Function at 0x406e44
Capabilities:
Connect to wmi namespace via wbemlocator
Reference absolute stream path on windows

Disassembly:
push 0x46c
mov eax, 0x41a565
call fcn.00409e37
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp - 0x218], ax
xor esi, esi
lea eax, [ebp - 0x216]
push esi
push eax
call fcn.004087d0
sub esp, 0xfffffff4
lea eax, [ebp - 0x42c]
push eax
push 0x41e540
push 1
push esi
push 0x41e610
mov dword [ebp - 0x42c], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
jl 0x407258
push str.ROOTCIMV2
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x424], esi
call fcn.00404c0a
mov eax, dword [eax]
mov dword [ebp - 4], esi
cmp eax, esi
je 0x406ebf
mov ecx, dword [eax]
jmp 0x406ec1
xor ecx, ecx
mov eax, dword [ebp - 0x42c]
lea ebx, [ebp - 0x424]
mov edx, dword [eax]
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push ecx
push eax
call dword [edx + 0xc]
mov ecx, dword [ebp - 0x428]
or dword [ebp - 4], 0xffffffff
mov ebx, eax
cmp ecx, esi
je 0x406ef0
call fcn.00404c57
cmp ebx, esi
jge 0x406f0b
mov eax, dword [ebp - 0x42c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x424]
jmp 0x407252
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push dword [ebp - 0x424]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
or eax, eax
js 0x407238
push edi
xor eax, eax
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push esi
push eax
call fcn.004087d0
push dword [ebp + 8]
lea eax, [ebp - 0x420]
push str.._rootCIMV2:Win32_NetworkAdapterConfiguration.Index
push str._s_d
push eax
call fcn.00404804
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
lea eax, [ebp - 0x420]
sub esp, 0xffffffe4
push eax
call edi
push str.SetWINSServer
mov dword [ebp - 0x448], eax
call edi
push str.Win32_NetworkAdapterConfiguration
mov dword [ebp - 0x430], eax
call edi
mov ebx, eax
lea edx, [ebp - 0x440]
push esi
push edx
push esi
mov eax, dword [ebp - 0x424]
push esi
push ebx
mov dword [ebp - 0x440], esi
mov dword [ebp - 0x43c], esi
mov dword [ebp - 0x434], esi
mov dword [ebp - 0x438], esi
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x428], ebx
call dword [ecx + 0x18]
or eax, eax
jns 0x407005
mov eax, dword [ebp - 0x424]
cmp eax, esi
je 0x406fd0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x42c]
cmp eax, esi
je 0x406fe0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp ebx, esi
je 0x406fed
push ebx
call edi
cmp dword [ebp - 0x430], esi
je 0x406ffd
push dword [ebp - 0x430]
call edi
or eax, 0xffffffff
jmp 0x40725b
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
push esi
lea edx, [ebp - 0x43c]
push edx
push esi
push dword [ebp - 0x430]
push eax
call dword [ecx + 0x4c]
test eax, eax
js 0x406fc0
mov eax, dword [ebp - 0x43c]
mov ecx, dword [eax]
lea edx, [ebp - 0x434]
push edx
push esi
push eax
call dword [ecx + 0x3c]
or eax, eax
js 0x406fc0
lea eax, [ebp - 0x218]
push eax
push dword [ebp + 0xc]
call fcn.00402851
pop ebx
pop ecx
lea eax, [ebp - 0x218]
push eax
call edi
push 0x41b390
mov ebx, eax
call edi
lea edx, [ebp - 0x458]
push 8
pop ecx
push esi
push edx
push esi
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x434]
push str.WINSPrimaryServer
mov word [ebp - 0x458], cx
mov dword [ebp - 0x450], ebx
mov word [ebp - 0x468], cx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
test eax, eax
jns 0x4070d7
mov eax, dword [ebp - 0x424]
cmp eax, esi
je 0x4070aa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x42c]
cmp eax, esi
je 0x4070ba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x428], esi
je 0x406fed
push dword [ebp - 0x428]
jmp 0x406feb
lea edx, [ebp - 0x468]
mov eax, dword [ebp - 0x434]
mov ecx, dword [eax]
push esi
push edx
push esi
push str.WINSSecondaryServer
push eax
call dword [ecx + 0x14]
or eax, eax
mov eax, dword [ebp - 0x424]
js 0x4070a0
mov ebx, dword [ebp - 0x430]
lea edx, [ebp - 0x438]
mov ecx, dword [eax]
push esi
push edx
push dword [ebp - 0x434]
push esi
push esi
push ebx
push dword [ebp - 0x448]
push eax
call dword [ecx + 0x60]
cmp eax, esi
jge 0x407166
mov eax, dword [ebp - 0x424]
cmp eax, esi
je 0x407132
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x42c]
cmp eax, esi
je 0x407142
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x428], esi
je 0x407158
push dword [ebp - 0x428]
call edi
cmp ebx, esi
je 0x406ffd
push ebx
jmp 0x406ffb
push str.ReturnValue
lea ecx, [ebp - 0x444]
call fcn.00404c0a
mov eax, dword [eax]
cmp eax, esi
mov dword [ebp - 4], 1
je 0x407187
mov ecx, dword [eax]
jmp 0x407189
xor ecx, ecx
lea edi, [ebp - 0x478]
mov eax, dword [ebp - 0x438]
mov edx, dword [eax]
push esi
push esi
push edi
push esi
push ecx
push eax
call dword [edx + 0x10]
mov edi, eax
mov ecx, dword [ebp - 0x444]
or dword [ebp - 4], 0xffffffff
cmp ecx, esi
je 0x4071bb
call fcn.00404c57
mov dword [ebp - 0x444], esi
cmp edi, esi
jl 0x407122
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x428], esi
je 0x4071d9
push dword [ebp - 0x428]
call edi
cmp ebx, esi
je 0x4071e0
push ebx
call edi
mov eax, dword [ebp - 0x440]
cmp eax, esi
je 0x4071f0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x43c]
cmp eax, esi
je 0x407200
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x438]
cmp eax, esi
je 0x407210
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x434]
cmp eax, esi
je 0x407220
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x458]
push eax
call edi
lea eax, [ebp - 0x478]
push eax
call edi
mov eax, dword [ebp - 0x424]
cmp eax, esi
je 0x407248
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x42c]
cmp eax, esi
je 0x407258
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
inc eax
call fcn.00409e81
ret