Function at 0x429e40
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x448
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x445cd8]
mov dword [esi + 0x40c], ecx
mov cl, byte [esi + 0x158]
mov byte [esi + 0x164], cl
mov byte [esi + 0x15c], 0x48
mov byte [esi + 0x15d], 0x49
mov byte [esi + 0x15e], 0x54
mov byte [esi + 0x15f], 0xd4
mov ecx, 4
mov byte [esi + ecx + 0x15c], 0
add ecx, 1
cmp ecx, 5
jne 0x429e8d
xor ecx, ecx
cmp ecx, 5
jae 0x429eed
movzx edi, byte [esi + ecx + 0x15c]
mov ebx, ecx
add ebx, 0x582f8e
mov edx, 0xbfa7d071
sub edx, ecx
and edx, 0xd94787ab
and ebx, 0x26b87854
or edx, ebx
xor edx, edi
mov edi, edx
and edi, 0xc7
xor edi, 0x44
and edx, 0x38
xor edx, 0x28
sub edx, edi
add dl, 1
mov byte [esi + ecx + 0x15c], dl
add ecx, 1
jmp 0x429e9f
mov ecx, dword [esi + 0x15c]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov ecx, eax
add ecx, 0x10
mov dword [esi + 0x64], ecx
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x294], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x310], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x1ec], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0x154], 0
sub esp, 0x14
lea eax, [esi + 0x154]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4405f0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x440600
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x408], eax
mov eax, dword [esi + 0x40c]
mov ecx, dword [esi + 0x408]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x445ce0]
xor ecx, 0x221be940
sub eax, ecx
push eax
mov ecx, esp
mov dword [esi + 0x258], ecx
mov dword [ecx], 0x445ce4
push eax
mov dword [esi + 0x254], esp
push eax
mov ecx, esp
mov dword [esi + 0x260], ecx
mov dword [ecx], 0x445cf0
push eax
mov dword [esi + 0x25c], esp
push eax
mov ecx, esp
mov dword [esi + 0x268], ecx
mov dword [ecx], 0x445cfc
push eax
mov dword [esi + 0x264], esp
push eax
mov ecx, esp
mov dword [esi + 0x270], ecx
mov dword [ecx], 0x445d08
push eax
mov dword [esi + 0x26c], esp
push eax
mov ecx, esp
mov dword [esi + 0x278], ecx
mov dword [ecx], 0x445d14
push eax
mov dword [esi + 0x274], esp
push eax
mov ecx, esp
mov dword [esi + 0x280], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445d20]
mov dword [esi + 0x27c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x288], ecx
mov dword [ecx], 0x445d28
push eax
mov dword [esi + 0x284], esp
push eax
mov ecx, esp
mov dword [esi + 0x29c], ecx
mov dword [ecx], 0x445d34
push eax
mov dword [esi + 0x298], esp
push eax
mov ecx, esp
mov dword [esi + 0x2a4], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445d40]
mov dword [esi + 0x2a0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x445d48
push eax
mov dword [esi + 0x2a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2cc], ecx
mov dword [ecx], 0x445d54
push eax
mov dword [esi + 0x2c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2bc], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445d60]
mov dword [esi + 0x2b8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x445d68
push eax
mov dword [esi + 0x2c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x445d74
push eax
mov dword [esi + 0x2d4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2d8], ecx
mov dword [ecx], 0x445d80
push eax
mov dword [esi + 0x2d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2e4], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445d8c]
mov dword [esi + 0x2e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2ec], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445d94]
mov dword [esi + 0x2e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445d9c]
mov dword [esi + 0x2f0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x445da4
push eax
mov dword [esi + 0x2f8], esp
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445db0]
mov dword [esi + 0x300], ecx
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x445db8
push eax
mov dword [esi + 0x308], esp
push eax
mov ecx, esp
mov dword [esi + 0x340], ecx
mov dword [ecx], 0x445dc4
push eax
mov dword [esi + 0x338], esp
push eax
mov ecx, esp
mov dword [esi + 0x330], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445dd0]
mov dword [esi + 0x32c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x33c], ecx
mov dword [ecx], 0x445dd8
push eax
mov dword [esi + 0x334], esp
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], 0x445de4
push eax
mov dword [esi + 0x34c], esp
push eax
mov ecx, esp
mov dword [esi + 0x348], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445df0]
mov dword [esi + 0x344], ecx
push eax
mov ecx, esp
mov dword [esi + 0x360], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445df8]
mov dword [esi + 0x358], ecx
push eax
mov ecx, esp
mov dword [esi + 0x368], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e00]
mov dword [esi + 0x364], ecx
push eax
mov ecx, esp
mov dword [esi + 0x370], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e08]
mov dword [esi + 0x36c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x378], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e10]
mov dword [esi + 0x374], ecx
push eax
mov ecx, esp
mov dword [esi + 0x384], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e18]
mov dword [esi + 0x37c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x388], ecx
mov dword [ecx], 0x445e20
push eax
mov dword [esi + 0x380], esp
push eax
mov ecx, esp
mov dword [esi + 0x390], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e2c]
mov dword [esi + 0x38c], ecx
push eax
mov ecx, esp
mov dword [esi + 0x39c], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e34]
mov dword [esi + 0x394], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a4], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e3c]
mov dword [esi + 0x3a0], ecx
push eax
mov edi, esp
mov dword [edi], 0x445e44
push eax
mov dword [esi + 0x3a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c0], ecx
mov dword [ecx], 0x445e50
push eax
mov dword [esi + 0x3b8], esp
push eax
mov ecx, esp
mov dword [esi + 0x3b4], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e5c]
mov dword [esi + 0x3b0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x445e64
push eax
mov dword [esi + 0x3bc], esp
push eax
mov ecx, esp
mov dword [esi + 0x3d4], ecx
mov dword [ecx], 0x445e70
push eax
mov dword [esi + 0x3d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x3cc], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e7c]
mov dword [esi + 0x3c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e84]
mov dword [esi + 0x3d8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3e4], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e8c]
mov dword [esi + 0x3e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3ec], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e94]
mov dword [esi + 0x3e8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3f4], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445e9c]
mov dword [esi + 0x3f0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3fc], ecx
mov dword [ecx], 0x445550
mov ecx, dword [0x445ea4]
mov dword [esi + 0x3f8], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x445550
mov edx, dword [0x445eac]
push eax
mov ebx, esp
mov dword [esi + 0x290], ebx
mov dword [ebx], 0x445550
mov ebx, dword [0x445eb4]
mov dword [esi + 0x28c], ebx
push eax
mov ebx, esp
mov dword [esi + 0x2b4], ebx
mov dword [ebx], 0x445550
mov ebx, dword [0x445ebc]
mov dword [esi + 0x2b0], ebx
push eax
mov ebx, esp
mov dword [esi + 0x318], ebx
mov dword [ebx], 0x445550
mov ebx, dword [0x445ec4]
mov dword [esi + 0x314], ebx
push eax
mov ebx, esp
mov dword [esi + 0x320], ebx
mov dword [ebx], 0x445550
mov ebx, dword [0x445ecc]
mov dword [esi + 0x31c], ebx
push eax
mov ebx, esp
mov dword [esi + 0x35c], ebx
mov dword [ebx], 0x445550
mov ebx, dword [0x445ed4]
mov dword [esi + 0x354], ebx
push eax
mov ebx, esp
mov dword [esi + 0x398], ebx
mov dword [ebx], 0x445550
mov ebx, dword [0x445edc]
jmp eax