Function at 0x42a900
Capabilities:
Connect to wmi namespace via wbemlocator
Get os information via kuser_shared_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x3f8
mov eax, dword [ebp + 8]
mov dword [esp + case.0x429ec0.4], 0x446958
mov ecx, dword [0x7ffe026c]
mov dword [eax], ecx
mov ecx, dword [0x7ffe0270]
mov dword [eax + 4], ecx
mov ecx, dword [0x7ffe0260]
mov dword [eax + 8], ecx
mov ecx, dword [0x7ffe0264]
sub ecx, 2
sete byte [eax + 0xc]
mov edi, eax
add edi, 0x10
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esp + 0x194], ecx
mov byte [eax + 0x14], 0
mov ebx, eax
add ebx, 0x28
mov word [eax + 0x28], 0
mov esi, eax
add esi, 0x2a
mov byte [eax + 0x2a], 0
mov dword [esp + 0x154], 0
lea eax, [esp + 0x154]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4419c0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4419d0
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x3b8], eax
mov eax, dword [esp + 0x3bc]
mov ecx, dword [esp + 0x3b8]
mov eax, dword [eax + ecx*4]
mov dword [esp + case.0x429ec0.6], 0x446960
mov dword [esp + case.0x429ec0.8], 0x446968
mov dword [esp + case.0x429ec0.10], 0x446970
mov dword [esp + case.0x429ec0.12], 0x446978
mov dword [esp + case.0x429ec0.14], 0x446980
mov dword [esp + case.0x429ec0.16], 0x446988
mov dword [esp + case.0x429ec0.18], 0x446990
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x378], 0xeb
mov dword [esp + case.0x429ec0.20], 0x446998
mov dword [esp + case.0x429ec0.22], 0x4469a0
mov dword [esp + case.0x429ec0.23], 0x4469a8
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x358], 0xef
mov dword [esp + case.0x429ec0.26], 0x4469b0
mov dword [esp + case.0x4299cb.48], 0x4469b8
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x340], 0xf2
mov dword [esp + case.0x4299cb.50], 0x4469c0
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x330], 0xf4
mov dword [esp + case.0x4299cb.52], 0x4469c8
mov dword [esp + case.0x4299cb.52], 0x4469d0
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x318], 0xf7
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x310], 0xf8
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x308], 0xf9
mov dword [esp + case.0x4299cb.56], 0x4469d8
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2f8], 0xfb
mov dword [esp + case.0x4299cb.58], 0x4469e0
mov dword [esp + case.0x4299cb.60], 0x4469e8
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2e0], 0xfe
mov dword [esp + case.0x4299cb.62], 0x4469f0
mov dword [esp + case.0x4299cb.64], 0x4469f8
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2c8], 0x101
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2c0], 0x102
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2b8], 0x103
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2b0], 0x104
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2a8], 0x105
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x2a0], 0x106
mov dword [esp + case.0x4299cb.66], 0x446a00
mov dword [esp + case.0x4299cb.68], 0x446a08
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x288], 0x109
mov dword [esp + case.0x4299cb.70], 0x446a10
mov dword [esp + case.0x4299cb.71], 0x446a18
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x270], 0x10c
mov dword [esp + case.0x4299cb.74], 0x446a20
mov dword [esp + case.0x4299cb.74], 0x446a28
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x258], 0x10f
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x250], 0x110
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x248], 0x111
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x240], 0x112
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x238], 0x113
mov dword [esp + case.0x4299cb.78], 0x446a30
mov dword [esp + case.0x4299cb.79], 0x446a38
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x220], 0xe7
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x218], 0xed
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x210], 0xf0
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x208], 0xf5
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x200], 0xff
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x1f8], 0x107
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x1f0], 0x10a
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x1e8], 0x10d
mov dword [esp + case.0x421d66.166], 0x445fd0
mov dword [esp + 0x1e0], 0x114
jmp eax