Function at 0x42c230
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x4d8
mov esi, esp
mov edx, dword [ebp + 8]
lea ecx, [0x448884]
mov dword [esi + 0x4ac], ecx
mov cl, byte [esi + 0x190]
mov byte [esi + 0x19c], cl
mov byte [esi + 0x194], 0xc8
mov byte [esi + 0x195], 0xc9
mov byte [esi + 0x196], 0xd4
mov byte [esi + 0x197], 0x54
mov ecx, 4
mov byte [esi + ecx + 0x194], 0
add ecx, 1
cmp ecx, 7
jne 0x42c27d
xor ecx, ecx
cmp ecx, 7
jae 0x42c305
movzx edi, byte [esi + ecx + 0x194]
mov edx, ecx
add edx, 0x4fe864ce
xor edx, edi
mov ebx, edx
xor ebx, 0x8f89f806
mov edi, edx
or edi, 0x707607f9
and edi, ebx
mov eax, edi
and eax, 2
xor eax, 2
mov ebx, edi
and ebx, 0xfffffffd
imul ebx, eax
mov eax, edi
and eax, 2
or edi, 2
imul edi, eax
add edi, ebx
xor edx, 0x707607f9
mov eax, edx
and eax, edi
shl eax, 1
mov ebx, edx
xor ebx, edi
add ebx, eax
mov eax, edx
and eax, 1
xor ebx, 1
and edx, 1
or ebx, edx
mov edx, dword [ebp + 8]
add ebx, eax
mov byte [esi + ecx + 0x194], bl
add ecx, 1
jmp 0x42c28f
mov eax, dword [esi + 0x194]
mov ecx, dword [eax + 0x26c]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov edi, edx
add edi, 0x10
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x324], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x3d8], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x20c], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x60], 0
sub esp, 0x14
lea eax, [esi + 0x60]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x443a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x443a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x4a8], eax
mov eax, dword [esi + 0x4ac]
mov ecx, dword [esi + 0x4a8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x44888c]
xor ecx, 0xce2e5e73
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x448890
push eax
mov dword [esi + 0x29c], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x44889c
push eax
mov dword [esi + 0x2a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x4488a8
push eax
mov dword [esi + 0x2a4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b8], ecx
mov dword [ecx], 0x4488b4
push eax
mov dword [esi + 0x2b4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x4488c0
push eax
mov dword [esi + 0x2c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2d0], ecx
mov dword [ecx], 0x4488cc
push eax
mov dword [esi + 0x2cc], esp
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x4488d8
push eax
mov dword [esi + 0x2d4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e0], ecx
mov dword [ecx], 0x4488e4
push eax
mov dword [esi + 0x2d8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2f0], ecx
mov dword [ecx], 0x4488f0
push eax
mov dword [esi + 0x2ec], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e8], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x4488fc]
mov dword [esi + 0x2e4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f8], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448904]
mov dword [esi + 0x2f4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x300], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x44890c]
mov dword [esi + 0x2fc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x308], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448914]
mov dword [esi + 0x304], ecx
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x44891c]
mov dword [esi + 0x30c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x318], ecx
mov dword [ecx], 0x448924
push eax
mov dword [esi + 0x314], esp
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], 0x448930
push eax
mov dword [esi + 0x330], esp
push eax
mov ecx, esp
mov dword [esi + 0x33c], ecx
mov dword [ecx], 0x44893c
push eax
mov dword [esi + 0x334], esp
push eax
mov ecx, esp
mov dword [esi + 0x354], ecx
mov dword [ecx], 0x448948
push eax
mov dword [esi + 0x34c], esp
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448954]
mov dword [esi + 0x340], ecx
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x44895c]
mov dword [esi + 0x348], ecx
push eax
mov ecx, esp
mov dword [esi + 0x35c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448964]
mov dword [esi + 0x358], ecx
push eax
mov ecx, esp
mov dword [esi + 0x36c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x44896c]
mov dword [esi + 0x368], ecx
push eax
mov ecx, esp
mov dword [esi + 0x378], ecx
mov dword [ecx], 0x448974
push eax
mov dword [esi + 0x370], esp
push eax
mov ecx, esp
mov dword [esi + 0x37c], ecx
mov dword [ecx], 0x448980
push eax
mov dword [esi + 0x374], esp
push eax
mov ecx, esp
mov dword [esi + 0x398], ecx
mov dword [ecx], 0x44898c
push eax
mov dword [esi + 0x388], esp
push eax
mov ecx, esp
mov dword [esi + 0x384], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448998]
mov dword [esi + 0x380], ecx
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x4489a0]
mov dword [esi + 0x38c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x39c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x4489a8]
mov dword [esi + 0x394], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a4], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x4489b0]
mov dword [esi + 0x3a0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ac], ecx
mov dword [ecx], 0x4489b8
push eax
mov dword [esi + 0x3a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x4489c4
push eax
mov dword [esi + 0x3bc], esp
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x4489d0]
mov dword [esi + 0x3b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3c0], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x4489d8]
mov dword [esi + 0x3b8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d0], ecx
mov dword [ecx], 0x4489e0
push eax
mov dword [esi + 0x3c8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x4489ec
push eax
mov dword [esi + 0x3cc], esp
push eax
mov ecx, esp
mov dword [esi + 0x418], ecx
mov dword [ecx], 0x4489f8
push eax
mov dword [esi + 0x408], esp
push eax
mov ecx, esp
mov dword [esi + 0x404], ecx
mov dword [ecx], 0x448a04
push eax
mov dword [esi + 0x400], esp
push eax
mov ecx, esp
mov dword [esi + 0x410], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a10]
mov dword [esi + 0x40c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x41c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a18]
mov dword [esi + 0x414], ecx
push eax
mov ecx, esp
mov dword [esi + 0x424], ecx
mov dword [ecx], 0x448a20
push eax
mov dword [esi + 0x420], esp
push eax
mov ecx, esp
mov dword [esi + 0x434], ecx
mov dword [ecx], 0x448a2c
push eax
mov dword [esi + 0x430], esp
push eax
mov ecx, esp
mov dword [esi + 0x42c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a38]
mov dword [esi + 0x428], ecx
push eax
mov ecx, esp
mov dword [esi + 0x43c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a40]
mov dword [esi + 0x438], ecx
push eax
mov ecx, esp
mov dword [esi + 0x444], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a48]
mov dword [esi + 0x440], ecx
push eax
mov ecx, esp
mov dword [esi + 0x44c], ecx
mov dword [ecx], 0x448a50
push eax
mov dword [esi + 0x448], esp
push eax
mov ecx, esp
mov dword [esi + 0x46c], ecx
mov dword [ecx], 0x448a5c
push eax
mov dword [esi + 0x464], esp
push eax
mov ecx, esp
mov dword [esi + 0x45c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a68]
mov dword [esi + 0x458], ecx
push eax
mov ecx, esp
mov dword [esi + 0x468], ecx
mov dword [ecx], 0x448a70
push eax
mov dword [esi + 0x460], esp
push eax
mov ecx, esp
mov dword [esi + 0x47c], ecx
mov dword [ecx], 0x448a7c
push eax
mov dword [esi + 0x478], esp
push eax
mov ecx, esp
mov dword [esi + 0x474], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a88]
mov dword [esi + 0x470], ecx
push eax
mov ecx, esp
mov dword [esi + 0x484], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a90]
mov dword [esi + 0x480], ecx
push eax
mov ecx, esp
mov dword [esi + 0x48c], ecx
mov dword [ecx], case.0x4275bb.97
mov ecx, dword [0x448a98]
mov dword [esi + 0x488], ecx
push eax
mov ecx, esp
mov dword [esi + 0x494], ecx
mov dword [ecx], 0x448aa0
push eax
mov dword [esi + 0x490], esp
push eax
mov ecx, esp
mov dword [esi + 0x4a4], ecx
mov dword [ecx], 0x448aac
push eax
mov dword [esi + 0x4a0], esp
push eax
mov ecx, esp
mov dword [ecx], case.0x4275bb.97
mov edx, dword [0x448ab8]
push eax
mov ebx, esp
mov dword [esi + 0x298], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448ac0]
mov dword [esi + 0x294], ebx
push eax
mov ebx, esp
mov dword [esi + 0x2c0], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448ac8]
mov dword [esi + 0x2bc], ebx
push eax
mov ebx, esp
mov dword [esi + 0x320], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448ad0]
mov dword [esi + 0x31c], ebx
push eax
mov ebx, esp
mov dword [esi + 0x32c], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448ad8]
mov dword [esi + 0x328], ebx
push eax
mov ebx, esp
mov dword [esi + 0x364], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448ae0]
mov dword [esi + 0x360], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3e4], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448ae8]
mov dword [esi + 0x3e0], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3ec], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448af0]
mov dword [esi + 0x3e8], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3f4], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448af8]
mov dword [esi + 0x3f0], ebx
push eax
mov ebx, esp
mov dword [esi + 0x3fc], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448b00]
mov dword [esi + 0x3f8], ebx
push eax
mov ebx, esp
mov dword [esi + 0x454], ebx
mov dword [ebx], case.0x4275bb.97
mov ebx, dword [0x448b08]
mov dword [esi + 0x450], ebx
jmp eax