Function at 0x405d31
Capabilities:
Connect to wmi namespace via wbemlocator
Reference absolute stream path on windows

Disassembly:
push 0x458
mov eax, 0x41a3ff
call fcn.00409e37
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x42c], esi
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp - 0x218], ax
xor esi, esi
lea eax, [ebp - 0x216]
push esi
push eax
call fcn.004087d0
add esp, 0xc
lea eax, [ebp - 0x428]
push eax
push 0x41e540
push 1
push esi
push 0x41e610
mov dword [ebp - 0x428], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
jl 0x406080
push str.ROOTCIMV2
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x424], esi
call fcn.00404c0a
mov eax, dword [eax]
mov dword [ebp - 4], esi
cmp eax, esi
je 0x405db5
mov ecx, dword [eax]
jmp 0x405db7
xor ecx, ecx
lea ebx, [ebp - 0x424]
mov eax, dword [ebp - 0x428]
mov edx, dword [eax]
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push ecx
push eax
call dword [edx + 0xc]
mov ebx, eax
mov ecx, dword [ebp - 0x430]
or dword [ebp - 4], 0xffffffff
cmp ecx, esi
je 0x405de6
call fcn.00404c57
cmp ebx, esi
jge 0x405e05
mov eax, dword [ebp - 0x428]
cmp eax, esi
je 0x405dfa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x424]
jmp 0x406076
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push dword [ebp - 0x424]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
or eax, eax
js 0x406060
xor eax, eax
push edi
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push esi
push eax
call fcn.004087d0
push dword [ebp + 8]
lea eax, [ebp - 0x420]
push str.._rootCIMV2:Win32_NetworkAdapterConfiguration.Index
push str._s_d
push eax
call fcn.00404804
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 0xffffffe4
lea eax, [ebp - 0x420]
push eax
call edi
push str.SetDNSDomain
mov dword [ebp - 0x444], eax
call edi
push str.Win32_NetworkAdapterConfiguration
mov dword [ebp - 0x430], eax
call edi
mov ecx, dword [ebp - 0x424]
push esi
lea ebx, [ebp - 0x440]
push ebx
push esi
push esi
push eax
mov dword [ebp - 0x440], esi
mov dword [ebp - 0x438], esi
mov dword [ebp - 0x434], esi
mov dword [ebp - 0x43c], esi
mov edx, dword [ecx]
push ecx
call dword [edx + 0x18]
or eax, eax
jns 0x405eda
mov eax, dword [ebp - 0x424]
cmp eax, esi
je 0x405ec2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x428]
cmp eax, esi
je 0x405ed2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or eax, 0xffffffff
jmp 0x406083
lea edx, [ebp - 0x438]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
push esi
push edx
push esi
push dword [ebp - 0x430]
push eax
call dword [ecx + 0x4c]
or eax, eax
js 0x405eb2
mov eax, dword [ebp - 0x438]
lea edx, [ebp - 0x434]
mov ecx, dword [eax]
push edx
push esi
push eax
call dword [ecx + 0x3c]
test eax, eax
js 0x405eb2
push dword [ebp - 0x42c]
call fcn.00409310
inc eax
push eax
push dword [ebp - 0x42c]
lea eax, [ebp - 0x218]
push eax
call fcn.004092e1
lea eax, [ebp - 0x218]
sub esp, 0xfffffff0
push eax
call edi
mov ebx, eax
lea edx, [ebp - 0x454]
push 8
pop ecx
push esi
push edx
push esi
mov word [ebp - 0x454], cx
mov eax, dword [ebp - 0x434]
push str.DNSDomain
mov dword [ebp - 0x44c], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
or eax, eax
mov eax, dword [ebp - 0x424]
js 0x405eb8
lea edx, [ebp - 0x43c]
mov ecx, dword [eax]
push esi
push edx
push dword [ebp - 0x434]
push esi
push esi
push dword [ebp - 0x430]
push dword [ebp - 0x444]
push eax
call dword [ecx + 0x60]
cmp eax, esi
jl 0x405eb2
push str.ReturnValue
lea ecx, [ebp - 0x42c]
call fcn.00404c0a
mov eax, dword [eax]
cmp eax, esi
mov dword [ebp - 4], 1
je 0x405fc1
mov ecx, dword [eax]
jmp 0x405fc3
xor ecx, ecx
mov eax, dword [ebp - 0x43c]
mov edx, dword [eax]
lea edi, [ebp - 0x464]
push esi
push esi
push edi
push esi
push ecx
push eax
call dword [edx + 0x10]
mov edi, eax
mov ecx, dword [ebp - 0x42c]
or dword [ebp - 4], 0xffffffff
cmp ecx, esi
je 0x405ff5
call fcn.00404c57
mov dword [ebp - 0x42c], esi
cmp edi, esi
jl 0x405eb2
cmp ebx, esi
je 0x406008
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x440]
cmp eax, esi
je 0x406018
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x438]
cmp eax, esi
je 0x406028
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x43c]
cmp eax, esi
je 0x406038
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x434]
cmp eax, esi
je 0x406048
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x454]
push eax
call edi
lea eax, [ebp - 0x464]
push eax
call edi
mov eax, dword [ebp - 0x424]
cmp eax, esi
je 0x406070
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x428]
cmp eax, esi
je 0x406080
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
inc eax
call fcn.00409e81
ret