Function at 0x403300
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x412ed8
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xec
mov eax, dword [0x4370a0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd0], 0
xor eax, eax
mov word [ebp - 0x84], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x5c], 0
lea ecx, [ebp - 0x64]
push ecx
push 0x41932c
push 1
push 0
push 0x4193fc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jge 0x4033d8
xor eax, eax
jmp 0x403702
lea edx, [ebp - 0x5c]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x64]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jge 0x403410
xor eax, eax
jmp 0x403702
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x5c]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jge 0x40343e
xor eax, eax
jmp 0x403702
push 0x419546
lea ecx, [ebp - 0x34]
call fcn.004015a0
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0xe0], str.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
lea eax, [ebp - 0x60]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x423714
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jge 0x4034b3
mov dword [ebp - 0xa0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.004015e0
mov eax, dword [ebp - 0xa0]
jmp 0x403702
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x60], 0
je 0x403634
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x68]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
cmp dword [ebp - 0x1c], 0
jne 0x4034ed
jmp 0x403634
push 0
push 0
lea eax, [ebp - 0x78]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
push 1
lea ecx, [ebp - 0x18]
call fcn.004026f0
push 0
mov eax, dword [ebp - 0x70]
push eax
lea ecx, [ebp - 0x18]
call fcn.00402620
mov dword [ebp - 0xd4], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00402710
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00404100
push 0
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0x34]
call fcn.00404150
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xe4]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00404120
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x4c]
call fcn.00405480
mov dword [ebp - 0xcc], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c]
call fcn.004041f0
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0xb0]
call fcn.00402940
mov dword [ebp - 0x98], eax
push 0
mov ecx, dword [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x34]
call fcn.004041a0
mov dword [ebp - 0xa8], eax
lea ecx, [ebp - 0xfc]
call fcn.004015e0
mov edx, dword [ebp - 0xa8]
cmp edx, dword [0x4350cc]
je 0x4035df
mov eax, dword [ebp - 0x7c]
add eax, 1
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jl 0x4035ff
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4c]
call fcn.004041d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.004026d0
jmp 0x403634
mov dword [ebp - 0xbc], str.DXXY0u8pRsQmPqM5FzizbCBnxX35zhkRyx4db6NnPxtOAi0da6fPYbTC5iJYuhfgdN3u16YHPfcXahy4WP3eLv9BtRddpUwvQwt3vVOCYrl2CU8ikJgQYaQjzxxDvxTOmkmm2IIprri2NV58dAQ5niKKnyNTQGQT9HcdfcfjvUhGpaui39jA4JL0Vx0og1yXd7TC9JcEuVyzWz70T0wfqU23mv5grjSL9ORR4mxJOXjWNhr0oDQfeWT1RPVsTxoz82UwFKtSYQFT8zCzHs72wxUWKmtEYKo9SOmoVcoqzPIf2A1gYEc4yHRyNR6CPdqXFQrHL9rJDofTfeu231GmDOSTws1SwgU5LcPTkpNwHA9ebxeUp3PzJziOlKI12yeJqxd9xyuXo6u15Jtg3Bl62SUjCxpLp7C0gS5R820wtA0Re4VlIn3YgcsO2TR5FXHQG77hkQK8X44yTRGmXTT2Dywgtfz3SfvfRU8dRA39bRH4qzax5v4FVBC06kB369q8IM2h1p4rDDAA8EfY8oL8px8OncGBoWgkV5UJx3Uibn0wlHaNUxqfP8l20hdsS3cGXX1zIPyrSnUrpmy33NADwKqkUhbzFQPW4qFunFR57jSbJlrGSOUzgkpRohf5TT7RcipQP2zQu7aIFufGx7f2pnhjVDIlGLp68eRKUWlST7BgCGKWTXxJMYQIh5wUcasgnIN1X5GHuUHd2RbkDyT5LPSCtDfzDNrXe3b7RC4kFuCdj56DaPz9ebX0PH6gayPIKn2f0nMe7793VtvDECWJxPDiTWVa0iB2JFAkgG3jMoIJkeK24wxnCdipwogCm23lMIbX3wVVThnw0CBv712fTidFLqeeuOR3f8itkotVU1QNr0cFioeiiDBS2GAKENbteozRvpvzBdueaN67PJ47hnwiUdLb6dqWCJLQyePAWNhBFydlK2C2OgWBkkQG7lwI3jNQX87af1Q0yPRQQ1a4nyJ0pHwF1AHYW1I0IWRU1suBkiM4Di2VY9C3Bk8G6nETvDH7k5zV406TAH4nsjK48tfPAwEzHgpBDL6IOxxLuUdwURc8mjXCRB9RjVIhcQp93Om4HR0pCK4iVH4CcntoI6J81yA2UPuxf2855f4i3othfbV5zqcWLbj1aGaefYQLru7otnKkD4TJtmtISbevzA6qwX1tA88LE6fl1zVRxkt7jnKGeeK2gGaG6kiyleioEAx0gHqHa3W4osc6xW9apovzc6PvWgLuXvb6mfR69qIspRF0tzTf9c0klS8wPjkQUgu5VeRLr0Pn41notaDkucDy9VQpr0g4KoTvobD0Uk2RNIqXPfj1eBi8087B1KEB96MeW1Cm6isWBfmNezmhHoDPUydUXINrGuaL90YXglUMxVGNmQ8ezoDMaK0URvx9OwOpLCUQFaqkIkBopdWqzTH4vnsaWUBJkteVqe2RO30BfP75UQlpIsxTl79364MNYF6iX0pFVSdHmbmq2lvLdTn9WnCmDyujSsDpu9ywKlO3IyMo12yRcLtR3AfI4IEM2FjzF6WNq3gV9Tkx5JPosR4dJ47z0yIjizSmRt6UvyOtzOq2hFYlo9rou99ceMDAsSmH58xoVpvD6D4yAzS35OSIb4WIDPTQaN1QW4OP064aWmIqRzHcdfFz51W4iOuWYWnoIxuRr25EuIovRiQK929pQbkYozTilpge
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x68]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4c]
call fcn.004041d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.004026d0
jmp 0x4034be
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
jmp 0x403671
mov dword [ebp - 4], 1
jmp 0x403681
jmp 0x403697
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x64]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x8c], edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.004015e0
mov eax, dword [ebp - 0x8c]
jmp 0x403702
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00405b6d
mov esp, ebp
pop ebp
ret 0x10