Function at 0x42f3f0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2f0
mov dword [esp + 0x2d4], 0x448b10
mov dword [esp + 0x80], 0
lea eax, [esp + 0x80]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x443a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x443a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2d0], eax
mov eax, dword [esp + 0x2d4]
mov ecx, dword [esp + 0x2d0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448b18]
xor ecx, 0xc3ccc3e3
sub eax, ecx
mov dword [esp + 0x2cc], 0x448b1c
mov dword [esp + 0x2c4], 0x448b28
mov dword [esp + 0x2bc], 0x448b34
mov dword [esp + 0x2b4], 0x448b40
mov dword [esp + 0x2ac], 0x448b4c
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448b58]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x2a0], 0x448b60
mov dword [esp + 0x298], 0x448b6c
mov dword [esp + 0x290], 0x448b78
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448b84]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x284], 0x448b8c
mov dword [esp + 0x27c], 0x448b98
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448ba4]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x270], 0x448bac
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448bb8]
mov dword [esp + 0x198], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448bc0]
mov dword [esp + 0x194], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448bc8]
mov dword [esp + 0x190], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448bd0]
mov dword [esp + 0x18c], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448bd8]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x254], 0x448be0
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448bec]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x248], 0x448bf4
mov dword [esp + 0x240], 0x448c00
mov dword [esp + 0x238], 0x448c0c
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448c18]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x22c], 0x448c20
mov dword [esp + 0x224], 0x448c2c
mov dword [esp + 0x21c], 0x448c38
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448c44]
mov dword [esp + 0x17c], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448c4c]
mov dword [esp + 0x178], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448c54]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x208], 0x448c5c
mov dword [esp + 0x200], 0x448c68
mov dword [esp + 0x1f8], 0x448c74
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448c80]
mov dword [esp + 0x1a8], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448c88]
mov dword [esp + 0x1ac], ecx
mov dword [esp + case.0x4275bb.97], 0x447f70
mov edx, dword [0x448c90]
mov dword [esp + case.0x4275bb.97], 0x447f70
mov ecx, dword [0x448c98]
mov dword [esp + 0x1e0], 0x448ca0
mov dword [esp + 0x1d8], 0x448cac
mov dword [esp + case.0x4275bb.97], 0x447f70
mov esi, dword [0x448cb8]
mov dword [esp + case.0x4275bb.97], 0x447f70
mov edi, dword [0x448cc0]
mov dword [esp + 0x170], edi
mov dword [esp + case.0x4275bb.97], 0x447f70
mov edi, dword [0x448cc8]
mov dword [esp + 0x16c], edi
mov dword [esp + case.0x4275bb.97], 0x447f70
mov edi, dword [0x448cd0]
mov dword [esp + 0x168], edi
mov dword [esp + case.0x4275bb.97], 0x447f70
mov edi, dword [0x448cd8]
mov dword [esp + 0x164], edi
mov dword [esp + case.0x4275bb.97], 0x447f70
mov edi, dword [0x448ce0]
mov dword [esp + 0x1a4], edi
mov dword [esp + case.0x4275bb.97], 0x447f70
xor ebx, ebx
mov edi, dword [0x448ce8]
jmp eax