Function at 0x402530
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x414230
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x463090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], esp
lea eax, [ebp + 8]
push eax
call fcn.004042e0
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x28], ecx
mov byte [ebp - 4], 1
push str.Name
push 0x41a523
push str.SELECT__FROM_Win32_Process
push str.ROOTcimv2
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
call fcn.00402bd0
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 2
jl 0x4025cd
mov byte [ebp - 0xd], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004043d0
mov al, byte [ebp - 0xd]
jmp 0x402602
mov dword [ebp - 0x30], str.YHSeqERdmLpYwQDRYptFGjmo7MkL9c50REa7TuGY8e6IloW33DP2dxBT7qJnd2zbQDCUfhaHYSVH4Gu199K9A8Hgko1OOexlD4DvbpKtPgRDwVHRkUDWJsXXJxSAKH4M318jhM9Jg6Th1iNzKFoUsm1S1V6eeo1C5lxm3Hkgti1vaTLVIPt7p8GbpSoqP60NRwNgRVx8k0de1OnxGvOabx7oRPyQzEn7GNob0IjMiwyu067QevUifLGkVtmlMNkaV5gSBIoXxq3lVHg95nIjWu5bNHALhfIm9YUHK6QKNpLY2ySu8jLzyOcqlA65bEh03QnynpXyvrMDTzLPmg33bifS1rGk3DqarH9ViHk7HDcDxzvWWQ6fQWEHWKdAOKmKjghTeuLu6n5ojmqnaqYivfbnUdx6Px5xLYk6OHn42cBm1FDzs0eRV7LHkIx6Msi640lLyIyzrPR7Mc2JnkVfQUHOcn8VOVxNAaUIPqU4Yg2jdCdXFPHgQvuafvc2om4VRYbjW7mSTCgCewC9aHDko8UyMCGUr3UvBKIw4x3M6iKRatp0RKlsRy17Mpv9eiTqAoFRfTqL5PGTJYw5TyYexW7gQNEoqlApMzGvsTbc41jG5wDKzmdNyXNNfU4n5mi0iEW5yBhLRNOfIufgg8cSWGUOP4KWGx9zlF6UhDWuUnsGwhzBxwBNFFyJaNIX3VYkkqmOeYGHl6wbMdBG7TFswT7lpPYpqBriJmrfX8f7Szg1dx8aOk7jgQdHm6ylqzVkgDzcR1FGTyYuPwEzDA9psqMeuIwS5LA6Fatfg1eLr4Y3altfFawnCX0FS3VfN9n9VtqzkXt0ahAc08Focdvp8jh7hDQHnwXM7SbT9afomz9tCX30CCThhHlV3dpDYJOdrm3zGlCfXy1yETdTtYXneRaScIHteyapgAOtPHXcB2ya7VvKqAyB20X0njRI3HYd6XP5kSSes097r143kpXvEGgFUm20PQ2fAzTsO1hCqFdip3L78a4aU2NBHonXjDP2vdndPBh2Yq9EdSi6WebfzyDRmc3oDDGQNn9zNIjnjUpftl1W0HdYef4M5Jh5lnDQvhzk3L3XaVqc8aauGpyfoxE6I9fYlnu0QNzQLGsp0uFGA5FlyP6ptldNNOb3X3Q5aAx45QJCSPD0zLfYecgsMYQgqkjmTM4JWUquW5mTvmMugOoFyo0XugV9prT3fXepOOEghD6OeIFBaPlxs5K4Eq5ua9emuQeny0d2OfUi2IMQfl6x3wutgccBJCzAuJJJ5Sx4f68BzpHNMNtpwMHvbHqaPfd5xN8qpBEc6Ogk72W8xEYLhzo08zbaNCulidBeJY4QPv7lx08AzjW3Ok3rKQbUDwJRM57HqxM0LGLTsYN0p5rvMaJQA5m5VWiistliUvmd8myA1OBgUgjd0U0O3dWDY6wi9qMfPQPE3X5g4y8mm794m8RyrFqSGnME4TFCVaN2vpe95r2lqPmQW3XPYlxtAovdON0l7OjFq27ObVWl9z36YClXJxklQW5Sp3y8nR0ryE977HzB0r8dOtDSH33Nl3WGfsRxV2XNBwYhhAyoMuhpWXW6K7hruTwH5NfW5LPN8mzOJFC4LIVL1aWGEpNfrVi57OKBigL3Aj6B8du7w7i9MNMi26IsTLH4Teex9krIk11ONHQ26Ajfbm7asJmHjdgXoEgCny0Czw4YIMuqS1JCgY85mplTEjscVGexRdb6uofVsma0Dd4Ddxxt4BykChOdgTgQEea34yNQguDuAXxtoCyiLg8xwyRyuMfSRkF1ethf2tHKh0dagsU5BNtskLbRaNPQPPY5L1rVhMbHF0Sys4RYy5hmALjQ9luJYQOSnvn5a8Sk8B5jI6bFwqrMzAOiMNmoSasFELnauoEHopaWXW9qgzdD9tl3JurvgeHi4230HEl0zVdNfHx9sL29ORs55Esy0fR7XYfJTfPpeH52I8GeFEESJqPnjxRQ57J7CL5QNE1hgaoCIJpHlo4II043fjWADqFRb0V7KzLXYHxoHH3aNxyRbEQhb7IIYrwuEIsFLU2W4FFYiWtMj9DQdDQjJ1X4xdEH0szYwOILCpHSd44jYF7zwqLuV3ffQoWL1asOhyN379konlG4N34dtFicdcSKCqNAqfziXFetp70DLMLWHHMi5f9WoqVRJo7ANABPaT0QMuVyB8ettsUEWe5iEChI86lNEuyf4850Sn7X9LuFNBhvoTQSBCvfX6qNmJEzxvvRIQhtRNwcfU1liJerff1fvyNNcyph4misKWWvm5Mghzw1gpXKUeWiartxjCC6MeuSNDpml7hFgfsEsNTIphdQtlVmK5i6sQ9h4SG6G8tMr2KMJ2QiR4ub8AabtvLHv9lU9xBGp3pzWvzdBlBuRdenYfHtjVAEYhb74sJQEvBxOGo69h4qjgCkX0BjXRB1zAJgaqqcHP7PX1UUav4jxJFOejom5fV9DCaQfcM814u6cs9t2Vtpi95o1jaP9tUN78zrstFS9WODellTOFd3ERnuHQuxypd2E49EnTJwNVHgCx0Fc1aF8jPjPttRBlHbuB1dU6nWRaeqSjTyuthLCNuV6pJKs2zYw5nUsBLSit26no7FFMuWpB9ehDpKcHesi5rCGWQSgqgRnXVumPJP90mVmN80L1oXYnqiKAjk1hzS1GWLNK1cV9szqf69141cqUwV8VCpY08TlD1CRRjOcdzwI3WvGskb3T2GKn1cJfBdinet7ICCMgx0CXTTpcOfXGbGTeuwWmeIHSX4G0XzVn02DtEMIKf4VQgefLO7srHRhDSwqEnHgylrrJr804EDkcxERewshghJDwReKPTaNKKXOC1zzwjj9HmmdMSUugGVfU8VLRC9XR84IHBeCXMJ5y2Q9A0FnFdEwC4IdjBWwLc7dh1QeFTTqaTHUIEIkkCGJTpYtRWUGinhxkwMmnJ676iy9esTSOcn4u7rxwMv2cUy3wVTThE0KaCaR6KRKsMGxyqa3a3wJky36FYawMGTc1uI4lCpneTsvYGtWbLjT5lRi0VXL9BqyuVAquKIaKu1a8qkbFBzexXFmENnyK4naiEmtbPguaIC0M2OeHMCojYY3IQiBfSzL0lTDcXflOmHqbzWAqQaALq4qTv8RBODh7CtXfGKLlSDAVsUMiQl0yOzJOknCv9xh9wlcQTHdD2y69FBLeDY0TcchfQhSs3xSXnKpxiNWDmzmmK1s4jVLak6RN7i0vTThTyGp3dfTaQ59JqaM2WPmRH2W1BeDrhRIBiVVbIKwVXHy6C5PMw5BHsbwhe4OCYLybQ0uUAxRzBnXStOHj0PdqtkcUo8P4XTc3obrpjnyx9facjsD2j1G1lH67UWnssA855yVS4wMfoKcKG3SJijmwl61V7mp5OaVxYVYKHKlXCCtWlIOBMdpbrMenGsgREYh29UrzPnASwNIMezTfxTPmlzDiRzzrMqRAzRW1Kcs2iyYUuJCBhpsxqMJsimi0bSwCdS1TqxsnxmEEumA3GsWoLgzt4FKq4J8VXSVbygHKm0sULAukpAKGclMUIEycPqEKGvS0yHPSiuph6C3A05dlbTzciKFu8n8CbaNyuL8pi9TYrD8m0YsrWkICfDm5J2Gxe3vgcOoPOvCQYPCyT7rbnvCqtfgpFQwSv7DDbL3zKrAp3rvva5YS6RbGmNiwblToJ5DmC34Tr19NfHST9dF5pkWpHLI9FYceuqNdsz10FB0MlRRPeCYnjl2sNUaDLhPUnpfahO2XIPaNjdFNHbcxyQ5BnevXjKjpT1TirKQJhAVTk0DFOzptxmnvBY2MkXe1z3xPVQJdu21MNy6IMayfoPKJ7Jkm3tgrM3Mav8A6XznMibxALbp2VNBI0igAVP9NWk3Mz4R2NVmUCetlRwxbHgVNNI63BFIApWzlgJzzt2BML1xpaUo8VMkbuloUUyQFsLsCqEk7X75DUUpCFPcwypT0xM32U7ylknBAzTkYHF7pukRcmw26dHpfQThRR0RfeaLhX2jnyqkD5CJJaYNKfK9OKPBxdPWsjhuVxbEmRpFuueXgWYfwGaYv3YWOBkYpGAcTWUhWoUsOKyx9z4UAi2
mov byte [ebp - 0xe], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004043d0
mov al, byte [ebp - 0xe]
jmp 0x402602
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 0x18