Function at 0x42e4c0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2e0
mov dword [esp + 0x2c4], 0x4446d4
mov dword [esp + 0xd4], 0
lea eax, [esp + 0xd4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43f5ec
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43f5fc
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2c0], eax
mov eax, dword [esp + 0x2c4]
mov ecx, dword [esp + 0x2c0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x4446dc]
xor ecx, 0x7a2af39
sub eax, ecx
mov dword [esp + 0x2bc], 0x4446e0
mov dword [esp + 0x2b4], 0x4446ec
mov dword [esp + 0x2ac], 0x4446f8
mov dword [esp + 0x2a4], 0x444704
mov dword [esp + 0x29c], 0x444710
mov dword [esp + 0x294], 0x443cf0
mov ecx, dword [0x44471c]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x290], 0x444724
mov dword [esp + 0x288], 0x444730
mov dword [esp + 0x280], 0x44473c
mov dword [esp + 0x278], 0x444748
mov dword [esp + 0x270], 0x443cf0
mov ecx, dword [0x444754]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x26c], 0x44475c
mov dword [esp + 0x264], 0x443cf0
mov ecx, dword [0x444768]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x260], 0x443cf0
mov ecx, dword [0x444770]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x25c], 0x444778
mov dword [esp + 0x254], 0x444784
mov dword [esp + 0x24c], 0x443cf0
mov ecx, dword [0x444790]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x248], 0x443cf0
mov ecx, dword [0x444798]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x244], 0x4447a0
mov dword [esp + 0x23c], 0x4447ac
mov dword [esp + 0x234], 0x4447b8
mov dword [esp + 0x22c], 0x443cf0
mov ecx, dword [0x4447c4]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x228], 0x4447cc
mov dword [esp + 0x220], 0x4447d8
mov dword [esp + 0x218], 0x4447e4
mov dword [esp + 0x210], 0x443cf0
mov ecx, dword [0x4447f0]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x20c], 0x443cf0
mov ecx, dword [0x4447f8]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x208], 0x444800
mov dword [esp + 0x200], 0x44480c
mov dword [esp + 0x1f8], 0x443cf0
mov ecx, dword [0x444818]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x1f4], 0x444820
mov dword [esp + 0x1ec], 0x44482c
mov dword [esp + 0x1e4], 0x444838
mov dword [esp + 0x1dc], 0x443cf0
mov ecx, dword [0x444844]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x1d8], 0x443cf0
mov ecx, dword [0x44484c]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x1d4], 0x444854
mov dword [esp + 0x1cc], 0x444860
mov dword [esp + 0x1c4], 0x443cf0
mov edx, dword [0x44486c]
mov dword [esp + 0x1c0], 0x443cf0
mov ecx, dword [0x444874]
mov dword [esp + 0x1bc], 0x443cf0
mov ebx, dword [0x44487c]
mov dword [esp + 0x1b8], 0x443cf0
mov esi, dword [0x444884]
mov dword [esp + 0x140], esi
mov dword [esp + 0x1b4], 0x443cf0
mov esi, dword [0x44488c]
mov dword [esp + 0x150], esi
mov dword [esp + 0x1b0], 0x443cf0
mov esi, dword [0x444894]
mov dword [esp + 0x164], esi
mov dword [esp + 0x1ac], 0x443cf0
mov esi, dword [0x44489c]
mov dword [esp + 0x160], esi
mov dword [esp + 0x1a8], 0x443cf0
mov esi, dword [0x4448a4]
mov dword [esp + 0x15c], esi
mov dword [esp + 0x1a4], 0x443cf0
mov esi, dword [0x4448ac]
mov dword [esp + 0x170], esi
mov dword [esp + 0x1a0], 0x443cf0
xor edi, edi
mov esi, dword [0x4448b4]
jmp eax