Function at 0x42bc30
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x320
mov dword [esp + 0x304], 0x444efc
mov dword [esp + 0x54], 0
lea eax, [esp + 0x54]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43f5f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43f600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x444f04]
xor eax, 0x391b592a
sub ecx, eax
mov dword [esp + case.0x426174.1], 0x4443a0
mov eax, dword [0x444f08]
mov dword [esp + 0x150], eax
mov dword [esp + 0x2f8], 0x444f10
mov dword [esp + 0x2f0], 0x444f1c
mov dword [esp + case.0x426174.1], 0x4443a0
mov eax, dword [0x444f28]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x2e4], 0x444f30
mov dword [esp + 0x2dc], 0x444f3c
mov dword [esp + 0x2d4], 0x444f48
mov dword [esp + case.0x426174.1], 0x4443a0
mov eax, dword [0x444f54]
mov dword [esp + 0x160], eax
mov dword [esp + 0x2c8], 0x444f5c
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x444f68]
mov dword [esp + 0x1a8], edx
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x444f70]
mov dword [esp + 0x1a4], edx
mov dword [esp + 0x2b8], 0x444f78
mov dword [esp + 0x2b0], 0x444f84
mov dword [esp + 0x2a8], 0x444f90
mov dword [esp + 0x2a0], 0x444f9c
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x444fa8]
mov dword [esp + 0x1a0], edx
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x444fb0]
mov dword [esp + 0x19c], edx
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x444fb8]
mov dword [esp + 0x198], edx
mov dword [esp + 0x28c], 0x444fc0
mov dword [esp + 0x284], 0x444fcc
mov dword [esp + 0x27c], 0x444fd8
mov dword [esp + 0x274], 0x444fe4
mov dword [esp + 0x26c], 0x444ff0
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [str..sf_f]
mov dword [esp + 0x194], edx
mov dword [esp + 0x260], 0x445004
mov dword [esp + 0x258], 0x445010
mov dword [esp + 0x250], 0x44501c
mov dword [esp + 0x248], 0x445028
mov dword [esp + 0x240], 0x445034
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x445040]
mov dword [esp + 0x18c], edx
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x445048]
mov dword [esp + 0x188], edx
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x445050]
mov dword [esp + 0x184], edx
mov dword [esp + 0x22c], 0x445058
mov dword [esp + 0x224], 0x445064
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x445070]
mov dword [esp + 0x190], edx
mov dword [esp + 0x218], 0x445078
mov dword [esp + 0x210], 0x445084
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x445090]
mov dword [esp + 0x1b0], edx
mov dword [esp + case.0x426174.1], 0x4443a0
mov ebx, dword [0x445098]
mov dword [esp + 0x200], 0x4450a0
mov dword [esp + 0x1f8], 0x4450ac
mov dword [esp + case.0x426174.1], 0x4443a0
mov edx, dword [0x4450b8]
mov dword [esp + 0x1ec], 0x4450c0
mov dword [esp + 0x1e4], 0x4450cc
mov dword [esp + case.0x426174.1], 0x4443a0
mov eax, dword [0x4450d8]
mov dword [esp + 0x154], eax
mov dword [esp + case.0x426174.1], 0x4443a0
mov esi, dword [0x4450e0]
mov dword [esp + 0x17c], esi
mov dword [esp + case.0x426174.1], 0x4443a0
mov esi, dword [0x4450e8]
mov dword [esp + 0x178], esi
mov dword [esp + case.0x426174.1], 0x4443a0
mov esi, dword [0x4450f0]
mov dword [esp + 0x174], esi
mov dword [esp + case.0x426174.1], 0x4443a0
mov esi, dword [0x4450f8]
mov dword [esp + 0x170], esi
mov dword [esp + case.0x426174.1], 0x4443a0
mov esi, dword [0x445100]
mov dword [esp + 0x16c], esi
mov dword [esp + case.0x426174.1], 0x4443a0
mov esi, dword [0x445108]
mov dword [esp + 0x1ac], esi
mov dword [esp + case.0x426174.1], 0x4443a0
mov esi, dword [0x445110]
mov dword [esp + case.0x426174.1], 0x4443a0
xor eax, eax
mov edi, dword [0x445118]
mov dword [esp + 0x180], edi
jmp ecx