Function at 0x42c460
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x440
mov esi, esp
lea eax, [0x447938]
mov dword [esi + 0x3f4], eax
mov al, byte [esi + 0x158]
mov byte [esi + 0x164], al
mov byte [esi + 0x15c], 0xcc
mov byte [esi + 0x15d], 0xcb
mov byte [esi + 0x15e], 0xc8
mov byte [esi + 0x15f], 0x48
mov eax, 4
mov byte [esi + eax + 0x15c], 0
add eax, 1
cmp eax, 5
jne 0x42c4aa
xor ebx, ebx
cmp ebx, 5
jae 0x42c532
movzx eax, byte [esi + ebx + 0x15c]
mov dword [esi + 0x200], eax
mov edx, ebx
add edx, 0x752be6b3
mov edi, ebx
add edi, 0xb3
and edi, eax
mov ecx, edi
and ecx, 2
xor ecx, 2
mov eax, edi
and eax, 0xfd
imul eax, ecx
mov ecx, edi
and ecx, 2
or edi, 2
imul edi, ecx
add edi, eax
mov eax, edx
mov ecx, dword [esi + 0x200]
and eax, ecx
shl eax, 1
xor edx, ecx
add edx, eax
sub edx, edi
mov eax, edx
xor eax, 0x7f
or edx, 0xb6247e80
mov ecx, edx
and ecx, eax
add edx, ecx
add dl, 1
mov byte [esi + ebx + 0x15c], dl
add ebx, 1
jmp 0x42c4bc
mov eax, dword [esi + 0x15c]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov eax, edx
add eax, 0x10
mov dword [esi + 0xc], eax
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2d4], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0x344], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x348], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x154], 0
sub esp, 0x14
lea eax, [esi + 0x154]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x442a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x442a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x3f0], eax
mov eax, dword [esi + 0x3f4]
mov ecx, dword [esi + 0x3f0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x447940]
xor ecx, 0x150caf39
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x24c], ecx
mov dword [ecx], 0x447944
push eax
mov dword [esi + 0x244], esp
push eax
mov ecx, esp
mov dword [esi + 0x250], ecx
mov dword [ecx], 0x447950
push eax
mov dword [esi + 0x248], esp
push eax
mov ecx, esp
mov dword [esi + 0x268], ecx
mov dword [ecx], 0x44795c
push eax
mov dword [esi + 0x260], esp
push eax
mov ecx, esp
mov dword [esi + 0x258], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447968]
mov dword [esi + 0x254], ecx
push eax
mov ecx, esp
mov dword [esi + 0x264], ecx
mov dword [ecx], 0x447970
push eax
mov dword [esi + 0x25c], esp
push eax
mov ecx, esp
mov dword [esi + 0x280], ecx
mov dword [ecx], 0x44797c
push eax
mov dword [esi + 0x274], esp
push eax
mov ecx, esp
mov dword [esi + 0x270], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447988]
mov dword [esi + 0x26c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x27c], ecx
mov dword [ecx], 0x447990
push eax
mov dword [esi + 0x278], esp
push eax
mov ecx, esp
mov dword [esi + 0x28c], ecx
mov dword [ecx], 0x44799c
push eax
mov dword [esi + 0x284], esp
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x4479a8]
mov dword [esi + 0x288], ecx
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x4479b0
push eax
mov dword [esi + 0x294], esp
push eax
mov ecx, esp
mov dword [esi + 0x2a8], ecx
mov dword [ecx], 0x4479bc
push eax
mov dword [esi + 0x2a4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x4479c8]
mov dword [esi + 0x29c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x4479d0
push eax
mov dword [esi + 0x2ac], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b8], ecx
mov dword [ecx], 0x4479dc
push eax
mov dword [esi + 0x2b4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c0], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x4479e8]
mov dword [esi + 0x2bc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x4479f0
push eax
mov dword [esi + 0x2c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x4479fc
push eax
mov dword [esi + 0x2d8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e4], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a08]
mov dword [esi + 0x2e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2ec], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a10]
mov dword [esi + 0x2e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x447a18
push eax
mov dword [esi + 0x2f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x447a24
push eax
mov dword [esi + 0x300], esp
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a30]
mov dword [esi + 0x2f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x447a38
push eax
mov dword [esi + 0x308], esp
push eax
mov ecx, esp
mov dword [esi + 0x314], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a44]
mov dword [esi + 0x310], ecx
push eax
mov ecx, esp
mov dword [esi + 0x31c], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a4c]
mov dword [esi + 0x318], ecx
push eax
mov ecx, esp
mov dword [esi + 0x324], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [str.q.D]
mov dword [esi + 0x320], ecx
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a5c]
mov dword [esi + 0x328], ecx
push eax
mov ecx, esp
mov dword [esi + 0x334], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a64]
mov dword [esi + 0x330], ecx
push eax
mov ecx, esp
mov dword [esi + 0x33c], ecx
mov dword [ecx], 0x447a6c
push eax
mov dword [esi + 0x338], esp
push eax
mov ecx, esp
mov dword [esi + 0x358], ecx
mov dword [ecx], 0x447a78
push eax
mov dword [esi + 0x354], esp
push eax
mov ecx, esp
mov dword [esi + 0x360], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [str.9Bf1]
mov dword [esi + 0x35c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x368], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a8c]
mov dword [esi + 0x364], ecx
push eax
mov ecx, esp
mov dword [esi + 0x378], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a94]
mov dword [esi + 0x370], ecx
push eax
mov ecx, esp
mov dword [esi + 0x380], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447a9c]
mov dword [esi + 0x37c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x388], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447aa4]
mov dword [esi + 0x384], ecx
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], 0x447aac
push eax
mov dword [esi + 0x38c], esp
push eax
mov ecx, esp
mov dword [esi + 0x3ac], ecx
mov dword [ecx], 0x447ab8
push eax
mov dword [esi + 0x3a0], esp
push eax
mov ecx, esp
mov dword [esi + 0x398], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447ac4]
mov dword [esi + 0x394], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a4], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447acc]
mov dword [esi + 0x39c], ecx
push eax
mov ebx, esp
mov dword [ebx], 0x4470b0
mov ecx, dword [0x447ad4]
mov dword [esi + 0x3a8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], 0x447adc
push eax
mov dword [esi + 0x3b0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x447ae8
push eax
mov dword [esi + 0x3c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3bc], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447af4]
mov dword [esi + 0x3b8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447afc]
mov dword [esi + 0x3c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b04]
mov dword [esi + 0x3d0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b0c]
mov dword [esi + 0x3d8], ecx
push eax
mov edx, esp
mov dword [edx], 0x4470b0
mov ecx, dword [0x447b14]
mov dword [esi + 0x3e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ec], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b1c]
mov dword [esi + 0x3e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x230], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b24]
mov dword [esi + 0x22c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x238], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b2c]
mov dword [esi + 0x234], ecx
push eax
mov ecx, esp
mov dword [esi + 0x240], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b34]
mov dword [esi + 0x23c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d0], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b3c]
mov dword [esi + 0x2cc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], 0x4470b0
mov ecx, dword [0x447b44]
mov dword [esi + 0x34c], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x4470b0
mov edi, dword [0x447b4c]
mov dword [esi + 0x36c], edi
mov edi, dword [esi + 0xc]
jmp eax