Function at 0x433ee0
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa0
mov edi, dword [ebp + 8]
mov eax, dword [0x44a878]
mov dword [esp + 0x18], 0xf94ffbdf
mov dword [esp + 0x1c], 0xfd6bff77
mov dword [esp + 0x20], 0xf169f368
mov dword [esp + 0x24], 0xf532f763
mov dword [esp + 0x28], 0xe975eb62
mov dword [esp + 0x2c], 0xed75ef62
mov dword [esp + 0x30], 0xe1e2e337
mov byte [esp + 0x34], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x7f
xor dl, byte [esp + ecx + 0x18]
add dl, 0x85
mov byte [esp + ecx + 0x18], dl
inc ecx
cmp ecx, 0x1d
jne 0x433f40
lea ecx, [esp + 8]
lea ebx, [esp + 0x68]
lea esi, [esp + 0x18]
push ecx
push 8
push ebx
push 0xd
push esi
push 0
call eax
test eax, eax
jns 0x433f79
mov dword [esp + 0x68], 0x3a0043
mov dword [esp + 0x6c], 0x5c
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 0x50], 0
lea eax, [esp + 0x50]
push eax
push 0x440670
push 1
push 0
push 0x440680
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x434548
mov dword [esp + 0x18], 0x13c511c2
mov dword [esp + 0x1c], 0xef42ed3b
mov dword [esp + 0x20], 0xeb29e94c
mov dword [esp + 0x24], 0xe733e53d
mov dword [esp + 0x28], 0xe310e14e
mov dword [esp + 0x2c], 0xfdfc
xor eax, eax
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x18]
mov esi, eax
and esi, 0xe
xor esi, 0x49922c0e
mov edx, eax
and edx, 0x11
sub edx, esi
add edx, 0x32a3020a
mov esi, ecx
and esi, edx
add esi, esi
sub edx, esi
add dl, cl
add dl, 0x14
mov byte [esp + eax + 0x18], dl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x18
jb 0x434000
lea esi, [esp + 0x18]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x4c]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [esp + 0xa0], ebx
push ebx
push eax
call dword [ecx + 0xc]
test eax, eax
lea ebx, [esp + 0x68]
js 0x434531
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x68]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x434527
mov dword [esp + 0x18], 0x69dd6bdd
mov dword [esp + 0x1c], 0x6d6e6fa4
mov word [esp + 0x20], 0
mov byte [esp + 0x22], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, eax
xor esi, 0x69
lea ecx, [eax + eax]
mov edx, ecx
and edx, 0xc
sub edx, esi
xor dl, byte [esp + eax + 0x18]
add dl, 0xd
mov byte [esp + eax + 0x18], dl
and ecx, 2
xor eax, 1
add eax, ecx
cmp eax, 0xb
jb 0x4340c0
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x58], eax
mov dword [esp + 0x18], 0x39713b81
mov dword [esp + 0x1c], 0x256d278c
mov dword [esp + 0x20], 0x219e2369
mov dword [esp + 0x24], 0x2d782f40
mov dword [esp + 0x28], 0x29602b4c
mov dword [esp + 0x2c], 0x15a71796
mov dword [esp + 0x30], 0x117213a7
mov dword [esp + 0x34], 0x1d891fa9
mov dword [esp + 0x38], 0x19471b8e
mov dword [esp + 0x3c], 0x5a70746
mov dword [esp + 0x40], 0x1b5034a
mov dword [esp + 0x44], 0xdb30fb1
mov dword [esp + 0x48], 0xb0c
mov eax, 0x49056d0b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x49056cf3]
lea edx, [eax - 0x49056d00]
and edx, ecx
mov esi, eax
and esi, ecx
xor ecx, eax
lea esi, [ecx + esi*2]
add edx, edx
sub esi, edx
mov ecx, esi
xor ecx, 0x37
or esi, 0x92e4dec8
and ecx, esi
add ecx, esi
inc cl
mov byte [esp + eax - 0x49056cf3], cl
inc eax
cmp eax, 0x49056d3f
jne 0x434170
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x4c]
mov ecx, dword [esi]
lea edx, [esp + 0x64]
push edx
push 0
push 0x30
mov dword [esp + 0x8c], eax
push eax
push dword [esp + 0x68]
push esi
call dword [ecx + 0x50]
test eax, eax
js 0x43450e
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
lea edx, [esp + 0x5c]
lea esi, [esp + 0x60]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x434504
cmp eax, 1
je 0x434504
cmp dword [esp + 0x5c], 0
je 0x434504
lea eax, [esp + 0x88]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x18], 0x137f1163
mov dword [esp + 0x1c], 0x1f771d8e
mov dword [esp + 0x20], 0x1b8e1979
mov dword [esp + 0x24], 0x79b0572
mov dword [esp + 0x28], 0x3600195
mov dword [esp + 0x2c], 0xf9c0d61
mov word [esp + 0x30], 0x908
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
xor ecx, ecx
lea esi, [esp + 0x18]
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 4
xor dl, byte [esp + ecx + 0x18]
add dl, 0xec
mov byte [esp + ecx + 0x18], dl
inc ecx
cmp ecx, 0x20
jne 0x434280
mov ecx, dword [eax]
push 0
push 0
lea edx, [esp + 0x90]
push edx
push 0
push esi
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4344ec
cmp word [esp + 0x88], 8
jne 0x4344ec
mov eax, dword [esp + 0x90]
movzx ecx, word [eax]
test cx, cx
mov edi, eax
je 0x43430d
add eax, 2
xor esi, esi
jmp 0x4342ec
inc esi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x43430f
cmp cx, 0x7f
jbe 0x4342e0
movzx edx, cx
cmp edx, 0x7ff
ja 0x434302
add esi, 2
jmp 0x4342e1
cmp cx, 0xffff
je 0x4342e1
add esi, 3
jmp 0x4342e1
xor esi, esi
lea eax, [esi + 1]
push eax
call fcn.00408740
mov edx, edi
add esp, 4
mov edi, eax
mov dword [esp + 0x54], esi
test esi, esi
je 0x434494
movzx ecx, word [edx]
mov edi, eax
test cx, cx
je 0x434494
mov esi, dword [esp + 0x54]
mov edi, eax
mov dword [esp + 0x78], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + 4], edi
movzx ebx, cx
mov edi, edx
add edx, 2
cmp bx, 0x7f
ja 0x434370
mov edi, dword [esp + 4]
lea ecx, [edi + 1]
mov byte [edi], bl
jmp 0x434430
cmp ebx, 0x7ff
ja 0x43439c
cmp esi, 2
jb 0x43439c
mov ecx, ebx
shr ecx, 6
add cl, 0xc0
mov edi, dword [esp + 4]
mov byte [edi], cl
and bl, 0x3f
or bl, 0x80
lea ecx, [edi + 2]
mov byte [edi + 1], bl
jmp 0x434430
mov ecx, ebx
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x43444c
cmp esi, 4
jb 0x43444c
mov dword [esp + 0x7c], edi
movzx ecx, word [edi + 2]
shl ebx, 0xa
mov edx, ecx
xor edx, 0xdc00
and ecx, 0x23ff
add ecx, ecx
sub ecx, edx
lea edx, [ebx + ecx]
add edx, 0xfca10000
mov eax, edx
shr eax, 0x12
add al, 0xf0
mov edi, dword [esp + 4]
mov byte [edi], al
shr edx, 0xc
and dl, 0x3f
or dl, 0x80
mov byte [edi + 1], dl
mov eax, dword [esp + 0x78]
lea edx, [ebx + ecx]
add edx, 0xfca00000
shr edx, 6
and dl, 0x3f
or dl, 0x80
mov byte [edi + 2], dl
and cl, 0x3f
or cl, 0x80
mov byte [edi + 3], cl
lea ecx, [edi + 4]
mov edx, dword [esp + 0x7c]
add edx, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea ebx, [esp + 0x68]
add esi, edi
sub esi, ecx
mov edi, ecx
movzx ecx, word [edx]
test cx, cx
je 0x434494
test esi, esi
jne 0x434350
jmp 0x434494
movzx ecx, cx
cmp ecx, 0xdc00
jne 0x434461
lea ebx, [esp + 0x68]
mov edi, dword [esp + 4]
jmp 0x43443a
cmp esi, 3
mov edi, dword [esp + 4]
jb 0x434490
mov ecx, ebx
shr ecx, 0xc
or cl, 0xe0
mov byte [edi], cl
mov ecx, ebx
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [edi + 1], cl
and bl, 0x3f
or bl, 0x80
lea ecx, [edi + 3]
mov byte [edi + 2], bl
jmp 0x434430
mov ecx, edi
jmp 0x434430
mov byte [edi], 0
mov ecx, dword [eax]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x54]
mov edx, ecx
not edx
and edx, 4
and ecx, 0xfffffffb
sub ecx, edx
cmp ecx, 4
jb 0x4344e0
mov edx, dword [eax + 4]
mov dword [esp + 0xc], edx
mov edx, ecx
not edx
and edx, 4
and ecx, 0xfffffffb
sub ecx, edx
cmp ecx, 4
jb 0x4344e0
mov edx, dword [eax + 8]
mov dword [esp + 0x10], edx
and ecx, 0xfffffffc
cmp ecx, 4
je 0x4344e0
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x14], ecx
push eax
call fcn.00408750
add esp, 4
mov edi, dword [ebp + 8]
lea eax, [esp + 0x88]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x58]
call esi
push dword [esp + 0x80]
call esi
lea esi, [esp + 0x18]
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x84]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 0x18], 0
push 0x72a7c387
push dword [0x44a870]
call fcn.0043c370
add esp, 8
push 0
push 0
push 0
push 0
push esi
push 0
push 0
push ebx
call eax
test eax, eax
je 0x4346ae
imul eax, dword [esp + 0x18], 0x1a5845
add eax, 0xebde8a13
mov dword [esp + 8], eax
mov esi, 0xfffffff7
push 0x10
push 9
push edi
push eax
call fcn.00419fe0
add esp, 0x10
nop
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x4345a0
test esi, esi
je 0x4345be
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.004087d0
add esp, 0xc
lea eax, [edi + 8]
xor ecx, ecx
cmp dword [esp + 0xc], 0
setne cl
imul ecx, dword [esp + ecx*4 + 8], 0x1a5845
add ecx, 0xebde8a13
mov dword [esp + 0xc], ecx
mov esi, 0xfffffff7
push 0x10
push 9
push eax
push ecx
call fcn.00419fe0
add esp, 0x10
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x4345f0
test esi, esi
je 0x43460e
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.004087d0
add esp, 0xc
lea eax, [edi + 0x10]
xor ecx, ecx
cmp dword [esp + 0x10], 0
setne cl
imul ecx, dword [esp + ecx*4 + 0xc], 0x1a5845
add ecx, 0xebde8a13
mov dword [esp + 0x10], ecx
mov esi, 0xfffffff7
push 0x10
push 9
push eax
push ecx
call fcn.00419fe0
add esp, 0x10
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x434640
test esi, esi
je 0x43465e
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.004087d0
add esp, 0xc
add edi, 0x18
xor eax, eax
cmp dword [esp + 0x14], 0
setne al
imul eax, dword [esp + eax*4 + 0x10], 0x1a5845
add eax, 0xebde8a13
mov esi, 0xfffffff7
push 0x10
push 9
push edi
push eax
call fcn.00419fe0
add esp, 0x10
nop
nop
nop
nop
nop
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x434690
test esi, esi
je 0x4346ae
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.004087d0
add esp, 0xc
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret