Function at 0x4295a0
Capabilities:
Connect to wmi namespace via wbemlocator
Get os information via kuser_shared_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x4d8
mov eax, dword [ebp + 8]
mov dword [esp + 0x4ac], 0x4479e0
mov ecx, dword [0x7ffe026c]
mov dword [eax], ecx
mov ecx, dword [0x7ffe0270]
mov dword [eax + 4], ecx
mov ecx, dword [0x7ffe0260]
mov dword [eax + 8], ecx
mov ecx, dword [0x7ffe0264]
sub ecx, 2
sete byte [eax + 0xc]
mov ebx, eax
add ebx, 0x10
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esp + 0x1b8], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esp + 0x20c], ecx
mov word [eax + 0x28], 0
mov edi, eax
add edi, 0x2a
mov byte [eax + 0x2a], 0
mov dword [esp + 0x124], 0
lea eax, [esp + 0x124]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x442a08
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x442a18
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x4a8], eax
mov eax, dword [esp + 0x4ac]
mov ecx, dword [esp + 0x4a8]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x4a4], 0x4479e8
mov dword [esp + 0x49c], 0x4479f0
mov dword [esp + 0x494], 0x4479f8
mov dword [esp + 0x48c], 0x447a00
mov dword [esp + 0x484], 0x447a08
mov dword [esp + 0x47c], 0x447a10
mov dword [esp + 0x474], 0x446fe0
mov dword [esp + 0x470], 0xee
mov dword [esp + 0x46c], 0x447a18
mov dword [esp + 0x464], 0x447a20
mov dword [esp + 0x45c], 0x446fe0
mov dword [esp + 0x458], 0xf1
mov dword [esp + 0x454], 0x447a28
mov dword [esp + 0x44c], 0x447a30
mov dword [esp + 0x444], 0x447a38
mov dword [esp + 0x43c], 0x447a40
mov dword [esp + 0x434], 0x447a48
mov dword [esp + 0x42c], 0x447a50
mov dword [esp + 0x424], 0x447a58
mov dword [esp + 0x41c], 0x446fe0
mov dword [esp + 0x418], 0xf9
mov dword [esp + 0x414], 0x446fe0
mov dword [esp + 0x410], 0xfa
mov dword [esp + 0x40c], 0x447a60
mov dword [esp + 0x404], 0x447a68
mov dword [esp + 0x3fc], 0x446fe0
mov dword [esp + 0x3f8], 0xfd
mov dword [esp + 0x3f4], 0x447a70
mov dword [esp + 0x3ec], 0x447a78
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x3e0], 0x100
mov dword [esp + case.0x428b0d.60], 0x447a80
mov dword [esp + case.0x428b0d.62], 0x447a88
mov dword [esp + case.0x428b0d.64], 0x447a90
mov dword [esp + case.0x428b0d.66], 0x447a98
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x3b8], 0x105
mov dword [esp + case.0x428b0d.68], 0x447aa0
mov dword [esp + case.0x428b0d.69], 0x447aa8
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x3a0], 0x108
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x398], 0x109
mov dword [esp + case.0x428b0d.72], 0x447ab0
mov dword [esp + case.0x428b0d.74], 0x447ab8
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x380], 0x10c
mov dword [esp + case.0x428b0d.76], 0x447ac0
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x370], 0x10e
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x368], 0x10f
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x360], 0x110
mov dword [esp + case.0x428b0d.78], 0x447ac8
mov dword [esp + case.0x428b0d.80], 0x447ad0
mov dword [esp + case.0x428b0d.82], 0x447ad8
mov dword [esp + case.0x428b0d.84], 0x447ae0
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x338], 0x115
mov dword [esp + case.0x428b0d.86], 0x447ae8
mov dword [esp + case.0x428b0d.88], 0x447af0
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x320], 0x118
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x318], 0x119
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x310], 0x11a
mov dword [esp + case.0x428b0d.90], 0x447af8
mov dword [esp + case.0x428b0d.90], 0x447b00
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2f8], 0x11d
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2f0], 0x11e
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2e8], 0x11f
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2e0], 0x120
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2d8], 0x121
mov dword [esp + case.0x428b0d.94], 0x447b08
mov dword [esp + case.0x428b0d.94], 0x447b10
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2c0], 0x124
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2b8], 0x125
mov dword [esp + case.0x428b0d.98], 0x447b18
mov dword [esp + case.0x428b0d.100], 0x447b20
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x2a0], 0x128
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x298], 0x129
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x290], 0x12a
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x288], 0xe8
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x280], 0xec
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x278], 0xef
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x270], 0xf2
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x268], 0xf6
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x260], 0xfb
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x258], 0xfe
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x250], 0x102
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x248], 0x106
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x240], 0x10a
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x238], 0x113
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x230], 0x116
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x228], 0x11b
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x220], 0x122
mov dword [esp + case.0x422a93.42], 0x446fe0
mov dword [esp + 0x218], 0x126
jmp eax