Function at 0x42ea50
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2b8
mov dword [esp + 0x29c], 0x447bf0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x58]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x442a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x442a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x298], eax
mov eax, dword [esp + 0x29c]
mov ecx, dword [esp + 0x298]
mov eax, dword [eax + ecx*4]
mov ecx, dword [str._n__nx]
xor ecx, 0x6e384882
sub eax, ecx
mov dword [esp + 0x294], 0x447bfc
mov dword [esp + 0x28c], 0x447c08
mov dword [esp + 0x284], 0x447c14
mov dword [esp + 0x27c], 0x447c20
mov dword [esp + 0x274], 0x4470b0
mov ecx, dword [0x447c2c]
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x270], 0x4470b0
mov ecx, dword [0x447c34]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x26c], 0x447c3c
mov dword [esp + 0x264], 0x447c48
mov dword [esp + 0x25c], 0x447c54
mov dword [esp + 0x254], 0x4470b0
mov ecx, dword [0x447c60]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x250], 0x447c68
mov dword [esp + 0x248], 0x4470b0
mov ecx, dword [0x447c74]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x244], 0x4470b0
mov ecx, dword [0x447c7c]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x240], 0x447c84
mov dword [esp + 0x238], 0x447c90
mov dword [esp + 0x230], 0x4470b0
mov ecx, dword [0x447c9c]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x22c], 0x447ca4
mov dword [esp + 0x224], 0x447cb0
mov dword [esp + 0x21c], 0x4470b0
mov ecx, dword [0x447cbc]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x218], 0x4470b0
mov ecx, dword [0x447cc4]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x214], 0x447ccc
mov dword [esp + 0x20c], 0x447cd8
mov dword [esp + 0x204], 0x447ce4
mov dword [esp + 0x1fc], 0x447cf0
mov dword [esp + 0x1f4], 0x447cfc
mov dword [esp + 0x1ec], 0x4470b0
mov ecx, dword [0x447d08]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x1e8], 0x447d10
mov dword [esp + 0x1e0], 0x4470b0
mov ecx, dword [0x447d1c]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x1dc], 0x4470b0
mov ecx, dword [0x447d24]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x1d8], 0x4470b0
mov ecx, dword [0x447d2c]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x1d4], 0x447d34
mov dword [esp + 0x1cc], 0x4470b0
mov ecx, dword [str.3_ER]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x1c8], 0x4470b0
mov ecx, dword [0x447d48]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x1c4], 0x4470b0
mov esi, dword [0x447d50]
mov dword [esp + 0x1c0], 0x447d58
mov dword [esp + 0x1b8], 0x447d64
mov dword [esp + 0x1b0], 0x4470b0
mov ecx, dword [0x447d70]
mov dword [esp + 0x1ac], 0x4470b0
mov edi, dword [0x447d78]
mov dword [esp + 0x1a8], 0x4470b0
mov edx, dword [str._r_nT4]
mov dword [esp + 0x148], edx
mov dword [esp + 0x1a4], 0x4470b0
mov edx, dword [0x447d88]
mov dword [esp + 0x160], edx
mov dword [esp + 0x1a0], 0x4470b0
mov edx, dword [0x447d90]
mov dword [esp + 0x15c], edx
mov dword [esp + 0x19c], 0x4470b0
mov edx, dword [0x447d98]
mov dword [esp + 0x158], edx
mov dword [esp + 0x198], 0x4470b0
xor ebx, ebx
mov edx, dword [0x447da0]
jmp eax