Function at 0x42cd60
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x330
mov dword [esp + 0x304], 0x441544
mov dword [esp + 0x48], 0
lea eax, [esp + 0x48]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43c5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43c5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x44154c]
mov edx, ecx
or edx, 0xb12634df
and ecx, 0xb12634df
sub ecx, edx
add eax, ecx
mov dword [esp + 0x2fc], 0x441550
mov dword [esp + 0x2f4], 0x440be0
mov edi, dword [0x44155c]
mov dword [esp + 0x2f0], 0x441564
mov dword [esp + 0x2e8], 0x441570
mov dword [esp + 0x2e0], 0x44157c
mov dword [esp + 0x2d8], 0x441588
mov dword [esp + 0x2d0], 0x441594
mov dword [esp + 0x2c8], 0x440be0
mov ecx, dword [0x4415a0]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x2c4], 0x4415a8
mov dword [esp + 0x2bc], 0x4415b4
mov dword [esp + 0x2b4], 0x4415c0
mov dword [esp + 0x2ac], 0x440be0
mov ecx, dword [0x4415cc]
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x2a8], 0x4415d4
mov dword [esp + 0x2a0], 0x4415e0
mov dword [esp + 0x298], 0x4415ec
mov dword [esp + 0x290], 0x440be0
mov ecx, dword [0x4415f8]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x28c], 0x440be0
mov ecx, dword [0x441600]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x288], 0x441608
mov dword [esp + 0x280], 0x441614
mov dword [esp + 0x278], 0x441620
mov dword [esp + 0x270], 0x44162c
mov dword [esp + 0x268], 0x441638
mov dword [esp + 0x260], 0x441644
mov dword [esp + 0x258], 0x440be0
mov ecx, dword [0x441650]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x254], 0x441658
mov dword [esp + 0x24c], 0x440be0
mov ecx, dword [0x441664]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x248], 0x440be0
mov ecx, dword [0x44166c]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x244], 0x440be0
mov ecx, dword [0x441674]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x240], 0x440be0
mov ecx, dword [0x44167c]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x23c], 0x441684
mov dword [esp + 0x234], 0x441690
mov dword [esp + 0x22c], 0x44169c
mov dword [esp + 0x224], 0x440be0
mov ecx, dword [0x4416a8]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x220], 0x440be0
mov ecx, dword [0x4416b0]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x21c], 0x440be0
mov ecx, dword [0x4416b8]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x218], 0x4416c0
mov dword [esp + 0x210], 0x440be0
mov ecx, dword [0x4416cc]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x20c], 0x4416d4
mov dword [esp + 0x204], 0x4416e0
mov dword [esp + 0x1fc], 0x440be0
mov ecx, dword [0x4416ec]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x1f8], 0x4416f4
mov dword [esp + 0x1f0], 0x441700
mov dword [esp + 0x1e8], 0x440be0
mov ebx, dword [0x44170c]
mov dword [esp + 0x1e4], 0x441714
mov dword [esp + 0x1dc], 0x441720
mov dword [esp + 0x1d4], 0x440be0
mov ecx, dword [0x44172c]
mov dword [esp + 0x1d0], 0x441734
mov dword [esp + 0x1c8], 0x441740
mov dword [esp + 0x1c0], 0x440be0
mov edx, dword [0x44174c]
mov dword [esp + 0x124], edx
mov dword [esp + 0x1bc], 0x440be0
mov edx, dword [0x441754]
mov dword [esp + 0x128], edx
mov dword [esp + 0x1b8], 0x440be0
mov edx, dword [0x44175c]
mov dword [esp + 0x134], edx
mov dword [esp + 0x1b4], 0x440be0
mov edx, dword [0x441764]
mov dword [esp + 0x150], edx
mov dword [esp + 0x1b0], 0x440be0
mov edx, dword [0x44176c]
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1ac], 0x440be0
mov edx, dword [0x441774]
mov dword [esp + 0x148], edx
mov dword [esp + 0x1a8], 0x440be0
mov edx, dword [0x44177c]
mov dword [esp + 0x144], edx
mov dword [esp + 0x1a4], 0x440be0
mov edx, dword [0x441784]
mov dword [esp + 0x180], edx
mov dword [esp + 0x1a0], 0x440be0
mov edx, dword [0x44178c]
mov dword [esp + 0x188], edx
mov dword [esp + 0x19c], 0x440be0
mov edx, dword [0x441794]
mov dword [esp + 0x198], 0x440be0
mov dword [esp + 0x28], 0
mov esi, dword [0x44179c]
jmp eax