Function at 0x4234d0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4817a8
push eax
mov dword fs:[0], esp
sub esp, 0x34
push esi
mov esi, ecx
cmp byte [esi + 8], 0
je 0x42350a
cmp dword [esi], 0
je 0x42350a
mov al, 1
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push edi
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov edi, eax
test edi, edi
jns 0x423559
lea eax, [ebp - 0x28]
mov ecx, 0x4a9a88
push eax
call fcn.004046a0
mov dword [0x4a9f24], 1
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], 0
jb 0x423542
mov eax, dword [eax]
push eax
push 0x48649c
push 0x4a9a88
call fcn.0040e7e0
push str.ERROR:_Failed_to_initialize_COM_library._Error_code:
jmp 0x4235b7
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov edi, eax
test edi, edi
jns 0x4235fe
lea eax, [ebp - 0x28]
mov ecx, 0x4a9a88
push eax
call fcn.004046a0
mov dword [0x4a9f24], 1
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], 1
jb 0x4235a2
mov eax, dword [eax]
push eax
push 0x48649c
push 0x4a9a88
call fcn.0040e7e0
push str.ERROR:_Failed_to_initialize_security._Error_code:
push 0x48649c
push eax
call fcn.0040e7e0
push edi
push 0x4867dc
push eax
call fcn.0040e7e0
push eax
call fcn.0040d5b0
mov eax, dword [ebp - 0x14]
add esp, 0x28
cmp eax, 0x10
jb 0x4235ec
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00404120
pop edi
xor al, al
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push ebx
lea ebx, [esi + 4]
push ebx
push 0x48d8b0
push 1
push 0
push 0x48d8a0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
test edi, edi
jns 0x42365e
lea eax, [ebp - 0x28]
mov ecx, 0x4a9a88
push eax
call fcn.004046a0
mov dword [0x4a9f24], 1
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], 2
jb 0x423644
mov eax, dword [eax]
push eax
push 0x48649c
push 0x4a9a88
call fcn.0040e7e0
push str.ERROR:_Failed_to_create_IWbemLocator_object._Err_code:
jmp 0x4236e5
push str.ROOTCIMV2
lea ecx, [ebp - 0x10]
call fcn.004232b0
mov eax, dword [eax]
mov dword [ebp - 4], 3
test eax, eax
je 0x42367c
mov edx, dword [eax]
jmp 0x42367e
xor edx, edx
mov eax, dword [ebx]
push esi
push 0
push 0
mov ecx, dword [eax]
push 0
push 0
push 0
push 0
push edx
push eax
call dword [ecx + 0xc]
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.004233b0
lea eax, [ebp - 0x28]
mov ecx, 0x4a9a88
push eax
call fcn.004046a0
test edi, edi
jns 0x423720
mov dword [0x4a9f24], 1
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], 4
jb 0x4236d0
mov eax, dword [eax]
push eax
push 0x48649c
push 0x4a9a88
call fcn.0040e7e0
push str.ERROR:_Could_not_connect._Error_code:
push 0x48649c
push eax
call fcn.0040e7e0
push edi
push 0x4867dc
push eax
call fcn.0040e7e0
push eax
call fcn.0040d5b0
add esp, 0x28
lea ecx, [ebp - 0x28]
call fcn.004058c0
pop ebx
pop edi
xor al, al
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov dword [0x4a9f24], 2
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], 5
jb 0x423739
mov eax, dword [eax]
push eax
push 0x48649c
push 0x4a9a88
call fcn.0040e7e0
push str.DEBUG:_Connected_to_ROOTCIMV2_WMI_namespace
push 0x48649c
push eax
call fcn.0040e7e0
push eax
call fcn.0040d5b0
add esp, 0x1c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.004058c0
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esi]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov edi, eax
test edi, edi
jns 0x4237f7
lea eax, [ebp - 0x40]
mov ecx, 0x4a9a88
push eax
call fcn.004046a0
push eax
mov ecx, 0x4a9a88
mov dword [ebp - 4], 6
mov dword [0x4a9f24], 1
call fcn.00402e80
push str.ERROR:_Could_not_set_proxy_blanket._Error_code:
push 0x48649c
push eax
call fcn.0040e7e0
push edi
push 0x4867dc
push eax
call fcn.0040e7e0
push eax
call fcn.0040d5b0
add esp, 0x1c
lea ecx, [ebp - 0x40]
call fcn.004058c0
pop ebx
pop edi
xor al, al
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
mov al, 1
pop ebx
mov byte [esi + 8], 1
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret