Function at 0x40a510
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b77b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x9c
mov eax, dword [0x48d870]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x98], 0
xor eax, eax
mov word [ebp - 0x58], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x88], str.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
mov dword [ebp - 0x24], 0
mov dword [ebp - 0xa8], str.lYdGpJnvACuBEs6qUI5LBAPADg3It7ePu94lkWITuM3umckB2mETG6w8L1WvHLdI6Ib4WSGHU4uWI3GLmQMqV0yzFrDdTGnF0Yhbp4hLulzEuPHi83aLDPNc0LAhOpPcfTxCIsJgrJ5nQjClFw2Q3xoz5qngztuGYaHUMtBFEtMWpdsWty6ggwKDP3vNGj1iw727q2EQD5wh6e2X87D6hDxCStAB4kO3iQfUjsXVzf7oh0T4rRo4XdI6rJbr1T6MS8Ex2wPrgPolG7nLhdEs80tXo6RcdlOb1t1O5uR99Xchs7znGee8pehsf0iMIVIIx2E8M3UdiWqr8vj5QIqvoyR8a45f3SgJsHotql67sfW8AIfR794Bw8gQVcRE1nInV5yp9YMCYBGJbaKx
lea ecx, [ebp - 0x28]
push ecx
push 0x42e424
push 1
push 0
push 0x42e4f4
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x40a607
mov dword [ebp - 0x90], str.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
mov dword [ebp - 0x54], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d30
mov eax, dword [ebp - 0x54]
jmp 0x40a83c
lea edx, [ebp - 0x24]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jge 0x40a650
mov dword [ebp - 0x74], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d30
mov eax, dword [ebp - 0x74]
jmp 0x40a83c
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x40a694
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d30
mov eax, dword [ebp - 0x5c]
jmp 0x40a83c
lea eax, [ebp - 0x20]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x441eb4
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jge 0x40a6df
mov dword [ebp - 0x64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d30
mov eax, dword [ebp - 0x64]
jmp 0x40a83c
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x20], 0
je 0x40a7d9
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
mov dword [ebp - 0x80], str.vPHM1aE2IT0PjzQQfRyvQQiUovoh9Xi3wXAEBsrry42ugfr5r0zbEEibLcREDLbbqHG5o7KOmIUyiEeNhqVt75LrvlLK4sCVXJAS07KF4r0MFT58J7Fq0K9PzBElxxwOUJiTOeHd9qArSqtpS3c6O72aqa0CtPtv3w9R030nyqOaHWy9JkmrQq9X3QafvvESbYWvq2cLNMK7cy55m7mp9MnsW1nky5U265PrOqYJSokSEFtbPFNTv8Iy8BNqPlJgFOmkzjcikLntE2MyfiFIvdkU8bszMsf3IksHVDNbbYDq
cmp dword [ebp - 0x1c], 0
jne 0x40a71c
jmp 0x40a7d9
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
push 1
lea ecx, [ebp - 0x18]
call fcn.00405730
push 0
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x18]
call fcn.004079a0
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8c], esp
lea edx, [ebp + 0x18]
push edx
call fcn.0040b2f0
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00407770
mov dword [ebp - 0x4c], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c], esp
mov edx, dword [ebp - 0x4c]
push edx
call fcn.00408750
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 0x3d], al
movzx ecx, byte [ebp - 0x3d]
test ecx, ecx
je 0x40a7c8
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004078d0
jmp 0x40a6e6
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d30
mov eax, dword [ebp - 0x60]
jmp 0x40a83c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004136b5
mov esp, ebp
pop ebp
ret 0x28