Function at 0x40a560
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b7ab
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x9c
mov eax, dword [0x491870]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0xac], str.9xdryTt2aVLVDXo3CzJAzwsBFGpgWVqxGlajIxMYSHVr8GkCPm94jVPxHUU6FedDojpucePGruOazCjKJ1kHWvso2GDlHTHkooFOXeDBfNDvTX3tomlmNg9EN7Xd8CblgNXJdLjGFQq2LpRImvDBpbL87456HBtk04Cnh73b2D2qz9EkDQXBvik60a2uTy2M6VjsLx6LBVbxmSS1G1r90DQ9uOF5SGQ8tp3mtlNyDfnlTSBopUrG3fujwaEFwKwFxOa7mOzYjTXXFRqVaJIlYdqY19xbo1dA6GinCjTTJV8ER7y2LTmPlAXYOsEGLeEYsQrsF9ny2aRPmpMYt7LwRvstLz9qEHaOmoVi5FEzfd21I3tV1mErv3l4DG2KIeEW0FotEhrYlqgTfPxX
mov byte [ebp - 4], 1
mov dword [ebp - 0x7c], str.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
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x88], str.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
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x90], 0
xor eax, eax
mov word [ebp - 0x58], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x28]
push ecx
push 0x42e424
push 1
push 0
push 0x42e4f4
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x40a657
mov dword [ebp - 0x54], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x54]
jmp 0x40a88c
lea edx, [ebp - 0x24]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jge 0x40a6a0
mov dword [ebp - 0x74], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x74]
jmp 0x40a88c
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x40a6e4
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x5c]
jmp 0x40a88c
lea eax, [ebp - 0x20]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x44a3cc
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jge 0x40a72f
mov dword [ebp - 0x64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x64]
jmp 0x40a88c
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x20], 0
je 0x40a829
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
mov dword [ebp - 0x80], str.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
cmp dword [ebp - 0x1c], 0
jne 0x40a76c
jmp 0x40a829
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
push 1
lea ecx, [ebp - 0x18]
call fcn.00405750
push 0
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x18]
call fcn.004079c0
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8c], esp
lea edx, [ebp + 0x18]
push edx
call fcn.0040b310
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00407790
mov dword [ebp - 0x4c], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c], esp
mov edx, dword [ebp - 0x4c]
push edx
call fcn.00408770
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 0x3d], al
movzx ecx, byte [ebp - 0x3d]
test ecx, ecx
je 0x40a818
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004078f0
jmp 0x40a736
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x60]
jmp 0x40a88c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004136d5
mov esp, ebp
pop ebp
ret 0x28