Function at 0x42b7e0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x418
mov dword [esp + 0x3e8], 0x44363c
mov dword [esp + 0x44], 0
mov dword [esp + 0x68], 0
lea eax, [esp + 0x68]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43dbd0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43dbe0
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x3e4], eax
mov eax, dword [esp + 0x3e8]
mov ecx, dword [esp + 0x3e4]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x3e0], 0x442dd0
mov dword [esp + 0x3dc], 0xaa
mov dword [esp + 0x3d8], 0x443644
mov dword [esp + 0x3d0], 0x44364c
mov dword [esp + 0x3c8], 0x442dd0
mov dword [esp + 0x3c4], 0xad
mov dword [esp + 0x3c0], 0x443654
mov dword [esp + 0x3b8], 0x44365c
mov dword [esp + 0x3b0], 0x443664
mov dword [esp + 0x3a8], 0x442dd0
mov dword [esp + 0x3a4], 0xb1
mov dword [esp + 0x3a0], 0x442dd0
mov dword [esp + 0x39c], 0xb2
mov dword [esp + 0x398], 0x44366c
mov dword [esp + 0x390], 0x443674
mov dword [esp + 0x388], 0x442dd0
mov dword [esp + 0x384], 0xb5
mov dword [esp + 0x380], 0x442dd0
mov dword [esp + 0x37c], 0xb6
mov dword [esp + 0x378], 0x44367c
mov dword [esp + 0x370], 0x443684
mov dword [esp + 0x368], 0x44368c
mov dword [esp + 0x360], 0x442dd0
mov dword [esp + 0x35c], 0xba
mov dword [esp + 0x358], 0x442dd0
mov dword [esp + 0x354], 0xbb
mov dword [esp + 0x350], 0x443694
mov dword [esp + 0x348], 0x44369c
mov dword [esp + 0x340], 0x4436a4
mov dword [esp + 0x338], 0x442dd0
mov dword [esp + 0x334], 0xbf
mov dword [esp + 0x330], 0x442dd0
mov dword [esp + 0x32c], 0xc0
mov dword [esp + 0x328], 0x4436ac
mov dword [esp + 0x320], 0x4436b4
mov dword [esp + 0x318], 0x4436bc
mov dword [esp + 0x310], 0x4436c4
mov dword [esp + 0x308], 0x4436cc
mov dword [esp + 0x300], 0x442dd0
mov dword [esp + 0x2fc], 0xc8
mov dword [esp + 0x2f8], 0x442dd0
mov dword [esp + 0x2f4], 0xc7
mov dword [esp + 0x2f0], 0x442dd0
mov dword [esp + 0x2ec], 0xc8
mov dword [esp + 0x2e8], 0x442dd0
mov dword [esp + 0x2e4], 0xc9
mov dword [esp + 0x2e0], 0x4436d4
mov dword [esp + 0x2d8], 0x4436dc
mov dword [esp + 0x2d0], 0x442dd0
mov dword [esp + 0x2cc], 0xcc
mov dword [esp + 0x2c8], 0x4436e4
mov dword [esp + 0x2c0], 0x4436ec
mov dword [esp + 0x2b8], 0x442dd0
mov dword [esp + 0x2b4], 0xcf
mov dword [esp + 0x2b0], 0x442dd0
mov dword [esp + 0x2ac], 0xd0
mov dword [esp + 0x2a8], 0x4436f4
mov dword [esp + 0x2a0], 0x4436fc
mov dword [esp + 0x298], 0x443704
mov dword [esp + 0x290], 0x442dd0
mov dword [esp + 0x28c], 0xd4
mov dword [esp + 0x288], 0x44370c
mov dword [esp + 0x280], 0x442dd0
mov dword [esp + 0x27c], 0xd6
mov dword [esp + 0x278], 0x443714
mov dword [esp + 0x270], 0x44371c
mov dword [esp + 0x268], 0x443724
mov dword [esp + 0x260], 0x442dd0
mov dword [esp + 0x25c], 0xda
mov dword [esp + 0x258], 0x44372c
mov dword [esp + 0x250], 0x443734
mov dword [esp + 0x248], 0x44373c
mov dword [esp + 0x240], 0x442dd0
mov dword [esp + 0x23c], 0xde
mov dword [esp + 0x238], 0x442dd0
mov dword [esp + 0x234], 0xdf
mov dword [esp + 0x230], 0x442dd0
mov dword [esp + 0x22c], 0xe0
mov dword [esp + 0x228], 0x443744
mov dword [esp + 0x220], 0x44374c
mov dword [esp + 0x218], 0x443754
mov dword [esp + 0x210], 0x442dd0
mov dword [esp + 0x20c], 0xb5
mov dword [esp + 0x208], 0x442dd0
mov dword [esp + 0x204], 0xe5
mov dword [esp + 0x200], 0x442dd0
mov dword [esp + 0x1fc], 0xe6
mov dword [esp + 0x1f8], 0x442dd0
mov dword [esp + 0x1f4], 0xe7
mov dword [esp + 0x1f0], 0x442dd0
mov dword [esp + 0x1ec], 0xe8
mov dword [esp + 0x1e8], 0x442dd0
mov dword [esp + 0x1e4], 0xab
mov dword [esp + 0x1e0], 0x442dd0
mov dword [esp + 0x1dc], 0xaf
mov dword [esp + 0x1d8], 0x442dd0
mov dword [esp + 0x1d4], 0xb8
mov dword [esp + 0x1d0], 0x442dd0
mov dword [esp + 0x1cc], 0xbd
mov dword [esp + 0x1c8], 0x442dd0
mov dword [esp + 0x1c4], 0xc1
mov dword [esp + 0x1c0], 0x442dd0
mov dword [esp + 0x1bc], 0xc4
mov dword [esp + 0x1b8], 0x442dd0
mov dword [esp + 0x1b4], 0xcd
mov dword [esp + 0x1b0], 0x442dd0
mov dword [esp + 0x1ac], 0xd1
mov dword [esp + 0x1a8], 0x442dd0
mov dword [esp + 0x1a4], 0xd7
mov dword [esp + 0x1a0], 0x442dd0
mov dword [esp + 0x19c], 0xdc
mov dword [esp + 0x198], 0x442dd0
mov dword [esp + 0x194], 0xe2
jmp eax