Function at 0x429de0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x438
mov esi, esp
lea ecx, [0x445bb0]
mov dword [esi + 0x3ec], ecx
mov cl, byte [esi + 0x16c]
mov byte [esi + 0x178], cl
mov byte [esi + 0x170], 0x20
mov byte [esi + 0x171], 0x21
mov byte [esi + 0x172], 0x2c
mov byte [esi + 0x173], 0xac
mov ecx, 4
mov byte [esi + ecx + 0x170], 0
add ecx, 1
cmp ecx, 8
jne 0x429e2a
xor ecx, ecx
cmp ecx, 8
jae 0x429e87
movzx ebx, byte [esi + ecx + 0x170]
mov edi, 0x879e5f37
sub edi, ecx
or edi, ebx
mov edx, 0x37
sub edx, ecx
mov eax, 0x37
sub eax, ecx
or edx, eax
and edx, ebx
xor edi, 0xffffffff
or edx, edi
add edx, 0xa617dc17
mov eax, edx
shl eax, 1
and eax, 2
xor edx, 1
add edx, eax
mov byte [esi + ecx + 0x170], dl
add ecx, 1
jmp 0x429e3c
mov eax, dword [esi + 0x170]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov eax, edx
add eax, 0x10
mov dword [esi + 0x70], eax
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2bc], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x31c], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x328], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x168], 0
sub esp, 0x14
lea eax, [esi + 0x168]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4405f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x440600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x3e8], eax
mov eax, dword [esi + 0x3ec]
mov ecx, dword [esi + 0x3e8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x445bb8]
xor ecx, 0xe8fe726a
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x228], ecx
mov dword [ecx], 0x445bbc
push eax
mov dword [esi + 0x224], esp
push eax
mov ecx, esp
mov dword [esi + 0x230], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445bc8]
mov dword [esi + 0x22c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x238], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445bd0]
mov dword [esi + 0x234], ecx
push eax
mov ecx, esp
mov dword [esi + 0x240], ecx
mov dword [ecx], 0x445bd8
push eax
mov dword [esi + 0x23c], esp
push eax
mov ecx, esp
mov dword [esi + 0x24c], ecx
mov dword [ecx], 0x445be4
push eax
mov dword [esi + 0x244], esp
push eax
mov ecx, esp
mov dword [esi + 0x250], ecx
mov dword [ecx], 0x445bf0
push eax
mov dword [esi + 0x248], esp
push eax
mov ecx, esp
mov dword [esi + 0x260], ecx
mov dword [ecx], 0x445bfc
push eax
mov dword [esi + 0x258], esp
push eax
mov ecx, esp
mov dword [esi + 0x25c], ecx
mov dword [ecx], 0x445c08
push eax
mov dword [esi + 0x254], esp
push eax
mov ecx, esp
mov dword [esi + 0x270], ecx
mov dword [ecx], 0x445c14
push eax
mov dword [esi + 0x26c], esp
push eax
mov ecx, esp
mov dword [esi + 0x278], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445c20]
mov dword [esi + 0x274], ecx
push eax
mov ecx, esp
mov dword [esi + 0x280], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445c28]
mov dword [esi + 0x27c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x288], ecx
mov dword [ecx], 0x445c30
push eax
mov dword [esi + 0x284], esp
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x445c3c
push eax
mov dword [esi + 0x294], esp
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445c48]
mov dword [esi + 0x28c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445c50]
mov dword [esi + 0x29c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a8], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445c58]
mov dword [esi + 0x2a4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x445c60
push eax
mov dword [esi + 0x2ac], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c4], ecx
mov dword [ecx], 0x445c6c
push eax
mov dword [esi + 0x2c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2cc], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445c78]
mov dword [esi + 0x2c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d4], ecx
mov dword [ecx], 0x445c80
push eax
mov dword [esi + 0x2d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e4], ecx
mov dword [ecx], 0x445c8c
push eax
mov dword [esi + 0x2e0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445c98]
mov dword [esi + 0x2d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2ec], ecx
mov dword [ecx], 0x445ca0
push eax
mov dword [esi + 0x2e8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445cac]
mov dword [esi + 0x2f0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445cb4]
mov dword [esi + 0x2f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445cbc]
mov dword [esi + 0x300], ecx
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445cc4]
mov dword [esi + 0x308], ecx
push eax
mov ecx, esp
mov dword [esi + 0x314], ecx
mov dword [ecx], 0x445ccc
push eax
mov dword [esi + 0x310], esp
push eax
mov ecx, esp
mov dword [esi + 0x330], ecx
mov dword [ecx], 0x445cd8
push eax
mov dword [esi + 0x32c], esp
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445ce4]
mov dword [esi + 0x334], ecx
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445cec]
mov dword [esi + 0x340], ecx
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], 0x445cf4
push eax
mov dword [esi + 0x34c], esp
push eax
mov ecx, esp
mov dword [esi + 0x360], ecx
mov dword [ecx], 0x445d00
push eax
mov dword [esi + 0x358], esp
push eax
mov ecx, esp
mov dword [esi + 0x35c], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d0c]
mov dword [esi + 0x354], ecx
push eax
mov ecx, esp
mov dword [esi + 0x368], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d14]
mov dword [esi + 0x364], ecx
push eax
mov ecx, esp
mov dword [esi + 0x374], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d1c]
mov dword [esi + 0x370], ecx
push eax
mov ecx, esp
mov dword [esi + 0x37c], ecx
mov dword [ecx], 0x445360
mov ecx, dword [str._M_aM]
mov dword [esi + 0x378], ecx
push eax
mov ecx, esp
mov dword [esi + 0x384], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d2c]
mov dword [esi + 0x380], ecx
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], 0x445d34
push eax
mov dword [esi + 0x388], esp
push eax
mov ecx, esp
mov dword [esi + 0x3a4], ecx
mov dword [ecx], 0x445d40
push eax
mov dword [esi + 0x39c], esp
push eax
mov ecx, esp
mov dword [esi + 0x3a0], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d4c]
mov dword [esi + 0x398], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ac], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d54]
mov dword [esi + 0x3a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d5c]
mov dword [esi + 0x3b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3bc], ecx
mov dword [ecx], 0x445d64
push eax
mov dword [esi + 0x3b8], esp
push eax
mov ebx, esp
mov dword [ebx], 0x445d70
push eax
mov dword [esi + 0x3c8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d7c]
mov dword [esi + 0x3c0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d84]
mov dword [esi + 0x3d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x445360
mov ecx, dword [0x445d8c]
mov dword [esi + 0x3d8], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x445360
mov edx, dword [0x445d94]
push eax
mov edi, esp
mov dword [esi + 0x220], edi
mov dword [edi], 0x445360
mov edi, dword [0x445d9c]
mov dword [esi + 0x21c], edi
push eax
mov edi, esp
mov dword [esi + 0x268], edi
mov dword [edi], 0x445360
mov edi, dword [0x445da4]
mov dword [esi + 0x264], edi
push eax
mov edi, esp
mov dword [esi + 0x2b8], edi
mov dword [edi], 0x445360
mov edi, dword [0x445dac]
mov dword [esi + 0x2b4], edi
push eax
mov edi, esp
mov dword [esi + 0x324], edi
mov dword [edi], 0x445360
mov edi, dword [0x445db4]
mov dword [esi + 0x320], edi
push eax
mov edi, esp
mov dword [esi + 0x348], edi
mov dword [edi], 0x445360
mov edi, dword [0x445dbc]
mov dword [esi + 0x33c], edi
push eax
mov edi, esp
mov dword [esi + 0x394], edi
mov dword [edi], 0x445360
mov edi, dword [0x445dc4]
jmp eax