Function at 0x429710
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x580
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x4448f4]
mov dword [esi + 0x544], ecx
mov cl, byte [esi + 0x190]
mov byte [esi + 0x19c], cl
mov byte [esi + 0x194], 0x98
mov byte [esi + 0x195], 0x99
mov byte [esi + 0x196], 0x94
mov byte [esi + 0x197], 0x14
mov ecx, 4
mov byte [esi + ecx + 0x194], 0
add ecx, 1
cmp ecx, 6
jne 0x42975d
xor ecx, ecx
cmp ecx, 6
jae 0x4297c0
movzx edx, byte [esi + ecx + 0x194]
mov edi, ecx
shl edi, 1
and edi, 0x321323cc
mov ebx, ecx
xor ebx, 0x990991e6
add ebx, edi
mov edi, ebx
xor edi, 0xffffffff
or edi, edx
xor ebx, 0xffffffff
and edx, ebx
mov ebx, edx
shl ebx, 1
xor ebx, 0xffffffff
add edx, ebx
and edx, edi
mov bl, 0x81
sub bl, dl
mov byte [esi + ecx + 0x194], bl
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
jmp 0x42976f
mov ecx, dword [esi + 0x194]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov ecx, eax
add ecx, 0x10
mov dword [esi + 0xbc], ecx
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x328], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0xb8], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x20c], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0x18c], 0
sub esp, 0x14
lea eax, [esi + 0x18c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43f5f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43f600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x540], eax
mov eax, dword [esi + 0x544]
mov ecx, dword [esi + 0x540]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x4448fc]
mov edx, ecx
and edx, 0x7116e791
add edx, edx
sub edx, ecx
lea eax, [edx + eax - 0x7116e791]
push eax
mov ebx, esp
mov dword [ebx], 0x444900
push eax
mov dword [esi + 0x294], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x44490c
push eax
mov dword [esi + 0x2a0], esp
push eax
mov ecx, esp
mov dword [esi + 0x29c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444918]
mov dword [esi + 0x298], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a8], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444920]
mov dword [esi + 0x2a4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2b4], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444928]
mov dword [esi + 0x2b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2bc], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444930]
mov dword [esi + 0x2b8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c4], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [str.Cza_]
mov dword [esi + 0x2c0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2cc], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444940]
mov dword [esi + 0x2c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d4], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444948]
mov dword [esi + 0x2d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444950]
mov dword [esi + 0x2d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2e4], ecx
mov dword [ecx], 0x444958
push eax
mov dword [esi + 0x2e0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ec], ecx
mov dword [ecx], 0x444964
push eax
mov dword [esi + 0x2e8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x444970
push eax
mov dword [esi + 0x2f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x44497c
push eax
mov dword [esi + 0x2f8], esp
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x444988
push eax
mov dword [esi + 0x300], esp
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444994]
mov dword [esi + 0x308], ecx
push eax
mov ecx, esp
mov dword [esi + 0x31c], ecx
mov dword [ecx], 0x44499c
push eax
mov dword [esi + 0x318], esp
push eax
mov ecx, esp
mov dword [esi + 0x330], ecx
mov dword [ecx], 0x4449a8
push eax
mov dword [esi + 0x32c], esp
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x4449b4]
mov dword [esi + 0x334], ecx
push eax
mov ecx, esp
mov dword [esi + 0x340], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x4449bc]
mov dword [esi + 0x33c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x348], ecx
mov dword [ecx], 0x4449c4
push eax
mov dword [esi + 0x344], esp
push eax
mov ecx, esp
mov dword [esi + 0x360], ecx
mov dword [ecx], 0x4449d0
push eax
mov dword [esi + 0x35c], esp
push eax
mov ecx, esp
mov dword [esi + 0x358], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x4449dc]
mov dword [esi + 0x354], ecx
push eax
mov ecx, esp
mov dword [esi + 0x374], ecx
mov dword [ecx], 0x4449e4
push eax
mov dword [esi + 0x36c], esp
push eax
mov ecx, esp
mov dword [esi + 0x378], ecx
mov dword [ecx], 0x4449f0
push eax
mov dword [esi + 0x370], esp
push eax
mov ecx, esp
mov dword [esi + 0x388], ecx
mov dword [ecx], 0x4449fc
push eax
mov dword [esi + 0x384], esp
push eax
mov ecx, esp
mov dword [esi + 0x380], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444a08]
mov dword [esi + 0x37c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444a10]
mov dword [esi + 0x38c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x398], ecx
mov dword [ecx], 0x444a18
push eax
mov dword [esi + 0x394], esp
push eax
mov ecx, esp
mov dword [esi + 0x3a8], ecx
mov dword [ecx], 0x444a24
push eax
mov dword [esi + 0x3a4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3a0], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444a30]
mov dword [esi + 0x39c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b0], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444a38]
mov dword [esi + 0x3ac], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b8], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444a40]
mov dword [esi + 0x3b4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3c0], ecx
mov dword [ecx], 0x444a48
push eax
mov dword [esi + 0x3bc], esp
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x444a54
push eax
mov dword [esi + 0x3c8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444a60]
mov dword [esi + 0x3c4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x444a68
push eax
mov dword [esi + 0x3d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3e4], ecx
mov dword [ecx], 0x444a74
push eax
mov dword [esi + 0x3d8], esp
push eax
mov ecx, esp
mov dword [esi + 0x420], ecx
mov dword [ecx], 0x444a80
push eax
mov dword [esi + 0x410], esp
push eax
mov ecx, esp
mov dword [esi + 0x40c], ecx
mov dword [ecx], 0x444a8c
push eax
mov dword [esi + 0x408], esp
push eax
mov ecx, esp
mov dword [esi + 0x418], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444a98]
mov dword [esi + 0x414], ecx
push eax
mov ecx, esp
mov dword [esi + 0x424], ecx
mov dword [ecx], 0x444aa0
push eax
mov dword [esi + 0x41c], esp
push eax
mov ecx, esp
mov dword [esi + 0x43c], ecx
mov dword [ecx], 0x444aac
push eax
mov dword [esi + 0x438], esp
push eax
mov ecx, esp
mov dword [esi + 0x434], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ab8]
mov dword [esi + 0x430], ecx
push eax
mov ecx, esp
mov dword [esi + 0x444], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ac0]
mov dword [esi + 0x440], ecx
push eax
mov ecx, esp
mov dword [esi + 0x44c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ac8]
mov dword [esi + 0x448], ecx
push eax
mov ecx, esp
mov dword [esi + 0x454], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ad0]
mov dword [esi + 0x450], ecx
push eax
mov ecx, esp
mov dword [esi + 0x45c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ad8]
mov dword [esi + 0x458], ecx
push eax
mov ecx, esp
mov dword [esi + 0x464], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ae0]
mov dword [esi + 0x460], ecx
push eax
mov ecx, esp
mov dword [esi + 0x46c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ae8]
mov dword [esi + 0x468], ecx
push eax
mov ecx, esp
mov dword [esi + 0x474], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444af0]
mov dword [esi + 0x470], ecx
push eax
mov ecx, esp
mov dword [esi + 0x480], ecx
mov dword [ecx], 0x444af8
push eax
mov dword [esi + 0x478], esp
push eax
mov ecx, esp
mov dword [esi + 0x498], ecx
mov dword [ecx], 0x444b04
push eax
mov dword [esi + 0x490], esp
push eax
mov ecx, esp
mov dword [esi + 0x48c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b10]
mov dword [esi + 0x488], ecx
push eax
mov ecx, esp
mov dword [esi + 0x49c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b18]
mov dword [esi + 0x494], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4a4], ecx
mov dword [ecx], 0x444b20
push eax
mov dword [esi + 0x4a0], esp
push eax
mov ecx, esp
mov dword [esi + 0x4c0], ecx
mov dword [ecx], 0x444b2c
push eax
mov dword [esi + 0x4b4], esp
push eax
mov ecx, esp
mov dword [esi + 0x4ac], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b38]
mov dword [esi + 0x4a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4b8], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b40]
mov dword [esi + 0x4b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4c4], ecx
mov dword [ecx], 0x444b48
push eax
mov dword [esi + 0x4bc], esp
push eax
mov ecx, esp
mov dword [esi + 0x4d4], ecx
mov dword [ecx], 0x444b54
push eax
mov dword [esi + 0x4d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x4cc], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b60]
mov dword [esi + 0x4c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4dc], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b68]
mov dword [esi + 0x4d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4e4], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b70]
mov dword [esi + 0x4e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4ec], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b78]
mov dword [esi + 0x4e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4f4], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444b80]
mov dword [esi + 0x4f0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4fc], ecx
mov dword [ecx], 0x444b88
push eax
mov dword [esi + 0x4f8], esp
push eax
mov ecx, esp
mov dword [esi + 0x50c], ecx
mov dword [ecx], 0x444b94
push eax
mov dword [esi + 0x508], esp
push eax
mov ecx, esp
mov dword [esi + 0x504], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ba0]
mov dword [esi + 0x500], ecx
push eax
mov ecx, esp
mov dword [esi + 0x514], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444ba8]
mov dword [esi + 0x510], ecx
push eax
mov ecx, esp
mov dword [esi + 0x51c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444bb0]
mov dword [esi + 0x518], ecx
push eax
mov ecx, esp
mov dword [esi + 0x524], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444bb8]
mov dword [esi + 0x520], ecx
push eax
mov ecx, esp
mov dword [esi + 0x52c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444bc0]
mov dword [esi + 0x528], ecx
push eax
mov edx, esp
mov dword [edx], 0x4440f0
mov ecx, dword [0x444bc8]
mov dword [esi + 0x530], ecx
push eax
mov ecx, esp
mov dword [esi + 0x53c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444bd0]
mov dword [esi + 0x538], ecx
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444bd8]
mov dword [esi + 0x28c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x314], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444be0]
mov dword [esi + 0x310], ecx
push eax
mov ecx, esp
mov dword [esi + 0x324], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444be8]
mov dword [esi + 0x320], ecx
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444bf0]
mov dword [esi + 0x34c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x368], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444bf8]
mov dword [esi + 0x364], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ec], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444c00]
mov dword [esi + 0x3e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3f4], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444c08]
mov dword [esi + 0x3f0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3fc], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444c10]
mov dword [esi + 0x3f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x404], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444c18]
mov dword [esi + 0x400], ecx
push eax
mov ecx, esp
mov dword [esi + 0x42c], ecx
mov dword [ecx], 0x4440f0
mov ecx, dword [0x444c20]
mov dword [esi + 0x428], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x4440f0
mov edi, dword [0x444c28]
mov dword [esi + 0x47c], edi
jmp eax