Function at 0x404c95
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
push 0x3c
mov eax, 0x41a352
call fcn.00409dce
lea eax, [ebp - 0x14]
push eax
push 0x41e540
xor ebx, ebx
inc ebx
push ebx
xor esi, esi
push esi
push 0x41e610
mov dword [ebp - 0x14], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
jl 0x404eb8
push str.ROOTCIMV2
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x10], esi
call fcn.00404c0a
mov eax, dword [eax]
mov dword [ebp - 4], esi
cmp eax, esi
je 0x404ce4
mov ecx, dword [eax]
jmp 0x404ce6
xor ecx, ecx
lea edi, [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
push edi
push esi
push esi
push esi
push esi
push esi
push esi
push ecx
push eax
call dword [edx + 0xc]
mov ecx, dword [ebp - 0x20]
mov edi, eax
or dword [ebp - 4], 0xffffffff
cmp ecx, esi
je 0x404d0c
call fcn.00404c57
cmp edi, esi
jge 0x404d18
mov eax, dword [ebp - 0x14]
jmp 0x404eae
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push dword [ebp - 0x10]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
cmp eax, esi
jge 0x404d3e
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x404d10
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x404d10
push str.SELECT__FROM_Win32_NetworkAdapterConfiguration
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], esi
call fcn.00404bbd
mov edi, eax
push 0x41be84
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], ebx
call fcn.00404bbd
mov ecx, dword [edi]
mov byte [ebp - 4], 2
cmp ecx, esi
je 0x404d6e
mov ecx, dword [ecx]
jmp 0x404d70
xor ecx, ecx
mov eax, dword [eax]
cmp eax, esi
je 0x404d7a
mov edx, dword [eax]
jmp 0x404d7c
xor edx, edx
lea ebx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov edi, dword [eax]
push ebx
push esi
push 0x30
push ecx
push edx
push eax
call dword [edi + 0x50]
mov ecx, dword [ebp - 0x20]
mov edi, eax
cmp ecx, esi
je 0x404d9f
call fcn.00404c57
mov dword [ebp - 0x20], esi
mov ecx, dword [ebp - 0x28]
or dword [ebp - 4], 0xffffffff
cmp ecx, esi
je 0x404daf
call fcn.00404c57
cmp edi, esi
jl 0x404d2f
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x18], esi
je 0x404e84
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
push 1
push 0xffffffffffffffff
push dword [ebp - 0x18]
call dword [eax + 0x10]
cmp dword [ebp - 0x24], esi
je 0x404e84
lea eax, [ebp - 0x38]
push eax
call edi
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push esi
push esi
push edx
push esi
push str.Caption
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x404e75
push 0x41bdc8
push dword [ebp - 0x30]
call fcn.00409791
test eax, eax
pop eax
pop ecx
je 0x404e75
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push esi
push esi
push edx
push esi
push str.ServiceName
push eax
call dword [ecx + 0x10]
or eax, eax
js 0x404e75
push str.SVPadapter
push dword [ebp - 0x30]
call fcn.004089c0
pop ecx
or eax, eax
pop ecx
jne 0x404e75
lea eax, [ebp - 0x48]
push eax
call edi
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push esi
push esi
lea edx, [ebp - 0x48]
push edx
push esi
push str.TcpipNetbiosOptions
push eax
call dword [ecx + 0x10]
or eax, eax
jns 0x404ec1
lea eax, [ebp - 0x48]
push eax
call ebx
lea eax, [ebp - 0x38]
push eax
call ebx
cmp dword [ebp - 0x18], esi
jne 0x404dd2
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x404e91
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x404e9e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
cmp eax, esi
je 0x404eab
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
cmp eax, esi
je 0x404eb8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or eax, 0xffffffff
call fcn.00409e6d
ret
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x404ece
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x404edb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
cmp eax, esi
je 0x404ee8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
cmp eax, esi
je 0x404ef5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
jmp 0x404ebb