Function at 0x42abd0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x3a0
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x4414d4]
mov dword [esi + 0x354], ecx
mov cl, byte [esi + 0xcc]
mov byte [esi + 0xd0], cl
mov word [esi + 0x30], 0x10e0
mov word [esi + 0x32], 0x911f
xor ecx, ecx
cmp ecx, 2
jae 0x42ac2e
mov dx, word [esi + ecx*2 + 0x30]
mov di, cx
add di, 0x6fe0
xor di, dx
add di, 0x8100
mov word [esi + ecx*2 + 0x30], di
add ecx, 1
jmp 0x42ac0a
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov ecx, eax
add ecx, 0x10
mov dword [esi + 0x84], ecx
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x274], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x80], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x328], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0xc8], 0
sub esp, 0x14
lea eax, [esi + 0xc8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43c5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43c5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x350], eax
mov eax, dword [esi + 0x354]
mov ecx, dword [esi + 0x350]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x4414dc]
xor ecx, 0xa97c643d
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x1dc], ecx
mov dword [ecx], 0x4414e0
push eax
mov dword [esi + 0x1d8], esp
push eax
mov ecx, esp
mov dword [esi + 0x1e4], ecx
mov dword [ecx], 0x4414ec
push eax
mov dword [esi + 0x1e0], esp
push eax
mov ecx, esp
mov dword [esi + 0x1fc], ecx
mov dword [ecx], 0x4414f8
push eax
mov dword [esi + 0x1f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x1f4], ecx
mov dword [ecx], 0x441504
push eax
mov dword [esi + 0x1e8], esp
push eax
mov ecx, esp
mov dword [esi + 0x1f8], ecx
mov dword [ecx], 0x441510
push eax
mov dword [esi + 0x1ec], esp
push eax
mov ecx, esp
mov dword [esi + 0x20c], ecx
mov dword [ecx], 0x44151c
push eax
mov dword [esi + 0x208], esp
push eax
mov ecx, esp
mov dword [esi + 0x204], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441528]
mov dword [esi + 0x200], ecx
push eax
mov ecx, esp
mov dword [esi + 0x214], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441530]
mov dword [esi + 0x210], ecx
push eax
mov ecx, esp
mov dword [esi + 0x21c], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441538]
mov dword [esi + 0x218], ecx
push eax
mov ecx, esp
mov dword [esi + 0x224], ecx
mov dword [ecx], 0x441540
push eax
mov dword [esi + 0x220], esp
push eax
mov ecx, esp
mov dword [esi + 0x22c], ecx
mov dword [ecx], 0x44154c
push eax
mov dword [esi + 0x228], esp
push eax
mov ecx, esp
mov dword [esi + 0x234], ecx
mov dword [ecx], 0x441558
push eax
mov dword [esi + 0x230], esp
push eax
mov ecx, esp
mov dword [esi + 0x23c], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441564]
mov dword [esi + 0x238], ecx
push eax
mov ecx, esp
mov dword [esi + 0x24c], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x44156c]
mov dword [esi + 0x248], ecx
push eax
mov ecx, esp
mov dword [esi + 0x254], ecx
mov dword [ecx], 0x441574
push eax
mov dword [esi + 0x250], esp
push eax
mov ecx, esp
mov dword [esi + 0x26c], ecx
mov dword [ecx], 0x441580
push eax
mov dword [esi + 0x264], esp
push eax
mov ecx, esp
mov dword [esi + 0x270], ecx
mov dword [ecx], 0x44158c
push eax
mov dword [esi + 0x268], esp
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x441598
push eax
mov dword [esi + 0x284], esp
push eax
mov ecx, esp
mov dword [esi + 0x27c], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x4415a4]
mov dword [esi + 0x278], ecx
push eax
mov ecx, esp
mov dword [esi + 0x288], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x4415ac]
mov dword [esi + 0x280], ecx
push eax
mov ecx, esp
mov dword [esi + 0x294], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x4415b4]
mov dword [esi + 0x28c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x4415bc
push eax
mov dword [esi + 0x298], esp
push eax
mov ecx, esp
mov dword [esi + 0x2a4], ecx
mov dword [ecx], 0x4415c8
push eax
mov dword [esi + 0x29c], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b4], ecx
mov dword [ecx], 0x4415d4
push eax
mov dword [esi + 0x2b0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x4415e0]
mov dword [esi + 0x2a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2bc], ecx
mov dword [ecx], 0x4415e8
push eax
mov dword [esi + 0x2b8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2cc], ecx
mov dword [ecx], 0x4415f4
push eax
mov dword [esi + 0x2c8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2d4], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441600]
mov dword [esi + 0x2d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441608]
mov dword [esi + 0x2d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2e8], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441610]
mov dword [esi + 0x2e4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f0], ecx
mov dword [ecx], 0x441618
push eax
mov dword [esi + 0x2ec], esp
push eax
mov ecx, esp
mov dword [esi + 0x308], ecx
mov dword [ecx], 0x441624
push eax
mov dword [esi + 0x300], esp
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441630]
mov dword [esi + 0x2fc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441638]
mov dword [esi + 0x30c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x318], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441640]
mov dword [esi + 0x314], ecx
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x441648
push eax
mov dword [esi + 0x31c], esp
push eax
mov ecx, esp
mov dword [esi + 0x334], ecx
mov dword [ecx], 0x441654
push eax
mov dword [esi + 0x330], esp
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441660]
mov dword [esi + 0x324], ecx
push eax
mov ecx, esp
mov dword [esi + 0x33c], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441668]
mov dword [esi + 0x338], ecx
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x440d00
mov ecx, dword [0x441670]
mov dword [esi + 0x340], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x440d00
mov edx, dword [0x441678]
push eax
mov ebx, esp
mov dword [ebx], 0x440d00
mov edi, dword [0x441680]
mov dword [esi + 0x1cc], edi
push eax
mov edi, esp
mov dword [esi + 0x1d4], edi
mov dword [edi], 0x440d00
mov edi, dword [0x441688]
mov dword [esi + 0x1d0], edi
push eax
mov edi, esp
mov dword [esi + 0x244], edi
mov dword [edi], 0x440d00
mov edi, dword [str._7oB__B__]
mov dword [esi + 0x240], edi
push eax
mov edi, esp
mov dword [esi + 0x260], edi
mov dword [edi], 0x440d00
mov edi, dword [0x441698]
mov dword [esi + 0x25c], edi
push eax
mov edi, esp
mov dword [esi + 0x2c4], edi
mov dword [edi], 0x440d00
mov edi, dword [0x4416a0]
mov dword [esi + 0x2c0], edi
push eax
mov edi, esp
mov dword [esi + 0x2f8], edi
mov dword [edi], 0x440d00
mov edi, dword [str.jmm__]
mov dword [esi + 0x2f4], edi
jmp eax