Function at 0x42f960
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x418
mov esi, esp
lea eax, [0x448874]
mov dword [esi + 0x3ec], eax
mov al, byte [esi + 0x180]
mov byte [esi + 0x18c], al
mov byte [esi + 0x184], 0x90
mov byte [esi + 0x185], 0x91
mov byte [esi + 0x186], 0x94
mov byte [esi + 0x187], 0x14
mov eax, 4
mov byte [esi + eax + 0x184], 0
add eax, 1
cmp eax, 6
jne 0x42f9aa
xor eax, eax
cmp eax, 6
jae 0x42fa72
movzx edx, byte [esi + eax + 0x184]
mov ecx, eax
and ecx, 0x3a822e64
mov ebx, eax
and ebx, 0xc57dd19b
xor ebx, 0xc57dd19b
mov dword [esi + 0x1f8], eax
mov edi, dword [esi + 0x1f8]
and edi, 0xc57dd19b
xor edi, 0xc57dd19b
or edi, ebx
mov eax, edi
xor eax, 0xffffffff
mov ebx, ecx
add ebx, eax
sub edi, ecx
and edi, 0xb35c7aab
mov eax, ebx
and eax, 0x4ca38554
or edi, eax
mov eax, edi
xor eax, 0x4ca38554
add eax, 1
and edi, 0x9d9018db
xor edi, 0xf37fffaf
add edi, eax
mov ecx, ebx
and ecx, 0xdb
mov eax, edx
and eax, 0x24
or eax, 0xd9
and edx, 0xdb
xor edx, eax
and ebx, 0xdb
xor ebx, edi
and edi, ecx
or ebx, edi
mov eax, dword [esi + 0x1f8]
xor edx, ebx
xor dl, 0xfd
add dl, 0xc
mov byte [esi + eax + 0x184], dl
add eax, 1
jmp 0x42f9bc
mov eax, dword [esi + 0x184]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov edi, edx
add edi, 0x10
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2d8], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x334], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x204], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x94], 0
sub esp, 0x14
lea eax, [esi + 0x94]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435d8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435e8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x3e8], eax
mov eax, dword [esi + 0x3ec]
mov ecx, dword [esi + 0x3e8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x44887c]
xor ecx, 0xbd79ec10
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x28c], ecx
mov dword [ecx], 0x448880
push eax
mov dword [esi + 0x288], esp
push eax
mov ecx, esp
mov dword [esi + 0x29c], ecx
mov dword [ecx], 0x44888c
push eax
mov dword [esi + 0x294], esp
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x448898
push eax
mov dword [esi + 0x290], esp
push eax
mov ecx, esp
mov dword [esi + 0x2a4], ecx
mov dword [ecx], 0x4488a4
push eax
mov dword [esi + 0x2a0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4488b0]
mov dword [esi + 0x2a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2b4], ecx
mov dword [ecx], 0x4488b8
push eax
mov dword [esi + 0x2b0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2bc], ecx
mov dword [ecx], 0x4488c4
push eax
mov dword [esi + 0x2b8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c4], ecx
mov dword [ecx], 0x4488d0
push eax
mov dword [esi + 0x2c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2cc], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4488dc]
mov dword [esi + 0x2c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d4], ecx
mov dword [ecx], 0x4488e4
push eax
mov dword [esi + 0x2d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e8], ecx
mov dword [ecx], 0x4488f0
push eax
mov dword [esi + 0x2e4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f0], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4488fc]
mov dword [esi + 0x2ec], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f8], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448904]
mov dword [esi + 0x2f4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x308], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x44890c]
mov dword [esi + 0x300], ecx
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], 0x448914
push eax
mov dword [esi + 0x30c], esp
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x448920
push eax
mov dword [esi + 0x318], esp
push eax
mov ecx, esp
mov dword [esi + 0x31c], ecx
mov dword [ecx], 0x44892c
push eax
mov dword [esi + 0x314], esp
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448938]
mov dword [esi + 0x324], ecx
push eax
mov ecx, esp
mov dword [esi + 0x330], ecx
mov dword [ecx], 0x448940
push eax
mov dword [esi + 0x328], esp
push eax
mov ebx, esp
mov dword [ebx], 0x44894c
push eax
mov dword [esi + 0x340], esp
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x448958
push eax
mov dword [esi + 0x338], esp
push eax
mov ecx, esp
mov dword [esi + 0x348], ecx
mov dword [ecx], 0x448964
push eax
mov dword [esi + 0x33c], esp
push eax
mov ecx, esp
mov dword [esi + 0x370], ecx
mov dword [ecx], 0x448970
push eax
mov dword [esi + 0x360], esp
push eax
mov ecx, esp
mov dword [esi + 0x35c], ecx
mov dword [ecx], 0x44897c
push eax
mov dword [esi + 0x358], esp
push eax
mov ecx, esp
mov dword [esi + 0x36c], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448988]
mov dword [esi + 0x364], ecx
push eax
mov ecx, esp
mov dword [esi + 0x374], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448990]
mov dword [esi + 0x368], ecx
push eax
mov ecx, esp
mov dword [esi + 0x384], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448998]
mov dword [esi + 0x380], ecx
push eax
mov ecx, esp
mov dword [esi + 0x38c], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4489a0]
mov dword [esi + 0x388], ecx
push eax
mov ecx, esp
mov dword [esi + 0x394], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4489a8]
mov dword [esi + 0x390], ecx
push eax
mov ecx, esp
mov dword [esi + 0x39c], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4489b0]
mov dword [esi + 0x398], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a4], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4489b8]
mov dword [esi + 0x3a0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ac], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4489c0]
mov dword [esi + 0x3a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], 0x4489c8
push eax
mov dword [esi + 0x3b0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c8], ecx
mov dword [ecx], 0x4489d4
push eax
mov dword [esi + 0x3c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3bc], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x4489e0]
mov dword [esi + 0x3b8], ecx
push eax
mov edx, esp
mov dword [edx], 0x448100
mov ecx, dword [0x4489e8]
mov dword [esi + 0x3d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x4489f0
push eax
mov dword [esi + 0x3d8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3e4], ecx
mov dword [ecx], 0x4489fc
push eax
mov dword [esi + 0x3e0], esp
push eax
mov ecx, esp
mov dword [esi + 0x284], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448a08]
mov dword [esi + 0x280], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2e0], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448a10]
mov dword [esi + 0x2dc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448a18]
mov dword [esi + 0x2fc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x354], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448a20]
mov dword [esi + 0x350], ecx
push eax
mov ecx, esp
mov dword [esi + 0x37c], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448a28]
mov dword [esi + 0x378], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], 0x448100
mov ecx, dword [0x448a30]
mov dword [esi + 0x3c4], ecx
jmp eax