Function at 0x42bf40
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2f8
mov dword [esp + 0x2cc], 0x43f5b4
mov dword [esp + 0xf8], 0
lea eax, [esp + 0xf8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43a5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43a5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2c8], eax
mov eax, dword [esp + 0x2cc]
mov ecx, dword [esp + 0x2c8]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x43f5bc]
xor eax, 0xd5217aaa
sub ecx, eax
mov dword [esp + 0x2c4], 0x43ecf0
mov edi, dword [0x43f5c0]
mov dword [esp + 0x2c0], 0x43f5c8
mov dword [esp + 0x2b8], 0x43f5d4
mov dword [esp + 0x2b0], 0x43ecf0
mov eax, dword [0x43f5e0]
mov dword [esp + 0x128], eax
mov dword [esp + 0x2ac], 0x43f5e8
mov dword [esp + 0x2a4], 0x43f5f4
mov dword [esp + 0x29c], 0x43f600
mov dword [esp + 0x294], 0x43f60c
mov dword [esp + 0x28c], 0x43f618
mov dword [esp + 0x284], 0x43f624
mov dword [esp + 0x27c], 0x43f630
mov dword [esp + 0x274], 0x43ecf0
mov eax, dword [0x43f63c]
mov dword [esp + 0x13c], eax
mov dword [esp + 0x270], 0x43f644
mov dword [esp + 0x268], 0x43f650
mov dword [esp + 0x260], 0x43f65c
mov dword [esp + 0x258], 0x43ecf0
mov edx, dword [0x43f668]
mov dword [esp + 0x178], edx
mov dword [esp + 0x254], 0x43f670
mov dword [esp + 0x24c], 0x43f67c
mov dword [esp + 0x244], 0x43ecf0
mov edx, dword [0x43f688]
mov dword [esp + 0x174], edx
mov dword [esp + 0x240], 0x43f690
mov dword [esp + 0x238], 0x43f69c
mov dword [esp + 0x230], 0x43f6a8
mov dword [esp + 0x228], 0x43ecf0
mov edx, dword [0x43f6b4]
mov dword [esp + 0x170], edx
mov dword [esp + 0x224], 0x43f6bc
mov dword [esp + 0x21c], 0x43ecf0
mov edx, dword [0x43f6c8]
mov dword [esp + 0x16c], edx
mov dword [esp + 0x218], 0x43f6d0
mov dword [esp + 0x210], 0x43ecf0
mov eax, dword [0x43f6dc]
mov dword [esp + 0x168], eax
mov dword [esp + 0x20c], 0x43f6e4
mov dword [esp + 0x204], 0x43f6f0
mov dword [esp + 0x1fc], 0x43f6fc
mov dword [esp + 0x1f4], 0x43ecf0
mov edx, dword [0x43f708]
mov dword [esp + 0x164], edx
mov dword [esp + 0x1f0], 0x43ecf0
mov edx, dword [0x43f710]
mov dword [esp + 0x160], edx
mov dword [esp + 0x1ec], 0x43ecf0
mov edx, dword [0x43f718]
mov dword [esp + 0x15c], edx
mov dword [esp + 0x1e8], 0x43f720
mov dword [esp + 0x1e0], 0x43f72c
mov dword [esp + 0x1d8], 0x43f738
mov dword [esp + 0x1d0], 0x43ecf0
mov edx, dword [0x43f744]
mov dword [esp + 0x17c], edx
mov dword [esp + 0x1cc], 0x43f74c
mov dword [esp + 0x1c4], 0x43f758
mov dword [esp + 0x1bc], 0x43ecf0
mov esi, dword [0x43f764]
mov dword [esp + 0x1b8], 0x43ecf0
mov edx, dword [0x43f76c]
mov dword [esp + 0x188], edx
mov dword [esp + 0x1b4], 0x43ecf0
mov edx, dword [0x43f774]
mov dword [esp + 0x1b0], 0x43ecf0
mov eax, dword [0x43f77c]
mov dword [esp + 0x120], eax
mov dword [esp + 0x1ac], 0x43ecf0
mov eax, dword [0x43f784]
mov dword [esp + 0x134], eax
mov dword [esp + 0x1a8], 0x43ecf0
mov eax, dword [0x43f78c]
mov dword [esp + 0x138], eax
mov dword [esp + 0x1a4], 0x43ecf0
mov ebx, dword [0x43f794]
mov dword [esp + 0x154], ebx
mov dword [esp + 0x1a0], 0x43ecf0
mov ebx, dword [0x43f79c]
mov dword [esp + 0x150], ebx
mov dword [esp + 0x19c], 0x43ecf0
mov ebx, dword [0x43f7a4]
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x198], 0x43ecf0
mov ebx, dword [0x43f7ac]
mov dword [esp + 0x148], ebx
mov dword [esp + 0x194], 0x43ecf0
mov ebx, dword [0x43f7b4]
mov dword [esp + 0x158], ebx
mov dword [esp + 0x190], 0x43ecf0
xor eax, eax
mov ebx, dword [0x43f7bc]
mov dword [esp + 0x180], ebx
jmp ecx