Function at 0x40a5b0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b7ab
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xa8
mov eax, dword [0x487870]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb8], str.ycA0afvb7Mgu9ebq4C0EzpteTfRxWmlQxJCB7LLGKHQsAJEePy0v5Mh4xy3NohRUre5NGuGMxuKnUca7almFKRD4eWUdEobPLu0VnmUWQtjpJVoOICa0EhD8fhIaBu9uPv4OjevXpz6GIIXRXbePqyQpf4P7dMDxLnEQ7OYRfnRqCHuyfV23g9hiasSswRtpykSR5KmXI5zMgptVEXM1WlnuheGFEHoh0Lyi1y4NxynYzKpObtoDRn4WdNgcMF87Ida1jCYdIiFfw4KNCNtlXkHRThOwevlBbkVsYesiDr1Nc1TeBrj2Kc7JBlNajoEgGUKyzBipWMbUIJbcy1WblQAiVlOAuQDjkWhLeLJbFJaQkGTBMi5Jo4PxNhHngNOL4uM4EJuv9m7SjLk6
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x7c], 0
xor eax, eax
mov word [ebp - 0x60], ax
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x28]
push ecx
push 0x42e424
push 1
push 0
push 0x42e4f4
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jge 0x40a693
mov dword [ebp - 0x54], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d60
mov eax, dword [ebp - 0x54]
jmp 0x40a8fa
lea edx, [ebp - 0x24]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jge 0x40a6e6
mov dword [ebp - 0x74], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d60
mov eax, dword [ebp - 0x74]
jmp 0x40a8fa
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jge 0x40a734
mov dword [ebp - 0x5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d60
mov eax, dword [ebp - 0x5c]
jmp 0x40a8fa
mov dword [ebp - 0xb4], str.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
lea eax, [ebp - 0x20]
push eax
push 0
push 0x30
mov ecx, dword [ebp + 0xc]
push ecx
push 0x441004
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jge 0x40a793
mov dword [ebp - 0x64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d60
mov eax, dword [ebp - 0x64]
jmp 0x40a8fa
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x20], 0
je 0x40a88d
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
cmp dword [ebp - 0x1c], 0
jne 0x40a7c9
jmp 0x40a88d
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 0
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
mov dword [ebp - 0x80], str.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
push 1
lea ecx, [ebp - 0x18]
call fcn.00405760
push 0
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x18]
call fcn.004079d0
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x90], esp
lea edx, [ebp + 0x18]
push edx
call fcn.0040b310
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x98], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004077a0
mov dword [ebp - 0x58], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa0], esp
mov edx, dword [ebp - 0x58]
push edx
call fcn.00408780
mov dword [ebp - 0xa8], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 0x3d], al
movzx ecx, byte [ebp - 0x3d]
test ecx, ecx
je 0x40a87c
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00407900
jmp 0x40a79a
mov dword [ebp - 0xb0], str.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
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00407d60
mov eax, dword [ebp - 0x4c]
jmp 0x40a8fa
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004136d5
mov esp, ebp
pop ebp
ret 0x28