Function at 0x42c7f0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x318
mov dword [esp + 0x310], 0x445ee4
mov dword [esp + 0xd8], 0
lea eax, [esp + 0xd8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4405f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x440600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x30c], eax
mov eax, dword [esp + 0x310]
mov ecx, dword [esp + 0x30c]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x445eec]
xor ecx, 0xcf569d7c
sub eax, ecx
mov dword [esp + 0x308], 0x445550
mov edi, dword [0x445ef0]
mov dword [esp + 0x304], 0x445550
mov esi, dword [0x445ef8]
mov dword [esp + 0x300], 0x445f00
mov dword [esp + 0x2f8], 0x445f0c
mov dword [esp + 0x2f0], 0x445f18
mov dword [esp + 0x2e8], 0x445f24
mov dword [esp + 0x2e0], 0x445f30
mov dword [esp + 0x2d8], 0x445550
mov ecx, dword [0x445f3c]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x2d4], 0x445f44
mov dword [esp + 0x2cc], 0x445f50
mov dword [esp + 0x2c4], 0x445f5c
mov dword [esp + 0x2bc], 0x445550
mov ecx, dword [0x445f68]
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x2b8], 0x445f70
mov dword [esp + 0x2b0], 0x445f7c
mov dword [esp + 0x2a8], 0x445550
mov ecx, dword [0x445f88]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x2a4], 0x445f90
mov dword [esp + 0x29c], 0x445f9c
mov dword [esp + 0x294], 0x445fa8
mov dword [esp + 0x28c], 0x445fb4
mov dword [esp + 0x284], 0x445fc0
mov dword [esp + 0x27c], 0x445fcc
mov dword [esp + 0x274], 0x445550
mov ecx, dword [0x445fd8]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x270], 0x445fe0
mov dword [esp + 0x268], 0x445fec
mov dword [esp + 0x260], 0x445ff8
mov dword [esp + 0x258], 0x445550
mov ecx, dword [0x446004]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x254], 0x44600c
mov dword [esp + 0x24c], 0x445550
mov ecx, dword [0x446018]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x248], 0x445550
mov ecx, dword [0x446020]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x244], 0x445550
mov ecx, dword [0x446028]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x240], 0x446030
mov dword [esp + 0x238], 0x44603c
mov dword [esp + 0x230], 0x446048
mov dword [esp + 0x228], 0x446054
mov dword [esp + 0x220], 0x446060
mov dword [esp + 0x218], 0x445550
mov ecx, dword [0x44606c]
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x214], 0x445550
mov ecx, dword [0x446074]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x210], 0x44607c
mov dword [esp + 0x208], 0x446088
mov dword [esp + 0x200], 0x445550
mov ecx, dword [0x446094]
mov dword [esp + 0x1fc], 0x445550
mov edx, dword [0x44609c]
mov dword [esp + 0x1c4], edx
mov dword [esp + 0x1f8], 0x4460a4
mov dword [esp + 0x1f0], 0x4460b0
mov dword [esp + 0x1e8], 0x445550
mov edx, dword [0x4460bc]
mov dword [esp + 0x16c], edx
mov dword [esp + 0x1e4], 0x445550
mov edx, dword [0x4460c4]
mov dword [esp + 0x18c], edx
mov dword [esp + 0x1e0], 0x445550
mov edx, dword [0x4460cc]
mov dword [esp + 0x188], edx
mov dword [esp + 0x1dc], 0x445550
mov edx, dword [0x4460d4]
mov dword [esp + 0x184], edx
mov dword [esp + 0x1d8], 0x445550
mov edx, dword [0x4460dc]
mov dword [esp + 0x180], edx
mov dword [esp + 0x1d4], 0x445550
mov edx, dword [0x4460e4]
mov dword [esp + 0x17c], edx
mov dword [esp + 0x1d0], 0x445550
mov edx, dword [0x4460ec]
mov dword [esp + 0x1a4], edx
mov dword [esp + 0x1cc], 0x445550
mov edx, dword [0x4460f4]
mov dword [esp + 0x1c8], 0x445550
mov ebx, dword [0x4460fc]
mov dword [esp + 0x1b0], ebx
xor ebx, ebx
jmp eax