add esp, 8
movzx edx, al
test edx, edx
je 0x46628a
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x44]
call fcn.0046a6c0
jmp 0x46629d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf4]
call fcn.0047d520
jmp 0x4662b1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf4]
call fcn.0047d520
jmp 0x465da8
mov ecx, dword [ebp - 0x50]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [edx + 8]
call ecx
jmp 0x466314
mov edx, dword [ebp - 0x20]
push edx
push 0x5e4830
push str.CReportSystemInfo::getHotfixInfo
call fcn.0040c050
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x44]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0046a540
mov edx, dword [ebp - 0x11c]
or edx, 1
mov dword [ebp - 0x11c], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0046a640
mov eax, dword [ebp + 8]
jmp 0x46635d
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x44]
push edx
mov ecx, dword [ebp + 8]
call fcn.0046a540
mov eax, dword [ebp - 0x11c]
or eax, 1
mov dword [ebp - 0x11c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0046a640
mov eax, dword [ebp + 8]
lea esp, [ebp - 0x174]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x60]
xor ecx, ebp
call fcn.0055abea
mov esp, ebp
pop ebp
ret