Function at 0x42e880
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x300
mov dword [esp + 0x2d4], 0x446ac8
mov dword [esp + 0x8c], 0
lea eax, [esp + 0x8c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x441a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x441a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2d0], eax
mov eax, dword [esp + 0x2d4]
mov ecx, dword [esp + 0x2d0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x446ad0]
xor ecx, 0x35e39143
sub eax, ecx
mov dword [esp + 0x2cc], 0x446ad4
mov dword [esp + 0x2c4], 0x446ae0
mov dword [esp + 0x2bc], 0x446aec
mov dword [esp + 0x2b4], 0x446af8
mov dword [esp + 0x2ac], 0x446b04
mov dword [esp + case.0x426372.203], 0x446060
mov esi, dword [0x446b10]
mov dword [esp + 0x2a0], 0x446b18
mov dword [esp + 0x298], 0x446b24
mov dword [esp + 0x290], 0x446b30
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446b3c]
mov dword [esp + 0x16c], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446b44]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x280], 0x446b4c
mov dword [esp + 0x278], 0x446b58
mov dword [esp + 0x270], 0x446b64
mov dword [esp + 0x268], 0x446b70
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446b7c]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x25c], 0x446b84
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446b90]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x250], 0x446b98
mov dword [esp + 0x248], 0x446ba4
mov dword [esp + 0x240], 0x446bb0
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446bbc]
mov dword [esp + 0x158], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446bc4]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x230], 0x446bcc
mov dword [esp + 0x228], 0x446bd8
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446be4]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x21c], 0x446bec
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446bf8]
mov dword [esp + 0x150], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c00]
mov dword [esp + 0x160], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c08]
mov dword [esp + 0x170], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c10]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x204], 0x446c18
mov dword [esp + 0x1fc], 0x446c24
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c30]
mov dword [esp + 0x180], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c38]
mov dword [esp + 0x184], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c40]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x1e8], 0x446c48
mov dword [esp + 0x1e0], 0x446c54
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c60]
mov dword [esp + 0x190], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c68]
mov dword [esp + 0x194], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov edx, dword [0x446c70]
mov dword [esp + 0x1cc], 0x446c78
mov dword [esp + 0x1c4], 0x446c84
mov dword [esp + case.0x426372.203], 0x446060
mov edi, dword [0x446c90]
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446c98]
mov dword [esp + 0x148], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446ca0]
mov dword [esp + 0x144], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446ca8]
mov dword [esp + 0x140], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446cb0]
mov dword [esp + 0x13c], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446cb8]
mov dword [esp + 0x178], ecx
mov dword [esp + case.0x426372.203], 0x446060
mov ecx, dword [0x446cc0]
mov dword [esp + 0x18c], ecx
mov dword [esp + case.0x426372.203], 0x446060
xor ebx, ebx
mov ecx, dword [0x446cc8]
mov dword [esp + 0x19c], ecx
jmp eax