Function at 0x403300
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413870
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xd4
mov eax, dword [0x439198]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x58], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xbc], 0
xor eax, eax
mov word [ebp - 0x74], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0xac], str.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
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x50]
push ecx
push 0x4366bc
push 1
push 0
push 0x43678c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jge 0x403400
mov dword [ebp - 0x94], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401270
mov eax, dword [ebp - 0x94]
jmp 0x403722
lea edx, [ebp - 0x48]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp - 0x50]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jge 0x40344f
mov dword [ebp - 0x88], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401270
mov eax, dword [ebp - 0x88]
jmp 0x403722
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jge 0x403494
mov dword [ebp - 0x98], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401270
mov eax, dword [ebp - 0x98]
jmp 0x403722
push 0x414441
lea ecx, [ebp - 0x2c]
call fcn.00401160
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 2
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x4273f4
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jge 0x403502
mov dword [ebp - 0x68], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401270
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401270
mov eax, dword [ebp - 0x68]
jmp 0x403722
mov byte [ebp - 4], 3
mov dword [ebp - 0x60], 0
cmp dword [ebp - 0x4c], 0
je 0x403643
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x54]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
cmp dword [ebp - 0x60], 0
jne 0x40353c
jmp 0x403643
push 0
push 0
lea eax, [ebp - 0xd8]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
push 0
mov eax, dword [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402630
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5c]
call fcn.004029f0
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00402950
push 0
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x2c]
call fcn.00405a60
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.004057d0
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e60
mov dword [ebp - 0xa8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x44]
call fcn.00405820
mov dword [ebp - 0xb0], eax
push 0
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00405a90
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x64]
cmp ecx, dword [0x414228]
je 0x4035f8
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 2
jl 0x403618
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x44]
call fcn.00402740
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004027a0
jmp 0x403643
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x44]
call fcn.00402740
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004027a0
jmp 0x40350d
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
jmp 0x403671
mov dword [ebp - 4], 2
jmp 0x4036a0
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x50]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x84], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401270
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401270
mov eax, dword [ebp - 0x84]
jmp 0x403722
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00407404
mov esp, ebp
pop ebp
ret 0x28