Function at 0x42f110
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2e0
mov dword [esp + 0x2c4], 0x444690
mov dword [esp + 0xe4], 0
lea eax, [esp + 0xe4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43f5e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43f5f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2c0], eax
mov eax, dword [esp + 0x2c4]
mov ecx, dword [esp + 0x2c0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x444698]
xor ecx, 0x74203189
sub eax, ecx
mov dword [esp + 0x2bc], 0x44469c
mov dword [esp + 0x2b4], 0x4446a8
mov dword [esp + 0x2ac], 0x4446b4
mov dword [esp + 0x2a4], 0x443c90
mov ecx, dword [0x4446c0]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x2a0], 0x443c90
mov ecx, dword [0x4446c8]
mov dword [esp + 0x130], ecx
mov dword [esp + 0x29c], 0x4446d0
mov dword [esp + 0x294], 0x4446dc
mov dword [esp + 0x28c], 0x4446e8
mov dword [esp + 0x284], 0x4446f4
mov dword [esp + 0x27c], 0x443c90
mov ecx, dword [0x444700]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x278], 0x444708
mov dword [esp + 0x270], 0x443c90
mov ecx, dword [0x444714]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x26c], 0x443c90
mov ecx, dword [0x44471c]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x268], 0x444724
mov dword [esp + 0x260], 0x444730
mov dword [esp + 0x258], 0x44473c
mov dword [esp + 0x250], 0x444748
mov dword [esp + 0x248], 0x443c90
mov ecx, dword [0x444754]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x244], 0x443c90
mov ecx, dword [0x44475c]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x240], 0x443c90
mov ecx, dword [0x444764]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x23c], 0x44476c
mov dword [esp + 0x234], 0x444778
mov dword [esp + 0x22c], 0x444784
mov dword [esp + 0x224], 0x443c90
mov ecx, dword [0x444790]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x220], 0x443c90
mov ecx, dword [0x444798]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x21c], 0x4447a0
mov dword [esp + 0x214], 0x4447ac
mov dword [esp + 0x20c], 0x4447b8
mov dword [esp + 0x204], 0x443c90
mov ecx, dword [0x4447c4]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x200], 0x443c90
mov ecx, dword [0x4447cc]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x1fc], 0x4447d4
mov dword [esp + 0x1f4], 0x4447e0
mov dword [esp + 0x1ec], 0x443c90
mov ecx, dword [0x4447ec]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x1e8], 0x4447f4
mov dword [esp + 0x1e0], 0x444800
mov dword [esp + 0x1d8], 0x44480c
mov dword [esp + 0x1d0], 0x443c90
mov ecx, dword [0x444818]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x1cc], 0x443c90
mov esi, dword [0x444820]
mov dword [esp + 0x1c8], 0x443c90
mov edx, dword [0x444828]
mov dword [esp + 0x1c4], 0x443c90
mov ecx, dword [0x444830]
mov dword [esp + 0x1c0], 0x444838
mov dword [esp + 0x1b8], 0x444844
mov dword [esp + 0x1b0], 0x443c90
mov edi, dword [0x444850]
mov dword [esp + 0x124], edi
mov dword [esp + 0x1ac], 0x443c90
mov edi, dword [0x444858]
mov dword [esp + 0x12c], edi
mov dword [esp + 0x1a8], 0x443c90
mov edi, dword [0x444860]
mov dword [esp + 0x158], edi
mov dword [esp + 0x1a4], 0x443c90
mov edi, dword [0x444868]
mov dword [esp + 0x154], edi
mov dword [esp + 0x1a0], 0x443c90
mov edi, dword [0x444870]
mov dword [esp + 0x150], edi
mov dword [esp + 0x19c], 0x443c90
mov edi, dword [0x444878]
mov dword [esp + 0x14c], edi
mov dword [esp + 0x198], 0x443c90
xor ebx, ebx
mov edi, dword [0x444880]
jmp eax