Function at 0x426be0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push 0x8c
mov eax, 0x6d3c2a
call fcn.00579a84
mov dword [ebp - 0x6c], edx
mov esi, ecx
mov eax, dword [ebp + 0xc]
xor edi, edi
mov ebx, dword [ebp + 8]
push edi
push edi
mov dword [ebp - 0x68], eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x44], eax
test eax, eax
jns 0x426c46
mov edx, str.Failed_to_initialize_COM_library._Error_code__0x
mov ecx, 0x7c5648
call fcn.004299f3
mov esi, eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
push ecx
call fcn.004136be
pop ecx
push dword [ebp - 0x44]
mov ecx, esi
call fcn.0042895c
push eax
call fcn.00429b82
pop ecx
push 0xb
pop eax
jmp 0x427077
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x4c], edi
push eax
push 0x77b970
push 1
push edi
push 0x77b980
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x44], eax
test eax, eax
jns 0x426caa
mov edx, str.Failed_to_create_IWbemLocator_object.
mov ecx, 0x7c5648
call fcn.004299f3
mov edx, str._Err_code__0x
mov ecx, eax
call fcn.004299f3
mov esi, eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
push ecx
call fcn.004136be
pop ecx
push dword [ebp - 0x44]
mov ecx, esi
call fcn.0042895c
push eax
call fcn.00429b82
pop ecx
push 0xd
jmp 0x426d35
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x48], edi
push str.ROOTCIMV2
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x5c], eax
call fcn.004260f8
mov dword [ebp - 4], edi
mov eax, dword [eax]
test eax, eax
je 0x426cd2
mov eax, dword [eax]
jmp 0x426cd4
mov eax, edi
lea ecx, [ebp - 0x48]
push ecx
push edi
push edi
push edi
push edi
push edi
push edi
push eax
push dword [ebp - 0x4c]
call dword [ebp - 0x5c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x50], eax
call fcn.004261d4
cmp dword [ebp - 0x50], 0
jge 0x426d3b
mov edx, str.Could_not_connect._Error_code__0x
mov ecx, 0x7c5648
call fcn.004299f3
mov esi, eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
push ecx
call fcn.004136be
pop ecx
push dword [ebp - 0x50]
mov ecx, esi
call fcn.0042895c
push eax
call fcn.00429b82
mov eax, dword [ebp - 0x4c]
pop ecx
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xe
pop edi
jmp 0x42706f
push edi
push edi
push 3
push 3
push edi
push edi
push 0xa
push dword [ebp - 0x48]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x54], eax
test eax, eax
jns 0x426d9b
mov edx, str.Could_not_set_proxy_blanket._Error_code__0x
mov ecx, 0x7c5648
call fcn.004299f3
mov esi, eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
push ecx
call fcn.004136be
pop ecx
push dword [ebp - 0x54]
mov ecx, esi
call fcn.0042895c
push eax
call fcn.00429b82
mov eax, dword [ebp - 0x48]
pop ecx
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xf
jmp 0x426d35
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x58], edi
push str.SELECT__FROM
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x70], eax
call fcn.0042609d
mov dword [ebp - 0x54], eax
push 8
pop eax
mov dword [ebp - 4], 1
cmp dword [esi + 0x14], eax
jb 0x426dcd
mov esi, dword [esi]
push esi
lea ecx, [ebp - 0x44]
call fcn.004260f8
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00426162
mov esi, eax
push 0x789644
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 3
call fcn.004260f8
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x7c]
mov ecx, esi
push eax
call fcn.00426162
mov esi, eax
mov byte [ebp - 4], 5
cmp dword [ebx + 0x14], 8
jb 0x426e1e
mov ebx, dword [ebx]
push ebx
lea ecx, [ebp - 0x50]
call fcn.004260f8
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x78]
mov ecx, esi
push eax
call fcn.00426162
mov byte [ebp - 4], 7
mov eax, dword [eax]
test eax, eax
je 0x426e48
mov esi, dword [eax]
jmp 0x426e4a
mov esi, edi
push 0x789648
lea ecx, [ebp - 0x74]
call fcn.0042609d
mov byte [ebp - 4], 8
mov eax, dword [eax]
test eax, eax
je 0x426e65
mov eax, dword [eax]
jmp 0x426e67
mov eax, edi
lea ecx, [ebp - 0x58]
push ecx
push edi
push 0x30
push esi
push eax
push dword [ebp - 0x48]
call dword [ebp - 0x70]
lea ecx, [ebp - 0x74]
mov ebx, eax
call fcn.004261d4
lea ecx, [ebp - 0x78]
call fcn.004261d4
lea ecx, [ebp - 0x50]
call fcn.004261d4
lea ecx, [ebp - 0x7c]
call fcn.004261d4
lea ecx, [ebp - 0x5c]
call fcn.004261d4
lea ecx, [ebp - 0x80]
call fcn.004261d4
lea ecx, [ebp - 0x44]
call fcn.004261d4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84]
call fcn.004261d4
test ebx, ebx
jns 0x426f16
mov edx, str.Query_for_operating_system_name_failed.
mov ecx, 0x7c5648
call fcn.004299f3
mov edx, 0x78964c
mov ecx, eax
call fcn.004299f3
mov esi, eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
push ecx
call fcn.004136be
pop ecx
push ebx
mov ecx, esi
call fcn.0042895c
push eax
call fcn.00429b82
mov eax, dword [ebp - 0x48]
pop ecx
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x10
jmp 0x426d35
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], edi
test ecx, ecx
je 0x427054
mov esi, dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ecx]
lea edx, [ebp - 0x64]
push edx
lea edx, [ebp - 0x60]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x64], 0
je 0x427054
cmp dword [ebx + 0x14], 8
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, ebx
jb 0x426f5e
mov eax, dword [ebx]
push edi
push edi
lea ebx, [ebp - 0x98]
push ebx
push edi
push eax
push ecx
call edx
push 8
pop eax
cmp word [ebp - 0x98], ax
jne 0x426fba
push dword [ebp - 0x90]
call esi
xor ecx, ecx
mov dword [ebp - 0x28], edi
push eax
push dword [ebp - 0x90]
mov word [ebp - 0x28], cx
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 7
call fcn.00402506
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 4], 9
call fcn.004288d5
lea ecx, [ebp - 0x28]
jmp 0x427027
mov eax, 0x2008
cmp word [ebp - 0x98], ax
jne 0x427030
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x90]
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
test eax, eax
js 0x427030
mov eax, dword [ebp - 0x44]
push dword [eax]
call esi
mov ecx, dword [ebp - 0x44]
xor edx, edx
push eax
mov ecx, dword [ecx]
push ecx
mov dword [ebp - 0x40], edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], dx
call fcn.00402506
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 4], 0xa
call fcn.004288d5
push dword [ebp - 0x90]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
lea ecx, [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.004024d8
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x58]
mov ebx, dword [ebp - 0x6c]
test ecx, ecx
jne 0x426f30
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x58]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, edi
call fcn.00579a33
ret