Function at 0x4117c0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
lea ebp, [esp - 0x148]
sub esp, 0x148
push 0xffffffffffffffff
push 0x619db2
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x6fadcc]
xor eax, ebp
mov dword [ebp + 0x144], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
jmp 0x411862
jmp 0x4118c8
lea eax, [ebp - 0x38]
push eax
call 0x419ee0
xor ebx, ebx
mov dword [ebp - 4], ebx
jmp 0x41193c
mov esi, 0xf
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], ebx
mov byte [ebp + 0x74], bl
jmp 0x4119b6
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
jmp 0x411a2e
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push ebx
push ebx
mov byte [ebp - 4], 3
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jge 0x411b07
mov edi, 0x10
cmp dword [ebp + 0xa4], edi
jb 0x411a70
mov ecx, dword [ebp + 0x90]
push ecx
call fcn.005bd360
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
cmp dword [ebp + 0xc0], edi
jb 0x411a99
mov edx, dword [ebp + 0xac]
push edx
call fcn.005bd360
add esp, 4
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
cmp dword [ebp + 0x88], edi
jb 0x411abf
mov eax, dword [ebp + 0x74]
push eax
call fcn.005bd360
add esp, 4
mov eax, dword [ebp - 0x2c]
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], ebx
mov byte [ebp + 0x74], bl
cmp eax, ebx
je 0x411aed
mov ecx, dword [ebp - 0x58]
mov edi, dword [ebp - 0x28]
push ecx
call fcn.0041dbb0
mov edx, dword [ebp - 0x2c]
push edx
call fcn.005bd360
add esp, 8
mov eax, dword [ebp - 0x38]
push eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
call fcn.005bd360
add esp, 4
jmp 0x414e52
jmp 0x411b6d
jmp 0x411bd3
lea ecx, [ebp - 0x14]
push ecx
push 0x6bebe0
push 1
push ebx
push 0x6becb0
mov dword [ebp - 0x14], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
jmp 0x411c53
cmp eax, ebx
jge 0x411cd3
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edi, 0x10
cmp dword [ebp + 0xa4], edi
jb 0x411c79
mov edx, dword [ebp + 0x90]
push edx
call fcn.005bd360
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
cmp dword [ebp + 0xc0], edi
jb 0x411ca2
mov eax, dword [ebp + 0xac]
push eax
call fcn.005bd360
add esp, 4
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
cmp dword [ebp + 0x88], edi
jb 0x411cc8
mov ecx, dword [ebp + 0x74]
push ecx
call fcn.005bd360
add esp, 4
mov dword [ebp + 0x88], esi
jmp 0x414e41
jmp 0x411d39
jmp 0x411d9f
mov dword [ebp - 0x10], ebx
jmp 0x411e08
mov ecx, 0x43e762ce
lea eax, [ebp - 0x50]
call fcn.0041ca70
lea edx, [ebp - 0x5c]
push edx
mov edi, eax
mov byte [ebp - 4], 4
call fcn.00410830
mov byte [ebp - 4], 5
mov eax, dword [eax]
cmp eax, ebx
je 0x411e32
mov ecx, dword [eax]
jmp 0x411e34
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
lea esi, [ebp - 0x10]
push esi
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ecx
push eax
mov eax, dword [edx + 0xc]
call eax
lea edi, [ebp - 0x5c]
mov esi, eax
call fcn.004108d0
mov byte [ebp - 4], 3
jmp 0x411ebe
cmp esi, ebx
jge 0x411ed8
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4144cd
jmp 0x411f3e
jmp 0x411fa4
mov eax, dword [ebp - 0x10]
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
jmp 0x41201e
cmp eax, ebx
jge 0x412061
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4120c7
mov edi, 0x75a06d8
lea esi, [ebp - 0x8a]
mov dword [ebp - 0x1c], ebx
call fcn.0041cb20
push eax
lea ebx, [ebp - 0x64]
mov byte [ebp - 4], 6
call fcn.004107a0
mov esi, eax
mov ecx, 0xa1
xor eax, eax
mov dl, byte [eax + 0x6cb990]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x5c], dl
jns 0x41210d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 3
jl 0x4120f0
mov byte [ebp - 0x59], 0
lea eax, [ebp - 0x5c]
push eax
lea ebx, [ebp - 0x6c]
mov byte [ebp - 4], 8
call fcn.004107a0
mov byte [ebp - 4], 9
mov ecx, dword [esi]
test ecx, ecx
je 0x412135
mov ecx, dword [ecx]
jmp 0x412137
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x412141
mov edx, dword [eax]
jmp 0x412143
xor edx, edx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
lea edi, [ebp - 0x1c]
push edi
push 0
push 0x30
push ecx
mov ecx, dword [esi + 0x50]
push edx
push eax
call ecx
lea edi, [ebp - 0x6c]
mov esi, eax
call fcn.004108d0
lea edi, [ebp - 0x64]
mov dword [ebp - 0x5c], 0
call fcn.004108d0
mov bl, 3
mov byte [ebp - 4], bl
jmp 0x4121dc
test esi, esi
jge 0x41221f
jmp 0x412285
mov dword [ebp - 0x18], 0