Function at 0x42d1c0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x450
mov esi, esp
lea ecx, [0x44694c]
mov dword [esi + 0x424], ecx
mov cl, byte [esi + 0x15c]
mov byte [esi + 0x168], cl
mov byte [esi + 0x160], 0x98
mov byte [esi + 0x161], 0x99
mov byte [esi + 0x162], 0x9c
mov byte [esi + 0x163], 0x1c
mov ecx, 4
mov byte [esi + ecx + 0x160], 0
add ecx, 1
cmp ecx, 6
jne 0x42d20a
xor ecx, ecx
cmp ecx, 6
jae 0x42d25e
movzx eax, byte [esi + ecx + 0x160]
mov edi, 0xa5
sub edi, ecx
mov ebx, 0xa5
sub ebx, ecx
and edi, ebx
xor edi, 0xffffffff
mov edx, eax
and edx, edi
xor eax, 0xffffffff
mov ebx, 0xa5
sub ebx, ecx
and ebx, eax
or ebx, edx
mov al, 0x3d
sub al, bl
mov byte [esi + ecx + 0x160], al
add ecx, 1
jmp 0x42d21c
mov eax, dword [esi + 0x160]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov edi, edx
add edi, 0x10
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2f0], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x350], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x364], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x7c], 0
sub esp, 0x14
lea eax, [esi + 0x7c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4415e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4415f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x420], eax
mov eax, dword [esi + 0x424]
mov ecx, dword [esi + 0x420]
mov edx, dword [eax + ecx*4]
mov eax, dword [0x446954]
xor eax, 0x559383ac
sub edx, eax
push eax
mov eax, esp
mov dword [eax], 0x4461e0
mov ecx, dword [0x446958]
push eax
mov ebx, esp
mov dword [esi + 0x264], ebx
mov dword [ebx], 0x446960
push eax
mov dword [esi + 0x260], esp
push eax
mov ebx, esp
mov dword [esi + 0x26c], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x44696c]
mov dword [esi + 0x268], ebx
push eax
mov ebx, esp
mov dword [esi + 0x274], ebx
mov dword [ebx], 0x446974
push eax
mov dword [esi + 0x270], esp
push eax
mov ebx, esp
mov dword [esi + 0x284], ebx
mov dword [ebx], 0x446980
push eax
mov dword [esi + 0x27c], esp
push eax
mov ebx, esp
mov dword [esi + 0x280], ebx
mov dword [ebx], 0x44698c
push eax
mov dword [esi + 0x278], esp
push eax
mov ebx, esp
mov dword [esi + 0x294], ebx
mov dword [ebx], 0x446998
push eax
mov dword [esi + 0x290], esp
push eax
mov ebx, esp
mov dword [esi + 0x29c], ebx
mov dword [ebx], 0x4469a4
push eax
mov dword [esi + 0x298], esp
push eax
mov ebx, esp
mov dword [esi + 0x2a4], ebx
mov dword [ebx], 0x4469b0
push eax
mov dword [esi + 0x2a0], esp
push eax
mov ebx, esp
mov dword [esi + 0x2ac], ebx
mov dword [ebx], 0x4469bc
push eax
mov dword [esi + 0x2a8], esp
push eax
mov ebx, esp
mov dword [esi + 0x2bc], ebx
mov dword [ebx], 0x4469c8
push eax
mov dword [esi + 0x2b8], esp
push eax
mov ebx, esp
mov dword [esi + 0x2b4], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x4469d4]
mov dword [esi + 0x2b0], ebx
push eax
mov ebx, esp
mov dword [esi + 0x2cc], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [str.__3]
mov dword [esi + 0x2c8], ebx
push eax
mov ebx, esp
mov dword [esi + 0x2d4], ebx
mov dword [ebx], 0x4469e4
push eax
mov dword [esi + 0x2d0], esp
push eax
mov ebx, esp
mov dword [esi + 0x2e4], ebx
mov dword [ebx], 0x4469f0
push eax
mov dword [esi + 0x2dc], esp
push eax
mov ebx, esp
mov dword [esi + 0x2e0], ebx
mov dword [ebx], 0x4469fc
push eax
mov dword [esi + 0x2d8], esp
push eax
mov ebx, esp
mov dword [esi + 0x2f8], ebx
mov dword [ebx], 0x446a08
push eax
mov dword [esi + 0x2f4], esp
push eax
mov ebx, esp
mov dword [esi + 0x300], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [str.4Ow_0m]
mov dword [esi + 0x2fc], ebx
push eax
mov ebx, esp
mov dword [esi + 0x308], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446a1c]
mov dword [esi + 0x304], ebx
push eax
mov ebx, esp
mov dword [esi + 0x310], ebx
mov dword [ebx], 0x446a24
push eax
mov dword [esi + 0x30c], esp
push eax
mov ebx, esp
mov dword [esi + 0x320], ebx
mov dword [ebx], 0x446a30
push eax
mov dword [esi + 0x31c], esp
push eax
mov ebx, esp
mov dword [esi + 0x318], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446a3c]
mov dword [esi + 0x314], ebx
push eax
mov ebx, esp
mov dword [esi + 0x328], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446a44]
mov dword [esi + 0x324], ebx
push eax
mov ebx, esp
mov dword [esi + 0x330], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446a4c]
mov dword [esi + 0x32c], ebx
push eax
mov ebx, esp
mov dword [esi + 0x338], ebx
mov dword [ebx], 0x446a54
push eax
mov dword [esi + 0x334], esp
push eax
mov ebx, esp
mov dword [esi + 0x340], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446a60]
mov dword [esi + 0x33c], ebx
push eax
mov ebx, esp
mov dword [esi + 0x348], ebx
mov dword [ebx], 0x446a68
push eax
mov dword [esi + 0x344], esp
push eax
mov ebx, esp
mov dword [esi + 0x358], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446a74]
mov dword [esi + 0x354], ebx
push eax
mov ebx, esp
mov dword [esi + 0x37c], ebx
mov dword [ebx], 0x446a7c
push eax
mov dword [esi + 0x378], esp
push eax
mov ebx, esp
mov dword [esi + 0x384], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446a88]
mov dword [esi + 0x380], ebx
push eax
mov ebx, esp
mov dword [esi + 0x38c], ebx
mov dword [ebx], 0x446a90
push eax
mov dword [esi + 0x388], esp
push eax
mov ebx, esp
mov dword [esi + 0x3a8], ebx
mov dword [ebx], 0x446a9c
push eax
mov dword [esi + 0x39c], esp
push eax
mov ebx, esp
mov dword [esi + 0x394], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446aa8]
mov dword [esi + 0x390], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3a0], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446ab0]
mov dword [esi + 0x398], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3ac], ebx
mov dword [ebx], 0x446ab8
push eax
mov dword [esi + 0x3a4], esp
push eax
mov ebx, esp
mov dword [esi + 0x3c8], ebx
mov dword [ebx], 0x446ac4
push eax
mov dword [esi + 0x3c0], esp
push eax
mov ebx, esp
mov dword [esi + 0x3b8], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446ad0]
mov dword [esi + 0x3b4], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3c4], ebx
mov dword [ebx], 0x446ad8
push eax
mov dword [esi + 0x3bc], esp
push eax
mov ebx, esp
mov dword [esi + 0x3e8], ebx
mov dword [ebx], 0x446ae4
push eax
mov dword [esi + 0x3dc], esp
push eax
mov ebx, esp
mov dword [esi + 0x3d8], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446af0]
mov dword [esi + 0x3d4], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3f0], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446af8]
mov dword [esi + 0x3ec], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3f8], ebx
mov dword [ebx], 0x446b00
push eax
mov dword [esi + 0x3f4], esp
push eax
mov ebx, esp
mov dword [esi + 0x24], ebx
mov dword [ebx], 0x446b0c
push eax
mov dword [esi + 0x408], esp
push eax
mov ebx, esp
mov dword [esi + 0x400], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b18]
mov dword [esi + 0x3fc], ebx
push eax
mov ebx, esp
mov dword [esi + 0x40c], ebx
mov dword [ebx], 0x446b20
push eax
mov dword [esi + 0x404], esp
push eax
mov ebx, esp
mov dword [esi + 0x418], ebx
mov dword [ebx], 0x446b2c
push eax
mov dword [esi + 0x410], esp
push eax
mov ebx, esp
mov dword [esi + 0x41c], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b38]
mov dword [esi + 0x414], ebx
push eax
mov ebx, esp
mov dword [esi + 0x25c], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b40]
mov dword [esi + 0x258], ebx
push eax
mov ebx, esp
mov dword [esi + 0x28c], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b48]
mov dword [esi + 0x288], ebx
push eax
mov ebx, esp
mov dword [esi + 0x2c4], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b50]
mov dword [esi + 0x2c0], ebx
push eax
mov ebx, esp
mov dword [esi + 0x2ec], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b58]
mov dword [esi + 0x2e8], ebx
push eax
mov ebx, esp
mov dword [esi + 0x360], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b60]
mov dword [esi + 0x35c], ebx
push eax
mov ebx, esp
mov dword [esi + 0x36c], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b68]
mov dword [esi + 0x368], ebx
push eax
mov ebx, esp
mov dword [esi + 0x374], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b70]
mov dword [esi + 0x370], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3d0], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b78]
mov dword [esi + 0x3cc], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3e4], ebx
mov dword [ebx], 0x4461e0
mov ebx, dword [0x446b80]
mov dword [esi + 0x3e0], ebx
jmp edx