Function at 0x403370
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413b40
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xe4
mov eax, dword [0x48a198]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xec], 0
xor eax, eax
mov word [ebp - 0x90], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x5c], 0
lea ecx, [ebp - 0x64]
push ecx
push 0x487404
push 1
push 0
push 0x4874d4
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jge 0x403473
mov dword [ebp - 0xb8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004011a0
mov eax, dword [ebp - 0xb8]
jmp 0x4037f3
lea edx, [ebp - 0x5c]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x64]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jge 0x4034d2
mov dword [ebp - 0xa0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004011a0
mov eax, dword [ebp - 0xa0]
jmp 0x4037f3
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x5c]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x40351d
mov dword [ebp - 0xa4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004011a0
mov eax, dword [ebp - 0xa4]
jmp 0x4037f3
push 0x415482
lea ecx, [ebp - 0x34]
call fcn.004010b0
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 2
lea eax, [ebp - 0x60]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x428eac
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jge 0x403597
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.004011a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004011a0
mov eax, dword [ebp - 0xb4]
jmp 0x4037f3
mov byte [ebp - 4], 3
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x60], 0
je 0x4036f2
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x68]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
cmp dword [ebp - 0x1c], 0
jne 0x4035d1
jmp 0x4036f2
push 0
push 0
lea eax, [ebp - 0x78]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
push 1
lea ecx, [ebp - 0x18]
call fcn.00405810
push 0
mov eax, dword [ebp - 0x70]
push eax
lea ecx, [ebp - 0x18]
call fcn.004026b0
mov dword [ebp - 0xe0], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call fcn.00402a80
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0x34]
call fcn.004029e0
push 0
lea edx, [ebp - 0xd0]
push edx
lea ecx, [ebp - 0x34]
call fcn.00405cc0
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00405a30
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x4c]
call fcn.00401df0
mov dword [ebp - 0xd8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4c]
call fcn.00405a80
mov dword [ebp - 0xc0], eax
push 0
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp - 0x34]
call fcn.00405cf0
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [0x415228]
je 0x40369d
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 2
jl 0x4036bd
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c]
call fcn.004027d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00402830
jmp 0x4036f2
mov dword [ebp - 0xc4], str.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
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c]
call fcn.004027d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00402830
jmp 0x4035a2
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
jmp 0x403732
mov dword [ebp - 4], 2
jmp 0x403742
jmp 0x40376d
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x80], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.004011a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004011a0
mov eax, dword [ebp - 0x80]
jmp 0x4037f3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004076b4
mov esp, ebp
pop ebp
ret 0x28