Function at 0x42d1d0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x438
mov esi, esp
lea ecx, [0x448664]
mov dword [esi + 0x3ec], ecx
mov cl, byte [esi + 0x158]
mov byte [esi + 0x164], cl
mov byte [esi + 0x15c], 0x20
mov byte [esi + 0x15d], 0x21
mov byte [esi + 0x15e], 0x2c
mov byte [esi + 0x15f], 0xac
mov ecx, 4
mov byte [esi + ecx + 0x15c], 0
add ecx, 1
cmp ecx, 5
jne 0x42d21a
xor ecx, ecx
cmp ecx, 5
jae 0x42d28f
movzx ebx, byte [esi + ecx + 0x15c]
mov edi, 0xd084d677
sub edi, ecx
or edi, ebx
mov edx, 0x77
sub edx, ecx
mov eax, 0x77
sub eax, ecx
or edx, eax
and edx, ebx
xor edi, 0xffffffff
or edx, edi
mov edi, edx
and edi, 0x55
mov eax, edx
and eax, 2
xor eax, 2
mov ebx, edx
and ebx, 0x55
imul ebx, eax
mov eax, edx
and eax, 2
or edi, 2
imul edi, eax
add edi, ebx
xor edx, 0x57
add edx, edi
add dl, 1
mov byte [esi + ecx + 0x15c], dl
add ecx, 1
jmp 0x42d22c
mov eax, dword [esi + 0x15c]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov eax, edx
add eax, 0x10
mov dword [esi + 0x30], eax
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2d4], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 4], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x364], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x24], 0
sub esp, 0x14
lea eax, [esi + 0x24]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x443a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x443a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x3e8], eax
mov eax, dword [esi + 0x3ec]
mov ecx, dword [esi + 0x3e8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x44866c]
xor ecx, 0xd823d2a2
sub eax, ecx
push eax
mov edi, esp
mov dword [edi], 0x448670
push eax
mov dword [esi + 0x250], esp
push eax
mov ecx, esp
mov dword [esi + 0x258], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x44867c]
mov dword [esi + 0x254], ecx
push eax
mov ecx, esp
mov dword [esi + 0x260], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448684]
mov dword [esi + 0x25c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x268], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x44868c]
mov dword [esi + 0x264], ecx
push eax
mov ecx, esp
mov dword [esi + 0x270], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448694]
mov dword [esi + 0x26c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x278], ecx
mov dword [ecx], 0x44869c
push eax
mov dword [esi + 0x274], esp
push eax
mov ecx, esp
mov dword [esi + 0x288], ecx
mov dword [ecx], 0x4486a8
push eax
mov dword [esi + 0x284], esp
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x4486b4
push eax
mov dword [esi + 0x28c], esp
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4486c0]
mov dword [esi + 0x294], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4486c8]
mov dword [esi + 0x29c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a8], ecx
mov dword [ecx], 0x4486d0
push eax
mov dword [esi + 0x2a4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b8], ecx
mov dword [ecx], 0x4486dc
push eax
mov dword [esi + 0x2b0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b4], ecx
mov dword [ecx], 0x4486e8
push eax
mov dword [esi + 0x2ac], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c0], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4486f4]
mov dword [esi + 0x2bc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x4486fc
push eax
mov dword [esi + 0x2c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e4], ecx
mov dword [ecx], 0x448708
push eax
mov dword [esi + 0x2e0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ec], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448714]
mov dword [esi + 0x2e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x44871c
push eax
mov dword [esi + 0x2f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x448728
push eax
mov dword [esi + 0x300], esp
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448734]
mov dword [esi + 0x2f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], 0x44873c
push eax
mov dword [esi + 0x308], esp
push eax
mov ecx, esp
mov dword [esi + 0x314], ecx
mov dword [ecx], 0x448748
push eax
mov dword [esi + 0x30c], esp
push eax
mov ecx, esp
mov dword [esi + 0x324], ecx
mov dword [ecx], 0x448754
push eax
mov dword [esi + 0x320], esp
push eax
mov ecx, esp
mov dword [esi + 0x31c], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448760]
mov dword [esi + 0x318], ecx
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448768]
mov dword [esi + 0x328], ecx
push eax
mov ecx, esp
mov dword [esi + 0x334], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448770]
mov dword [esi + 0x330], ecx
push eax
mov ecx, esp
mov dword [esi + 0x33c], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448778]
mov dword [esi + 0x338], ecx
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448780]
mov dword [esi + 0x340], ecx
push eax
mov ecx, esp
mov dword [esi + 0x34c], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [str.p::0ii]
mov dword [esi + 0x348], ecx
push eax
mov ecx, esp
mov dword [esi + 0x354], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448790]
mov dword [esi + 0x350], ecx
push eax
mov ecx, esp
mov dword [esi + 0x35c], ecx
mov dword [ecx], 0x448798
push eax
mov dword [esi + 0x358], esp
push eax
mov ecx, esp
mov dword [esi + 0x374], ecx
mov dword [ecx], 0x4487a4
push eax
mov dword [esi + 0x370], esp
push eax
mov ecx, esp
mov dword [esi + 0x37c], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4487b0]
mov dword [esi + 0x378], ecx
push eax
mov ebx, esp
mov dword [ebx], 0x447d10
mov ecx, dword [0x4487b8]
mov dword [esi + 0x380], ecx
push eax
mov ecx, esp
mov dword [esi + 0x388], ecx
mov dword [ecx], 0x4487c0
push eax
mov dword [esi + 0x384], esp
push eax
mov ecx, esp
mov dword [esi + 0x39c], ecx
mov dword [ecx], 0x4487cc
push eax
mov dword [esi + 0x398], esp
push eax
mov ecx, esp
mov dword [esi + 0x394], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4487d8]
mov dword [esi + 0x390], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a4], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4487e0]
mov dword [esi + 0x3a0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ac], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4487e8]
mov dword [esi + 0x3a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3bc], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x4487f0]
mov dword [esi + 0x3b4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x4487f8
push eax
mov dword [esi + 0x3c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x448804
push eax
mov dword [esi + 0x3d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448810]
mov dword [esi + 0x3c8], ecx
push eax
mov edx, esp
mov dword [edx], 0x447d10
mov ecx, dword [0x448818]
mov dword [esi + 0x3d4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3e4], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448820]
mov dword [esi + 0x3e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x280], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448828]
mov dword [esi + 0x27c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d0], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448830]
mov dword [esi + 0x2cc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448838]
mov dword [esi + 0x2d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x36c], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448840]
mov dword [esi + 0x368], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b8], ecx
mov dword [ecx], 0x447d10
mov ecx, dword [0x448848]
mov dword [esi + 0x3b0], ecx
jmp eax