Function at 0x404a00
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415f83
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x88
mov eax, dword [0x47e010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
push str.Find_RepeatProcess
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x44]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x98], str.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
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x8c], 0
xor ecx, ecx
mov word [ebp - 0x6c], cx
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0
lea edx, [ebp - 0x28]
push edx
push 0x47b0c0
push 1
push 0
push 0x47b0b0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x404af2
mov dword [ebp - 0x54], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401880
mov eax, dword [ebp - 0x54]
jmp 0x404d1a
lea eax, [ebp - 0x20]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [eax + 0xc]
call edx
test eax, eax
jge 0x404b36
mov dword [ebp - 0x70], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401880
mov eax, dword [ebp - 0x70]
jmp 0x404d1a
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x404b70
mov dword [ebp - 0x64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401880
mov eax, dword [ebp - 0x64]
jmp 0x404d1a
lea ecx, [ebp - 0x24]
push ecx
push 0
push 0x30
mov edx, dword [ebp + 0xc]
push edx
push 0x45a60c
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ecx + 0x50]
call eax
test eax, eax
jge 0x404bb6
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401880
mov eax, dword [ebp - 0x5c]
jmp 0x404d1a
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x24], 0
je 0x404cab
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x2c]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0x10]
call eax
cmp dword [ebp - 0x1c], 0
jne 0x404bec
jmp 0x404cab
mov dword [ebp - 0x84], str.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
push 0
push 0
lea ecx, [ebp - 0x3c]
push ecx
push 0
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ecx + 0x10]
call eax
push 4
lea ecx, [ebp - 0x18]
call fcn.00406ce0
push 0
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00403a00
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x94], esp
lea edx, [ebp + 0x18]
push edx
call fcn.00403910
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x80], esp
push eax
call fcn.00401560
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x88], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x44]
mov eax, dword [edx]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x44]
mov edx, dword [eax + 0x18]
call edx
mov byte [ebp - 0x3d], al
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x404c9a
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00403b80
jmp 0x404bbd
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x58], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401880
mov eax, dword [ebp - 0x58]
jmp 0x404d1a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040a59e
mov esp, ebp
pop ebp
ret 0x28