Function at 0x431550
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x308
mov dword [esp + 0x2ec], 0x448a48
mov dword [esp + 0xc4], 0
lea eax, [esp + 0xc4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435d8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435e8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2e8], eax
mov eax, dword [esp + 0x2ec]
mov ecx, dword [esp + 0x2e8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448a50]
xor ecx, 0xfa85fd80
sub eax, ecx
mov dword [esp + 0x2e4], 0x448a54
mov dword [esp + 0x2dc], 0x448a60
mov dword [esp + 0x2d4], 0x448a6c
mov dword [esp + 0x2cc], 0x4480f0
mov ecx, dword [0x448a78]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x2c8], 0x448a80
mov dword [esp + 0x2c0], 0x448a8c
mov dword [esp + 0x2b8], 0x448a98
mov dword [esp + 0x2b0], 0x4480f0
mov ecx, dword [0x448aa4]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x2ac], 0x4480f0
mov ecx, dword [0x448aac]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x2a8], 0x448ab4
mov dword [esp + 0x2a0], 0x448ac0
mov dword [esp + 0x298], 0x4480f0
mov ecx, dword [0x448acc]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x294], 0x448ad4
mov dword [esp + 0x28c], 0x448ae0
mov dword [esp + 0x284], 0x4480f0
mov ecx, dword [0x448aec]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x280], 0x448af4
mov dword [esp + 0x278], 0x448b00
mov dword [esp + 0x270], 0x448b0c
mov dword [esp + 0x268], 0x448b18
mov dword [esp + 0x260], 0x448b24
mov dword [esp + 0x258], 0x4480f0
mov ecx, dword [0x448b30]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x254], 0x448b38
mov dword [esp + 0x24c], 0x448b44
mov dword [esp + 0x244], 0x4480f0
mov ecx, dword [0x448b50]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x240], 0x4480f0
mov ecx, dword [0x448b58]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x23c], 0x448b60
mov dword [esp + 0x234], 0x448b6c
mov dword [esp + 0x22c], 0x448b78
mov dword [esp + 0x224], 0x4480f0
mov ecx, dword [0x448b84]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x220], 0x448b8c
mov dword [esp + 0x218], 0x448b98
mov dword [esp + 0x210], 0x4480f0
mov ecx, dword [0x448ba4]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x20c], 0x448bac
mov dword [esp + 0x204], 0x448bb8
mov dword [esp + 0x1fc], 0x4480f0
mov ecx, dword [0x448bc4]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x1f8], 0x448bcc
mov dword [esp + 0x1f0], 0x4480f0
mov edi, dword [0x448bd8]
mov dword [esp + 0x1ec], 0x448be0
mov dword [esp + 0x1e4], 0x448bec
mov dword [esp + 0x1dc], 0x4480f0
mov edx, dword [0x448bf8]
mov dword [esp + 0x1d8], 0x4480f0
mov ecx, dword [0x448c00]
mov dword [esp + 0x1d4], 0x4480f0
mov esi, dword [0x448c08]
mov dword [esp + 0x1d0], 0x4480f0
mov ebx, dword [0x448c10]
mov dword [esp + 0x170], ebx
mov dword [esp + 0x1cc], 0x4480f0
mov ebx, dword [0x448c18]
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x1c8], 0x4480f0
mov ebx, dword [0x448c20]
mov dword [esp + 0x168], ebx
mov dword [esp + 0x1c4], 0x4480f0
mov ebx, dword [0x448c28]
mov dword [esp + 0x164], ebx
mov dword [esp + 0x1c0], 0x4480f0
mov ebx, dword [0x448c30]
mov dword [esp + 0x160], ebx
mov dword [esp + 0x1bc], 0x4480f0
mov ebx, dword [0x448c38]
mov dword [esp + 0x15c], ebx
mov dword [esp + 0x1b8], 0x4480f0
mov ebx, dword [0x448c40]
mov dword [esp + 0x158], ebx
mov dword [esp + 0x1b4], 0x4480f0
mov ebx, dword [0x448c48]
mov dword [esp + 0x154], ebx
mov dword [esp + 0x1b0], 0x4480f0
mov ebx, dword [0x448c50]
mov dword [esp + 0x1a0], ebx
xor ebx, ebx
jmp eax