Function at 0x42fa00
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2d8
mov dword [esp + 0x2bc], 0x445e14
mov dword [esp + 0xfc], 0
lea eax, [esp + 0xfc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4405e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4405f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2b8], eax
mov eax, dword [esp + 0x2bc]
mov ecx, dword [esp + 0x2b8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x445e1c]
xor ecx, 0xe3effa72
sub eax, ecx
mov dword [esp + 0x2b4], 0x445e20
mov dword [esp + 0x2ac], 0x445e2c
mov dword [esp + 0x2a4], 0x445e38
mov dword [esp + 0x29c], 0x445460
mov ecx, dword [0x445e44]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x298], 0x445e4c
mov dword [esp + 0x290], 0x445e58
mov dword [esp + 0x288], 0x445e64
mov dword [esp + 0x280], 0x445460
mov ecx, dword [0x445e70]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x27c], 0x445460
mov ecx, dword [0x445e78]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x278], 0x445e80
mov dword [esp + 0x270], 0x445e8c
mov dword [esp + 0x268], 0x445e98
mov dword [esp + 0x260], 0x445ea4
mov dword [esp + 0x258], 0x445eb0
mov dword [esp + 0x250], 0x445ebc
mov dword [esp + 0x248], 0x445460
mov ecx, dword [0x445ec8]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x244], 0x445460
mov ecx, dword [0x445ed0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x240], 0x445ed8
mov dword [esp + 0x238], 0x445ee4
mov dword [esp + 0x230], 0x445460
mov ecx, dword [0x445ef0]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x22c], 0x445ef8
mov dword [esp + 0x224], 0x445f04
mov dword [esp + 0x21c], 0x445f10
mov dword [esp + 0x214], 0x445460
mov ecx, dword [0x445f1c]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x210], 0x445460
mov ecx, dword [0x445f24]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x20c], 0x445f2c
mov dword [esp + 0x204], 0x445460
mov ecx, dword [0x445f38]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x200], 0x445460
mov ecx, dword [0x445f40]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x1fc], 0x445460
mov ebx, dword [0x445f48]
mov dword [esp + 0x1f8], 0x445f50
mov dword [esp + 0x1f0], 0x445f5c
mov dword [esp + 0x1e8], 0x445f68
mov dword [esp + 0x1e0], 0x445460
mov ecx, dword [0x445f74]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x1dc], 0x445460
mov edx, dword [0x445f7c]
mov dword [esp + 0x1d8], 0x445460
mov ecx, dword [0x445f84]
mov dword [esp + 0x1d4], 0x445460
mov esi, dword [0x445f8c]
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x1d0], 0x445f94
mov dword [esp + 0x1c8], 0x445fa0
mov dword [esp + 0x1c0], 0x445460
mov esi, dword [0x445fac]
mov dword [esp + 0x164], esi
mov dword [esp + 0x1bc], 0x445460
mov esi, dword [0x445fb4]
mov dword [esp + 0x160], esi
mov dword [esp + 0x1b8], 0x445460
mov esi, dword [0x445fbc]
mov dword [esp + 0x15c], esi
mov dword [esp + 0x1b4], 0x445460
mov esi, dword [0x445fc4]
mov dword [esp + 0x158], esi
mov dword [esp + 0x1b0], 0x445460
mov esi, dword [0x445fcc]
mov dword [esp + 0x154], esi
mov dword [esp + 0x1ac], 0x445460
mov esi, dword [0x445fd4]
mov dword [esp + 0x170], esi
mov dword [esp + 0x1a8], 0x445460
xor edi, edi
mov esi, dword [0x445fdc]
jmp eax