Function at 0x4291e0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x4f8
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x445c5c]
mov dword [esi + 0x4cc], ecx
mov cl, byte [esi + 0x17c]
mov byte [esi + 0x180], cl
mov byte [esi + 0x44], 0x7c
mov byte [esi + 0x45], 0x7f
mov byte [esi + 0x46], 0x70
mov byte [esi + 0x47], 0xf0
xor edi, edi
cmp edi, 4
jae 0x42925b
mov cl, byte [esi + edi + 0x44]
mov byte [esi + 0x3f], cl
mov ecx, edi
xor ecx, 0x6a
mov edx, edi
or edx, 0x95
and edx, ecx
mov ebx, edi
and ebx, 0x6a
mov ecx, edi
xor ecx, 0x95
add ecx, edi
sub ecx, ebx
add edx, ecx
xor dl, byte [esi + 0x3f]
add dl, 0x17
mov byte [esi + edi + 0x44], dl
add edi, 1
jmp 0x42921e
mov ecx, dword [esi + 0x44]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov edi, eax
add edi, 0x10
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x348], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x3dc], ecx
mov word [eax + 0x28], 0
mov ebx, eax
add ebx, 0x2a
mov byte [eax + 0x2a], 0
mov dword [esi + 0x178], 0
sub esp, 0x14
lea eax, [esi + 0x178]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4405f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x440600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x4c8], eax
mov eax, dword [esi + 0x4cc]
mov ecx, dword [esi + 0x4c8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x445c64]
xor ecx, 0x84e96806
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x28c], ecx
mov dword [ecx], 0x445c68
push eax
mov dword [esi + 0x288], esp
push eax
mov ecx, esp
mov dword [esi + 0x294], ecx
mov dword [ecx], 0x445c74
push eax
mov dword [esi + 0x290], esp
push eax
mov ecx, esp
mov dword [esi + 0x29c], ecx
mov dword [ecx], 0x445c80
push eax
mov dword [esi + 0x298], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x445c8c
push eax
mov dword [esi + 0x2a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2bc], ecx
mov dword [ecx], 0x445c98
push eax
mov dword [esi + 0x2b8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2cc], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ca4]
mov dword [esi + 0x2c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d4], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445cac]
mov dword [esi + 0x2d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445cb4]
mov dword [esi + 0x2d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2e4], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445cbc]
mov dword [esi + 0x2e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2ec], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445cc4]
mov dword [esi + 0x2e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x445ccc
push eax
mov dword [esi + 0x2f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x445cd8
push eax
mov dword [esi + 0x304], esp
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ce4]
mov dword [esi + 0x2f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x308], ecx
mov dword [ecx], 0x445cec
push eax
mov dword [esi + 0x300], esp
push eax
mov ecx, esp
mov dword [esi + 0x324], ecx
mov dword [ecx], 0x445cf8
push eax
mov dword [esi + 0x31c], esp
push eax
mov ecx, esp
mov dword [esi + 0x314], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d04]
mov dword [esi + 0x310], ecx
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x445d0c
push eax
mov dword [esi + 0x318], esp
push eax
mov ecx, esp
mov dword [esi + 0x334], ecx
mov dword [ecx], 0x445d18
push eax
mov dword [esi + 0x330], esp
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d24]
mov dword [esi + 0x328], ecx
push eax
mov ecx, esp
mov dword [esi + 0x33c], ecx
mov dword [ecx], 0x445d2c
push eax
mov dword [esi + 0x338], esp
push eax
mov ecx, esp
mov dword [esi + 0x354], ecx
mov dword [ecx], 0x445d38
push eax
mov dword [esi + 0x34c], esp
push eax
mov ecx, esp
mov dword [esi + 0x358], ecx
mov dword [ecx], 0x445d44
push eax
mov dword [esi + 0x350], esp
push eax
mov ecx, esp
mov dword [esi + 0x36c], ecx
mov dword [ecx], 0x445d50
push eax
mov dword [esi + 0x35c], esp
push eax
mov ecx, esp
mov dword [esi + 0x364], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d5c]
mov dword [esi + 0x360], ecx
push eax
mov ecx, esp
mov dword [esi + 0x370], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d64]
mov dword [esi + 0x368], ecx
push eax
mov ecx, esp
mov dword [esi + 0x378], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d6c]
mov dword [esi + 0x374], ecx
push eax
mov ecx, esp
mov dword [esi + 0x388], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d74]
mov dword [esi + 0x384], ecx
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d7c]
mov dword [esi + 0x38c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x398], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d84]
mov dword [esi + 0x394], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a0], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d8c]
mov dword [esi + 0x39c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a8], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445d94]
mov dword [esi + 0x3a4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b0], ecx
mov dword [ecx], 0x445d9c
push eax
mov dword [esi + 0x3ac], esp
push eax
mov ecx, esp
mov dword [esi + 0x3b8], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445da8]
mov dword [esi + 0x3b4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3c0], ecx
mov dword [ecx], 0x445db0
push eax
mov dword [esi + 0x3bc], esp
push eax
mov ecx, esp
mov dword [esi + 0x3d8], ecx
mov dword [ecx], 0x445dbc
push eax
mov dword [esi + 0x3cc], esp
push eax
mov ecx, esp
mov dword [esi + 0x3d0], ecx
mov dword [ecx], 0x445dc8
push eax
mov dword [esi + 0x3c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x445dd4
push eax
mov dword [esi + 0x3c8], esp
push eax
mov ecx, esp
mov dword [esi + 0x414], ecx
mov dword [ecx], 0x445de0
push eax
mov dword [esi + 0x404], esp
push eax
mov ecx, esp
mov dword [esi + 0x400], ecx
mov dword [ecx], 0x445dec
push eax
mov dword [esi + 0x3fc], esp
push eax
mov ecx, esp
mov dword [esi + 0x40c], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445df8]
mov dword [esi + 0x408], ecx
push eax
mov ecx, esp
mov dword [esi + 0x418], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e00]
mov dword [esi + 0x410], ecx
push eax
mov ecx, esp
mov dword [esi + 0x420], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e08]
mov dword [esi + 0x41c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x428], ecx
mov dword [ecx], 0x445e10
push eax
mov dword [esi + 0x424], esp
push eax
mov ecx, esp
mov dword [esi + 0x438], ecx
mov dword [ecx], 0x445e1c
push eax
mov dword [esi + 0x434], esp
push eax
mov ecx, esp
mov dword [esi + 0x430], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e28]
mov dword [esi + 0x42c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x440], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e30]
mov dword [esi + 0x43c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x44c], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e38]
mov dword [esi + 0x444], ecx
push eax
mov ecx, esp
mov dword [esi + 0x458], ecx
mov dword [ecx], 0x445e40
push eax
mov dword [esi + 0x450], esp
push eax
mov ecx, esp
mov dword [esi + 0x20c], ecx
mov dword [ecx], 0x445e4c
push eax
mov dword [esi + 0x464], esp
push eax
mov ecx, esp
mov dword [esi + 0x460], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e58]
mov dword [esi + 0x45c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x46c], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e60]
mov dword [esi + 0x468], ecx
push eax
mov ecx, esp
mov dword [esi + 0x474], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e68]
mov dword [esi + 0x470], ecx
push eax
mov ecx, esp
mov dword [esi + 0x47c], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e70]
mov dword [esi + 0x478], ecx
push eax
mov ecx, esp
mov dword [esi + 0x484], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e78]
mov dword [esi + 0x480], ecx
push eax
mov ecx, esp
mov dword [esi + 0x48c], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e80]
mov dword [esi + 0x488], ecx
push eax
mov ecx, esp
mov dword [esi + 0x494], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e88]
mov dword [esi + 0x490], ecx
push eax
mov ecx, esp
mov dword [esi + 0x49c], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445e90]
mov dword [esi + 0x498], ecx
push eax
mov edx, esp
mov dword [edx], 0x445380
mov ecx, dword [0x445e98]
mov dword [esi + 0x4a0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4ac], ecx
mov dword [ecx], 0x445ea0
push eax
mov dword [esi + 0x4a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x4c4], ecx
mov dword [ecx], 0x445eac
push eax
mov dword [esi + 0x4b8], esp
push eax
mov ecx, esp
mov dword [esi + 0x4b4], ecx
mov dword [ecx], 0x445380
mov ecx, dword [str.Py:]
mov dword [esi + 0x4b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4c0], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ec0]
mov dword [esi + 0x4bc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a4], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ec8]
mov dword [esi + 0x2a0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2b4], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ed0]
mov dword [esi + 0x2b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c4], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ed8]
mov dword [esi + 0x2c0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ee0]
mov dword [esi + 0x340], ecx
push eax
mov ecx, esp
mov dword [esi + 0x380], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ee8]
mov dword [esi + 0x37c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3e4], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ef0]
mov dword [esi + 0x3e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3f0], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445ef8]
mov dword [esi + 0x3ec], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3f8], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445f00]
mov dword [esi + 0x3f4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x454], ecx
mov dword [ecx], 0x445380
mov ecx, dword [0x445f08]
mov dword [esi + 0x448], ecx
jmp eax