Function at 0x402bd0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41408e
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x94
mov eax, dword [0x463090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x54], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa4], 0
xor eax, eax
mov word [ebp - 0x6c], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x34]
push ecx
push 0x41950c
push 1
push 0
push 0x4195dc
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x402cac
mov dword [ebp - 0x80], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043d0
mov eax, dword [ebp - 0x80]
jmp 0x402f19
lea edx, [ebp - 0x30]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [edx + 0xc]
call ecx
test eax, eax
jge 0x402cfa
mov dword [ebp - 0x98], str.oFHuyEGAWp1LDSoPdoAtc6YoOe5tg5pApxAkiGp8dTqkYefeHbueg9duh3dQg0vJ7WXwoMKuVfbhtx6uVLUVSgQHMD3RQ9EwCsYKIbiq9GXYnWYHNvW0BQhRUOYmHAuU6HdFVWLmu6pgbUBddP8PFa2wMWjEHHg3IozSpX0s4RXqGfhu6ejJ8fMUY1dv1aRjDjqXkY1yt10aV2YhojN1MYm1FxK743Pg5lvpCxVdS6NHfJjt4HgTc6HsuER9zGmDgrTH011FVjuFd9wc5aLBG8VAB2rJtLgsoD9eVBHUNl9aSrIqVae1Q0vNCNUjt1RUQHnlMoPzjtf75xBku5rYOdym6EotXPYrDURRxoLQu5O0u0IvbpVbWRR4YgWYIWr6PJWla6KnEUjseNO8MyuW4sUsXsK2EiLIpmwG1HI7ooGVviCaW2Dfzoyn6KbQKbnSb9di4k2hDzdUAgMk7vArrX9UHiNF5iFWIyi7PVwlGbhUQPW6zMfwgmustPoJLJY1weOApor27ywpGzFIrPdUaDPBrOUk41EYRVuFsvwoPHMWEnudFIPAQMSgUjAJfYTtOAIPhVXF8e65jASl1G71DDMzloohT2VeGUBfQvc9hdB0nqbrAoO6TEoTk4qNiwiIpbaOMkEBiDOb7lPSxjG33sKDMFKPjlO4Y4C4BbwFUlrCbWWH7ltMxh2BXGxvwVHrhehGJELw36fufSE1zgLLBHSCRGCv9Dxjs1zqINk8nOFsxHyawrptyG0ioqA1XIqo4nd19Y2fryTHRQGJTVoqNyV0fLGIjiQHVU2fI0JlBxMVDDyCWnY8M3gQVJTO8nOueS9Qb2dH44SmMi8Xh6B86jtKPtR3USJht8PEoFcmPDuJSTMbM3RYkP2m7j0EKCvRtdysNk59RTDqwQGH5duY5qk5S9YyopMCtPyHzAfh7Y9s19Liu0VJCsEUzKNSyeCgBOHh6mMaqgIW2fn5e67l7Jr9x9V44BccqEKKGAfSgjUUu0DVvRM0qTJg5pLm7OOpO26jf6CQmgrnmDBtlPsqYsY1UhS1XzLFtNMFdAoHOVflGNg8BFgPMP8s1a4lWVhwTVz5DGqk4NsSBuz1Xa5XqkzQJ3iEvlxetyYibT7UOUp5j7s6Vgv5477KHDLh6FFSlU9y0AfSa4EY5uL4R2NXqi41VcRwjaMiwqXEU27XvzUIjMllDeQQDxsa1FvixxAjivGAamQUc485vsIcMVvWEHjDDoCBcPHjcshl0w2avk0WoRhsaAAkzz2gMNukjF0UvMRt3KhG1pIVeOxlRUvm0DVXYSUVbIQEyF7sBPvrju5oG5i621C8nv2ajvbbolU2MCywMJkRwDlWM6wYSmdw0Y4Qts14Rx1xIBKHwx4XnPdvRUpiHOxdXWqvJoBRRVbLVTbLBsJb9VOezfklSFNAdsf5TRz9WNEf6gfhCT5xIFOwVpRrRzbOuIm8oj0F33RzWKmwYkvyxGe6epPTdzLRq2iEd4rx80RM031ATgYkxs7My8X2OXfSadScxQxIrVwVR6lveIKDjhQys7KynjGwKFyWDWAJxDmjmcdWNrb6OoQqiYpEYenjoRqr1AchtgmJ408uSEQpMeCYpsUaplKfqoO9nSv7rC2CoBU3oOlhjbuFkYNAhIvEO14zJYtQKeqXHwDQRzdzSAwIHE7U8QzadKvlxUOTTl3ldKEtwJ6apJAejlmLmHcLRMw9CK1vuSYS2KxMboB29Sg76zDliJQLGwtLcqiKhvLlaqb2kMogKeV68zuo8MiNdAK2SRFw9xvYv6GK4m4WCLTHnzy0NQtnxnCfNJfttyDP8mDiAemf7VxV4tomP2RFqH0NJLfLK6lT026WR3U0UH7i9OoCO4SSj7HV6bWOVIuWLl8XOlPd5Bc88nk1MqNRnJokhgISeR14wiyT4GH9Pes8qGMUs8uod14jSk3DMGGq7oMcFQqID7Dqq3eQfFp5TC3TGIs7I96m3EObdVfu7RzttyRrj5ArWx0HGMyL7WFlADd5FgIF679cR3OusVEVkXRX6R1pXzDYEo80trJ3FqmQP8YVfgLPso0DinDggf52RtiXykv94ug6Bb6QTEHm9ngI9IWDK5m1jwokwK5ii2CEgEaX5OQubqLrENCkrHwgWT1bVhns3eGCvNhJNQCTl8BVB9Q5O9wqGDPgub1DtuHQy1OAwwpVypawwJvAndjzNxUvC3Ry0mpmbwXLdXTvh2iNgeDBG8LypD6kmofco5I7f0QeEvx5AHhC0TySosKYu1RFizUMKtK8FtxKtzqB70R9fFHcdd3fNXt1DR9Qv2Qsuo3O5Mnx6nhIP6NjWKqtWTNj6rz9oTx7LxnJMQURiba2VoG3tRABnmv53llJuQzaFaswFEg67GC02nudJFdjBkVz8AEPA1rsxeFbkXNnNKqK4F9uF01iqWAUsgt42F8JEzijg5dcwEECvIdVleyxENDgJ5KXRkhrjypVGz1aOGHevgx0pS84iiSTg7I4BYFOzKVY0QlkPSwGJ51pqh7cEqi9sQyFAJMB3FeBX2xLLD3XG8eqzBksoR5jQ7oP1RN5WH6gEPaxTL8KJtqPzW5GwVBKYbknSMA238OCsEVLBrAu2mBULh6YkxvOvDoT10JIH76G6uNxjfbpz7su2sAFtixSbyBK5dx0RI7GD0U1x9EvchmPRfcoUpJjMkT4zfYc2YdCswuz5iInDHdm6MGURzuo2UjXjtRztvIowPjxHHSTgWI9Ee9EgjXC83lDb0tEVglQADrc9pmjVqwbqVBRGGaXo8JQuDqC1gCulnq0b4ScUniJcASBQcNStghvfpkt8mbr13DTOGQkva72tIXF1PtfgRrKwscaqfPBmepflBhG0bqgzEXuThFsWFkWnYrCQrxyD7VUltOuKW5yxAaiLGNjYKDBShQG6hlzBqhaBhM651l1cxVUrR843wMt9HDcBVvCytqLfl88l3PF8jPYabPr7GKwiGnUBompjaeSAiqn
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043d0
mov eax, dword [ebp - 0x5c]
jmp 0x402f19
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x402d34
mov dword [ebp - 0x78], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043d0
mov eax, dword [ebp - 0x78]
jmp 0x402f19
lea eax, [ebp - 0x2c]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x42a79c
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [eax + 0x50]
call edx
test eax, eax
jge 0x402d7a
mov dword [ebp - 0x7c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043d0
mov eax, dword [ebp - 0x7c]
jmp 0x402f19
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x2c], 0
je 0x402e6a
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x38]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [eax + 0x10]
call edx
cmp dword [ebp - 0x1c], 0
jne 0x402db4
jmp 0x402e6a
push 0
push 0
lea eax, [ebp - 0x48]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [eax + 0x10]
call edx
push 1
lea ecx, [ebp - 0x18]
call fcn.00401ed0
push 0
mov eax, dword [ebp - 0x40]
push eax
lea ecx, [ebp - 0x18]
call fcn.00401e00
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x90], esp
lea edx, [ebp + 0x18]
push edx
call fcn.004042e0
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call fcn.00401ef0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x88], esp
push eax
call fcn.00404340
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x8c], ecx
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x54]
call fcn.00403470
mov byte [ebp - 0x49], al
movzx edx, byte [ebp - 0x49]
test edx, edx
je 0x402e59
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401eb0
jmp 0x402d85
jmp 0x402e8f
mov dword [ebp - 4], 1
jmp 0x402eac
mov dword [ebp - 0x94], str.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
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.004043d0
mov eax, dword [ebp - 0x60]
jmp 0x402f19
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00406bf9
mov esp, ebp
pop ebp
ret 0x28