Function at 0x42e320
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x3f8
mov esi, esp
lea ecx, [0x446534]
mov dword [esi + 0x3bc], ecx
mov cl, byte [esi + 0x148]
mov byte [esi + 0x14c], cl
mov byte [esi + 0x28], 0x6c
mov byte [esi + 0x29], 0x6d
mov byte [esi + 0x2a], 0x50
mov byte [esi + 0x2b], 0xd0
xor eax, eax
cmp eax, 4
jae 0x42e3bf
movzx edx, byte [esi + eax + 0x28]
mov ecx, eax
add ecx, 0x8a1df70c
mov ebx, ecx
and ebx, edx
shl ebx, 1
mov edi, ebx
xor edi, 0xffffffff
and ecx, edi
mov edi, 0x75e208f3
sub edi, eax
and ebx, edi
sub ebx, ecx
mov ecx, edx
xor ecx, 0xffffffff
mov edi, ebx
and edi, ecx
xor ebx, 0xffffffff
and edx, ebx
sub edx, edi
mov ebx, edx
add ebx, 0xaf10479f
shl edx, 1
and edx, 2
xor edx, 2
mov ecx, ebx
shl ecx, 1
and ecx, 2
add ecx, 0xff
sub ebx, ecx
add ebx, edx
mov byte [esi + eax + 0x28], bl
add eax, 1
jmp 0x42e35b
mov eax, dword [esi + 0x28]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov ebx, edx
add ebx, 0x10
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2b0], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x2f4], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x360], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x144], 0
sub esp, 0x14
lea eax, [esi + 0x144]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4415ec
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4415fc
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x3b8], eax
mov eax, dword [esi + 0x3bc]
mov ecx, dword [esi + 0x3b8]
mov edx, dword [eax + ecx*4]
mov eax, dword [0x44653c]
xor eax, 0xe8de0ab9
sub edx, eax
push eax
mov eax, esp
mov dword [esi + 0x1e0], eax
mov dword [eax], 0x445d20
mov ecx, dword [0x446540]
push eax
mov eax, esp
mov dword [esi + 0x1e8], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446548]
mov dword [esi + 0x1e4], eax
push eax
mov eax, esp
mov dword [esi + 0x1f0], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446550]
mov dword [esi + 0x1ec], eax
push eax
mov eax, esp
mov dword [esi + 0x1f8], eax
mov dword [eax], 0x446558
push eax
mov dword [esi + 0x1f4], esp
push eax
mov eax, esp
mov dword [esi + 0x210], eax
mov dword [eax], 0x446564
push eax
mov dword [esi + 0x204], esp
push eax
mov eax, esp
mov dword [esi + 0x208], eax
mov dword [eax], 0x446570
push eax
mov dword [esi + 0x1fc], esp
push eax
mov eax, esp
mov dword [esi + 0x20c], eax
mov dword [eax], 0x44657c
push eax
mov dword [esi + 0x200], esp
push eax
mov eax, esp
mov dword [esi + 0x220], eax
mov dword [eax], 0x446588
push eax
mov dword [esi + 0x218], esp
push eax
mov eax, esp
mov dword [esi + 0x21c], eax
mov dword [eax], 0x446594
push eax
mov dword [esi + 0x214], esp
push eax
mov eax, esp
mov dword [esi + 0x228], eax
mov dword [eax], 0x445d20
mov eax, dword [0x4465a0]
mov dword [esi + 0x224], eax
push eax
mov eax, esp
mov dword [esi + 0x230], eax
mov dword [eax], 0x4465a8
push eax
mov dword [esi + 0x22c], esp
push eax
mov eax, esp
mov dword [esi + 0x238], eax
mov dword [eax], 0x4465b4
push eax
mov dword [esi + 0x234], esp
push eax
mov eax, esp
mov dword [esi + 0x244], eax
mov dword [eax], 0x4465c0
push eax
mov dword [esi + 0x23c], esp
push eax
mov eax, esp
mov dword [esi + 0x248], eax
mov dword [eax], 0x4465cc
push eax
mov dword [esi + 0x240], esp
push eax
mov eax, esp
mov dword [esi + 0x268], eax
mov dword [eax], 0x4465d8
push eax
mov dword [esi + 0x260], esp
push eax
mov eax, esp
mov dword [esi + 0x264], eax
mov dword [eax], 0x445d20
mov eax, dword [0x4465e4]
mov dword [esi + 0x25c], eax
push eax
mov eax, esp
mov dword [esi + 0x274], eax
mov dword [eax], 0x4465ec
push eax
mov dword [esi + 0x26c], esp
push eax
mov eax, esp
mov dword [esi + 0x280], eax
mov dword [eax], 0x445d20
mov eax, dword [0x4465f8]
mov dword [esi + 0x27c], eax
push eax
mov eax, esp
mov dword [esi + 0x288], eax
mov dword [eax], 0x446600
push eax
mov dword [esi + 0x284], esp
push eax
mov eax, esp
mov dword [esi + 0x298], eax
mov dword [eax], 0x44660c
push eax
mov dword [esi + 0x294], esp
push eax
mov eax, esp
mov dword [esi + 0x290], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446618]
mov dword [esi + 0x28c], eax
push eax
mov eax, esp
mov dword [esi + 0x2a0], eax
mov dword [eax], 0x446620
push eax
mov dword [esi + 0x29c], esp
push eax
mov eax, esp
mov dword [esi + 0x2a8], eax
mov dword [eax], 0x445d20
mov eax, dword [0x44662c]
mov dword [esi + 0x2a4], eax
push eax
mov eax, esp
mov dword [esi + 0x2b4], eax
mov dword [eax], 0x446634
push eax
mov dword [esi + 0x2ac], esp
push eax
mov eax, esp
mov dword [esi + 0x2c4], eax
mov dword [eax], 0x446640
push eax
mov dword [esi + 0x2c0], esp
push eax
mov eax, esp
mov dword [esi + 0x2bc], eax
mov dword [eax], 0x445d20
mov eax, dword [0x44664c]
mov dword [esi + 0x2b8], eax
push eax
mov eax, esp
mov dword [esi + 0x2d0], eax
mov dword [eax], 0x446654
push eax
mov dword [esi + 0x2cc], esp
push eax
mov eax, esp
mov dword [esi + 0x2d8], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446660]
mov dword [esi + 0x2d4], eax
push eax
mov eax, esp
mov dword [esi + 0x2e0], eax
mov dword [eax], 0x446668
push eax
mov dword [esi + 0x2dc], esp
push eax
mov eax, esp
mov dword [esi + 0x2f0], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446674]
mov dword [esi + 0x2ec], eax
push eax
mov eax, esp
mov dword [esi + 0x304], eax
mov dword [eax], 0x445d20
mov eax, dword [0x44667c]
mov dword [esi + 0x300], eax
push eax
mov eax, esp
mov dword [esi + 0x310], eax
mov dword [eax], 0x446684
push eax
mov dword [esi + 0x308], esp
push eax
mov eax, esp
mov dword [esi + 0x314], eax
mov dword [eax], 0x446690
push eax
mov dword [esi + 0x30c], esp
push eax
mov eax, esp
mov dword [esi + 0x33c], eax
mov dword [eax], 0x44669c
push eax
mov dword [esi + 0x330], esp
push eax
mov eax, esp
mov dword [esi + 0x328], eax
mov dword [eax], 0x445d20
mov eax, dword [0x4466a8]
mov dword [esi + 0x320], eax
push eax
mov eax, esp
mov dword [esi + 0x334], eax
mov dword [eax], 0x445d20
mov eax, dword [0x4466b0]
mov dword [esi + 0x32c], eax
push eax
mov eax, esp
mov dword [esi + 0x340], eax
mov dword [eax], 0x445d20
mov eax, dword [0x4466b8]
mov dword [esi + 0x338], eax
push eax
mov eax, esp
mov dword [esi + 0x348], eax
mov dword [eax], 0x4466c0
push eax
mov dword [esi + 0x344], esp
push eax
mov edi, esp
mov dword [esi + 0x368], edi
mov dword [edi], 0x4466cc
push eax
mov dword [esi + 0x35c], esp
push eax
mov edi, esp
mov dword [esi + 0x358], edi
mov dword [edi], 0x445d20
mov edi, dword [0x4466d8]
mov dword [esi + 0x354], edi
push eax
mov edi, esp
mov dword [esi + 0x36c], edi
mov dword [edi], 0x445d20
mov edi, dword [0x4466e0]
mov dword [esi + 0x364], edi
push eax
mov edi, esp
mov dword [esi + 0x374], edi
mov dword [edi], 0x4466e8
push eax
mov dword [esi + 0x370], esp
push eax
mov edi, esp
mov dword [esi + 0x38c], edi
mov dword [edi], 0x4466f4
push eax
mov dword [esi + 0x384], esp
push eax
mov edi, esp
mov dword [esi + 0x37c], edi
mov dword [edi], 0x445d20
mov edi, dword [0x446700]
mov dword [esi + 0x378], edi
push eax
mov edi, esp
mov dword [esi + 0x388], edi
mov dword [edi], 0x446708
push eax
mov dword [esi + 0x380], esp
push eax
mov edi, esp
mov dword [esi + 0x39c], edi
mov dword [edi], 0x446714
push eax
mov dword [esi + 0x398], esp
push eax
mov edi, esp
mov dword [esi + 0x394], edi
mov dword [edi], 0x445d20
mov edi, dword [0x446720]
mov dword [esi + 0x390], edi
push eax
mov edi, esp
mov dword [esi + 0x3a4], edi
mov dword [edi], 0x445d20
mov edi, dword [0x446728]
mov dword [esi + 0x3a0], edi
push eax
mov edi, esp
mov dword [esi + 0x3ac], edi
mov dword [edi], 0x445d20
mov edi, dword [0x446730]
mov dword [esi + 0x3a8], edi
push eax
mov edi, esp
mov dword [esi + 0x3b4], edi
mov dword [edi], 0x445d20
mov edi, dword [0x446738]
mov dword [esi + 0x3b0], edi
push eax
mov eax, esp
mov dword [esi + 0x1d0], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446740]
mov dword [esi + 0x1cc], eax
push eax
mov eax, esp
mov dword [esi + 0x1dc], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446748]
mov dword [esi + 0x1d8], eax
push eax
mov eax, esp
mov dword [esi + 0x250], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446750]
mov dword [esi + 0x24c], eax
push eax
mov eax, esp
mov dword [esi + 0x258], eax
mov dword [eax], 0x445d20
mov eax, dword [str.C__nZf]
mov dword [esi + 0x254], eax
push eax
mov eax, esp
mov dword [esi + 0x278], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446760]
mov dword [esi + 0x270], eax
push eax
mov eax, esp
mov dword [esi + 0x2e8], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446768]
mov dword [esi + 0x2e4], eax
push eax
mov eax, esp
mov dword [esi + 0x2fc], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446770]
mov dword [esi + 0x2f8], eax
push eax
mov eax, esp
mov dword [esi + 0x324], eax
mov dword [eax], 0x445d20
mov eax, dword [0x446778]
mov dword [esi + 0x31c], eax
push eax
mov edi, esp
mov dword [edi], 0x445d20
mov eax, dword [0x446780]
mov dword [esi + 0x34c], eax
jmp edx