Function at 0x42f5f0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2f8
mov dword [esp + 0x2dc], 0x449a9c
mov dword [esp + 0xfc], 0
lea eax, [esp + 0xfc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x444a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x444a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2d8], eax
mov eax, dword [esp + 0x2dc]
mov ecx, dword [esp + 0x2d8]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x449aa4]
xor eax, 0x961d892c
sub ecx, eax
mov dword [esp + 0x2d4], 0x448ed0
mov eax, dword [0x449aa8]
mov dword [esp + 0x2d0], 0x449ab0
mov dword [esp + 0x2c8], 0x449abc
mov dword [esp + 0x2c0], 0x448ed0
mov esi, dword [0x449ac8]
mov dword [esp + 0x2bc], 0x448ed0
mov edx, dword [0x449ad0]
mov dword [esp + 0x144], edx
mov dword [esp + 0x2b8], 0x449ad8
mov dword [esp + 0x2b0], 0x449ae4
mov dword [esp + 0x2a8], 0x449af0
mov dword [esp + 0x2a0], 0x449afc
mov dword [esp + 0x298], 0x449b08
mov dword [esp + 0x290], 0x449b14
mov dword [esp + 0x288], 0x449b20
mov dword [esp + 0x280], 0x448ed0
mov edx, dword [0x449b2c]
mov dword [esp + 0x158], edx
mov dword [esp + 0x27c], 0x449b34
mov dword [esp + 0x274], 0x449b40
mov dword [esp + 0x26c], 0x449b4c
mov dword [esp + 0x264], 0x448ed0
mov edx, dword [0x449b58]
mov dword [esp + 0x19c], edx
mov dword [esp + 0x260], 0x449b60
mov dword [esp + 0x258], 0x449b6c
mov dword [esp + 0x250], 0x448ed0
mov edx, dword [0x449b78]
mov dword [esp + 0x198], edx
mov dword [esp + 0x24c], 0x449b80
mov dword [esp + 0x244], 0x449b8c
mov dword [esp + 0x23c], 0x448ed0
mov edx, dword [0x449b98]
mov dword [esp + 0x194], edx
mov dword [esp + 0x238], 0x448ed0
mov edx, dword [0x449ba0]
mov dword [esp + 0x190], edx
mov dword [esp + 0x234], 0x448ed0
mov edx, dword [0x449ba8]
mov dword [esp + 0x18c], edx
mov dword [esp + 0x230], 0x449bb0
mov dword [esp + 0x228], 0x449bbc
mov dword [esp + 0x220], 0x449bc8
mov dword [esp + 0x218], 0x448ed0
mov edx, dword [0x449bd4]
mov dword [esp + 0x188], edx
mov dword [esp + 0x214], 0x449bdc
mov dword [esp + 0x20c], 0x449be8
mov dword [esp + 0x204], 0x449bf4
mov dword [esp + 0x1fc], 0x448ed0
mov edx, dword [0x449c00]
mov dword [esp + 0x180], edx
mov dword [esp + 0x1f8], 0x448ed0
mov edx, dword [0x449c08]
mov dword [esp + 0x17c], edx
mov dword [esp + 0x1f4], 0x449c10
mov dword [esp + 0x1ec], 0x449c1c
mov dword [esp + 0x1e4], 0x448ed0
mov edx, dword [0x449c28]
mov dword [esp + 0x178], edx
mov dword [esp + 0x1e0], 0x449c30
mov dword [esp + 0x1d8], 0x448ed0
mov edx, dword [0x449c3c]
mov dword [esp + 0x184], edx
mov dword [esp + 0x1d4], 0x448ed0
mov edx, dword [0x449c44]
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x1d0], 0x448ed0
mov edx, dword [0x449c4c]
mov dword [esp + 0x1a4], edx
mov dword [esp + 0x1cc], 0x448ed0
mov edx, dword [0x449c54]
mov dword [esp + 0x1c8], 0x448ed0
mov ebx, dword [0x449c5c]
mov dword [esp + 0x1c4], 0x448ed0
mov edi, dword [0x449c64]
mov dword [esp + 0x150], edi
mov dword [esp + 0x1c0], 0x448ed0
mov edi, dword [0x449c6c]
mov dword [esp + 0x154], edi
mov dword [esp + 0x1bc], 0x448ed0
mov edi, dword [0x449c74]
mov dword [esp + 0x174], edi
mov dword [esp + 0x1b8], 0x448ed0
mov edi, dword [0x449c7c]
mov dword [esp + 0x170], edi
mov dword [esp + 0x1b4], 0x448ed0
mov edi, dword [0x449c84]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x1b0], 0x448ed0
mov edi, dword [0x449c8c]
mov dword [esp + 0x168], edi
mov dword [esp + 0x1ac], 0x448ed0
mov edi, dword [0x449c94]
mov dword [esp + 0x164], edi
xor edi, edi
jmp ecx