Function at 0x42e820
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x320
mov dword [esp + case.0x42964b.82], 0x447e54
mov dword [esp + 0xdc], 0
lea eax, [esp + 0xdc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x442a08
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x442a18
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
mov dword [esp + case.0x42964b.84], 0x447e5c
mov dword [esp + case.0x42964b.86], 0x447e64
mov dword [esp + case.0x42964b.88], 0x447e6c
mov dword [esp + case.0x42964b.90], 0x447e74
mov dword [esp + case.0x42964b.92], 0x447e7c
mov dword [esp + case.0x42964b.94], 0x447e84
mov dword [esp + case.0x42964b.96], 0x447e8c
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x2c0], 0x13f
mov dword [esp + case.0x42964b.98], 0x447e94
mov dword [esp + case.0x42964b.100], 0x447e9c
mov dword [esp + case.0x42964b.102], 0x447ea4
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x2a0], 0x144
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x298], 0x144
mov dword [esp + case.0x42964b.104], 0x447eac
mov dword [esp + case.0x42964b.106], 0x447eb4
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x280], 0x147
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x278], 0x148
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x270], 0x149
mov dword [esp + case.0x42964b.108], 0x447ebc
mov dword [esp + case.0x42964b.109], 0x447ec4
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x258], 0x14c
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x250], 0x14d
mov dword [esp + case.0x42964b.112], 0x447ecc
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x240], 0x14f
mov dword [esp + case.0x42964b.114], 0x447ed4
mov dword [esp + case.0x42964b.116], 0x447edc
mov dword [esp + case.0x42964b.118], 0x447ee4
mov dword [esp + case.0x42964b.120], 0x447eec
mov dword [esp + case.0x42964b.122], 0x447ef4
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x210], 0x155
mov dword [esp + case.0x42964b.124], 0x447efc
mov dword [esp + case.0x42964b.124], 0x447f04
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1f8], 0x158
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1f0], 0x159
mov dword [esp + case.0x42964b.128], 0x447f0c
mov dword [esp + case.0x42964b.130], 0x447f14
mov dword [esp + case.0x42964b.131], 0x447f1c
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1d0], 0x15d
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1c8], 0x15e
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1c0], 0x15f
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1b8], 0x160
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1b0], 0x13a
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1a8], 0x13d
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x1a0], 0x140
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x198], 0x14a
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x190], 0x150
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x188], 0x153
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x180], 0x156
mov dword [esp + case.0x4239fb.42], 0x447340
mov dword [esp + 0x178], 0x15b
xor esi, esi
jmp eax