Function at 0x405720
Capabilities:
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x416110
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x47e010]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], str.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
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], str.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
push 0x42c90f
lea eax, [ebp + 8]
push eax
call fcn.00403380
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40579b
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00401880
mov al, byte [ebp - 0x11]
jmp 0x40586b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp + 8]
push edx
call fcn.00403910
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 2
push str.Name
push 0x42d4c9
push str.SELECT__FROM_Win32_Process
push str.ROOTcimv2
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 2
jl 0x40580e
mov dword [ebp - 0x38], str.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
mov byte [ebp - 0x12], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00401880
mov al, byte [ebp - 0x12]
jmp 0x40586b
mov byte [ebp - 0x13], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00401880
mov al, byte [ebp - 0x13]
jmp 0x40586b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18