Function at 0x42c300
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x308
mov dword [esp + 0x2dc], 0x4409d4
mov dword [esp + 0xa8], 0
lea eax, [esp + 0xa8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43b5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43b5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2d8], eax
mov eax, dword [esp + 0x2dc]
mov ecx, dword [esp + 0x2d8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x4409dc]
xor ecx, 0x5308afe
sub eax, ecx
mov dword [esp + 0x2d4], 0x4409e0
mov dword [esp + 0x2cc], 0x4409ec
mov dword [esp + 0x2c4], 0x4409f8
mov dword [esp + 0x2bc], 0x440a04
mov dword [esp + 0x2b4], 0x440a10
mov dword [esp + 0x2ac], 0x440090
mov ecx, dword [0x440a1c]
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x2a8], 0x440a24
mov dword [esp + 0x2a0], 0x440090
mov ecx, dword [0x440a30]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x29c], 0x440090
mov ecx, dword [0x440a38]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x298], 0x440a40
mov dword [esp + 0x290], 0x440a4c
mov dword [esp + 0x288], 0x440a58
mov dword [esp + 0x280], 0x440090
mov ecx, dword [0x440a64]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x27c], 0x440a6c
mov dword [esp + 0x274], 0x440a78
mov dword [esp + 0x26c], 0x440a84
mov dword [esp + 0x264], 0x440090
mov ecx, dword [0x440a90]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x260], 0x440a98
mov dword [esp + 0x258], 0x440090
mov ecx, dword [0x440aa4]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x254], 0x440090
mov ecx, dword [0x440aac]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x250], 0x440ab4
mov dword [esp + 0x248], 0x440ac0
mov dword [esp + 0x240], 0x440acc
mov dword [esp + 0x238], 0x440090
mov ecx, dword [0x440ad8]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x234], 0x440090
mov ecx, dword [0x440ae0]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x230], 0x440090
mov ecx, dword [0x440ae8]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x22c], 0x440af0
mov dword [esp + 0x224], 0x440afc
mov dword [esp + 0x21c], 0x440b08
mov dword [esp + 0x214], 0x440b14
mov dword [esp + 0x20c], 0x440090
mov ecx, dword [0x440b20]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x208], 0x440b28
mov dword [esp + 0x200], 0x440b34
mov dword [esp + 0x1f8], 0x440090
mov esi, dword [0x440b40]
mov dword [esp + 0x1f4], 0x440090
mov ecx, dword [0x440b48]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x1f0], 0x440b50
mov dword [esp + 0x1e8], 0x440b5c
mov dword [esp + 0x1e0], 0x440090
mov ecx, dword [0x440b68]
mov dword [esp + 0x1dc], 0x440b70
mov dword [esp + 0x1d4], 0x440b7c
mov dword [esp + 0x1cc], 0x440b88
mov dword [esp + 0x1c4], 0x440b94
mov dword [esp + 0x1bc], 0x440090
mov edx, dword [0x440ba0]
mov dword [esp + 0x134], edx
mov dword [esp + 0x1b8], 0x440090
mov edx, dword [0x440ba8]
mov dword [esp + 0x150], edx
mov dword [esp + 0x1b4], 0x440090
mov edx, dword [0x440bb0]
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1b0], 0x440090
mov edx, dword [0x440bb8]
mov dword [esp + 0x148], edx
mov dword [esp + 0x1ac], 0x440090
mov edx, dword [0x440bc0]
mov dword [esp + 0x158], edx
mov dword [esp + 0x1a8], 0x440090
mov edx, dword [0x440bc8]
mov dword [esp + 0x184], edx
mov dword [esp + 0x1a4], 0x440090
mov edx, dword [0x440bd0]
mov dword [esp + 0x1a0], 0x440090
mov ebx, dword [0x440bd8]
mov dword [esp + 0x19c], 0x440090
mov dword [esp + 0x94], 0
mov edi, dword [0x440be0]
mov dword [esp + 0x154], edi
jmp eax