Function at 0x40ffd0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov eax, dword [esp + 0x14]
sub esp, 0x124
lea ecx, [eax + eax]
push ebp
mov ebp, dword [esp + 0x138]
mov edx, ecx
push edi
xor eax, eax
mov edi, ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
xor edi, edi
push edi
push edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jl 0x41010e
push edi
push edi
push edi
push 3
push edi
push edi
push edi
push 0xffffffffffffffff
push edi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
cmp eax, edi
jge 0x41002a
cmp eax, 0x80010119
jne 0x410108
lea eax, [esp + 8]
mov dword [esp + 8], edi
push eax
push 0x415684
push 1
push edi
push 0x415754
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x410108
mov eax, dword [esp + 8]
lea edx, [esp + 0xc]
push edx
mov edx, dword [esp + 0x134]
push edi
push edi
push edi
push edi
push edi
mov dword [esp + 0x24], edi
mov ecx, dword [eax]
push edi
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jl 0x4100fe
mov edx, dword [esp + 0xc]
push edi
push edi
push 3
push 3
push edi
push edi
push 0xa
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x4100b5
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 8]
push eax
mov edx, dword [eax]
call dword [edx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
pop edi
xor eax, eax
pop ebp
add esp, 0x124
ret
mov eax, dword [esp + 0x134]
lea ecx, [esp + 0x2c]
push eax
push str.SELECT__FROM__s
push ecx
mov dword [esp + 0x1c], edi
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 0x10]
mov edx, dword [eax]
push ecx
push edi
lea ecx, [esp + 0x34]
push 0x30
push ecx
push 0x419c24
push eax
call dword [edx + 0x50]
test eax, eax
jge 0x410119
mov eax, dword [esp + 0xc]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
pop edi
xor eax, eax
pop ebp
add esp, 0x124
ret
mov eax, dword [esp + 0x10]
push ebx
cmp eax, edi
push esi
mov dword [esp + 0x1c], edi
je 0x4101d4
mov edx, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x24]
push ecx
push 1
push 0xffffffffffffffff
push eax
call dword [edx + 0x10]
cmp dword [esp + 0x1c], edi
je 0x4101d4
mov eax, dword [esp + 0x20]
push edi
lea ecx, [esp + 0x28]
push edi
mov edx, dword [eax]
push ecx
mov ecx, dword [esp + 0x14c]
push edi
push ecx
push eax
call dword [edx + 0x10]
mov edx, dword [esp + 0x2c]
mov ebx, dword [sym.imp.MSVCRT.dll_wcslen]
push edx
call ebx
push ebp
mov esi, eax
call ebx
mov ebx, dword [esp + 0x150]
lea edx, [eax + esi]
add esp, 8
lea ecx, [edx + 1]
cmp ecx, ebx
sbb ebx, ebx
neg ebx
je 0x4101af
lea ecx, [esi + esi]
mov esi, dword [esp + 0x2c]
lea edi, [ebp + eax*2]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov word [ebp + edx*2], 0x7c
xor edi, edi
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x20]
push eax
mov edx, dword [eax]
call dword [edx + 8]
cmp ebx, edi
je 0x4101d4
mov eax, dword [esp + 0x18]
cmp eax, edi
jne 0x41012b
push ebp
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
cmp eax, edi
pop esi
pop ebx
je 0x4101e9
mov word [ebp + eax*2 - 2], di
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 8]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
pop edi
mov eax, 1
pop ebp
add esp, 0x124
ret