Function at 0x48e690
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a4
mov eax, dword [0x4dc6e0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push dword [ebp + 8]
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x84]
push 0x4b6aa0
push eax
mov dword [ebp - 0x2a4], esi
call fcn.004652f0
add esp, 0xc
test esi, esi
je 0x48e921
push ebx
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x28c], 0
push eax
push 0x4c549c
push 1
xor ebx, ebx
mov dword [ebp - 0x288], 0
push ebx
push 0x4c556c
xor esi, esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x48e70a
mov ebx, eax
jmp 0x48e8cf
mov eax, dword [ebp - 0x28c]
lea edx, [ebp - 0x288]
push edx
push 0
push 0
mov ecx, dword [eax]
push 0
push 0
push 0
push 0
push 0x4c4f84
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x48e739
mov ebx, eax
jmp 0x48e8cf
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [ebp - 0x288]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x48e75e
mov ebx, eax
jmp 0x48e8cf
push edi
push 0x186
lea eax, [ebp - 0x20c]
mov ecx, 0x1e
mov esi, 0x4c4fa0
lea edi, [ebp - 0x284]
push 0
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.004906c0
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x284]
push 0xff
push eax
call fcn.00493457
add esp, 0x18
test eax, eax
je 0x48e7af
mov ebx, 0x8000ffff
xor esi, esi
jmp 0x48e8ce
push 0x190
call fcn.0048fb2f
mov esi, eax
add esp, 4
mov dword [ebp - 0x294], esi
test esi, esi
jne 0x48e7d2
mov ebx, 0x8007000e
jmp 0x48e8ce
lea eax, [ebp - 0x290]
mov dword [ebp - 0x290], ebx
push eax
push esi
lea eax, [ebp - 0x284]
push eax
push dword [ebp - 0x288]
call fcn.0048e440
add esp, 0x10
test eax, eax
je 0x48e826
lea eax, [ebp - 0x290]
push eax
push esi
lea eax, [ebp - 0x84]
push eax
push 0x4c5018
push dword [ebp - 0x288]
call fcn.0048e3b0
add esp, 0x14
test eax, eax
je 0x48e826
mov ebx, eax
jmp 0x48e8ce
xor edi, edi
cmp dword [ebp - 0x290], ebx
jbe 0x48e8ce
mov esi, dword [esi + edi*4]
lea eax, [ebp - 0x2a0]
push eax
push dword [ebp - 0x28c]
mov dword [ebp - 0x2a0], 0
push esi
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0
call fcn.0048e940
add esp, 0xc
test eax, eax
jne 0x48e8b3
mov ebx, dword [ebp - 0x298]
test ebx, ebx
je 0x48e8b3
cmp dword [ebp - 0x2a0], eax
je 0x48e8b3
cmp dword [ebp - 0x29c], eax
je 0x48e8b3
push 0x10
call fcn.0048fb2f
add esp, 4
test eax, eax
je 0x48e90e
mov edx, dword [ebp - 0x2a4]
movq xmm0, qword [ebp - 0x2a0]
movq qword [eax], xmm0
mov dword [eax + 8], ebx
mov ecx, dword [edx]
mov dword [eax + 0xc], ecx
mov dword [edx], eax
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov esi, dword [ebp - 0x294]
inc edi
cmp edi, dword [ebp - 0x290]
jb 0x48e834
xor ebx, ebx
pop edi
mov ecx, dword [ebp - 0x288]
test ecx, ecx
je 0x48e8df
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x28c]
test ecx, ecx
je 0x48e8ef
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
test esi, esi
je 0x48e8fc
push esi
call fcn.0048faf7
add esp, 4
mov eax, ebx
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048fc6c
mov esp, ebp
pop ebp
ret
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov esi, dword [ebp - 0x294]
mov ebx, 0x8007000e
jmp 0x48e8ce
mov ecx, dword [ebp - 4]
mov eax, 0x80070057
xor ecx, ebp
pop esi
call fcn.0048fc6c
mov esp, ebp
pop ebp
ret