Function at 0x42caa0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x470
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x445be0]
mov dword [esi + 0x454], ecx
mov cl, byte [esi + 0x178]
mov byte [esi + 0x17c], cl
mov byte [esi + 0x7a], 0xa
mov byte [esi + 0x7b], 0xb
mov byte [esi + 0x7c], 0x12
mov byte [esi + 0x7d], 0x92
mov ecx, 4
mov byte [esi + ecx + 0x7a], 0
add ecx, 1
cmp ecx, 6
jne 0x42cae1
xor ecx, ecx
cmp ecx, 6
jae 0x42cb42
movzx edi, byte [esi + ecx + 0x7a]
mov ebx, ecx
add ebx, 0x4a4c31da
mov edx, 0x35b3ce25
sub edx, ecx
and edx, 0x50b27ba4
and ebx, 0xaf4d845b
or edx, ebx
xor edx, edi
xor edx, 0x50b27ba4
mov ebx, edx
add ebx, 0x78
mov edi, 7
sub edi, edx
and edi, 0x49
and ebx, 0xb6
sub ebx, edi
add bl, 1
mov byte [esi + ecx + 0x7a], bl
add ecx, 1
jmp 0x42caf0
mov ecx, dword [esi + 0x7a]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov edi, eax
add edi, 0x10
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x1ec], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x390], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x1f4], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0x174], 0
sub esp, 0x14
lea eax, [esi + 0x174]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4405e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4405f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x450], eax
mov eax, dword [esi + 0x454]
mov ecx, dword [esi + 0x450]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x445be8]
xor ecx, 0x56af9731
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x280], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445bec]
mov dword [esi + 0x27c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x288], ecx
mov dword [ecx], 0x445bf4
push eax
mov dword [esi + 0x284], esp
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x445c00
push eax
mov dword [esi + 0x28c], esp
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c0c]
mov dword [esi + 0x294], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c14]
mov dword [esi + 0x29c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a8], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c1c]
mov dword [esi + 0x2a4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x445c24
push eax
mov dword [esi + 0x2ac], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b8], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c30]
mov dword [esi + 0x2b4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c0], ecx
mov dword [ecx], 0x445c38
push eax
mov dword [esi + 0x2bc], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c44]
mov dword [esi + 0x2c4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d0], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c4c]
mov dword [esi + 0x2cc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d8], ecx
mov dword [ecx], 0x445c54
push eax
mov dword [esi + 0x2d4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e0], ecx
mov dword [ecx], 0x445c60
push eax
mov dword [esi + 0x2dc], esp
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x445c6c
push eax
mov dword [esi + 0x300], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f8], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c78]
mov dword [esi + 0x2f4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445c80]
mov dword [esi + 0x2fc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], 0x445c88
push eax
mov dword [esi + 0x308], esp
push eax
mov ecx, esp
mov dword [esi + 0x328], ecx
mov dword [ecx], 0x445c94
push eax
mov dword [esi + 0x31c], esp
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x445ca0
push eax
mov dword [esi + 0x314], esp
push eax
mov ecx, esp
mov dword [esi + 0x324], ecx
mov dword [ecx], 0x445cac
push eax
mov dword [esi + 0x318], esp
push eax
mov ecx, esp
mov dword [esi + 0x348], ecx
mov dword [ecx], 0x445cb8
push eax
mov dword [esi + 0x33c], esp
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], 0x445cc4
push eax
mov dword [esi + 0x334], esp
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445cd0]
mov dword [esi + 0x340], ecx
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445cd8]
mov dword [esi + 0x34c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x358], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445ce0]
mov dword [esi + 0x354], ecx
push eax
mov ecx, esp
mov dword [esi + 0x360], ecx
mov dword [ecx], 0x445ce8
push eax
mov dword [esi + 0x35c], esp
push eax
mov ecx, esp
mov dword [esi + 0x368], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445cf4]
mov dword [esi + 0x364], ecx
push eax
mov ecx, esp
mov dword [esi + 0x370], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445cfc]
mov dword [esi + 0x36c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x37c], ecx
mov dword [ecx], 0x445d04
push eax
mov dword [esi + 0x374], esp
push eax
mov ecx, esp
mov dword [esi + 0x380], ecx
mov dword [ecx], 0x445d10
push eax
mov dword [esi + 0x378], esp
push eax
mov ecx, esp
mov dword [esi + 0x3a0], ecx
mov dword [ecx], 0x445d1c
push eax
mov dword [esi + 0x398], esp
push eax
mov ecx, esp
mov dword [esi + 0x39c], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d28]
mov dword [esi + 0x394], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a8], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d30]
mov dword [esi + 0x3a4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], 0x445d38
push eax
mov dword [esi + 0x3b0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d44]
mov dword [esi + 0x3bc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d4c]
mov dword [esi + 0x3c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d54]
mov dword [esi + 0x3d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d5c]
mov dword [esi + 0x3d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ec], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d64]
mov dword [esi + 0x3e4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3f4], ecx
mov dword [ecx], 0x445d6c
push eax
mov dword [esi + 0x3f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x404], ecx
mov dword [ecx], 0x445d78
push eax
mov dword [esi + 0x400], esp
push eax
mov ecx, esp
mov dword [esi + 0x3fc], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d84]
mov dword [esi + 0x3f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x40c], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d8c]
mov dword [esi + 0x408], ecx
push eax
mov ecx, esp
mov dword [esi + 0x414], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445d94]
mov dword [esi + 0x410], ecx
push eax
mov ecx, esp
mov dword [esi + 0x41c], ecx
mov dword [ecx], 0x445d9c
push eax
mov dword [esi + 0x418], esp
push eax
mov ecx, esp
mov dword [esi + 0x438], ecx
mov dword [ecx], 0x445da8
push eax
mov dword [esi + 0x430], esp
push eax
mov ecx, esp
mov dword [esi + 0x42c], ecx
mov dword [ecx], 0x445460
mov ecx, dword [0x445db4]
mov dword [esi + 0x428], ecx
push eax
mov ecx, esp
mov dword [esi + 0x43c], ecx
mov dword [ecx], 0x445dbc
push eax
mov dword [esi + 0x434], esp
push eax
mov ecx, esp
mov dword [esi + 0x44c], ecx
mov dword [ecx], 0x445dc8
push eax
mov dword [esi + 0x448], esp
push eax
mov ecx, esp
mov dword [ecx], 0x445460
mov edx, dword [0x445dd4]
push eax
mov ebx, esp
mov dword [esi + 0x2e8], ebx
mov dword [ebx], 0x445460
mov ebx, dword [0x445ddc]
mov dword [esi + 0x2e4], ebx
push eax
mov ebx, esp
mov dword [esi + 0x2f0], ebx
mov dword [ebx], 0x445460
mov ebx, dword [0x445de4]
mov dword [esi + 0x2ec], ebx
push eax
mov ebx, esp
mov dword [esi + 0x330], ebx
mov dword [ebx], 0x445460
mov ebx, dword [0x445dec]
mov dword [esi + 0x32c], ebx
push eax
mov ebx, esp
mov dword [esi + 0x388], ebx
mov dword [ebx], 0x445460
mov ebx, dword [0x445df4]
mov dword [esi + 0x384], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3c0], ebx
mov dword [ebx], 0x445460
mov ebx, dword [0x445dfc]
mov dword [esi + 0x3b8], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3e8], ebx
mov dword [ebx], 0x445460
mov ebx, dword [0x445e04]
mov dword [esi + 0x3e0], ebx
push eax
mov ebx, esp
mov dword [esi + 0x424], ebx
mov dword [ebx], 0x445460
mov ebx, dword [0x445e0c]
jmp eax