Function at 0x42ce60
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2f0
mov dword [esp + 0x2e8], 0x444b04
mov dword [esp + 0x74], 0
lea eax, [esp + 0x74]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x43f5f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x43f600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2e4], eax
mov eax, dword [esp + 0x2e8]
mov ecx, dword [esp + 0x2e4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x444b0c]
xor ecx, 0x572e4e78
sub eax, ecx
mov dword [esp + 0x2e0], 0x444b10
mov dword [esp + 0x2d8], 0x444b1c
mov dword [esp + 0x2d0], 0x444b28
mov dword [esp + 0x2c8], 0x443eb0
mov ecx, dword [0x444b34]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x2c4], 0x444b3c
mov dword [esp + 0x2bc], 0x443eb0
mov ecx, dword [0x444b48]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x2b8], 0x443eb0
mov ecx, dword [str.P95q]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x2b4], 0x444b58
mov dword [esp + 0x2ac], 0x444b64
mov dword [esp + 0x2a4], 0x444b70
mov dword [esp + 0x29c], 0x444b7c
mov dword [esp + 0x294], 0x444b88
mov dword [esp + 0x28c], 0x444b94
mov dword [esp + 0x284], 0x443eb0
mov ecx, dword [0x444ba0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x280], 0x444ba8
mov dword [esp + 0x278], 0x444bb4
mov dword [esp + 0x270], 0x444bc0
mov dword [esp + 0x268], 0x443eb0
mov ecx, dword [0x444bcc]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x264], 0x444bd4
mov dword [esp + 0x25c], 0x444be0
mov dword [esp + 0x254], 0x444bec
mov dword [esp + 0x24c], 0x443eb0
mov ecx, dword [0x444bf8]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x248], 0x443eb0
mov ecx, dword [0x444c00]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x244], 0x443eb0
mov ecx, dword [0x444c08]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x240], 0x444c10
mov dword [esp + 0x238], 0x444c1c
mov dword [esp + 0x230], 0x444c28
mov dword [esp + 0x228], 0x443eb0
mov ecx, dword [0x444c34]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x224], 0x444c3c
mov dword [esp + 0x21c], 0x444c48
mov dword [esp + 0x214], 0x443eb0
mov ecx, dword [0x444c54]
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x210], 0x443eb0
mov edi, dword [0x444c5c]
mov dword [esp + 0x20c], 0x444c64
mov dword [esp + 0x204], 0x444c70
mov dword [esp + 0x1fc], 0x443eb0
mov ecx, dword [0x444c7c]
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1f8], 0x443eb0
mov edx, dword [0x444c84]
mov dword [esp + 0x1f4], 0x444c8c
mov dword [esp + 0x1ec], 0x444c98
mov dword [esp + 0x1e4], 0x443eb0
mov esi, dword [0x444ca4]
mov dword [esp + 0x1e0], 0x443eb0
mov ecx, dword [0x444cac]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x1dc], 0x443eb0
mov ecx, dword [0x444cb4]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x1d8], 0x443eb0
mov ecx, dword [0x444cbc]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x1d4], 0x443eb0
mov ecx, dword [0x444cc4]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x1d0], 0x443eb0
mov ecx, dword [0x444ccc]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x1cc], 0x443eb0
mov ecx, dword [0x444cd4]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1c8], 0x443eb0
mov ecx, dword [0x444cdc]
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x1c4], 0x443eb0
xor ebx, ebx
mov ecx, dword [0x444ce4]
jmp eax