Function at 0x429f50
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x338
mov esi, dword [ebp + 8]
mov dword [esp + 0x2fc], 0x43f458
mov al, byte [esp + 0x164]
mov byte [esp + 0x168], al
call fcn.00413bb0
call fcn.00413bb0
mov byte [esp + 0x30], 0x4f
mov byte [esp + 0x31], 0x40
mov byte [esp + 0x32], 0x4f
mov byte [esp + 0x33], 0xcd
call fcn.00413bb0
call fcn.00413bb0
movzx ecx, byte [esp + 0x30]
mov eax, ecx
or eax, 8
and ecx, 8
mov edx, ecx
add edx, edx
not edx
add ecx, edx
and ecx, eax
mov al, 0x47
mov dl, 0x47
sub dl, cl
mov byte [esp + 0x30], dl
movzx ecx, byte [esp + 0x31]
mov edx, ecx
or edx, 7
and ecx, 7
mov edi, ecx
add edi, edi
not edi
add ecx, edi
and ecx, edx
mov dl, 0x47
sub dl, cl
mov byte [esp + 0x31], dl
movzx ecx, byte [esp + 0x32]
mov edx, ecx
or edx, 6
and ecx, 6
mov edi, ecx
add edi, edi
not edi
add ecx, edi
and ecx, edx
mov dl, 0x47
sub dl, cl
mov byte [esp + 0x32], dl
movzx ecx, byte [esp + 0x33]
mov edx, ecx
or edx, 5
and ecx, 5
mov edi, ecx
add edi, edi
not edi
add ecx, edi
and ecx, edx
sub al, cl
mov byte [esp + 0x33], al
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x26c]
mov dword [esi], ecx
mov ecx, dword [eax + 0x270]
mov dword [esi + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [esi + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [esi + 0xc]
mov eax, esi
add eax, 0x10
mov dword [esp + 0x40], eax
mov dword [esi + 0x10], 0
mov eax, esi
add eax, 0x14
mov dword [esp + 0x1e8], eax
mov byte [esi + 0x14], 0
mov eax, esi
add eax, 0x28
mov dword [esp + 0x200], eax
mov word [esi + 0x28], 0
mov eax, esi
add eax, 0x2a
mov dword [esp + 0x208], eax
mov byte [esi + 0x2a], 0
mov dword [esp + 0x160], 0
lea eax, [esp + 0x160]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43a5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43a5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2f8], eax
mov eax, dword [esp + 0x2fc]
mov ecx, dword [esp + 0x2f8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x43f460]
xor ecx, 0x836b5f34
sub eax, ecx
mov dword [esp + 0x2f4], 0x43f464
mov dword [esp + 0x2ec], 0x43ecf0
mov ecx, dword [0x43f470]
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x2e8], 0x43f478
mov dword [esp + 0x2e0], 0x43ecf0
mov ecx, dword [0x43f484]
mov dword [esp + 0x1d8], ecx
mov dword [esp + 0x2dc], 0x43f48c
mov dword [esp + 0x2d4], 0x43f498
mov dword [esp + 0x2cc], 0x43ecf0
mov ecx, dword [0x43f4a4]
mov dword [esp + 0x1dc], ecx
mov dword [esp + 0x2c8], 0x43f4ac
mov dword [esp + 0x2c0], 0x43f4b8
mov dword [esp + 0x2b8], 0x43f4c4
mov dword [esp + 0x2b0], 0x43ecf0
mov ecx, dword [0x43f4d0]
mov dword [esp + 0x1e4], ecx
mov dword [esp + 0x2ac], 0x43f4d8
mov dword [esp + 0x2a4], 0x43f4e4
mov dword [esp + 0x29c], 0x43ecf0
mov ecx, dword [0x43f4f0]
mov dword [esp + 0x1ec], ecx
mov dword [esp + 0x298], 0x43f4f8
mov dword [esp + 0x290], 0x43f504
mov dword [esp + 0x288], 0x43ecf0
mov ecx, dword [0x43f510]
mov dword [esp + 0x1f4], ecx
mov dword [esp + 0x284], 0x43ecf0
mov ecx, dword [str.__HT]
mov dword [esp + 0x1f8], ecx
mov dword [esp + 0x280], 0x43f520
mov dword [esp + 0x278], 0x43ecf0
mov ecx, dword [0x43f52c]
mov dword [esp + 0x1fc], ecx
mov dword [esp + 0x274], 0x43f534
mov dword [esp + 0x26c], 0x43f540
mov dword [esp + 0x264], 0x43ecf0
mov ecx, dword [0x43f54c]
mov dword [esp + 0x20c], ecx
mov dword [esp + 0x260], 0x43f554
mov dword [esp + 0x258], 0x43f560
mov dword [esp + 0x250], 0x43ecf0
mov ecx, dword [0x43f56c]
mov dword [esp + 0x218], ecx
mov dword [esp + 0x24c], 0x43ecf0
mov ecx, dword [0x43f574]
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x248], 0x43ecf0
mov edi, dword [0x43f57c]
mov dword [esp + 0x244], 0x43ecf0
mov esi, dword [0x43f584]
mov dword [esp + 0x240], 0x43ecf0
mov edx, dword [0x43f58c]
mov dword [esp + 0x23c], 0x43ecf0
mov ecx, dword [0x43f594]
mov dword [esp + 0x238], 0x43ecf0
mov ebx, dword [0x43f59c]
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x234], 0x43ecf0
mov ebx, dword [0x43f5a4]
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x230], 0x43ecf0
mov ebx, dword [0x43f5ac]
mov dword [esp + 0x210], ebx
mov ebx, dword [esp + 0x40]
jmp eax