Function at 0x403740
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 4], ecx
push str.Name
push 0x419547
push str.SELECT__FROM_Win32_Process
push str.ROOTcimv2
mov ecx, dword [ebp - 4]
call fcn.00403310
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], str.DVrHTpMbHKD9AxI1h00j32IKuXRBXkfA6oV98hK4UDSEKxSWsPAMw7VB1dodzPG7RuV5a7vN296ccvMo42kCDuDDxNn0Dm3Jly9dvW5YMs1TuHKgAtsfnCP1FaQxWiiFCuMca4RM9KukadTEfxIYdaLweJWPiQgkwGGvz3w6igpmJPeKU7w1445yd0QfmXyew2hzBH6qAbLlC9vTeCNsixFeRpQwOmD2RXvFDaWSBKEYewnAt03iI5QdBuiNjwNyrpX0rKKh8eblT4gsGFpqCpbS4JCEoG9JSPMDh6v08TAVVDsgABwAIyBd4Gl0BRCFucGwP8y8M2aDAU5UziFsdLmQCR29pR1AhYWyiXznuViG5i3sLIGAHC241PnNgdTQ0csrg3x4OUrMxX871nYriSwLEc76xdIY4lGPL4Lczj8V7QUaPjxjwF5vbv4vAVJCCtDhnXWnKtXBRFO7t2Vrnigtso8UGf1zt7Ua1Y1SxLFBNT6zQCjWjlXvwsiB6JtKckJO8AiBmyYaSLPhCEpOeIo6DlCe1MQf0HPrAxq7MfKT4jT96cwYtx7lfIeQAwIgPlA7IRmzDfUNdg4bmQwcQdY11elUURtalOSOiPoOWYthabRA8JT9BoeuNzhg5tkqTjeqz08jSSv5GmHFSuEpt2nOFsm75MlHxpIIeaxbTqapySMRKgrpBihGTy45R0pL1i0kpqS9B5HNqzaNBHqxCF7oVEUbo5dxNDiNG8LCOkqfW1Gc11o1BSqUusvOuMj43BqA8S8CzEI3JB6VeSHX3U3QpJxM0z3xCVM0fxdP5B5YlsS2dvgpW29rLhLfIJDk5PlfXhByNI29fsqDDCAhKLfySR1Llh5SI1CrHufJlwe4ViT5StLljU8IejelA1fPvKMAkQmXyBmENmkL2OtjXv17trni5vNV7Nuz8iwutxdcdSxiQUVMwSlxx6yoo5f7Ur4aT3CcmUDotNdoOzYceDVpv8TJ6OVn1tk2QxTzDlBkSQPT960WKBWQFpDSFz0UcdJKExULXt7rDvJQHiXggUPyxP5IyYr4VtjKr3xBdVgCV35m5uqjmXpUPiCzbq5irCCoLk0vqod6SsQIAzx86nMUrGJ8S4ycAuRSGSOyRwgxzzPmcR0CX5qdt0VuYNmv0tMmFySsY0GW3TGQDi6CWg76g8R7JlM7YsGPFpnAsyVLhMRSjeHPtnXvj4dRm8W4wQvd4JPVaTuOejFkjAgQm7oYlMK11nPvkzHiHa68aMThMje8rNMbYscKhimdO4dKP3mJSwmtJWOKMptsfOSb4FrFgzVvRWGg9f69mY7Rm9Xe20dzU6I8SfzeBGvjbxIB4D9XkTdTIc96id1RoC5c5XkxQEarI8zw9ciyrWNJHSf6hWlShRhpNRNoJx58rJmRAqVbO4pfn2cpCUsmUQeKCfoccquXfcYFklYW1pOT4s3yXxr5j7r1BHP1noJWV4d50s1U4rdOf1UuR1e2eEXVe3bwCxcsjGDoUR70pT3MBz0yPlxk64s9roQ4u0lh9cE195XY0L8b40xrlgXd2p98E7yCIULy7qvyqdPAbiB4IcThPgU6TfOiGPkNhp6RS2gHbPzpNYV8R5vzGCCufHSUStxRjG183qPjz4BU9CSH2zRcen86iohaXbVHcTmIaMUoqwUtWhBJVByrIklH1ry8aovRuhXkL154lm5mnfxPs9eYr3Xi4vPK9NDwW1N6jPHBwdhI57rhKaDSyRyWNKMT1n0uykSvcI0sXheBbJqV8DzAdTtThPHimlCeuujuOS09kefWbcVk8AXWwYUxgYrycbQQ8LiktkynXhdy7THDs1KcxLVneSpe0Gm53p4GtPo1W8BbqtPF3Y0XfEm4kLDIGQ8k1IYE2T0031so1PKS4vPgBMSproHjFYvz31rFlQJtJHpHfabnNGsvw62ma0KdKCawjCXCwJLHcsFuURcRQzauTh80KmyvgB4rdR6IFo84k3Y4kGdKTijovNmwcMpaT2wik6wBPnD8FLKybzW1WVlN8THjc3d3TecFuIWj15WyyrS3DLrk7DLGvw1R7usUSO2MF5bfaBycWoUtkL70LxcpisUP4WcoXHlv6B7eaRLYytUGllDVtOiI8eT0PK33H1Lm9HIqSuL2L1zpcx5JXDOKB6hhUNei6bestO2s8UtAGV8hSDNCdcA3e9cKwswrBS3BQoahFjJ27ApMQdvqoGxwwaBByCiH94NelSkgeDaTySPmY5dFSkDuTLjbBHvb5Wrp8MMbrCdRdgnhBmguenXELhV01DFQg0fPDAUaWIbI1EAIxomEe6E8tOUELRSCUWMSwN8KldapzvCL1OuBRIUnkhyWBnPeNP0wBWVT8582cNdnKw1niy5gziVKWBLl6U9oTzVTM8OOU0CqUEzGUTv5ph19SyxxqKMLEfNtKSR9s7JE6EbSk4Du1pxihKxfR8PykwgJqEFvfF1Gmc9Wjo3vuD6yEcLLY7xjw1aa9xuypGu4dg8uRejBUF7nerMnK4rf7knEbnq6MHLcE26MbV8AiYQoVxL9BAsaa3UtNKn3TN2p52mJESiGCNmlr4p7twMySQNhd35u1y3RnYySTtCvN9y74629G2YxLmd9xp7D43aHRUDqI733IMaKQew34vVSrgkvUJRPHSiSl8Ub8eAHdfLqyAkuQBPXNescnHyAgdVg19YClgig4QJsDOu3KgeOSYWrXJfxNEaCBMNQLFmT1Dhif3CaXGW9XciRB2Os5mECe8DC2V1aKtrxeWVc4ldfvDYufzXfy2DLux7kXwy1UW7V9HbnaVw5d3DHK6fYpOTxrB80zWoN8pYki0IPJtJgVaUhW50QtsQfzdXh5JYfU1AMA3uBOd12LMCpBMrcl9s6QvdwWqTuMDhqKAYAMGQgYHyGthzvhCgcESLEMyK3cWez7QhAyG6t4IE2djgng9oxR3TgsHfPzntELA4isgTPIFUPssaAWsy2NTaBXqc7g7Pgv6zigIK900vEbTXhQNTrt13oB7TtOGpkLgIhY2gxALVPVok6e04Qj4IIfw67pCxVkVKXgPkiojEOa4lHY87CunBG0SWCNXMOD82UfsSeQdxigJ6ITuFrH4blVLQk4pJ6mAMWM6VXCCjKjIB0o2eMpIyYk8NlKFMj4J7r04mRGS9xWEkTkjLeeoe4blr45TuvNqQiFvMUIddTySTLneysvdFzmYEeIQH8WQQddJGYYhJlA9PL4MzFcbUL1kvCrIauGmHqzX1d5paqByELMatBLflbGfi455CA4rEFikb2Uw6GfDOrFDEulaSAagvkxTKeTIHbwM46JfpGciJdMFa6yEP5CwPfPvcXSVwJWeWl7N82gPLhVOMGFj0VxRaF2Fx8wYuBQtC0W3uhhVeBNP14uzCLJHArivlO9VHA69hvswX5dFpTSx3wqPpqm8prOx6SUWU17PCCdnb35vuFuYKTrku1RR9yWGeWPnEGUXKk5o0OXkG9NhIv6etW5itG3haoGD6X7TfUi0t44n7oMHgcwxpQ6pkKAXgoan9HQQaTojSrBhQ9gHmmqcOEnQNF7RNPHknhTXX6d1FFV5V0QPIQ62ExHVdpfs5rCm8AAeBy0turrdmf2OL6pJlVdy5VGBiD3vo1NysBeGfuEs4Y6tAYOUJzjj9ddyCEVWRv3KnQMi0x63V3aNYWj49pMojfEXas5YYumtE9QA1lrzP4cVuXwynIIEH2XR1O54QTpk2CUtLFo0ypW8ksBFD0xAEDaHceoLhfoKJFPwXkLJQf4OoplxB1YkH4kiHYiPNt78pWKVt5qwrsVvkk3fqOaDAoDQr7S8D6VGbncxnLkwXKQVscDIFHsWfGjXjr4EI9PzzaWQYewi3xTTNzCNogCjO3HEaxBAF8kNDJbWLi7Kg30o6t4c4kIoEzcgLK6cO7vjOOnDrPhf7gSwMrAxEY7yjnhBTbWVeD6S4qkjTIjv6Taw0zrkyByLvBuOfGolCNkgJMb0fRxBCudOzrqWBQ5EfputrVvarb40EpnpNao54hgU5aVH8B4rDWYv8jbfPTIA86JQ4xoNLjnuJkTKR1d46qLhP08zEzioQSljJV531p
cmp dword [ebp - 8], 2
jl 0x40377b
mov al, 1
jmp 0x403786
xor al, al
jmp 0x403786
mov esp, ebp
pop ebp
ret