Function at 0x402c70
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41408e
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x94
mov eax, dword [0x469090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x54], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa4], 0
xor eax, eax
mov word [ebp - 0x6c], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x34]
push ecx
push 0x41950c
push 1
push 0
push 0x4195dc
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x402d4c
mov dword [ebp - 0x80], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043e0
mov eax, dword [ebp - 0x80]
jmp 0x402fb9
lea edx, [ebp - 0x30]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [edx + 0xc]
call ecx
test eax, eax
jge 0x402d90
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043e0
mov eax, dword [ebp - 0x5c]
jmp 0x402fb9
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x402dd4
mov dword [ebp - 0x98], str.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
mov dword [ebp - 0x78], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043e0
mov eax, dword [ebp - 0x78]
jmp 0x402fb9
lea eax, [ebp - 0x2c]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x423bb4
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [eax + 0x50]
call edx
test eax, eax
jge 0x402e1a
mov dword [ebp - 0x7c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043e0
mov eax, dword [ebp - 0x7c]
jmp 0x402fb9
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x2c], 0
je 0x402f14
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x38]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [eax + 0x10]
call edx
cmp dword [ebp - 0x1c], 0
jne 0x402e54
jmp 0x402f14
push 0
push 0
lea eax, [ebp - 0x48]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x90], str.H97SBueVPEcEOcPy5FFUSd1tRK2T6y4DoTvuWs5XvwcvOYLPP6Ra35PU7gJuchuO2xTUHUtUexGOTU9hGRNafacvnufgSshQhD5yBToaEnYpY2a6HDD3XqOetVXxEN4n5r3LsNMPgQ3BBjqNhIIXPemP4eX9xYXfJN2XasxMnXAfPy1b72B5vjtPDb4rcwxDTeqzE3yG8L0Hmxtef93zKOIxuHJiORMXvRP219BXwyoPrQLg3i2CojEXLRc6cjaSPw5KkLsNlFy3S1mQdkHrlFLXrRlIH5BnvAbfOfO9dF0e6q8PLJrfAet7i4MBigrDsbmXJloIBdVO4oqh5GOhcHcLWVPFsPw9WX2pteL0N6gKm62zOVBMjah1R6wmjH8EAjP5qqweThCt7CcjYUM4961LklxDyDXahdAx8RcqSPjW4TEqUGxm1pEDpyjYqhdWhili9Sgnt1mGtOw3iWf0hkp55OXnKcwybQjVba9CjbuEe7rC72vipxrf6ilkXOXMSKX0WPgsNP9oMqsOFV7zV5R42kWS2t6HCAU7ioVYdDqUbh5ADh2btoKhkn2yypSFXx2Q6Gr2BncL16jaYkuuHi7ld4woFIMgNrlQm23dUYY2ubx21YSSp1UuL9405pInlL7J84WSRx1hlKEWmNOJqa7KUv0r7o089ENbxQic2fgAVRXU0W5sGJySmcmjErsU6O4PNQc3OtlzcxifdhHuc85pGmTJaemqnGKoeRI7qGCnBCPrBfSh28uEgk5lEkozxjVyaaQPUy9CfSjm9W3glTvGjz4iLcIyqkT15kApcQGtMXO369OUn0PkSFFfGbYPf55wtoONVtGBrr0S4e1Kso7bPmvncwf9vwcOYJrJGujc2IRsYdEfXqVBSwNnDl1t3g5FgbgIO6qVW8WD6NYUnPQJybxsVGh63xQQ6R31wCB5aTaB1hpkfJmtcuomBqtv1eL9kozDNz8ke7WIDAA0cEWu0KIjJptxLRkmPHtpxxWWfNaGdmlvVu0bYpB5YiCdtAclEaqRnjKHVO6qkMJrfxSLX2QUAFGRBejUPvYmQKVRzWwaQL0o0uUdEmTDn1W5YdJVxSIWhVzf1RFm2OzX8rndveWxJG4IKDLg0N7wN2r9H9dKp47OEQthSFUrEWdSndVNwbCFsn2pDdhlSltzFypEUNmFFWYYFkVsukDO1pymrqqoF4ISmPhnAVA5WHqEJXE8mVx6aKTRg0Hqij6qXkbdIsB3aa3N3MdLH6Cql9FiQ5AhDN5UP49JVX7sC8PDn4Vj6h8uRuayxE1XSTl3msbgHauGbkbzPKlJhmjKRMn2fDoRzAJw2kcQkSSFikVlRo900Bjqjd2EqOxxyxl7qR7nV85PXEsUeeh77DguX4yRaTLR0YqxbGLrs0A7PEvy24Q6AweHsO2C6qPXpSuB0LYrGNDY3CiKGrdXoFgye3inqSVeEMc5IutveU9pmGvhWsTLDVjlytR8YDIjRSqKcBXyvTKS8WibTSCyuuk6wXYm6Uj9y3hroi8gNrKqgjeLWalpcWcE4yx7KQgUxI30l5z5cocxeCmCOkcp4kKyWncStuA5X4eg9TQdBGOh8AayA4wFwYNbJIiKnJKmkOv617vCMt2cAQBHDISj1H5BQ2Pg7pHJppNmcp04iY1mQT4pGg2t8DiIwRAv0dNsmQcY4UK2yBzlI8pjNkUivm5aPW04PJR3DR1P189ONTghyPUkl9GXPO4jF9c34rci1KKSzVvr5wlKkboB1CJDUkNnLq35GIvfEu82jB8HhhKUAf0zRjAxCCMhFW6jgP0cWH4hSQgb899prXrWen2SUPvHKXAoXVjKIBFy2G5dadSoAeNFOD3SNtn8eUvuw3xK37hRABJRKI3yiJGYDyMMopKM8luig8eimKqdqrk362m5p85o3eERRXXFkWU121nLpGNCwqTneGkHnVuCGpcovOjywARmloqNjJn8Vbtf0k6CcyQJBteFC10Xdd6zeRjkslgLLIYN7KyArjv05qIYE2dcLX5oiXnvBBOCgslY4UgRinkXOWRG5I6im606L3rLOgyLGcrucSweuPBtLm46ulK7Y0IsppKOvFgjo74MGSiWlE3BgzTzwucdueRMAc3EnQPmPN05wihQKISIWbbuUesXwsGRguvuvts2xeXmwAQfcLLqLpTetWsvzwc4TfIOhOut5JDpnr7YIsLC39gc5t7HYn5cDiNqnPsQ95DHwBRoYksrpRHOHXheR8IC7lhlS6alvqzzi2AlaLQiNJNwo4Kud1feB37Q8Nw9WhW3OLve49pTuxnKfHjFOqrpVUKxPPJsqzhX52vW3D2a7HsXugFJkTN3tl6e1FauTCYSQadT5l6jBihFnvunc6zAgCu12tmvs8taMDU2EgpPe2ekhzo6GNCWOVIfy18Jeb5Vi7DMShhtzfXuC1W9V0BBim3yBHrtqh83Fk77r9oeyWiDULGxSKOwpRbQwBtXniQa2dJvAxXnsLhmK872ijiaskfhWrByqttHjNDVb0BsPY8bNPCcM1KxkrSfTxrx4u8QgiEUAYpiAuiGOXCkKpBbrT9tFRLfNpXwt1juPOTVXPqsA3sut815RcxTW5y2gD2rnsPauH6Ixfm74Upy2WNPcK3KGp3g81l5dca2GNrhbw9hbSJ7kPutBS6vdNBibLSF41VCa4Os8a2z1BCx7PlARNxU8KQxfvzfOMu3dqzoUhuFI9fYVbiglAJ1puzpheiyeyTTIExuqCadtUFkdcY6Udq4mPOkgjR8QvRjarWpRBUTBN0faqLf7zSCAeLJhy6i3VSSylw6LfOqs0dcPsHl1pMv2NP6u8H64i5NwNqI0d8uv7jl76xvgngMYjFR9BonVdkHgchLJRkRfcaGHfJs62UO274xxUNKwocLyK9Yu86giCGW8XtmkNMd8g4C5qxyxJUHJAyj7CirlaFCLsAUl0oPvqTDeQ9WwftIJKu3Nz1ca2VYP4Fm7REQKUY7yk8Nx9K5Sx18Js9nAxSO9Mr6xlyCl9kq89Vy2jNbNiBRiDnncMC5qsY0O49RL3KKUBMda5wWERVtqLklG1ECnvuaXWHr2XE7Sa1Ob1Eroshb3SPhFxccRfkSWrlRMS3Poxw8sQ5qPBGbl1vkK6gDH2AmOsCmpvdLqtYJA4E4VJCz4EFvR8hyCKS1Gn3g3MwKBGrL1rod9qPGOdgTnQb1QSuAeX7gT9W5jkgnjelxP3W3VCOu7KeJOUJf4F5aTv3VjH6kgEFamGsfnlpamy249l5vLK5SElXoRt04P1zz2fA4UjJGNiv0FI2jRe2ytBqqFwhCdzmD6mupV14JFfTapAaXQRKnoMIST1AJMEqCKs4lAsdPzUNOCtad8eNJ8SIw9nWH9xcbbG62F7ArA97TI0K98BB87pSYthGy4Bent1aPJ3cTgY5WnHMfa6resofLpFqSya8CI9Gc0LBpBMfape9owwnN2opjUN9XOAALVyVKplX62avnTcNRtvlNmtyVp9aIfgn24tWeBl0XtW644dPlcp3hEcrOMs7Erzl14VExUQ0VgjyloWmRQm6sTEr4lKXYdWoINFMIpsRJcCLXw5CSxiQHJtsESj0wyMzy8eSVOi46yAVkjhRfkQyvuMYsDFOKIxUhNVmvA0By26ztQfvaeufuec6eiFoM6GB4yPpSSH8ANny5nHYgcoOrHStC0m0liFSu7L5Fz5OxuR5tnnNxaxYhnwkdk8ePaY4v7lgAcjrD9jDBw0ApYEg3pitolx0hI9ws8TDx15m1jH75Gl1Euf2WGUjvxvBmbEL5JBKw1CvHWjD8XcPstytlKzNLS9BoY4jurkWIRDoAuDKDClUnEDCGR2uhLSUjLVMdFJpoVn5vPtf99A9oHhjB3wv33nNIoNV9Rha1iAf8iTjNfKxRi2eQWOyW3AOPQguBn72aIz83GepoNGavXeSlVdTLxHRyqTmgwdGxH6zIe2noUeatjWB77tpbIcboxmsczjE2rtVwCbkRRhLiM5xlhWwJiOjtRfOSKTeCNvdI2MKybGjQRdGmTqgSlx8DgcxcfdzsoyWr3erOyo9uWKSCbidXuERhKTLmaiFP
push 1
lea ecx, [ebp - 0x18]
call fcn.00401ed0
push 0
mov eax, dword [ebp - 0x40]
push eax
lea ecx, [ebp - 0x18]
call fcn.00401e00
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa0], esp
lea edx, [ebp + 0x18]
push edx
call fcn.004042f0
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call fcn.00401ef0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8c], esp
push eax
call fcn.00404350
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x94], ecx
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x54]
call fcn.00403380
mov byte [ebp - 0x49], al
movzx edx, byte [ebp - 0x49]
test edx, edx
je 0x402f03
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401eb0
jmp 0x402e25
jmp 0x402f39
mov dword [ebp - 4], 1
jmp 0x402f56
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043e0
mov eax, dword [ebp - 0x60]
jmp 0x402fb9
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00406c09
mov esp, ebp
pop ebp
ret 0x28