Function at 0x42b690
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2b0
mov dword [esp + 0x294], 0x443d80
mov dword [esp + 0x68], 0
lea eax, [esp + 0x68]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43e5f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43e600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x290], eax
mov eax, dword [esp + 0x294]
mov ecx, dword [esp + 0x290]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x443d88]
mov edx, ecx
and edx, 0x681143ef
add edx, edx
sub edx, ecx
lea eax, [edx + eax - 0x681143ef]
mov dword [esp + 0x28c], 0x443d8c
mov dword [esp + 0x284], 0x443d98
mov dword [esp + 0x27c], 0x443da4
mov dword [esp + 0x274], 0x443db0
mov dword [esp + 0x26c], 0x443dbc
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443dc8]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x260], 0x443dd0
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443ddc]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x254], 0x443de4
mov dword [esp + 0x24c], 0x443df0
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443dfc]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x240], 0x443e04
mov dword [esp + 0x238], 0x443e10
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443e1c]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x22c], 0x443e24
mov dword [esp + 0x224], 0x443e30
mov dword [esp + 0x21c], 0x443e3c
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443e48]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x210], 0x443e50
mov dword [esp + 0x208], 0x443e5c
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443e68]
mov dword [esp + 0x178], ecx
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443e70]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x1f8], 0x443e78
mov dword [esp + 0x1f0], 0x443e84
mov dword [esp + 0x1e8], 0x443e90
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443e9c]
mov dword [esp + 0x16c], ecx
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443ea4]
mov dword [esp + 0x168], ecx
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443eac]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x1d4], 0x443eb4
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443ec0]
mov dword [esp + 0x174], ecx
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443ec8]
mov dword [esp + 0x18c], ecx
mov dword [esp + case.0x425c70.1], 0x443250
mov edx, dword [0x443ed0]
mov dword [esp + case.0x425c70.1], 0x443250
mov ecx, dword [0x443ed8]
mov dword [esp + 0x1bc], 0x443ee0
mov dword [esp + 0x1b4], 0x443eec
mov dword [esp + case.0x425c70.1], 0x443250
mov esi, dword [0x443ef8]
mov dword [esp + case.0x425c70.1], 0x443250
mov edi, dword [0x443f00]
mov dword [esp + 0x160], edi
mov dword [esp + case.0x425c70.1], 0x443250
mov edi, dword [0x443f08]
mov dword [esp + 0x15c], edi
mov dword [esp + case.0x425c70.1], 0x443250
mov edi, dword [0x443f10]
mov dword [esp + 0x158], edi
mov dword [esp + case.0x425c70.1], 0x443250
mov edi, dword [0x443f18]
mov dword [esp + 0x154], edi
mov dword [esp + case.0x425c70.1], 0x443250
xor ebx, ebx
mov edi, dword [0x443f20]
jmp eax