Function at 0x4474e0
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cd827
mov eax, dword fs:[0]
push eax
sub esp, 0x5b0
mov eax, dword [0x4fd0b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x44812a
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x447546
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x44812a
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x460]
push eax
push 0x4d24d0
push 1
push 0
push 0x4d25a0
mov dword [ebp - 0x460], 0
call esi
lea eax, [ebp - 0x458]
mov dword [ebp - 0x468], 0
push eax
call dword [sym.imp.KERNEL32.DLL_GetNativeSystemInfo]
cmp word [ebp - 0x458], 9
jne 0x4477b1
lea eax, [ebp - 0x468]
push eax
push 0x4d2510
push 1
push 0
push 0x4d25b0
call esi
test eax, eax
js 0x44753b
mov dword [ebp - 0x414], 0
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 0x4d8], 0
mov byte [ebp - 0x4d7], 0x58
mov byte [ebp - 0x4d6], 0x12
mov byte [ebp - 0x4d5], 0x58
mov byte [ebp - 0x4d4], 0x12
mov byte [ebp - 0x4d3], 0x61
mov byte [ebp - 0x4d2], 0x12
mov byte [ebp - 0x4d1], 0x66
mov byte [ebp - 0x4d0], 0x12
mov byte [ebp - 0x4cf], 0x35
mov byte [ebp - 0x4ce], 0x12
mov byte [ebp - 0x4cd], 0x7d
mov byte [ebp - 0x4cc], 0x12
mov byte [ebp - 0x4cb], 0x52
mov byte [ebp - 0x4ca], 0x12
mov byte [ebp - 0x4c9], 0x55
mov byte [ebp - 0x4c8], 0x12
mov byte [ebp - 0x4c7], 0x3b
mov byte [ebp - 0x4c6], 0x12
mov byte [ebp - 0x4c5], 0x66
mov byte [ebp - 0x4c4], 0x12
mov byte [ebp - 0x4c3], 0x6a
mov byte [ebp - 0x4c2], 0x12
mov byte [ebp - 0x4c1], 0x66
mov byte [ebp - 0x4c0], 0x12
mov byte [ebp - 0x4bf], 0x6f
mov byte [ebp - 0x4be], 0x12
mov byte [ebp - 0x4bd], 0x6c
mov byte [ebp - 0x4bc], 0x12
mov byte [ebp - 0x4bb], 0x52
mov byte [ebp - 0x4ba], 0x12
mov byte [ebp - 0x4b9], 0x32
mov byte [ebp - 0x4b8], 0x12
mov byte [ebp - 0x4b7], 0x3b
mov byte [ebp - 0x4b6], 0x12
mov byte [ebp - 0x4b5], 0x6f
mov byte [ebp - 0x4b4], 0x12
mov byte [ebp - 0x4b3], 0x32
mov byte [ebp - 0x4b2], 0x12
mov byte [ebp - 0x4b1], 0x18
mov byte [ebp - 0x4b0], 0x12
mov byte [ebp - 0x4af], 0x66
mov byte [ebp - 0x4ae], 0x12
mov byte [ebp - 0x4ad], 0x3b
mov byte [ebp - 0x4ac], 0x12
mov byte [ebp - 0x4ab], 0x12
mov byte [ebp - 0x4aa], 0x12
mov al, byte [ebp - 0x4d7]
call fcn.004518e0
push eax
lea ecx, [ebp - 0x414]
call fcn.004469c0
lea eax, [ebp - 0x434]
mov dword [ebp - 4], 0
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, 3
mov dword [ebp - 0x42c], 0x40
mov word [ebp - 0x434], ax
mov eax, dword [ebp - 0x414]
test eax, eax
je 0x447755
mov edx, dword [eax]
jmp 0x447757
xor edx, edx
mov eax, dword [ebp - 0x468]
lea esi, [ebp - 0x434]
push esi
push 0
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov esi, eax
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
jns 0x447791
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x414]
jmp 0x448121
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x414]
test ecx, ecx
je 0x4477b1
call fcn.00446ad0
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x45c], 0
lea ecx, [ebp - 0x4a8]
mov dword [ebp - 0x420], 0
mov byte [ebp - 0x4a8], 0
mov byte [ebp - 0x4a7], 0x32
mov byte [ebp - 0x4a6], 0x61
mov byte [ebp - 0x4a5], 0xd
mov byte [ebp - 0x4a4], 0x61
mov byte [ebp - 0x4a3], 0xd
mov byte [ebp - 0x4a2], 0x61
mov byte [ebp - 0x4a1], 0x75
mov byte [ebp - 0x4a0], 0x61
mov byte [ebp - 0x49f], 4
mov byte [ebp - 0x49e], 0x61
mov byte [ebp - 0x49d], 0x77
mov byte [ebp - 0x49c], 0x61
mov byte [ebp - 0x49b], 0x42
mov byte [ebp - 0x49a], 0x61
mov byte [ebp - 0x499], 0x49
mov byte [ebp - 0x498], 0x61
mov byte [ebp - 0x497], 0x39
mov byte [ebp - 0x496], 0x61
mov byte [ebp - 0x495], 0x79
mov byte [ebp - 0x494], 0x61
mov byte [ebp - 0x493], 0x61
mov byte [ebp - 0x492], 0x61
mov al, byte [ebp - 0x4a7]
call fcn.004518a0
push eax
lea ecx, [ebp - 0x420]
call fcn.004469c0
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x420]
test eax, eax
je 0x447898
mov edx, dword [eax]
jmp 0x44789a
xor edx, edx
mov eax, dword [ebp - 0x460]
lea esi, [ebp - 0x45c]
push esi
push dword [ebp - 0x468]
mov ecx, dword [eax]
push 0
push 0
push 0
push 0
push 0
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x4478d3
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x44811b
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [ebp - 0x45c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x447914
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x44811b
mov dword [ebp - 0x41c], 0
lea ecx, [ebp - 0x490]
mov byte [ebp - 0x490], 0
mov byte [ebp - 0x48f], 8
mov byte [ebp - 0x48e], 0x78
mov byte [ebp - 0x48d], 0x2a
mov byte [ebp - 0x48c], 0x78
mov byte [ebp - 0x48b], 0x1c
mov byte [ebp - 0x48a], 0x78
mov byte [ebp - 0x489], 0x78
mov byte [ebp - 0x488], 0x78
mov al, byte [ebp - 0x48f]
call fcn.00451840
push eax
lea ecx, [ebp - 0x41c]
call fcn.004469c0
mov byte [ebp - 4], 2
mov dword [ebp - 0x418], 0
mov byte [ebp - 0x518], 0
mov byte [ebp - 0x517], 0x24
mov byte [ebp - 0x516], 3
mov byte [ebp - 0x515], 0x6e
mov byte [ebp - 0x514], 3
mov byte [ebp - 0x513], 0x49
mov byte [ebp - 0x512], 3
mov byte [ebp - 0x511], 0x6e
mov byte [ebp - 0x510], 3
mov byte [ebp - 0x50f], 0x30
mov byte [ebp - 0x50e], 3
mov byte [ebp - 0x50d], 0x43
mov byte [ebp - 0x50c], 3
mov byte [ebp - 0x50b], 0x6a
mov byte [ebp - 0x50a], 3
mov byte [ebp - 0x509], 0x23
mov byte [ebp - 0x508], 3
mov byte [ebp - 0x507], 0x6a
mov byte [ebp - 0x506], 3
mov byte [ebp - 0x505], 0xe
mov byte [ebp - 0x504], 3
mov byte [ebp - 0x503], 5
mov byte [ebp - 0x502], 3
mov byte [ebp - 0x501], 0x27
mov byte [ebp - 0x500], 3
mov byte [ebp - 0x4ff], 0x68
mov byte [ebp - 0x4fe], 3
mov byte [ebp - 0x4fd], 0x6a
mov byte [ebp - 0x4fc], 3
mov byte [ebp - 0x4fb], 0x21
mov byte [ebp - 0x4fa], 3
mov byte [ebp - 0x4f9], 0x53
mov byte [ebp - 0x4f8], 3
mov byte [ebp - 0x4f7], 0x6f
mov byte [ebp - 0x4f6], 3
mov byte [ebp - 0x4f5], 0x3c
mov byte [ebp - 0x4f4], 3
mov byte [ebp - 0x4f3], 0x1d
mov byte [ebp - 0x4f2], 3
mov byte [ebp - 0x4f1], 0x1b
mov byte [ebp - 0x4f0], 3
mov byte [ebp - 0x4ef], 0x24
mov byte [ebp - 0x4ee], 3
mov byte [ebp - 0x4ed], 0x34
mov byte [ebp - 0x4ec], 3
mov byte [ebp - 0x4eb], 0x59
mov byte [ebp - 0x4ea], 3
mov byte [ebp - 0x4e9], 0x37
mov byte [ebp - 0x4e8], 3
mov byte [ebp - 0x4e7], 0xf
mov byte [ebp - 0x4e6], 3
mov byte [ebp - 0x4e5], 9
mov byte [ebp - 0x4e4], 3
mov byte [ebp - 0x4e3], 0x30
mov byte [ebp - 0x4e2], 3
mov byte [ebp - 0x4e1], 0xf
mov byte [ebp - 0x4e0], 3
mov byte [ebp - 0x4df], 0x2e
mov byte [ebp - 0x4de], 3
mov byte [ebp - 0x4dd], 0x47
mov byte [ebp - 0x4dc], 3
mov byte [ebp - 0x4db], 3
mov byte [ebp - 0x4da], 3
lea ecx, [ebp - 0x518]
mov al, byte [ebp - 0x517]
call fcn.00451800
push eax
lea ecx, [ebp - 0x418]
call fcn.004469c0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x46c], 0
test eax, eax
je 0x447b7a
mov edx, dword [eax]
jmp 0x447b7c
xor edx, edx
mov eax, dword [ebp - 0x41c]
test eax, eax
je 0x447b8a
mov esi, dword [eax]
jmp 0x447b8c
xor esi, esi
mov eax, dword [ebp - 0x45c]
lea edi, [ebp - 0x46c]
push edi
push 0
push 0x30
mov ecx, dword [eax]
push edx
push esi
push eax
call dword [ecx + 0x50]
test eax, eax
jns 0x447bc6
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x4480e9
mov ecx, dword [ebp - 0x46c]
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x424], 0
test ecx, ecx
je 0x4480af
nop dword [eax + eax]
mov eax, dword [ecx]
lea edx, [ebp - 0x424]
push edx
lea edx, [ebp - 0x464]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x424], 0
je 0x4480af
mov byte [ebp - 0x484], 0
lea ecx, [ebp - 0x484]
mov byte [ebp - 0x483], 0x68
mov byte [ebp - 0x482], 0x28
mov byte [ebp - 0x481], 0x4d
mov byte [ebp - 0x480], 0x28
mov byte [ebp - 0x47f], 0x28
mov byte [ebp - 0x47e], 0x28
mov al, byte [ebp - 0x483]
mov eax, dword [ebp - 0x464]
push 0
push 0
mov esi, dword [eax]
lea eax, [ebp - 0x47c]
push eax
push 0
call fcn.004517c0
push eax
push dword [ebp - 0x464]
call dword [esi + 0x10]
mov byte [ebp - 0x5a4], 0
mov byte [ebp - 0x5a3], 0x11
mov byte [ebp - 0x5a2], 0x15
mov byte [ebp - 0x5a1], 0x76
mov byte [ebp - 0x5a0], 0x15
mov byte [ebp - 0x59f], 0x3d
mov byte [ebp - 0x59e], 0x15
mov byte [ebp - 0x59d], 0x67
mov byte [ebp - 0x59c], 0x15
mov byte [ebp - 0x59b], 0x1c
mov byte [ebp - 0x59a], 0x15
mov byte [ebp - 0x599], 0x71
mov byte [ebp - 0x598], 0x15
mov byte [ebp - 0x597], 0x46
mov byte [ebp - 0x596], 0x15
mov byte [ebp - 0x595], 3
mov byte [ebp - 0x594], 0x15
mov byte [ebp - 0x593], 0xc
mov byte [ebp - 0x592], 0x15
mov byte [ebp - 0x591], 0x47
mov byte [ebp - 0x590], 0x15
mov byte [ebp - 0x58f], 0x3d
mov byte [ebp - 0x58e], 0x15
mov byte [ebp - 0x58d], 0x23
mov byte [ebp - 0x58c], 0x15
mov byte [ebp - 0x58b], 0x2e
mov byte [ebp - 0x58a], 0x15
mov byte [ebp - 0x589], 0x47
mov byte [ebp - 0x588], 0x15
mov byte [ebp - 0x587], 0x58
mov byte [ebp - 0x586], 0x15
mov byte [ebp - 0x585], 0x57
mov byte [ebp - 0x584], 0x15
mov byte [ebp - 0x583], 0x60
mov byte [ebp - 0x582], 0x15
mov byte [ebp - 0x581], 0x7e
mov byte [ebp - 0x580], 0x15
mov byte [ebp - 0x57f], 0x6d
mov byte [ebp - 0x57e], 0x15
mov byte [ebp - 0x57d], 0x3d
mov byte [ebp - 0x57c], 0x15
mov byte [ebp - 0x57b], 0xc
mov byte [ebp - 0x57a], 0x15
mov byte [ebp - 0x579], 0x24
mov byte [ebp - 0x578], 0x15
mov byte [ebp - 0x577], 0x57
mov byte [ebp - 0x576], 0x15
mov byte [ebp - 0x575], 0x60
mov byte [ebp - 0x574], 0x15
mov byte [ebp - 0x573], 0x3d
mov byte [ebp - 0x572], 0x15
mov byte [ebp - 0x571], 0x67
mov byte [ebp - 0x570], 0x15
mov byte [ebp - 0x56f], 0x3c
mov byte [ebp - 0x56e], 0x15
mov byte [ebp - 0x56d], 0x77
mov byte [ebp - 0x56c], 0x15
mov byte [ebp - 0x56b], 0x11
mov byte [ebp - 0x56a], 0x15
mov byte [ebp - 0x569], 0x29
mov byte [ebp - 0x568], 0x15
mov byte [ebp - 0x567], 0x57
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 0x566], 0x15
mov byte [ebp - 0x565], 0x1d
mov byte [ebp - 0x564], 0x15
mov byte [ebp - 0x563], 0x57
mov byte [ebp - 0x562], 0x15
mov byte [ebp - 0x561], 0x39
mov byte [ebp - 0x560], 0x15
mov byte [ebp - 0x55f], 0x47
mov byte [ebp - 0x55e], 0x15
mov byte [ebp - 0x55d], 0xb
mov byte [ebp - 0x55c], 0x15
mov byte [ebp - 0x55b], 0x13
mov byte [ebp - 0x55a], 0x15
mov byte [ebp - 0x559], 0x46
mov byte [ebp - 0x558], 0x15
mov byte [ebp - 0x557], 3
mov byte [ebp - 0x556], 0x15
mov byte [ebp - 0x555], 0xc
mov byte [ebp - 0x554], 0x15
mov byte [ebp - 0x553], 0x35
mov byte [ebp - 0x552], 0x15
mov byte [ebp - 0x551], 3
mov byte [ebp - 0x550], 0x15
mov byte [ebp - 0x54f], 0x14
mov byte [ebp - 0x54e], 0x15
mov byte [ebp - 0x54d], 0x2e
mov byte [ebp - 0x54c], 0x15
mov byte [ebp - 0x54b], 0x39
mov byte [ebp - 0x54a], 0x15
mov byte [ebp - 0x549], 0xc
mov byte [ebp - 0x548], 0x15
mov byte [ebp - 0x547], 0xb
mov byte [ebp - 0x546], 0x15
mov byte [ebp - 0x545], 0x57
mov byte [ebp - 0x544], 0x15
mov byte [ebp - 0x543], 0x36
mov byte [ebp - 0x542], 0x15
mov byte [ebp - 0x541], 0x57
mov byte [ebp - 0x540], 0x15
mov byte [ebp - 0x53f], 0x39
mov byte [ebp - 0x53e], 0x15
mov byte [ebp - 0x53d], 0x5b
mov byte [ebp - 0x53c], 0x15
mov byte [ebp - 0x53b], 0x77
mov byte [ebp - 0x53a], 0x15
mov byte [ebp - 0x539], 0x22
mov byte [ebp - 0x538], 0x15
mov byte [ebp - 0x537], 0x2a
mov byte [ebp - 0x536], 0x15
mov byte [ebp - 0x535], 0x31
mov byte [ebp - 0x534], 0x15
mov byte [ebp - 0x533], 0xf
mov byte [ebp - 0x532], 0x15
mov byte [ebp - 0x531], 0x47
mov byte [ebp - 0x530], 0x15
mov byte [ebp - 0x52f], 0x31
mov byte [ebp - 0x52e], 0x15
mov byte [ebp - 0x52d], 0x5b
mov byte [ebp - 0x52c], 0x15
mov byte [ebp - 0x52b], 0x39
mov byte [ebp - 0x52a], 0x15
mov byte [ebp - 0x529], 0x46
mov byte [ebp - 0x528], 0x15
mov byte [ebp - 0x527], 0x57
mov byte [ebp - 0x526], 0x15
mov byte [ebp - 0x525], 0x4f
mov byte [ebp - 0x524], 0x15
mov byte [ebp - 0x523], 0x57
mov byte [ebp - 0x522], 0x15
mov byte [ebp - 0x521], 0x58
mov byte [ebp - 0x520], 0x15
mov byte [ebp - 0x51f], 0x57
mov byte [ebp - 0x51e], 0x15
mov byte [ebp - 0x51d], 0x15
mov byte [ebp - 0x51c], 0x15
mov al, byte [ebp - 0x5a3]
push dword [ebp - 0x474]
call fcn.00451760
push eax
lea eax, [ebp - 0x410]
push eax
call fcn.00451940
add esp, 0xc
cmp eax, 0xffffffff
je 0x4480a1
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x5bc]
call fcn.0042bd20
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 4
call fcn.00446ef0
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 5
call fcn.0042bc80
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x46c]
test ecx, ecx
jne 0x447bf0
mov ecx, dword [ebp - 0x468]
test ecx, ecx
je 0x4480bf
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x418]
test ecx, ecx
je 0x448102
call fcn.00446ad0
mov dword [ebp - 0x418], 0
mov ecx, dword [ebp - 0x41c]
test ecx, ecx
je 0x44811b
call fcn.00446ad0
mov dword [ebp - 0x41c], 0
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x44812a
call fcn.00446ad0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047913d
mov esp, ebp
pop ebp
ret