Function at 0x429ecb
Capabilities:
Reference wmi statements

Disassembly:
push 0x2f4
mov eax, 0x473913
call fcn.0044edb8
mov edi, dword [ebp + 8]
mov dword [ebp - 0x244], edi
xor ebx, ebx
mov dword [ebp - 0x23c], ebx
xor esi, esi
inc esi
mov dword [ebp - 4], esi
mov byte [ebp - 4], 2
push dword [ebp + 0xc]
lea ecx, [ebp - 0x300]
call fcn.004023df
mov byte [ebp - 4], 3
push dword [eax]
lea ecx, [ebp - 0x230]
call fcn.004038a6
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 0x10
jb 0x429f23
mov eax, dword [eax + 4]
jmp 0x429f26
add eax, 4
push eax
call fcn.0041d693
pop ecx
mov byte [ebp - 4], 3
push ebx
push esi
lea ecx, [ebp - 0x230]
call fcn.00402a7d
mov byte [ebp - 4], 2
lea eax, [ebp - 0x2fc]
cmp dword [ebp - 0x300], eax
je 0x429f5c
push dword [ebp - 0x300]
call fcn.0044e64c
pop ecx
lea ecx, [ebp - 0x238]
call fcn.004028a9
mov byte [ebp - 4], 5
lea ecx, [ebp + 0xc]
call fcn.004093b0
push eax
lea ecx, [ebp + 0xc]
call fcn.004078f5
push 0x47a658
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a0bd
lea ecx, [ebp - 0x230]
call fcn.00402e36
mov byte [ebp - 4], 6
mov byte [ebp - 4], 7
push str.Version
push 0x477a5d
push str.SELECT__FROM_Win32_OperatingSystem
push str.ROOTcimv2
lea eax, [ebp - 0x26c]
push eax
call fcn.00428e1d
add esp, 0x14
mov byte [ebp - 4], 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x230]
call fcn.00403448
mov byte [ebp - 4], 7
push ebx
push esi
lea ecx, [ebp - 0x26c]
call fcn.00402a7d
mov dword [ebp - 4], 6
jmp 0x42a044
cmp dword [ebp - 0x218], 0x10
mov eax, dword [ebp - 0x22c]
jae 0x42a059
lea eax, [ebp - 0x22c]
push eax
push 0x477bbc
mov edi, 0x49bba8
push edi
call fcn.0040356b
add esp, 0xc
mov eax, dword [0x49bba8]
cmp dword [eax - 0xc], ebx
jne 0x42a083
push 0x47c434
mov ecx, edi
call fcn.004034da
push edi
mov ecx, dword [ebp - 0x244]
call fcn.00402e10
mov dword [ebp - 0x23c], esi
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0x230]
call fcn.00402a7d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x238]
call fcn.004028d3
mov byte [ebp - 4], bl
jmp 0x42a5df
push str.osname
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a16c
mov eax, dword [0x49bbac]
cmp dword [eax - 0xc], ebx
jne 0x42a139
lea eax, [ebp - 0x26c]
push eax
call fcn.00429a25
pop ecx
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x18], 0x10
jb 0x42a0fb
mov eax, dword [eax + 4]
jmp 0x42a0fe
add eax, 4
push eax
lea ecx, [ebp - 0x234]
call fcn.0040364f
mov byte [ebp - 4], 0xc
push eax
mov ecx, 0x49bbac
call fcn.004078f5
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x234]
call fcn.004028d3
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0x26c]
call fcn.00402a7d
push 0x49bbac
mov ecx, edi
call fcn.00402e10
mov dword [ebp - 0x23c], esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x238]
call fcn.004028d3
mov byte [ebp - 4], bl
lea ecx, [ebp + 0xc]
call fcn.004028d3
mov eax, edi
jmp 0x42a5ed
push 0x47c430
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a18e
push 0x477a5d
mov ecx, edi
call fcn.0040364f
jmp 0x42a145
push 0x47ade8
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a1eb
mov eax, dword [0x49bbb4]
cmp dword [eax - 0xc], ebx
je 0x42a1b3
push 0x49bbb4
jmp 0x42a13e
call fcn.004287e2
mov edi, 0x49bbb4
mov ecx, edi
test eax, eax
je 0x42a1ca
push 0x47c42c
jmp 0x42a1cf
push 0x47c428
call fcn.00402e55
push edi
mov ecx, dword [ebp - 0x244]
call fcn.00402e10
mov dword [ebp - 0x23c], esi
jmp 0x42a0a6
push 0x47c424
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a292
mov eax, dword [0x49bbb8]
cmp dword [eax - 0xc], ebx
jne 0x42a288
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x234], esp
push str.nothing
call fcn.004038a6
mov byte [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x248], esp
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_
call fcn.004038a6
mov byte [ebp - 4], 0xe
push ecx
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.HKEY_LOCAL_MACHINE
call fcn.0040364f
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xe
call fcn.00426186
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.004262b6
add esp, 0x40
push 0x47c0e4
mov ecx, 0x49bb74
call fcn.004288cd
push eax
mov ecx, 0x49bbb8
call fcn.004078f5
push 0x49bbb8
jmp 0x42a13e
push 0x47add0
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a337
mov eax, dword [0x49bbbc]
cmp dword [eax - 0xc], ebx
jne 0x42a32d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.AntivirusProduct
call fcn.004038a6
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x26c]
push eax
mov byte [ebp - 4], 5
call fcn.004294e1
add esp, 0x20
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x18], 0x10
jb 0x42a2ef
mov eax, dword [eax + 4]
jmp 0x42a2f2
add eax, 4
push eax
lea ecx, [ebp - 0x234]
call fcn.0040364f
mov byte [ebp - 4], 0x12
push eax
mov ecx, 0x49bbbc
call fcn.004078f5
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x234]
call fcn.004028d3
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0x26c]
call fcn.00402a7d
push 0x49bbbc
jmp 0x42a13e
push 0x47adb8
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a3dc
mov eax, dword [0x49bbc0]
cmp dword [eax - 0xc], ebx
jne 0x42a3d2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.FirewallProduct
call fcn.004038a6
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x26c]
push eax
mov byte [ebp - 4], 5
call fcn.004294e1
add esp, 0x20
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x18], 0x10
jb 0x42a394
mov eax, dword [eax + 4]
jmp 0x42a397
add eax, 4
push eax
lea ecx, [ebp - 0x234]
call fcn.0040364f
mov byte [ebp - 4], 0x15
push eax
mov ecx, 0x49bbc0
call fcn.004078f5
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x234]
call fcn.004028d3
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0x26c]
call fcn.00402a7d
push 0x49bbc0
jmp 0x42a13e
push 0x47ada0
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a481
mov eax, dword [0x49bbc4]
cmp dword [eax - 0xc], ebx
jne 0x42a477
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.AntiSpywareProduct
call fcn.004038a6
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x26c]
push eax
mov byte [ebp - 4], 5
call fcn.004294e1
add esp, 0x20
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x18], 0x10
jb 0x42a439
mov eax, dword [eax + 4]
jmp 0x42a43c
add eax, 4
push eax
lea ecx, [ebp - 0x234]
call fcn.0040364f
mov byte [ebp - 4], 0x18
push eax
mov ecx, 0x49bbc4
call fcn.004078f5
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x234]
call fcn.004028d3
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0x26c]
call fcn.00402a7d
push 0x49bbc4
jmp 0x42a13e
push 0x47c3bc
lea eax, [ebp + 0xc]
push eax
call fcn.00417b5e
pop ecx
pop ecx
test al, al
je 0x42a180
mov eax, dword [0x49bbc8]
cmp dword [eax - 0xc], ebx
jne 0x42a4ce
lea eax, [ebp - 0x234]
push eax
call fcn.00429a6f
pop ecx
mov byte [ebp - 4], 0x19
push eax
mov ecx, 0x49bbc8
call fcn.004078f5
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x234]
call fcn.004028d3
push 0x49bbc8
jmp 0x42a13e
lea ecx, [ebp + 0xc]
call fcn.004028d3
mov eax, dword [ebp - 0x244]
call fcn.0044ee14
ret