Function at 0x42f3e0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x330
mov dword [esp + 0x304], 0x444934
mov dword [esp + 0x58], 0
lea eax, [esp + 0x58]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43f5ec
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43f5fc
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x44493c]
xor ecx, 0x37095d4b
sub eax, ecx
mov dword [esp + 0x2fc], 0x444940
mov dword [esp + 0x2f4], 0x44494c
mov dword [esp + 0x2ec], 0x444958
mov dword [esp + 0x2e4], 0x443f50
mov ecx, dword [0x444964]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x2e0], 0x44496c
mov dword [esp + 0x2d8], 0x443f50
mov ecx, dword [0x444978]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x2d4], 0x443f50
mov ecx, dword [0x444980]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x2d0], 0x444988
mov dword [esp + 0x2c8], 0x444994
mov dword [esp + 0x2c0], 0x4449a0
mov dword [esp + 0x2b8], 0x443f50
mov ecx, dword [0x4449ac]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x2b4], 0x4449b4
mov dword [esp + 0x2ac], 0x4449c0
mov dword [esp + 0x2a4], 0x4449cc
mov dword [esp + 0x29c], 0x443f50
mov ecx, dword [0x4449d8]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x298], 0x4449e0
mov dword [esp + 0x290], 0x4449ec
mov dword [esp + 0x288], 0x443f50
mov ecx, dword [0x4449f8]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x284], 0x444a00
mov dword [esp + 0x27c], 0x444a0c
mov dword [esp + 0x274], 0x443f50
mov ecx, dword [0x444a18]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x270], 0x444a20
mov dword [esp + 0x268], 0x443f50
mov ecx, dword [0x444a2c]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x264], 0x444a34
mov dword [esp + 0x25c], 0x444a40
mov dword [esp + 0x254], 0x443f50
mov ecx, dword [0x444a4c]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x250], 0x443f50
mov ecx, dword [0x444a54]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x24c], 0x444a5c
mov dword [esp + 0x244], 0x443f50
mov ecx, dword [0x444a68]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x240], 0x443f50
mov ecx, dword [0x444a70]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x23c], 0x444a78
mov dword [esp + 0x234], 0x444a84
mov dword [esp + 0x22c], 0x443f50
mov ecx, dword [0x444a90]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x228], 0x444a98
mov dword [esp + 0x220], 0x444aa4
mov dword [esp + 0x218], 0x444ab0
mov dword [esp + 0x210], 0x443f50
mov ecx, dword [0x444abc]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x20c], 0x444ac4
mov dword [esp + 0x204], 0x444ad0
mov dword [esp + 0x1fc], 0x443f50
mov ecx, dword [0x444adc]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x1f8], 0x444ae4
mov dword [esp + 0x1f0], 0x444af0
mov dword [esp + 0x1e8], 0x443f50
mov edi, dword [0x444afc]
mov dword [esp + 0x1e4], 0x444b04
mov dword [esp + 0x1dc], 0x444b10
mov dword [esp + 0x1d4], 0x443f50
mov ecx, dword [0x444b1c]
mov dword [esp + 0x1d0], 0x444b24
mov dword [esp + 0x1c8], 0x444b30
mov dword [esp + 0x1c0], 0x443f50
mov edx, dword [0x444b3c]
mov dword [esp + 0x11c], edx
mov dword [esp + 0x1bc], 0x443f50
mov edx, dword [0x444b44]
mov dword [esp + 0x130], edx
mov dword [esp + 0x1b8], 0x443f50
mov edx, dword [0x444b4c]
mov dword [esp + 0x150], edx
mov dword [esp + 0x1b4], 0x443f50
mov edx, dword [0x444b54]
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1b0], 0x443f50
mov edx, dword [0x444b5c]
mov dword [esp + 0x148], edx
mov dword [esp + 0x1ac], 0x443f50
mov edx, dword [0x444b64]
mov dword [esp + 0x144], edx
mov dword [esp + 0x1a8], 0x443f50
mov edx, dword [str.fmoe]
mov dword [esp + 0x154], edx
mov dword [esp + 0x1a4], 0x443f50
mov edx, dword [0x444b74]
mov dword [esp + 0x180], edx
mov dword [esp + 0x1a0], 0x443f50
mov edx, dword [0x444b7c]
mov dword [esp + 0x188], edx
mov dword [esp + 0x19c], 0x443f50
mov edx, dword [0x444b84]
mov dword [esp + 0x198], 0x443f50
xor ebx, ebx
mov esi, dword [0x444b8c]
jmp eax