Function at 0x428510
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x4e0
mov esi, esp
mov edx, dword [ebp + 8]
lea ecx, [0x443adc]
mov dword [esi + 0x4c4], ecx
mov cl, byte [esi + 0x16c]
mov byte [esi + 0x178], cl
mov byte [esi + 0x170], 0x4c
mov byte [esi + 0x171], 0x4b
mov byte [esi + 0x172], 0x48
mov byte [esi + 0x173], 0xc8
mov ecx, 4
mov byte [esi + ecx + 0x170], 0
add ecx, 1
cmp ecx, 7
jne 0x42855d
xor eax, eax
cmp eax, 7
jae 0x4285d0
movzx edi, byte [esi + eax + 0x170]
mov ecx, eax
add ecx, 0xeddb5893
mov ebx, ecx
and ebx, edi
shl ebx, 1
sub ecx, ebx
add ecx, edi
mov ebx, ecx
xor ebx, 0xa548badf
mov edi, ecx
or edi, 0x5ab74520
and edi, ebx
mov ebx, ecx
and ebx, 0xa548badf
mov edx, ecx
xor edx, 0x5ab74520
add ecx, edx
sub ecx, ebx
mov edx, ecx
and edx, edi
shl edx, 1
xor ecx, edi
add ecx, edx
mov edx, dword [ebp + 8]
add cl, 1
mov byte [esi + eax + 0x170], cl
add eax, 1
jmp 0x42856f
mov eax, dword [esi + 0x170]
mov ecx, dword [eax + 0x26c]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov ebx, edx
add ebx, 0x10
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x3a4], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x400], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x420], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x168], 0
sub esp, 0x14
lea eax, [esi + 0x168]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43e5f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43e600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x4c0], eax
mov eax, dword [esi + 0x4c4]
mov ecx, dword [esi + 0x4c0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x443ae4]
xor ecx, 0x3d41de6e
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x443ae8
push eax
mov dword [esi + 0x2ac], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x443af4
push eax
mov dword [esi + 0x2c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c0], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443b00]
mov dword [esi + 0x2bc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d8], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443b08]
mov dword [esi + 0x2d4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2e0], ecx
mov dword [ecx], 0x443b10
push eax
mov dword [esi + 0x2dc], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f8], ecx
mov dword [ecx], 0x443b1c
push eax
mov dword [esi + 0x2ec], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f0], ecx
mov dword [ecx], 0x443b28
push eax
mov dword [esi + 0x2e4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x443b34
push eax
mov dword [esi + 0x2e8], esp
push eax
mov ecx, esp
mov dword [esi + 0x308], ecx
mov dword [ecx], 0x443b40
push eax
mov dword [esi + 0x304], esp
push eax
mov ecx, esp
mov dword [esi + 0x300], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443b4c]
mov dword [esi + 0x2fc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443b54]
mov dword [esi + 0x30c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x318], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443b5c]
mov dword [esi + 0x314], ecx
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x443b64
push eax
mov dword [esi + 0x31c], esp
push eax
mov ecx, esp
mov dword [esi + 0x328], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443b70]
mov dword [esi + 0x324], ecx
push eax
mov ecx, esp
mov dword [esi + 0x330], ecx
mov dword [ecx], 0x443b78
push eax
mov dword [esi + 0x32c], esp
push eax
mov ecx, esp
mov dword [esi + 0x348], ecx
mov dword [ecx], 0x443b84
push eax
mov dword [esi + 0x340], esp
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443b90]
mov dword [esi + 0x334], ecx
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x443b98
push eax
mov dword [esi + 0x33c], esp
push eax
mov ecx, esp
mov dword [esi + 0x358], ecx
mov dword [ecx], 0x443ba4
push eax
mov dword [esi + 0x350], esp
push eax
mov ecx, esp
mov dword [esi + 0x354], ecx
mov dword [ecx], 0x443bb0
push eax
mov dword [esi + 0x34c], esp
push eax
mov ecx, esp
mov dword [esi + 0x360], ecx
mov dword [ecx], 0x443bbc
push eax
mov dword [esi + 0x35c], esp
push eax
mov ecx, esp
mov dword [esi + 0x370], ecx
mov dword [ecx], 0x443bc8
push eax
mov dword [esi + 0x36c], esp
push eax
mov ecx, esp
mov dword [esi + 0x378], ecx
mov dword [ecx], 0x443bd4
push eax
mov dword [esi + 0x374], esp
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], 0x443be0
push eax
mov dword [esi + 0x384], esp
push eax
mov ecx, esp
mov dword [esi + 0x380], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443bec]
mov dword [esi + 0x37c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x38c], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443bf4]
mov dword [esi + 0x388], ecx
push eax
mov ecx, esp
mov dword [esi + 0x398], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443bfc]
mov dword [esi + 0x394], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a0], ecx
mov dword [ecx], 0x443c04
push eax
mov dword [esi + 0x39c], esp
push eax
mov ecx, esp
mov dword [esi + 0x3ac], ecx
mov dword [ecx], 0x443c10
push eax
mov dword [esi + 0x3a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443c1c]
mov dword [esi + 0x3b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3bc], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443c24]
mov dword [esi + 0x3b8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x443c2c
push eax
mov dword [esi + 0x3c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443c38]
mov dword [esi + 0x3c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443c40]
mov dword [esi + 0x3d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443c48]
mov dword [esi + 0x3d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3e4], ecx
mov dword [ecx], 0x443c50
push eax
mov dword [esi + 0x3e0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3fc], ecx
mov dword [ecx], 0x443c5c
push eax
mov dword [esi + 0x3f4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3f8], ecx
mov dword [ecx], 0x443c68
push eax
mov dword [esi + 0x3f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x418], ecx
mov dword [ecx], 0x443c74
push eax
mov dword [esi + 0x414], esp
push eax
mov ecx, esp
mov dword [esi + 0x424], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443c80]
mov dword [esi + 0x41c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x42c], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443c88]
mov dword [esi + 0x428], ecx
push eax
mov ecx, esp
mov dword [esi + 0x434], ecx
mov dword [ecx], 0x443c90
push eax
mov dword [esi + 0x430], esp
push eax
mov ecx, esp
mov dword [esi + 0x454], ecx
mov dword [ecx], 0x443c9c
push eax
mov dword [esi + 0x448], esp
push eax
mov ecx, esp
mov dword [esi + 0x444], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443ca8]
mov dword [esi + 0x440], ecx
push eax
mov ecx, esp
mov dword [esi + 0x450], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443cb0]
mov dword [esi + 0x44c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x45c], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443cb8]
mov dword [esi + 0x458], ecx
push eax
mov ecx, esp
mov dword [esi + 0x464], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443cc0]
mov dword [esi + 0x460], ecx
push eax
mov ecx, esp
mov dword [esi + 0x46c], ecx
mov dword [ecx], 0x443cc8
push eax
mov dword [esi + 0x468], esp
push eax
mov ecx, esp
mov dword [esi + 0x478], ecx
mov dword [ecx], 0x443cd4
push eax
mov dword [esi + 0x470], esp
push eax
mov ecx, esp
mov dword [esi + 0x47c], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443ce0]
mov dword [esi + 0x474], ecx
push eax
mov ecx, esp
mov dword [esi + 0x484], ecx
mov dword [ecx], 0x443ce8
push eax
mov dword [esi + 0x480], esp
push eax
mov ecx, esp
mov dword [esi + 0x49c], ecx
mov dword [ecx], 0x443cf4
push eax
mov dword [esi + 0x494], esp
push eax
mov ecx, esp
mov dword [esi + 0x48c], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443d00]
mov dword [esi + 0x488], ecx
push eax
mov ecx, esp
mov dword [esi + 0x498], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443d08]
mov dword [esi + 0x490], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4a4], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443d10]
mov dword [esi + 0x4a0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4ac], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443d18]
mov dword [esi + 0x4a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x4b4], ecx
mov dword [ecx], case.0x425c70.1
mov ecx, dword [0x443d20]
mov dword [esi + 0x4b0], ecx
push eax
mov ecx, esp
mov dword [ecx], case.0x425c70.1
mov edx, dword [0x443d28]
push eax
mov edi, esp
mov dword [esi + 0x298], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d30]
mov dword [esi + 0x294], edi
push eax
mov edi, esp
mov dword [esi + 0x2a0], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d38]
mov dword [esi + 0x29c], edi
push eax
mov edi, esp
mov dword [esi + 0x2a8], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d40]
mov dword [esi + 0x2a4], edi
push eax
mov edi, esp
mov dword [esi + 0x2b8], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d48]
mov dword [esi + 0x2b4], edi
push eax
mov edi, esp
mov dword [esi + 0x2d0], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d50]
mov dword [esi + 0x2cc], edi
push eax
mov edi, esp
mov dword [esi + 0x368], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d58]
mov dword [esi + 0x364], edi
push eax
mov edi, esp
mov dword [esi + 0x3ec], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d60]
mov dword [esi + 0x3e8], edi
push eax
mov edi, esp
mov dword [esi + 0x408], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d68]
mov dword [esi + 0x404], edi
push eax
mov edi, esp
mov dword [esi + 0x410], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d70]
mov dword [esi + 0x40c], edi
push eax
mov edi, esp
mov dword [esi + 0x43c], edi
mov dword [edi], case.0x425c70.1
mov edi, dword [0x443d78]
mov dword [esi + 0x438], edi
jmp eax