Function at 0x4327b0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2f0
mov dword [esp + 0x2c4], 0x448bc8
mov dword [esp + 0x30], 0
lea eax, [esp + 0x30]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435d8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435e8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2c0], eax
mov eax, dword [esp + 0x2c4]
mov ecx, dword [esp + 0x2c0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448bd0]
xor ecx, 0x8d5f07d0
sub eax, ecx
mov dword [esp + 0x2bc], 0x4481d0
mov esi, dword [0x448bd4]
mov dword [esp + 0x2b8], 0x448bdc
mov dword [esp + 0x2b0], 0x448be8
mov dword [esp + 0x2a8], 0x448bf4
mov dword [esp + 0x2a0], 0x4481d0
mov ecx, dword [0x448c00]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x29c], 0x4481d0
mov ecx, dword [0x448c08]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x298], 0x448c10
mov dword [esp + 0x290], 0x448c1c
mov dword [esp + 0x288], 0x4481d0
mov ecx, dword [0x448c28]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x284], 0x448c30
mov dword [esp + 0x27c], 0x448c3c
mov dword [esp + 0x274], 0x448c48
mov dword [esp + 0x26c], 0x4481d0
mov edi, dword [0x448c54]
mov dword [esp + 0x268], 0x448c5c
mov dword [esp + 0x260], 0x448c68
mov dword [esp + 0x258], 0x4481d0
mov ecx, dword [0x448c74]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x254], 0x448c7c
mov dword [esp + 0x24c], 0x448c88
mov dword [esp + 0x244], 0x448c94
mov dword [esp + 0x23c], 0x448ca0
mov dword [esp + 0x234], 0x4481d0
mov ecx, dword [0x448cac]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x230], 0x4481d0
mov ecx, dword [0x448cb4]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x22c], 0x448cbc
mov dword [esp + 0x224], 0x448cc8
mov dword [esp + 0x21c], 0x4481d0
mov ecx, dword [0x448cd4]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x218], 0x448cdc
mov dword [esp + 0x210], 0x4481d0
mov ecx, dword [0x448ce8]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x20c], 0x448cf0
mov dword [esp + 0x204], 0x4481d0
mov ecx, dword [0x448cfc]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x200], 0x448d04
mov dword [esp + 0x1f8], 0x448d10
mov dword [esp + 0x1f0], 0x4481d0
mov ecx, dword [0x448d1c]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x1ec], 0x4481d0
mov ecx, dword [0x448d24]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x1e8], 0x448d2c
mov dword [esp + 0x1e0], 0x4481d0
mov ecx, dword [0x448d38]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x1dc], 0x4481d0
mov ecx, dword [0x448d40]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x1d8], 0x448d48
mov dword [esp + 0x1d0], 0x448d54
mov dword [esp + 0x1c8], 0x4481d0
mov ecx, dword [0x448d60]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x1c4], 0x448d68
mov dword [esp + 0x1bc], 0x448d74
mov dword [esp + 0x1b4], 0x4481d0
mov ecx, dword [0x448d80]
mov dword [esp + 0x1b0], 0x4481d0
mov edx, dword [0x448d88]
mov dword [esp + 0x120], edx
mov dword [esp + 0x1ac], 0x4481d0
mov edx, dword [0x448d90]
mov dword [esp + 0x154], edx
mov dword [esp + 0x1a8], 0x4481d0
mov edx, dword [0x448d98]
mov dword [esp + 0x150], edx
mov dword [esp + 0x1a4], 0x4481d0
mov edx, dword [0x448da0]
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1a0], 0x4481d0
mov edx, dword [0x448da8]
mov dword [esp + 0x148], edx
mov dword [esp + 0x19c], 0x4481d0
mov edx, dword [0x448db0]
mov dword [esp + 0x144], edx
mov dword [esp + 0x198], 0x4481d0
mov edx, dword [0x448db8]
mov dword [esp + 0x184], edx
mov dword [esp + 0x194], 0x4481d0
xor ebx, ebx
mov edx, dword [0x448dc0]
mov dword [esp + 0x18c], edx
jmp eax