Function at 0x403e70
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x414db6
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x94
mov eax, dword [0x44a1d8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
push str.Find_RepeatProcess
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x44]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x74], 0
xor ecx, ecx
mov word [ebp - 0x58], cx
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
je 0x403f21
mov dword [ebp - 0x80], str.k3m5weGLjzQwgHm0bdIWfP7S9g3Ty81n2XXKlcUSBo3nSvit1A3wQsD5h5w9yOxkSGIqko8jnCcER4d63VYUN8X6GefE5VafqJyTHPVVxGKviuaMrVi0PqokF2dmsTjlWtCDgbN7gjPhe2ws86Wlew6AM96uYdRJv3aOdC9G0y8wJV70OK1fJ9cbQycq2s5wWuAknVfSsQ4WUz7dV6HEECCPXztKUgyKQDqK2tgszUBxTo6QI6piMRgLsQvh3nkpy7nm0bgyCNrqNT3FbBBxrlRBWlv1MAOrdsgaAzbO5SRXKHjj2gWtt66tlmlaxOPLGW3QFKRkJSMHWuEqPxdUeKsTMwCFLhnlhUXziAO7FYx1fjVdT1XyhwVzfrrb8FJc9uqvwf51poIQg1nvAYnUdtSfgvTyABD7yQd95WQqA06Q92SS2ObHp3OfNewtXSuQECLnVuj4WwOzXsjkxL8rP25cxLxP2o47ldBQAbt2z6CJLrPJ8X5nYOVeoBMHB4uzkTsR2VkUJ5WiDe53Dk3pSkuSyAJoxXkP1L7uNgEL2fQnD913CBbc58OdtQwnFbvsEKzqWde5hC0lSC4zpnL3AjODRRUmRUnXbAV70rCMBDKKv6Xl94f1Yyh8Jsig0rDPmPrG3bnimY5kD9T5FTcPm8V2jJJaW5puGVw1FeQrbIA2rpppEWjWhTmb8bUnEicjr5FCXWmyXex34AsXt8svRf1QXzaq1yRDDmAKxl4oSdPHHvnii8CmLdjNR3q10tJK7D5nyU39nG1AxYTT5xX46luc92l3xGsSpE78DNfv82fsO18gvHJRvOIGoj8EDV6eRVLnXGwy6UmiJBzM4QmJcl1mrYHaf37UBRibdQCSxoOgzQ9PX1okOfkLpuA5oTl5sD3jy99wULHJyX8Ld4x0BquTFzWa5t2K4izdJYDW0JLj0bdPzGDQgldfSkBkmONVPFw5Xnv5PioKaQrhyoFC125FUa0Ih4EAUsGMYV4iFLB4nnjhuyJND8CxoVcdbgr5bNvIiCtnOHfYgo8sQOd5gcKU04PtPY1i8pEcNreaBYOnBhyzh0E1shoE6sf6MdLK6Fb4ttKIcGfsxC5wllf6mHFgkjUkvokqaRONcSnpYwmn8HAyxmPu9fScfjzHbbiiLe4JVAUecDkB73YXOu4bapRskAc8ApluNTa3QaHJ0CuUQl89r9kYQnXDTI6Nba7bu29GfTB3qyvtlwYx9GKyO31TbJLg1GiAvIMtwNWSoVjHeFrI0phnO1q2k72nOrz6QXD3fzEwIH5pO6uitAzJJA3jjNVlX6E5XL1R8B6P8jfG2m4Xsq6KAMkF4bOHqwf2E62f22dhdAxYr8avcuFpuaSUrURIkwHkyk7RMsr4fl3IjVoG2nrNkasqT6flcbja2HvDq2mq1BThaAEwhMlydTpDPwbV1Wx6rXlslhQEU2cpVObLTVmQHFb5Olbo925Rj33Q35duMaE9C6f8qUT5Jqoks4FoKHjGHJwCnXTMwYXh43OT0LNUyKSUsB6lRojliJ5Nu5Cm9PKnXqANkkojITIrCfOrkHQ6kBxIQgh2ItCKN8U8Gpqs9J8uMG8EMmpKCQ8YiUWEn17wVdUHUF9O3LxHU0kILcbAyNxqW9W8n0IwvQlNtFc8YbDG1FC6A
mov dword [ebp - 0xa0], str.E4kTWN5dLfJ9ifE0IlzkWeaJbxMGwYWBzLadiNeK3N5mnGR8FIKpgaGbqF9T7sqaA0lCm04uTAzwbd0OVAKwcFrQxtx07rG6hk36uWOjTu7WwSPT5z0DXGFYSDOX0bolFTr6ixifHvXR2ClS9OMa3zhVPVcN0KfxlrtvD0XwVGNu5az3I8l
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x88], str.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
mov dword [ebp - 0x98], str.TooOIPSun44RzzSqtrq7EprD3AlJXiaMdzCWPjXmwlmc5DaLNs8HMowViqumFgsWC5iTSWgccHjnAnhJaQFXPPn3V9y5fOh2mLRP6I2jnR1I2nAVcFCHkijj8svBJSHsYozJPl7BT3OR0rs8UUmCX49FXyB2MBTLsEpqAbOzySlMIzi7Lx0bx9cEm4jGFm0yag7A1kXf5QQmcA0ROI266uYuJiNpbpG98VcVnrumEsbHUP25yq786R96AdveJGJKm2GfXUKPfDAwP0mVUUBKfvW5vitqE8oE7PiIbxfz5nrEm25WKeOus3SPLTQAhprv2tQpDqPT2T9WjQ6qY3ArAzI3kAMpn8nNTIHWT8GqBA8nRj4vKJhhmBtMK7sD5UuPD4JwnEd7X6O0DcobetWPgGf3cJBIPcQWyIBkywkO38ixlo8cFRxVApUFz8muHkhjs6fhLCfdccglAPE5MN9v6lbTFGWm1PmCgVLeQ9j0Sk3fbQilUwSshlaxqz233qrSS8Kwfwqen8u64uX13cj0XT7qTleXRUwBNxhHFNK00CsrYRkBGOrzi7yobU5lqimQ6SNCbFEr99KCviFaXjKSKLclAUrN8kpHXkVwYrlLw0iQXL6s9iPcsKs7BFjM2z97ClfPe9wmSWvEb6A9JocX0NgILCO43A0lfBUmTNGVdcMBf90ezjFyyYNCRQekxD7rV0idpUfRllV72AliBcVyMT6vjXnbleW60sLRaMrGNtlsPj2DYeFTiY6eh3G6J9iCXTSgspj6RcXOpuJ76AHUDotNAJ9rtsiYJyxgcrFRmlvaJ9ddkq7LmTK74uUOqH6WC5F1H91IE3ucPBDzKQfHd17ByyL3CIbYkMn2jWOj0mhXF86sXP4qsaTylNq6ziQoI0F9sWb2ClvK0iNTrzQ30Il1WRzfdXeBkgxe0hX6UKpos8ffhqPK8YpP59ronJIpmg0haXNvo4Gkw6caeYjNwfTIBGH1L2VQAX5kA268TbDJgyV3Kl5MtQ5F8RVHJ2oLYH1qnDKMEu1foJSjFKJyr4LMBKXKfWD4oJm9eD5eRWV0AiDhJ8CAssv0ItleFbOT6hbCACTaya7WogfCjGJjBFlWyNKXXPkJixeUD2mIlyGiEjX5O33VJt4OKnk3qEN3b3cSstlzrtjtALioOetpAL6fzKENC13j6LI6TGnTAc2eHATh3OKdkEce8lEqeyW7WiKC7a3rTT62kAoCGTnt4kLUHtYU2xSYtEHMgSawdTVeQyYtp7uYQEseuTXceMTwt7D3ScIfRLV9BWWUpjxLjzjdY3XQc3T0E2FTVWjsDcSB56uOmQQljmY5JmGs2ORnfkOlHjbfhWWnxeXKwHCE1zNhgohuEsYkVw1MIMdTBQIc2lPXApX7O9HqcrQGpLsowme3YgOzKIyxuhG6O6bDhx3sIiIHJTDvIbegD00ckxrPiOGY24wkstSJXi3W70hceFjN18j4eJUQ5dDzDgGGBg0GfsYAeSnNFobpMqr3LfzPT5jbYRwivaCVn80oYo05DEkYkaFVIhjC0YzsnQHRCYAUBUVQrniaGz5zI8SohimLOxmv6VJi90i1ADT0VIvzjfB55eRmRHp5XKro7KP6JxKTzbuFMh2zkeSq1ykYKxW3PGfigAwppow5CNtCoFpmr4ShIEOm00IDVErLozE1HWqDYws6Hc8FeaioOdslFIPIyuefptaNTcapLbuRsKKGmeJiOX2gngPskH39gwRqbe7JCv7WFX3ABpOh1R30m3JfettR0hAjtjovO7kDI1XyMg3nxYHWuH3DxYYKjnnjtGxtnAcogxYpEvlRcql8L7rb55oHLBIYQUfC4lTVmFJTGpGvGkGe3CaTEIV7Id11zM78J1tuvfrgbecJDU6eWKRd5vvY25CvXax9YHoGQjhBFcPEmjS9pIjvit25sgB2UQi4FbidAjlRzEeRMtPgKlxdi0iVyTFIQvExYQ4K25GG66Ktpic8A6LMbQ7S
mov dword [ebp - 0x20], 0
lea edx, [ebp - 0x28]
push edx
push 0x4474e0
push 1
push 0
push 0x4475b0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x403f84
mov dword [ebp - 0x54], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401550
mov eax, dword [ebp - 0x54]
jmp 0x4041aa
lea eax, [ebp - 0x20]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [eax + 0xc]
call edx
test eax, eax
jge 0x403fc8
mov dword [ebp - 0x70], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401550
mov eax, dword [ebp - 0x70]
jmp 0x4041aa
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x404009
mov dword [ebp - 0x78], str.yAL9dFBX5qCtaK5SVSRnDQ3sL90nkdLODJLqQ8zgbpJ2RsUD8BrzxxmY3sxF5Jg7xqAxVBhkCkSv3vL8saMwtRV4qfeHpVNyvaH5qcYTT4fe4gje5De6Gmfx4GSPKl4R47JGlmUtjzH0TXI2sMebtUL2X7YR9pb374x1LVgh33Sa8LAWoVwFfRSWWYH99uIoRrcHTd9mlnDh1qH5fyC5XP6MbsswDqjCmsF6QH8n9oIv5yu9lH469HB5JFTkYkHRD7kQogg3olcvYfQ76ppa6HuykGUcJEFsSP51H1KfCUSfIicVpWoKxr2l1L0xh7bafb7jGedJVmv4wQzE9E8k0jBhoHycgLSUSMWnXXjVUxBNVmFDfY6dJxJVySRuyY0TXmyQW6V0GQHKHBOmPFqLemejVM6kPW14mo4lk7h5swkBjmtoVFOUKxEVtLH1F3orU6wNdQPy1SyUwgLjEPdB1BRPMrrSjEJxOYd0CSorAv6kOvqRUzUl0rxwIJndBSWOFUQp7VUtrAbMnPlwuIw0l7syrxnawytiWfqLUWqyefL6uCYn6yUKlSlyzI2Eeafz2HbbR2UAXyCRC1h2hRc7TgYhR51tei47xaeHNMSXde5suFf6oUfXstbJJdp7at7LDUcDhp5P3WalWxFhzYjqjyRg0NFOqPHT46xGkiFyuXBSEW10nNOvoNKQ0W9zXvCUJH9AGvGHq2esvEVV4PR95yu8FECF5nTeE8PUTdTqkQgJH3hMSSx0AjrdtLkEnRJiSaoVoHJjfYsFLc7dedPv0HCJw4WlO6yzUfgp1KOAFzdp1E9Ga9BI73o51a5X91E6CpzSOIsVdf2Gy8XpbIyUyfGGnhbmWwMJuxcDPGUAqs0GDJFwTRDVfsyQUhLtsYvLqWbQlV3M0k2PJKUbBQuQGgj3oV2laFHnzjeVDR9KjNagP0g2PfmSrkGInOmG4t69mCGq3UQCyCAMsS9aoXcs6pLfangWGPkbtcxaSDdxPSp5aNghLkmtyCy3Cn7cn4P4CnQw0N2K0xQxiXjaro7jPTbaymmLP5NkNviYX4GgB88aXrGD2EA32UjCkq230sj0oy0MurDMS23gETEujAUFTSJNJUVylL4UxLSP4KQwJ9X4hiQakEhwbI6dkMvHIP5BCkVs7A8PKSOEbPcGikWnwaQygqHLvKIdeven3h5cgb92c0WOPtFHL5hRj47fKfdj2NzVpKeeoD0iHI4noAedjXASCb6n1u0rJnmPEpWG7bqH5DoATHQHHXfUkRK5bKXNoBThrfOiLEIR9k307X9thYKPDy6NacIP23YFKuVTBET6iY0MRRDyb5j2myBdgA4YMGpcnw5UrImWbupb4nOMltPnQ4ag6m3HPTQNWTLfHf2hQlEoHM7JAwUjut6NJWYSYz7x7sLGSLErvMXmELxeVS6esPRJBHT9Pt0qX8dfBeXSClzuzWz0Bod6vgW0u8KG7uLiBupj1H0bqYGgTe6hUANICpYPUXuarJnMJSvFl7QLC3BWjKhGpgadK23qgJeV0TF3l0miOw14EMKtXh9lWu9TTUAUAPc4sgoCCQolF2rrMcExx6DLDIij3XtqMrKjNNPRy0rPlRddnghengV3jeoGK1vgEkrTLdL4U3UdWpwUYTKSayHwoGz4t75kC4pAouzavj4HWP8oAB0mU955JvJC6BdUzGWBGmeSc8WuCsTRQvU58hKUBUxoa7fuhYiX67AobbhXgE8yavz9LMgEzwfCegRvhyPnCDoiQsnHbRsDHp9pm63opcLJSPckSO3gNnhEThew5jeSYp3AEvViQQx9pkFhXOeaF8GIVz7PE6rRPrJa4YvQATppL2LFfGSh8QXRW0esektFQM6UOJwIIUkAdMDlrKGGSMlrjoaHRQlW9iqK7bQH8OACqrl8DMlmt7vcEfrmo0HdhalalIs1HflDNlyKlQUPF1efyRlliELUfLNj9NofeBASqnyRAdKlqEk9yi2ILcjlvN6W
mov dword [ebp - 0x64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401550
mov eax, dword [ebp - 0x64]
jmp 0x4041aa
lea ecx, [ebp - 0x24]
push ecx
push 0
push 0x30
mov edx, dword [ebp + 0xc]
push edx
push 0x41b084
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ecx + 0x50]
call eax
test eax, eax
jge 0x40404f
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401550
mov eax, dword [ebp - 0x5c]
jmp 0x4041aa
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x24], 0
je 0x404147
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x2c]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0x10]
call eax
cmp dword [ebp - 0x1c], 0
jne 0x404085
jmp 0x404147
mov dword [ebp - 0x7c], str.h4fV0o2ombjTgMu1bggzCAu1NGr5oEzDoc7HOjR4zEhsCXDJBRFpfAj7kt7t3sHX0NeQdNEpQ0rVwDShtWeOTAce9uKpPM2nMAQ4wPinLwcJURtdHjQNwA8wPWcn2tCokX5aLXiLnOhVWKKy8xjxJ8B1pjAv8mAVeaO8GcIlbHJcWo5GxXbiRfLBkhpxPj6m08P4H8cH6h0TuUYnGIRvXvi8vQrU3dqo6DGeYMYmxVLYjs0MgEDLL0rhlgQDRXV7WbL1lMQGnh54naKuUowKJj3DE35rCs23X2lXkddYSekqOcYpgnsmYxyHHYVCMCe4rdsKdH1qPWdW2KsSQK8ynlVPg7v95p7tGy0bUmM5rRLaz34Fds7ttOMiuLhDrLkVVAFc7QEUmFlgcgJQ
push 0
push 0
lea ecx, [ebp - 0x3c]
push ecx
push 0
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ecx + 0x10]
call eax
push 1
lea ecx, [ebp - 0x18]
call fcn.00406660
push 0
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00403100
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x84], esp
lea edx, [ebp + 0x18]
push edx
call fcn.00403010
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004034b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x94], esp
push eax
call fcn.00401330
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x44]
mov eax, dword [edx]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x44]
mov edx, dword [eax + 0x18]
call edx
mov byte [ebp - 0x3d], al
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x404136
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00403280
jmp 0x404056
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x4c], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401550
mov eax, dword [ebp - 0x4c]
jmp 0x4041aa
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040a32c
mov esp, ebp
pop ebp
ret 0x28