Function at 0x42c920
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x318
mov dword [esp + 0x310], 0x44097c
mov dword [esp + 0xf0], 0
lea eax, [esp + 0xf0]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43b5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43b5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x30c], eax
mov eax, dword [esp + 0x310]
mov ecx, dword [esp + 0x30c]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x440984]
xor ecx, 0x4dfae12f
sub eax, ecx
mov dword [esp + 0x308], 0x440988
mov dword [esp + 0x300], 0x43fec0
mov ecx, dword [0x440994]
mov dword [esp + 0x150], ecx
mov dword [esp + 0x2fc], 0x44099c
mov dword [esp + 0x2f4], 0x4409a8
mov dword [esp + 0x2ec], 0x4409b4
mov dword [esp + 0x2e4], 0x4409c0
mov dword [esp + 0x2dc], 0x43fec0
mov ecx, dword [0x4409cc]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x2d8], 0x4409d4
mov dword [esp + 0x2d0], 0x4409e0
mov dword [esp + 0x2c8], 0x4409ec
mov dword [esp + 0x2c0], 0x43fec0
mov ecx, dword [0x4409f8]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x2bc], 0x43fec0
mov ecx, dword [0x440a00]
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x2b8], 0x440a08
mov dword [esp + 0x2b0], 0x440a14
mov dword [esp + 0x2a8], 0x440a20
mov dword [esp + 0x2a0], 0x440a2c
mov dword [esp + 0x298], 0x43fec0
mov ecx, dword [0x440a38]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x294], 0x440a40
mov dword [esp + 0x28c], 0x440a4c
mov dword [esp + 0x284], 0x43fec0
mov ecx, dword [0x440a58]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x280], 0x43fec0
mov ecx, dword [0x440a60]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x27c], 0x43fec0
mov ecx, dword [0x440a68]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x278], 0x440a70
mov dword [esp + 0x270], 0x440a7c
mov dword [esp + 0x268], 0x440a88
mov dword [esp + 0x260], 0x43fec0
mov ecx, dword [0x440a94]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x25c], 0x440a9c
mov dword [esp + 0x254], 0x440aa8
mov dword [esp + 0x24c], 0x440ab4
mov dword [esp + 0x244], 0x43fec0
mov ecx, dword [0x440ac0]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x240], 0x43fec0
mov ecx, dword [0x440ac8]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x23c], 0x43fec0
mov ecx, dword [0x440ad0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x238], 0x440ad8
mov dword [esp + 0x230], 0x440ae4
mov dword [esp + 0x228], 0x43fec0
mov ecx, dword [0x440af0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x224], 0x440af8
mov dword [esp + 0x21c], 0x440b04
mov dword [esp + 0x214], 0x43fec0
mov ecx, dword [str._ne_nF]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x210], 0x43fec0
mov ecx, dword [0x440b18]
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x20c], 0x440b20
mov dword [esp + 0x204], 0x440b2c
mov dword [esp + 0x1fc], 0x43fec0
mov ecx, dword [0x440b38]
mov dword [esp + 0x1f8], 0x43fec0
mov esi, dword [0x440b40]
mov dword [esp + 0x1f4], 0x440b48
mov dword [esp + 0x1ec], 0x440b54
mov dword [esp + 0x1e4], 0x43fec0
mov edx, dword [0x440b60]
mov dword [esp + 0x154], edx
mov dword [esp + 0x1e0], 0x43fec0
mov edx, dword [0x440b68]
mov dword [esp + 0x174], edx
mov dword [esp + 0x1dc], 0x43fec0
mov edx, dword [0x440b70]
mov dword [esp + 0x170], edx
mov dword [esp + 0x1d8], 0x43fec0
mov edx, dword [0x440b78]
mov dword [esp + 0x16c], edx
mov dword [esp + 0x1d4], 0x43fec0
mov edx, dword [0x440b80]
mov dword [esp + 0x168], edx
mov dword [esp + 0x1d0], 0x43fec0
mov edx, dword [0x440b88]
mov dword [esp + 0x164], edx
mov dword [esp + 0x1cc], 0x43fec0
mov edi, dword [0x440b90]
mov dword [esp + 0x1c8], 0x43fec0
mov edx, dword [0x440b98]
mov dword [esp + 0x1c4], 0x43fec0
mov ebx, dword [0x440ba0]
mov dword [esp + 0x178], ebx
xor ebx, ebx
jmp eax