Function at 0x42c3e0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x330
mov dword [esp + 0x304], 0x445f10
mov dword [esp + 0x98], 0
lea eax, [esp + 0x98]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4405f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x440600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x445f18]
xor ecx, 0x947d85a8
sub eax, ecx
mov dword [esp + 0x2fc], 0x445f1c
mov dword [esp + 0x2f4], 0x445380
mov esi, dword [0x445f28]
mov dword [esp + 0x2f0], 0x445380
mov edi, dword [0x445f30]
mov dword [esp + 0x2ec], 0x445f38
mov dword [esp + 0x2e4], 0x445f44
mov dword [esp + 0x2dc], 0x445f50
mov dword [esp + 0x2d4], 0x445f5c
mov dword [esp + 0x2cc], 0x445380
mov ecx, dword [0x445f68]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x2c8], 0x445f70
mov dword [esp + 0x2c0], 0x445f7c
mov dword [esp + 0x2b8], 0x445f88
mov dword [esp + 0x2b0], 0x445f94
mov dword [esp + 0x2a8], 0x445fa0
mov dword [esp + 0x2a0], 0x445380
mov ecx, dword [0x445fac]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x29c], 0x445380
mov ecx, dword [0x445fb4]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x298], 0x445fbc
mov dword [esp + 0x290], 0x445fc8
mov dword [esp + 0x288], 0x445fd4
mov dword [esp + 0x280], 0x445380
mov ecx, dword [0x445fe0]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x27c], 0x445380
mov ecx, dword [0x445fe8]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x278], 0x445ff0
mov dword [esp + 0x270], 0x445380
mov ecx, dword [0x445ffc]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x26c], 0x446004
mov dword [esp + 0x264], 0x446010
mov dword [esp + 0x25c], 0x44601c
mov dword [esp + 0x254], 0x445380
mov ecx, dword [0x446028]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x250], 0x446030
mov dword [esp + 0x248], 0x44603c
mov dword [esp + 0x240], 0x445380
mov ecx, dword [0x446048]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x23c], 0x446050
mov dword [esp + 0x234], 0x44605c
mov dword [esp + 0x22c], 0x445380
mov ecx, dword [0x446068]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x228], 0x446070
mov dword [esp + 0x220], 0x44607c
mov dword [esp + 0x218], 0x446088
mov dword [esp + 0x210], 0x445380
mov ecx, dword [0x446094]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x20c], 0x445380
mov ecx, dword [0x44609c]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x208], 0x445380
mov ecx, dword [0x4460a4]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x204], 0x4460ac
mov dword [esp + 0x1fc], 0x445380
mov ecx, dword [0x4460b8]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x1f8], 0x445380
mov ecx, dword [0x4460c0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x1f4], 0x4460c8
mov dword [esp + 0x1ec], 0x4460d4
mov dword [esp + 0x1e4], 0x445380
mov ecx, dword [0x4460e0]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x1e0], 0x445380
mov edx, dword [0x4460e8]
mov dword [esp + 0x1dc], 0x4460f0
mov dword [esp + 0x1d4], 0x4460fc
mov dword [esp + 0x1cc], 0x445380
mov ecx, dword [0x446108]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x1c8], 0x445380
mov ecx, dword [0x446110]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x1c4], 0x445380
mov ecx, dword [0x446118]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x1c0], 0x445380
mov ecx, dword [0x446120]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x1bc], 0x445380
mov ecx, dword [0x446128]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x1b8], 0x445380
mov ecx, dword [0x446130]
mov dword [esp + 0x150], ecx
mov dword [esp + 0x1b4], 0x445380
mov ecx, dword [0x446138]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x1b0], 0x445380
mov ecx, dword [0x446140]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x1ac], 0x445380
mov ecx, dword [0x446148]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x1a8], 0x445380
xor ebx, ebx
mov ecx, dword [0x446150]
mov dword [esp + 0x1a4], ecx
jmp eax