Function at 0x447370
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cd6e7
mov eax, dword fs:[0]
push eax
sub esp, 0x5b0
mov eax, dword [0x4fd0b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x447fba
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x4473d6
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x447fba
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x460]
push eax
push 0x4d24d0
push 1
push 0
push 0x4d25a0
mov dword [ebp - 0x460], 0
call esi
lea eax, [ebp - 0x458]
mov dword [ebp - 0x468], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
cmp word [ebp - 0x458], 9
jne 0x447641
lea eax, [ebp - 0x468]
push eax
push 0x4d2510
push 1
push 0
push 0x4d25b0
call esi
test eax, eax
js 0x4473cb
mov dword [ebp - 0x414], 0
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 0x4d8], 0
mov byte [ebp - 0x4d7], 0x11
mov byte [ebp - 0x4d6], 0x43
mov byte [ebp - 0x4d5], 0x11
mov byte [ebp - 0x4d4], 0x43
mov byte [ebp - 0x4d3], 0x41
mov byte [ebp - 0x4d2], 0x43
mov byte [ebp - 0x4d1], 7
mov byte [ebp - 0x4d0], 0x43
mov byte [ebp - 0x4cf], 0x2a
mov byte [ebp - 0x4ce], 0x43
mov byte [ebp - 0x4cd], 0x2d
mov byte [ebp - 0x4cc], 0x43
mov byte [ebp - 0x4cb], 0x70
mov byte [ebp - 0x4ca], 0x43
mov byte [ebp - 0x4c9], 1
mov byte [ebp - 0x4c8], 0x43
mov byte [ebp - 0x4c7], 0x4a
mov byte [ebp - 0x4c6], 0x43
mov byte [ebp - 0x4c5], 7
mov byte [ebp - 0x4c4], 0x43
mov byte [ebp - 0x4c3], 0x71
mov byte [ebp - 0x4c2], 0x43
mov byte [ebp - 0x4c1], 7
mov byte [ebp - 0x4c0], 0x43
mov byte [ebp - 0x4bf], 0x37
mov byte [ebp - 0x4be], 0x43
mov byte [ebp - 0x4bd], 0x27
mov byte [ebp - 0x4bc], 0x43
mov byte [ebp - 0x4bb], 0x70
mov byte [ebp - 0x4ba], 0x43
mov byte [ebp - 0x4b9], 0x1a
mov byte [ebp - 0x4b8], 0x43
mov byte [ebp - 0x4b7], 0x4a
mov byte [ebp - 0x4b6], 0x43
mov byte [ebp - 0x4b5], 0x37
mov byte [ebp - 0x4b4], 0x43
mov byte [ebp - 0x4b3], 0x1a
mov byte [ebp - 0x4b2], 0x43
mov byte [ebp - 0x4b1], 0x63
mov byte [ebp - 0x4b0], 0x43
mov byte [ebp - 0x4af], 7
mov byte [ebp - 0x4ae], 0x43
mov byte [ebp - 0x4ad], 0x4a
mov byte [ebp - 0x4ac], 0x43
mov byte [ebp - 0x4ab], 0x43
mov byte [ebp - 0x4aa], 0x43
mov al, byte [ebp - 0x4d7]
call fcn.004517c0
push eax
lea ecx, [ebp - 0x414]
call fcn.00446860
lea eax, [ebp - 0x434]
mov dword [ebp - 4], 0
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, 3
mov dword [ebp - 0x42c], 0x40
mov word [ebp - 0x434], ax
mov eax, dword [ebp - 0x414]
test eax, eax
je 0x4475e5
mov edx, dword [eax]
jmp 0x4475e7
xor edx, edx
mov eax, dword [ebp - 0x468]
lea esi, [ebp - 0x434]
push esi
push 0
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov esi, eax
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
jns 0x447621
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x414]
jmp 0x447fb1
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x414]
test ecx, ecx
je 0x447641
call fcn.00446970
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x45c], 0
lea ecx, [ebp - 0x4a8]
mov dword [ebp - 0x420], 0
mov byte [ebp - 0x4a8], 0
mov byte [ebp - 0x4a7], 0x2a
mov byte [ebp - 0x4a6], 0x3e
mov byte [ebp - 0x4a5], 0x53
mov byte [ebp - 0x4a4], 0x3e
mov byte [ebp - 0x4a3], 0x53
mov byte [ebp - 0x4a2], 0x3e
mov byte [ebp - 0x4a1], 0x39
mov byte [ebp - 0x4a0], 0x3e
mov byte [ebp - 0x49f], 0x75
mov byte [ebp - 0x49e], 0x3e
mov byte [ebp - 0x49d], 0x78
mov byte [ebp - 0x49c], 0x3e
mov byte [ebp - 0x49b], 0x26
mov byte [ebp - 0x49a], 0x3e
mov byte [ebp - 0x499], 0x44
mov byte [ebp - 0x498], 0x3e
mov byte [ebp - 0x497], 0x48
mov byte [ebp - 0x496], 0x3e
mov byte [ebp - 0x495], 0x38
mov byte [ebp - 0x494], 0x3e
mov byte [ebp - 0x493], 0x3e
mov byte [ebp - 0x492], 0x3e
mov al, byte [ebp - 0x4a7]
call fcn.00451760
push eax
lea ecx, [ebp - 0x420]
call fcn.00446860
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x420]
test eax, eax
je 0x447728
mov edx, dword [eax]
jmp 0x44772a
xor edx, edx
mov eax, dword [ebp - 0x460]
lea esi, [ebp - 0x45c]
push esi
push dword [ebp - 0x468]
mov ecx, dword [eax]
push 0
push 0
push 0
push 0
push 0
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x447763
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x447fab
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [ebp - 0x45c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x4477a4
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x447fab
mov dword [ebp - 0x41c], 0
lea ecx, [ebp - 0x490]
mov byte [ebp - 0x490], 0
mov byte [ebp - 0x48f], 0x36
mov byte [ebp - 0x48e], 1
mov byte [ebp - 0x48d], 0x51
mov byte [ebp - 0x48c], 1
mov byte [ebp - 0x48b], 0x28
mov byte [ebp - 0x48a], 1
mov byte [ebp - 0x489], 1
mov byte [ebp - 0x488], 1
mov al, byte [ebp - 0x48f]
call fcn.00451700
push eax
lea ecx, [ebp - 0x41c]
call fcn.00446860
mov byte [ebp - 4], 2
mov dword [ebp - 0x418], 0
mov byte [ebp - 0x518], 0
mov byte [ebp - 0x517], 0x73
mov byte [ebp - 0x516], 0x34
mov byte [ebp - 0x515], 0x3c
mov byte [ebp - 0x514], 0x34
mov byte [ebp - 0x513], 0x18
mov byte [ebp - 0x512], 0x34
mov byte [ebp - 0x511], 0x3c
mov byte [ebp - 0x510], 0x34
mov byte [ebp - 0x50f], 0x22
mov byte [ebp - 0x50e], 0x34
mov byte [ebp - 0x50d], 1
mov byte [ebp - 0x50c], 0x34
mov byte [ebp - 0x50b], 0x57
mov byte [ebp - 0x50a], 0x34
mov byte [ebp - 0x509], 0x5a
mov byte [ebp - 0x508], 0x34
mov byte [ebp - 0x507], 0x57
mov byte [ebp - 0x506], 0x34
mov byte [ebp - 0x505], 0x49
mov byte [ebp - 0x504], 0x34
mov byte [ebp - 0x503], 0x66
mov byte [ebp - 0x502], 0x34
mov byte [ebp - 0x501], 0x3f
mov byte [ebp - 0x500], 0x34
mov byte [ebp - 0x4ff], 0x25
mov byte [ebp - 0x4fe], 0x34
mov byte [ebp - 0x4fd], 0x57
mov byte [ebp - 0x4fc], 0x34
mov byte [ebp - 0x4fb], 0x28
mov byte [ebp - 0x4fa], 0x34
mov byte [ebp - 0x4f9], 0x14
mov byte [ebp - 0x4f8], 0x34
mov byte [ebp - 0x4f7], 0x55
mov byte [ebp - 0x4f6], 0x34
mov byte [ebp - 0x4f5], 0x50
mov byte [ebp - 0x4f4], 0x34
mov byte [ebp - 0x4f3], 0x43
mov byte [ebp - 0x4f2], 0x34
mov byte [ebp - 0x4f1], 0x11
mov byte [ebp - 0x4f0], 0x34
mov byte [ebp - 0x4ef], 0x73
mov byte [ebp - 0x4ee], 0x34
mov byte [ebp - 0x4ed], 7
mov byte [ebp - 0x4ec], 0x34
mov byte [ebp - 0x4eb], 0x2b
mov byte [ebp - 0x4ea], 0x34
mov byte [ebp - 0x4e9], 0x52
mov byte [ebp - 0x4e8], 0x34
mov byte [ebp - 0x4e7], 0x62
mov byte [ebp - 0x4e6], 0x34
mov byte [ebp - 0x4e5], 0x4b
mov byte [ebp - 0x4e4], 0x34
mov byte [ebp - 0x4e3], 0x22
mov byte [ebp - 0x4e2], 0x34
mov byte [ebp - 0x4e1], 0x62
mov byte [ebp - 0x4e0], 0x34
mov byte [ebp - 0x4df], 0x6f
mov byte [ebp - 0x4de], 0x34
mov byte [ebp - 0x4dd], 0x65
mov byte [ebp - 0x4dc], 0x34
mov byte [ebp - 0x4db], 0x34
mov byte [ebp - 0x4da], 0x34
lea ecx, [ebp - 0x518]
mov al, byte [ebp - 0x517]
call fcn.004516a0
push eax
lea ecx, [ebp - 0x418]
call fcn.00446860
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x46c], 0
test eax, eax
je 0x447a0a
mov edx, dword [eax]
jmp 0x447a0c
xor edx, edx
mov eax, dword [ebp - 0x41c]
test eax, eax
je 0x447a1a
mov esi, dword [eax]
jmp 0x447a1c
xor esi, esi
mov eax, dword [ebp - 0x45c]
lea edi, [ebp - 0x46c]
push edi
push 0
push 0x30
mov ecx, dword [eax]
push edx
push esi
push eax
call dword [ecx + 0x50]
test eax, eax
jns 0x447a56
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x447f79
mov ecx, dword [ebp - 0x46c]
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x424], 0
test ecx, ecx
je 0x447f3f
nop dword [eax + eax]
mov eax, dword [ecx]
lea edx, [ebp - 0x424]
push edx
lea edx, [ebp - 0x464]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x424], 0
je 0x447f3f
mov byte [ebp - 0x484], 0
lea ecx, [ebp - 0x484]
mov byte [ebp - 0x483], 0x5f
mov byte [ebp - 0x482], 5
mov byte [ebp - 0x481], 0x3d
mov byte [ebp - 0x480], 5
mov byte [ebp - 0x47f], 5
mov byte [ebp - 0x47e], 5
mov al, byte [ebp - 0x483]
mov eax, dword [ebp - 0x464]
push 0
push 0
mov esi, dword [eax]
lea eax, [ebp - 0x47c]
push eax
push 0
call fcn.00451640
push eax
push dword [ebp - 0x464]
call dword [esi + 0x10]
mov byte [ebp - 0x5a4], 0
mov byte [ebp - 0x5a3], 0x66
mov byte [ebp - 0x5a2], 0x1c
mov byte [ebp - 0x5a1], 0x4b
mov byte [ebp - 0x5a0], 0x1c
mov byte [ebp - 0x59f], 0x32
mov byte [ebp - 0x59e], 0x1c
mov byte [ebp - 0x59d], 0x23
mov byte [ebp - 0x59c], 0x1c
mov byte [ebp - 0x59b], 0x59
mov byte [ebp - 0x59a], 0x1c
mov byte [ebp - 0x599], 0x68
mov byte [ebp - 0x598], 0x1c
mov byte [ebp - 0x597], 0x4a
mov byte [ebp - 0x596], 0x1c
mov byte [ebp - 0x595], 0x6b
mov byte [ebp - 0x594], 0x1c
mov byte [ebp - 0x593], 4
mov byte [ebp - 0x592], 0x1c
mov byte [ebp - 0x591], 0x77
mov byte [ebp - 0x590], 0x1c
mov byte [ebp - 0x58f], 0x32
mov byte [ebp - 0x58e], 0x1c
mov byte [ebp - 0x58d], 0x17
mov byte [ebp - 0x58c], 0x1c
mov byte [ebp - 0x58b], 0xa
mov byte [ebp - 0x58a], 0x1c
mov byte [ebp - 0x589], 0x77
mov byte [ebp - 0x588], 0x1c
mov byte [ebp - 0x587], 0x7a
mov byte [ebp - 0x586], 0x1c
mov byte [ebp - 0x585], 0x4d
mov byte [ebp - 0x584], 0x1c
mov byte [ebp - 0x583], 0x65
mov byte [ebp - 0x582], 0x1c
mov byte [ebp - 0x581], 0x36
mov byte [ebp - 0x580], 0x1c
mov byte [ebp - 0x57f], 0x33
mov byte [ebp - 0x57e], 0x1c
mov byte [ebp - 0x57d], 0x32
mov byte [ebp - 0x57c], 0x1c
mov byte [ebp - 0x57b], 4
mov byte [ebp - 0x57a], 0x1c
mov byte [ebp - 0x579], 0x44
mov byte [ebp - 0x578], 0x1c
mov byte [ebp - 0x577], 0x4d
mov byte [ebp - 0x576], 0x1c
mov byte [ebp - 0x575], 0x65
mov byte [ebp - 0x574], 0x1c
mov byte [ebp - 0x573], 0x32
mov byte [ebp - 0x572], 0x1c
mov byte [ebp - 0x571], 0x23
mov byte [ebp - 0x570], 0x1c
mov byte [ebp - 0x56f], 5
mov byte [ebp - 0x56e], 0x1c
mov byte [ebp - 0x56d], 0x78
mov byte [ebp - 0x56c], 0x1c
mov byte [ebp - 0x56b], 0x66
mov byte [ebp - 0x56a], 0x1c
mov byte [ebp - 0x569], 0x27
mov byte [ebp - 0x568], 0x1c
mov byte [ebp - 0x567], 0x4d
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 0x566], 0x1c
mov byte [ebp - 0x565], 7
mov byte [ebp - 0x564], 0x1c
mov byte [ebp - 0x563], 0x4d
mov byte [ebp - 0x562], 0x1c
mov byte [ebp - 0x561], 0x7c
mov byte [ebp - 0x560], 0x1c
mov byte [ebp - 0x55f], 0x77
mov byte [ebp - 0x55e], 0x1c
mov byte [ebp - 0x55d], 0x56
mov byte [ebp - 0x55c], 0x1c
mov byte [ebp - 0x55b], 0x41
mov byte [ebp - 0x55a], 0x1c
mov byte [ebp - 0x559], 0x4a
mov byte [ebp - 0x558], 0x1c
mov byte [ebp - 0x557], 0x6b
mov byte [ebp - 0x556], 0x1c
mov byte [ebp - 0x555], 4
mov byte [ebp - 0x554], 0x1c
mov byte [ebp - 0x553], 0x47
mov byte [ebp - 0x552], 0x1c
mov byte [ebp - 0x551], 0x6b
mov byte [ebp - 0x550], 0x1c
mov byte [ebp - 0x54f], 0x6e
mov byte [ebp - 0x54e], 0x1c
mov byte [ebp - 0x54d], 0xa
mov byte [ebp - 0x54c], 0x1c
mov byte [ebp - 0x54b], 0x7c
mov byte [ebp - 0x54a], 0x1c
mov byte [ebp - 0x549], 4
mov byte [ebp - 0x548], 0x1c
mov byte [ebp - 0x547], 0x56
mov byte [ebp - 0x546], 0x1c
mov byte [ebp - 0x545], 0x4d
mov byte [ebp - 0x544], 0x1c
mov byte [ebp - 0x543], 0x74
mov byte [ebp - 0x542], 0x1c
mov byte [ebp - 0x541], 0x4d
mov byte [ebp - 0x540], 0x1c
mov byte [ebp - 0x53f], 0x7c
mov byte [ebp - 0x53e], 0x1c
mov byte [ebp - 0x53d], 3
mov byte [ebp - 0x53c], 0x1c
mov byte [ebp - 0x53b], 0x78
mov byte [ebp - 0x53a], 0x1c
mov byte [ebp - 0x539], 0x69
mov byte [ebp - 0x538], 0x1c
mov byte [ebp - 0x537], 0x54
mov byte [ebp - 0x536], 0x1c
mov byte [ebp - 0x535], 0x12
mov byte [ebp - 0x534], 0x1c
mov byte [ebp - 0x533], 0xc
mov byte [ebp - 0x532], 0x1c
mov byte [ebp - 0x531], 0x77
mov byte [ebp - 0x530], 0x1c
mov byte [ebp - 0x52f], 0x12
mov byte [ebp - 0x52e], 0x1c
mov byte [ebp - 0x52d], 3
mov byte [ebp - 0x52c], 0x1c
mov byte [ebp - 0x52b], 0x7c
mov byte [ebp - 0x52a], 0x1c
mov byte [ebp - 0x529], 0x4a
mov byte [ebp - 0x528], 0x1c
mov byte [ebp - 0x527], 0x4d
mov byte [ebp - 0x526], 0x1c
mov byte [ebp - 0x525], 0x62
mov byte [ebp - 0x524], 0x1c
mov byte [ebp - 0x523], 0x4d
mov byte [ebp - 0x522], 0x1c
mov byte [ebp - 0x521], 0x7a
mov byte [ebp - 0x520], 0x1c
mov byte [ebp - 0x51f], 0x4d
mov byte [ebp - 0x51e], 0x1c
mov byte [ebp - 0x51d], 0x1c
mov byte [ebp - 0x51c], 0x1c
mov al, byte [ebp - 0x5a3]
push dword [ebp - 0x474]
call fcn.004515e0
push eax
lea eax, [ebp - 0x410]
push eax
call fcn.00451820
add esp, 0xc
cmp eax, 0xffffffff
je 0x447f31
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x5bc]
call fcn.0042bc90
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 4
call fcn.00446d90
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 5
call fcn.0042bbf0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x46c]
test ecx, ecx
jne 0x447a80
mov ecx, dword [ebp - 0x468]
test ecx, ecx
je 0x447f4f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x418]
test ecx, ecx
je 0x447f92
call fcn.00446970
mov dword [ebp - 0x418], 0
mov ecx, dword [ebp - 0x41c]
test ecx, ecx
je 0x447fab
call fcn.00446970
mov dword [ebp - 0x41c], 0
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x447fba
call fcn.00446970
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047900d
mov esp, ebp
pop ebp
ret