Function at 0x42b890
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x3d8
mov esi, esp
lea eax, [0x44369c]
mov dword [esi + 0x39c], eax
mov al, byte [esi + 0x144]
mov byte [esi + 0x148], al
mov byte [esi + 0x30], 0xd3
mov byte [esi + 0x31], 0xd4
mov byte [esi + 0x32], 0xdb
mov byte [esi + 0x33], 0x59
xor eax, eax
cmp eax, 4
jae 0x42b932
movzx edi, byte [esi + eax + 0x30]
mov ecx, eax
add ecx, 0x240ce8b
mov ebx, 0x5dbf3174
sub ebx, eax
mov edx, 0x5dbf3174
sub edx, eax
and ebx, edx
and ebx, 0xf768d32e
and ecx, 0x8972cd1
mov edx, edi
xor edx, 0xf768d32e
or ebx, ecx
mov ecx, ebx
xor ecx, 0xffffffff
and edx, ecx
xor edi, 0x8972cd1
and ebx, edi
or edx, ebx
add edx, 0x77319794
mov ecx, edx
shl ecx, 1
and ecx, 0x26
xor edx, 0x13
add edx, ecx
add dl, 1
mov byte [esi + eax + 0x30], dl
add eax, 1
jmp 0x42b8cb
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov eax, edx
add eax, 0x10
mov dword [esi + 0xf4], eax
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2c0], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x2e4], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x354], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x140], 0
sub esp, 0x14
lea eax, [esi + 0x140]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43e5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43e5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x398], eax
mov eax, dword [esi + 0x39c]
mov ecx, dword [esi + 0x398]
mov edx, dword [eax + ecx*4]
mov eax, dword [0x4436a4]
xor eax, 0x77747f47
sub edx, eax
push eax
mov eax, esp
mov dword [esi + 0x1e8], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4436a8]
mov dword [esi + 0x1e4], eax
push eax
mov eax, esp
mov dword [esi + 0x1f4], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4436b0]
mov dword [esi + 0x1ec], eax
push eax
mov eax, esp
mov dword [esi + 0x200], eax
mov dword [eax], 0x4436b8
push eax
mov dword [esi + 0x1f8], esp
push eax
mov eax, esp
mov dword [esi + 0x210], eax
mov dword [eax], 0x4436c4
push eax
mov dword [esi + 0x20c], esp
push eax
mov eax, esp
mov dword [esi + 0x208], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4436d0]
mov dword [esi + 0x204], eax
push eax
mov eax, esp
mov dword [esi + 0x218], eax
mov dword [eax], 0x4436d8
push eax
mov dword [esi + 0x214], esp
push eax
mov eax, esp
mov dword [esi + 0x220], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4436e4]
mov dword [esi + 0x21c], eax
push eax
mov eax, esp
mov dword [esi + 0x228], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4436ec]
mov dword [esi + 0x224], eax
push eax
mov eax, esp
mov dword [esi + 0x230], eax
mov dword [eax], 0x4436f4
push eax
mov dword [esi + 0x22c], esp
push eax
mov eax, esp
mov dword [esi + 0x238], eax
mov dword [eax], 0x443700
push eax
mov dword [esi + 0x234], esp
push eax
mov eax, esp
mov dword [esi + 0x240], eax
mov dword [eax], 0x442f50
mov eax, dword [0x44370c]
mov dword [esi + 0x23c], eax
push eax
mov eax, esp
mov dword [esi + 0x248], eax
mov dword [eax], 0x443714
push eax
mov dword [esi + 0x244], esp
push eax
mov eax, esp
mov dword [esi + 0x258], eax
mov dword [eax], 0x443720
push eax
mov dword [esi + 0x250], esp
push eax
mov eax, esp
mov dword [esi + 0x254], eax
mov dword [eax], 0x442f50
mov eax, dword [0x44372c]
mov dword [esi + 0x24c], eax
push eax
mov eax, esp
mov dword [esi + 0x260], eax
mov dword [eax], 0x443734
push eax
mov dword [esi + 0x25c], esp
push eax
mov eax, esp
mov dword [esi + 0x268], eax
mov dword [eax], 0x443740
push eax
mov dword [esi + 0x264], esp
push eax
mov eax, esp
mov dword [esi + 0x278], eax
mov dword [eax], 0x442f50
mov eax, dword [0x44374c]
mov dword [esi + 0x274], eax
push eax
mov eax, esp
mov dword [esi + 0x280], eax
mov dword [eax], 0x443754
push eax
mov dword [esi + 0x27c], esp
push eax
mov eax, esp
mov dword [esi + 0x290], eax
mov dword [eax], 0x443760
push eax
mov dword [esi + 0x28c], esp
push eax
mov eax, esp
mov dword [esi + 0x288], eax
mov dword [eax], 0x442f50
mov eax, dword [0x44376c]
mov dword [esi + 0x284], eax
push eax
mov eax, esp
mov dword [esi + 0x298], eax
mov dword [eax], 0x442f50
mov eax, dword [0x443774]
mov dword [esi + 0x294], eax
push eax
mov eax, esp
mov dword [esi + 0x2a0], eax
mov dword [eax], 0x44377c
push eax
mov dword [esi + 0x29c], esp
push eax
mov eax, esp
mov dword [esi + 0x2ac], eax
mov dword [eax], 0x443788
push eax
mov dword [esi + 0x2a8], esp
push eax
mov eax, esp
mov dword [esi + 0x2b4], eax
mov dword [eax], 0x442f50
mov eax, dword [0x443794]
mov dword [esi + 0x2b0], eax
push eax
mov eax, esp
mov dword [esi + 0x2bc], eax
mov dword [eax], 0x442f50
mov eax, dword [0x44379c]
mov dword [esi + 0x2b8], eax
push eax
mov eax, esp
mov dword [esi + 0x2cc], eax
mov dword [eax], 0x4437a4
push eax
mov dword [esi + 0x2c4], esp
push eax
mov eax, esp
mov dword [esi + 0x2d0], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4437b0]
mov dword [esi + 0x2c8], eax
push eax
mov eax, esp
mov dword [esi + 0x2d8], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4437b8]
mov dword [esi + 0x2d4], eax
push eax
mov eax, esp
mov dword [esi + 0x2e0], eax
mov dword [eax], 0x4437c0
push eax
mov dword [esi + 0x2dc], esp
push eax
mov eax, esp
mov dword [esi + 0x2ec], eax
mov dword [eax], 0x4437cc
push eax
mov dword [esi + 0x2e8], esp
push eax
mov eax, esp
mov dword [esi + 0x2f4], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4437d8]
mov dword [esi + 0x2f0], eax
push eax
mov eax, esp
mov dword [esi + 0x300], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4437e0]
mov dword [esi + 0x2fc], eax
push eax
mov eax, esp
mov dword [esi + 0x30c], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4437e8]
mov dword [esi + 0x308], eax
push eax
mov eax, esp
mov dword [esi + 0x314], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4437f0]
mov dword [esi + 0x310], eax
push eax
mov eax, esp
mov dword [esi + 0x31c], eax
mov dword [eax], 0x442f50
mov eax, dword [0x4437f8]
mov dword [esi + 0x318], eax
push eax
mov eax, esp
mov dword [esi + 0x324], eax
mov dword [eax], 0x442f50
mov eax, dword [0x443800]
mov dword [esi + 0x320], eax
push eax
mov eax, esp
mov dword [esi + 0x32c], eax
mov dword [eax], 0x442f50
mov eax, dword [0x443808]
mov dword [esi + 0x328], eax
push eax
mov eax, esp
mov dword [esi + 0x33c], eax
mov dword [eax], 0x443810
push eax
mov dword [esi + 0x334], esp
push eax
mov eax, esp
mov dword [esi + 0x1a0], eax
mov dword [eax], 0x44381c
push eax
mov dword [esi + 0x350], esp
push eax
mov eax, esp
mov dword [esi + 0x34c], eax
mov dword [eax], 0x442f50
mov eax, dword [0x443828]
mov dword [esi + 0x348], eax
push eax
mov eax, esp
mov dword [esi + 0x360], eax
mov dword [eax], 0x442f50
mov eax, dword [0x443830]
mov dword [esi + 0x358], eax
push eax
mov eax, esp
mov dword [esi + 0x364], eax
mov dword [eax], 0x443838
push eax
mov dword [esi + 0x35c], esp
push eax
mov eax, esp
mov dword [esi + 0x37c], eax
mov dword [eax], 0x443844
push eax
mov dword [esi + 0x374], esp
push eax
mov eax, esp
mov dword [esi + 0x36c], eax
mov dword [eax], 0x442f50
mov eax, dword [0x443850]
mov dword [esi + 0x368], eax
push eax
mov eax, esp
mov dword [esi + 0x378], eax
mov dword [eax], 0x443858
push eax
mov dword [esi + 0x370], esp
push eax
mov eax, esp
mov dword [esi + 0x394], eax
mov dword [eax], 0x443864
push eax
mov dword [esi + 0x388], esp
push eax
mov eax, esp
mov dword [eax], 0x442f50
mov ecx, dword [0x443870]
mov dword [esi + 0x380], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x442f50
mov ebx, dword [0x443878]
push eax
mov edi, esp
mov dword [esi + 0x1e0], edi
mov dword [edi], 0x442f50
mov edi, dword [0x443880]
mov dword [esi + 0x1dc], edi
push eax
mov edi, esp
mov dword [esi + 0x1fc], edi
mov dword [edi], 0x442f50
mov edi, dword [0x443888]
mov dword [esi + 0x1f0], edi
push eax
mov edi, esp
mov dword [esi + 0x270], edi
mov dword [edi], 0x442f50
mov edi, dword [0x443890]
mov dword [esi + 0x26c], edi
push eax
mov edi, esp
mov dword [esi + 0x304], edi
mov dword [edi], 0x442f50
mov edi, dword [0x443898]
mov dword [esi + 0x2f8], edi
push eax
mov edi, esp
mov dword [esi + 0x338], edi
mov dword [edi], 0x442f50
mov edi, dword [0x4438a0]
mov dword [esi + 0x330], edi
push eax
mov edi, esp
mov dword [esi + 0x344], edi
mov dword [edi], 0x442f50
mov edi, dword [0x4438a8]
jmp edx