Function at 0x40a5d0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b7eb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xa8
mov eax, dword [0x48a870]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x84], 0
xor eax, eax
mov word [ebp - 0x60], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x7c], str.WVNzO1m35mh0GPhU7G0vQgEz7oseFabPnfU4AK7fCqsL8qXjymJYwYURIYJpmwaAEF43FP0osGjrrpK6wa65bYqWFHTI2BknzxPU3loHwc5uTxj0sLgeNxxSjIwpL65xJnxAdh5E5HbpRXfuDYamWQ34lOpIH7LdCKcyhwnYJweHKdaQcLp
lea ecx, [ebp - 0x28]
push ecx
push 0x42e424
push 1
push 0
push 0x42e4f4
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x40a6bd
mov dword [ebp - 0x54], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x54]
jmp 0x40a91a
lea edx, [ebp - 0x24]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jge 0x40a706
mov dword [ebp - 0x74], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x74]
jmp 0x40a91a
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x40a754
mov dword [ebp - 0xa4], str.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
mov dword [ebp - 0x94], str.5Y0ggOGAh8hU9XrBghCtQC1KQkhzywMVVHdWFlYECcJAFtO2AeDKgdclmt7Lnb8yACTJk7pBCBjR7WcvT8ANAdUcBp0GSKOncim2MH5WaIapbTvqItlUBsI3DarBQKYNbEyvAIx9UJCA7pyHO5pB7PzAgz3vukBFdV4XiSEBjD5vG81Fh6W
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x5c]
jmp 0x40a91a
lea eax, [ebp - 0x20]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x44bc6c
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jge 0x40a79f
mov dword [ebp - 0x64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x64]
jmp 0x40a91a
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xb4], str.CkQPUdXXQ1p2oktnAFA0q2TEt1DMukeuYCBWmu424mycWuDQJeUv8waJo1gM3suR27ibEu0B9smTDKYSAnVBv6547CMkjKlwOu919kjAlQpADyAeXn2B3oGanNLsjWaEmcc5TE2IlnGnnmD5AlqYRzCwjI3QmJoSDolbFCQEi6q0tBl0949
cmp dword [ebp - 0x20], 0
je 0x40a8ad
mov dword [ebp - 0x9c], str.S5LhsnGYx0RDoGtB1mbwjFP3UJ0IkmW8T58hb43Akrn7OFuVpdQAqlRhvYa6CWDkQSiS8UTitAmJBME3BMdSPe5bbgPQlCBcRzru8fJNfeDWS2Gamq3NpPUjBp9boikzVlvYwfs3fMedQKldkGSgwygvPVtiKhe1Oy5Mg3qfqlm2MIhUWeUFaGsQcYprviJSaFsORBtR3BsR346KxR5XTrkIokISMpbiqlGxrORFIU8f4moYbxWCSQ6JpooRO8R7QjsTEskDlheHlwGBPlSANUsLBeAHTk31zwcnLc35bjLLtQsphuRmYtB1CyHFphVow02XCyFwNi11869V5nFVhh7SuHk7NBGqtWMbDYfK89n03k9uHuFOaW43uEflCop4YG02MPlSoovk44La
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
cmp dword [ebp - 0x1c], 0
jne 0x40a7e9
jmp 0x40a8ad
mov dword [ebp - 0x80], str.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
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
push 1
lea ecx, [ebp - 0x18]
call fcn.00405750
push 0
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x18]
call fcn.004079c0
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x90], esp
lea edx, [ebp + 0x18]
push edx
call fcn.0040b360
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x98], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00407790
mov dword [ebp - 0x58], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa0], esp
mov edx, dword [ebp - 0x58]
push edx
call fcn.00408770
mov dword [ebp - 0xa8], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 0x3d], al
movzx ecx, byte [ebp - 0x3d]
test ecx, ecx
je 0x40a89c
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004078f0
jmp 0x40a7b0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d50
mov eax, dword [ebp - 0x4c]
jmp 0x40a91a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00413725
mov esp, ebp
pop ebp
ret 0x28