Function at 0x42c950
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x4c0
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x4497e0]
mov dword [esi + 0x494], ecx
mov cl, byte [esi + 0x158]
mov byte [esi + 0x164], cl
mov byte [esi + 0x15c], 0xe4
mov byte [esi + 0x15d], 0xeb
mov byte [esi + 0x15e], 0xe8
mov byte [esi + 0x15f], 0x68
mov ecx, 4
mov byte [esi + ecx + 0x15c], 0
add ecx, 1
cmp ecx, 7
jne 0x42c99d
xor ecx, ecx
cmp ecx, 7
jae 0x42ca06
movzx ebx, byte [esi + ecx + 0x15c]
mov edx, 0x71390328
sub edx, ecx
mov edi, 0x71390328
sub edi, ecx
and edi, edx
or edi, ebx
mov edx, 0x28
sub edx, ecx
and edx, ebx
xor edi, 0xffffffff
or edx, edi
mov edi, edx
xor edi, 0xc9e2f034
shl edx, 1
and edx, 0x6c3a1f96
sub edx, edi
mov edi, edx
shl edi, 1
and edi, 2
xor edx, 1
add edx, edi
mov byte [esi + ecx + 0x15c], dl
add ecx, 1
jmp 0x42c9af
mov ecx, dword [esi + 0x15c]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov edi, eax
add edi, 0x10
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x35c], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x3ac], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x3fc], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0x154], 0
sub esp, 0x14
lea eax, [esi + 0x154]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x444a28
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x444a38
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x490], eax
mov eax, dword [esi + 0x494]
mov ecx, dword [esi + 0x490]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x4497e8]
xor ecx, 0xe339b6d9
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x274], ecx
mov dword [ecx], 0x4497ec
push eax
mov dword [esi + 0x26c], esp
push eax
mov ecx, esp
mov dword [esi + 0x278], ecx
mov dword [ecx], 0x4497f8
push eax
mov dword [esi + 0x270], esp
push eax
mov ecx, esp
mov dword [esi + 0x28c], ecx
mov dword [ecx], 0x449804
push eax
mov dword [esi + 0x284], esp
push eax
mov ecx, esp
mov dword [esi + 0x280], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449810]
mov dword [esi + 0x27c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449818]
mov dword [esi + 0x294], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449820]
mov dword [esi + 0x29c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2a8], ecx
mov dword [ecx], 0x449828
push eax
mov dword [esi + 0x2a4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c4], ecx
mov dword [ecx], 0x449834
push eax
mov dword [esi + 0x2b8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449840]
mov dword [esi + 0x2ac], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2bc], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449848]
mov dword [esi + 0x2b4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x449850
push eax
mov dword [esi + 0x2c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2d0], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x44985c]
mov dword [esi + 0x2cc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d8], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449864]
mov dword [esi + 0x2d4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2e0], ecx
mov dword [ecx], 0x44986c
push eax
mov dword [esi + 0x2dc], esp
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x449878
push eax
mov dword [esi + 0x2f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e8], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449884]
mov dword [esi + 0x2e4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x44988c]
mov dword [esi + 0x2ec], ecx
push eax
mov ecx, esp
mov dword [esi + 0x300], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449894]
mov dword [esi + 0x2f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x308], ecx
mov dword [ecx], 0x44989c
push eax
mov dword [esi + 0x304], esp
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x4498a8
push eax
mov dword [esi + 0x318], esp
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x4498b4]
mov dword [esi + 0x30c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x31c], ecx
mov dword [ecx], 0x4498bc
push eax
mov dword [esi + 0x314], esp
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], 0x4498c8
push eax
mov dword [esi + 0x32c], esp
push eax
mov ecx, esp
mov dword [esi + 0x328], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x4498d4]
mov dword [esi + 0x324], ecx
push eax
mov ecx, esp
mov dword [esi + 0x334], ecx
mov dword [ecx], 0x4498dc
push eax
mov dword [esi + 0x330], esp
push eax
mov ecx, esp
mov dword [esi + 0x340], ecx
mov dword [ecx], 0x4498e8
push eax
mov dword [esi + 0x33c], esp
push eax
mov ecx, esp
mov dword [esi + 0x348], ecx
mov dword [ecx], 0x4498f4
push eax
mov dword [esi + 0x344], esp
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449900]
mov dword [esi + 0x34c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x358], ecx
mov dword [ecx], 0x449908
push eax
mov dword [esi + 0x354], esp
push eax
mov ecx, esp
mov dword [esi + 0x364], ecx
mov dword [ecx], 0x449914
push eax
mov dword [esi + 0x360], esp
push eax
mov ecx, esp
mov dword [esi + 0x36c], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449920]
mov dword [esi + 0x368], ecx
push eax
mov ecx, esp
mov dword [esi + 0x374], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449928]
mov dword [esi + 0x370], ecx
push eax
mov ecx, esp
mov dword [esi + 0x380], ecx
mov dword [ecx], 0x449930
push eax
mov dword [esi + 0x37c], esp
push eax
mov ecx, esp
mov dword [esi + 0x388], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x44993c]
mov dword [esi + 0x384], ecx
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], 0x449944
push eax
mov dword [esi + 0x38c], esp
push eax
mov ecx, esp
mov dword [esi + 0x3a0], ecx
mov dword [ecx], 0x449950
push eax
mov dword [esi + 0x398], esp
push eax
mov ecx, esp
mov dword [esi + 0x39c], ecx
mov dword [ecx], 0x44995c
push eax
mov dword [esi + 0x394], esp
push eax
mov ecx, esp
mov dword [esi + 0x3a8], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449968]
mov dword [esi + 0x3a4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d0], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449970]
mov dword [esi + 0x3cc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d8], ecx
mov dword [ecx], 0x449978
push eax
mov dword [esi + 0x3d4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3f4], ecx
mov dword [ecx], 0x449984
push eax
mov dword [esi + 0x3e4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3e0], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449990]
mov dword [esi + 0x3dc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ec], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449998]
mov dword [esi + 0x3e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3f8], ecx
mov dword [ecx], 0x4499a0
push eax
mov dword [esi + 0x3f0], esp
push eax
mov ecx, esp
mov dword [esi + 0x418], ecx
mov dword [ecx], 0x4499ac
push eax
mov dword [esi + 0x408], esp
push eax
mov ecx, esp
mov dword [esi + 0x404], ecx
mov dword [ecx], 0x4499b8
push eax
mov dword [esi + 0x400], esp
push eax
mov ecx, esp
mov dword [esi + 0x410], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x4499c4]
mov dword [esi + 0x40c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x41c], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x4499cc]
mov dword [esi + 0x414], ecx
push eax
mov ecx, esp
mov dword [esi + 0x424], ecx
mov dword [ecx], 0x4499d4
push eax
mov dword [esi + 0x420], esp
push eax
mov ecx, esp
mov dword [esi + 0x434], ecx
mov dword [ecx], 0x4499e0
push eax
mov dword [esi + 0x430], esp
push eax
mov ecx, esp
mov dword [esi + 0x42c], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x4499ec]
mov dword [esi + 0x428], ecx
push eax
mov ecx, esp
mov dword [esi + 0x43c], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x4499f4]
mov dword [esi + 0x438], ecx
push eax
mov ecx, esp
mov dword [esi + 0x444], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x4499fc]
mov dword [esi + 0x440], ecx
push eax
mov ecx, esp
mov dword [esi + 0x450], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a04]
mov dword [esi + 0x44c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x45c], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a0c]
mov dword [esi + 0x458], ecx
push eax
mov ecx, esp
mov dword [esi + 0x464], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a14]
mov dword [esi + 0x460], ecx
push eax
mov ecx, esp
mov dword [esi + 0x46c], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a1c]
mov dword [esi + 0x468], ecx
push eax
mov edx, esp
mov dword [edx], 0x448ed0
mov ecx, dword [0x449a24]
mov dword [esi + 0x470], ecx
push eax
mov ecx, esp
mov dword [esi + 0x47c], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a2c]
mov dword [esi + 0x478], ecx
push eax
mov ecx, esp
mov dword [esi + 0x484], ecx
mov dword [ecx], 0x449a34
push eax
mov dword [esi + 0x480], esp
push eax
mov ecx, esp
mov dword [esi + 0x48c], ecx
mov dword [ecx], 0x449a40
push eax
mov dword [esi + 0x488], esp
push eax
mov ecx, esp
mov dword [esi + 0x250], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a4c]
mov dword [esi + 0x24c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x258], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a54]
mov dword [esi + 0x254], ecx
push eax
mov ecx, esp
mov dword [esi + 0x260], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a5c]
mov dword [esi + 0x25c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x268], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a64]
mov dword [esi + 0x264], ecx
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a6c]
mov dword [esi + 0x288], ecx
push eax
mov ebx, esp
mov dword [ebx], 0x448ed0
mov ecx, dword [0x449a74]
mov dword [esi + 0x378], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a7c]
mov dword [esi + 0x3b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3bc], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a84]
mov dword [esi + 0x3b8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a8c]
mov dword [esi + 0x3c0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x454], ecx
mov dword [ecx], 0x448ed0
mov ecx, dword [0x449a94]
mov dword [esi + 0x448], ecx
jmp eax