Function at 0x405b70
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax]
test ecx, ecx
jne 0x405bda
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jge 0x405ba5
mov eax, dword [ebp - 0x1c]
jmp 0x405ce2
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jge 0x405bd4
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x1c]
jmp 0x405ce2
mov edx, dword [ebp - 0x24]
mov byte [edx], 1
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0xc]
push eax
call fcn.00407cf0
add esp, 4
push eax
push 0x48e758
push 0x17
push 0
push 0x430508
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jge 0x405c13
mov eax, dword [ebp - 0x1c]
jmp 0x405ce2
mov dword [ebp - 8], 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0
push 0x80
push 0
push 0
push 0
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ecx + 0xc]
call eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jge 0x405c5e
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [edx + 8]
call ecx
mov eax, dword [ebp - 0x1c]
jmp 0x405ce2
mov dword [ebp - 0x10], 0
lea edx, [ebp - 0x10]
push edx
push 0
push 0x20
mov eax, dword [ebp + 0xc]
push eax
push 0x47d7c8
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jge 0x405cb5
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x20], str.T2NO9XXD6BgfbABGk13itKcdCnFdv2ArEh8Fo2sBIfNqyrpYsUrYVKl402aRz4FaKiy16sKeIUQCplg3ob86fyKJezAA2cbxAXRDxtyVqowcU8B4kOpWoRuxeBi2vuHmJSlSTORpTATBEzF2Cu5tfVV7AVEV2UBkPkOHeESJKF8lAosLLCt8zmGryw560rYTKjBBtB8ij0m35fHVrhpWYgEOYCVofWLppvyFtKmMv8JmTNWYpgfA2dWQmDENVkz0Wj2AXECgUOs2aBsgB4Qgac1vR9GnGmPEAPSBzfc5J1GUpdjS5TAKFFx5hYsdsOKaIRxyO0FXQUEUz6jP2FopLzsb0bY4HdaDzb8oOgHigkGLSQzHtOQDr2QcpW8tm8Na5KohtN73W7ImJS6xaQwBX12cjuyO78vcIR8A9MSFnDkircK2kucwNczSMgeNXVc6AHFEJrEhsjYNFVNpBMqXg2d23hEJJG2woDhPwYPMghGKXKMhhVMD3YwgtiNsd0psrhhz8zCYXlWxMJvwfpNggpNYzHdsYV2fJp1qClWrU3Masq3o4P7EqF8rYFTJC1QvT1O1rkvAyCJbbNKsU5iJo4lJw0qVwd6fdi40pzNFv1RJ7jcAFaYtrN3L7fPd0VfJxE8aJ33KwQJzdRh2LmNVf8CiPEIlf44EtHol4EhKwsr0pN7jl7pfRacRSaaFmVyVafiumjepvUzStW6k96tDJ2GSCpM8kj0RshfA3OsgEWfG6xVgAaGnGMLAyJHc1rW6O2FIRXgHi16rPivEGmJQXrQ0ieyXc1fxmU342vIXShhM8n2m8YkvcWa1ECv5vbUtOyPO58E50zsSmpYAeueRlfElvneLuvmwAKxlYtFUotNxKs5PWy9xQc4vVFURA49BHyD0597bWg15q3kXT4QcuCST9lfK8laXPcGg6F9oFSjsqaW8k58CrioGsXrokizdh5bHaAEUI0oaDdvQ5TLDiXAUmPglikLg1RHVMkiWp1xhR7MVH1AbXiip4f7QnTcTfCSPCedwRmESI2wJAquoAbhHoMkVeielnS5k3O6OkP1WVYhnDx3AJtmrVw8lo0N3aGK1DENAnKtKa3VQVCuWrkcnjvhE7SOazPlXT2iDd3173ntYL8fxn4FHP2vtXNPCIQMLdIO2FPE0D1CmA8h09qUVpzAzVzhcTXyAPXSdhrqom0Us1t3wdCiTANjHpVhvw5BbWrhU7plp2jCvJFxVTjuLzCtM8AJ07OsTzg2e0uucSSNDDWgBuAp2e6UJhclTnw5EG3sykBV0uBfKKfet72gw1wqCooxk8d2V6N7D9TL9RjwDcaW4LDtn5qSypIxdnClMx3RxaI63oN0QhipIAoO1uxGpP113iu8ghxmKCEna6cnrQVqzXB7N53HlyGf1xhwyfFAxVogWHCdUT3XlJaecBsBM2s0ijjSs6EW5X0DC7w0p2jC1YsuLafarmLGU7g2TQkRgCKcC6s01kVVX5bReTXx4qOSC5pDfKNobL05paOBAnIh4FqYzYfjgPIiRKAkjjxc9laKkyRkGg4WAEw5WyOoE1kMMifxoilBFfJ8KlDRyCU7kcd5IOtaO8omfhlGeLkAtqkuVj228zPPsJwurW4je7s8LSu104WLsQzu72LL6LT5FWNwRcyXoG
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ecx + 8]
call eax
mov eax, dword [ebp - 0x1c]
jmp 0x405ce2
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x14], str.02soorufDBPKW5nqS1adzNNldmxvBBBRElRJV2iELSqnz945hXOE5C8NNu9EONiL86xUXVQVoeYBlqUnc7te77T8jQuVfFqumyIpM2sRgCbe0TPjtYESch3r3qhkA7m4z0F5FYenMxhSHR6v77UVPSlU2HMFYgJe8JOdNb6t4X687Pgen5V5qunY0FVJ5yzhC5zrmNOnXo5qjEeoHqtrmpA6mQ88TFafPnuQrNYqYRb6NmgzJKlv1HdWfhroYAbHMVcP8S14nUYmCjUVjGraDdnjwvrXivAXEamgqwaU3BEkc64ltOLGvzV8GAl7gUHTQpKjjXvJFuT1qBWfuNmIO8Fs05U5Kz95W4eDIcVpzF1iEW7LNimlH18wp7tV5uTGNzIcx1cYNKUYHxqF
mov dword [ebp - 4], str.rVVuw3iHIY9vX04UN1Yrn21cbqSszEn5POmw8fWnoGjPj6OqW5DJuhgb1p39JLaDSjnEVAyTbtY8OWxSUIGRUvAtDVTi4G3i5d0l25Y4WYfgHOqpigHYf6OpJSMeVMOyBSPV1YqjMShr5HpjmyN8xH21fbbCJd80nb3ETOrITPkm1qk18XI
mov eax, dword [ebp - 0x10]
mov esp, ebp
pop ebp
ret 8