Function at 0x42bd40
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2e0
mov dword [esp + 0x2d8], 0x444df0
mov dword [esp + 0x94], 0
lea eax, [esp + 0x94]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43f5f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43f600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2d4], eax
mov eax, dword [esp + 0x2d8]
mov ecx, dword [esp + 0x2d4]
mov edi, dword [eax + ecx*4]
mov ecx, dword [0x444df8]
xor ecx, 0xdb0e40ab
sub edi, ecx
mov dword [esp + 0x2d0], 0x444dfc
mov dword [esp + 0x2c8], 0x444e08
mov dword [esp + 0x2c0], 0x444e14
mov dword [esp + 0x2b8], 0x4442c0
mov eax, dword [0x444e20]
mov dword [esp + 0x160], eax
mov dword [esp + 0x2b4], 0x444e28
mov dword [esp + 0x2ac], 0x444e34
mov dword [esp + 0x2a4], 0x444e40
mov dword [esp + 0x29c], 0x4442c0
mov eax, dword [0x444e4c]
mov dword [esp + 0x12c], eax
mov dword [esp + 0x298], 0x4442c0
mov ecx, dword [0x444e54]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x294], 0x444e5c
mov dword [esp + 0x28c], 0x444e68
mov dword [esp + 0x284], 0x444e74
mov dword [esp + 0x27c], 0x444e80
mov dword [esp + 0x274], 0x444e8c
mov dword [esp + 0x26c], 0x444e98
mov dword [esp + 0x264], 0x4442c0
mov ecx, dword [0x444ea4]
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x260], 0x444eac
mov dword [esp + 0x258], 0x444eb8
mov dword [esp + 0x250], 0x4442c0
mov ecx, dword [0x444ec4]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x24c], 0x444ecc
mov dword [esp + 0x244], 0x444ed8
mov dword [esp + 0x23c], 0x4442c0
mov ecx, dword [0x444ee4]
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x238], 0x444eec
mov dword [esp + 0x230], 0x4442c0
mov ecx, dword [0x444ef8]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x22c], 0x444f00
mov dword [esp + 0x224], 0x444f0c
mov dword [esp + 0x21c], 0x444f18
mov dword [esp + 0x214], 0x4442c0
mov ecx, dword [0x444f24]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x210], 0x4442c0
mov ecx, dword [0x444f2c]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x20c], 0x4442c0
mov ecx, dword [0x444f34]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x208], 0x444f3c
mov dword [esp + 0x200], 0x444f48
mov dword [esp + 0x1f8], 0x4442c0
mov ecx, dword [0x444f54]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1f4], 0x4442c0
mov esi, dword [0x444f5c]
mov dword [esp + 0x1f0], 0x4442c0
mov edx, dword [0x444f64]
mov dword [esp + 0x1ec], 0x4442c0
mov ecx, dword [0x444f6c]
mov dword [esp + 0x1e8], 0x444f74
mov dword [esp + 0x1e0], 0x444f80
mov dword [esp + 0x1d8], 0x4442c0
mov ebx, dword [0x444f8c]
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x1d4], 0x4442c0
mov ebx, dword [0x444f94]
mov dword [esp + 0x188], ebx
mov dword [esp + 0x1d0], 0x4442c0
mov ebx, dword [0x444f9c]
mov dword [esp + 0x184], ebx
mov dword [esp + 0x1cc], 0x4442c0
mov ebx, dword [0x444fa4]
mov dword [esp + 0x180], ebx
mov dword [esp + 0x1c8], 0x4442c0
mov ebx, dword [0x444fac]
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x1c4], 0x4442c0
mov ebx, dword [0x444fb4]
mov dword [esp + 0x178], ebx
mov dword [esp + 0x1c0], 0x4442c0
xor eax, eax
mov ebx, dword [str._rHeo]
jmp edi