Function at 0x431850
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x468
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x44c11c]
mov dword [esi + 0x41c], ecx
mov cl, byte [esi + 0x148]
mov byte [esi + 0x154], cl
mov byte [esi + 0x14c], 0x18
mov byte [esi + 0x14d], 0x19
mov byte [esi + 0x14e], 0x14
mov byte [esi + 0x14f], 0x94
mov ecx, 4
mov byte [esi + ecx + 0x14c], 0
add ecx, 1
cmp ecx, 6
jne 0x43189d
xor ecx, ecx
cmp ecx, 6
jae 0x4318e5
movzx edi, byte [esi + ecx + 0x14c]
mov edx, ecx
add edx, 0x86
mov ebx, edi
xor ebx, 0xffffffff
and edx, ebx
mov ebx, 0x79
sub ebx, ecx
and ebx, edi
or edx, ebx
add dl, 0x62
mov byte [esi + ecx + 0x14c], dl
add ecx, 1
jmp 0x4318af
mov ecx, dword [esi + 0x14c]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov ecx, eax
add ecx, 0x10
mov dword [esi + 0x40], ecx
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x2a8], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x328], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x378], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0x144], 0
sub esp, 0x14
lea eax, [esi + 0x144]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x446a18
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x446a28
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x418], eax
mov eax, dword [esi + 0x41c]
mov ecx, dword [esi + 0x418]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x22c], eax
push eax
mov eax, esp
mov dword [esi + 0x234], eax
mov dword [eax], 0x44c124
push eax
mov dword [esi + 0x230], esp
push eax
mov eax, esp
mov dword [esi + 0x23c], eax
mov dword [eax], 0x44c12c
push eax
mov dword [esi + 0x238], esp
push eax
mov eax, esp
mov dword [esi + 0x244], eax
mov dword [eax], 0x44c134
push eax
mov dword [esi + 0x240], esp
push eax
mov eax, esp
mov dword [esi + 0x24c], eax
mov dword [eax], 0x44c13c
push eax
mov dword [esi + 0x248], esp
push eax
mov eax, esp
mov dword [esi + 0x268], eax
mov dword [eax], 0x44c144
push eax
mov dword [esi + 0x25c], esp
push eax
mov eax, esp
mov dword [esi + 0x260], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x254], eax
mov dword [eax], 0x52
push eax
mov eax, esp
mov dword [esi + 0x258], eax
mov dword [eax], 0x44c14c
push eax
mov dword [esi + 0x250], esp
push eax
mov eax, esp
mov dword [esi + 0x274], eax
mov dword [eax], 0x44c154
push eax
mov dword [esi + 0x270], esp
push eax
mov eax, esp
mov dword [esi + 0x26c], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x264], eax
mov dword [eax], 0x55
push eax
mov eax, esp
mov dword [esi + 0x284], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x27c], eax
mov dword [eax], 0x56
push eax
mov eax, esp
mov dword [esi + 0x280], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x278], eax
mov dword [eax], 0x57
push eax
mov eax, esp
mov dword [esi + 0x294], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x290], eax
mov dword [eax], 0x58
push eax
mov eax, esp
mov dword [esi + 0x28c], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x288], eax
mov dword [eax], 0x59
push eax
mov eax, esp
mov dword [esi + 0x29c], eax
mov dword [eax], 0x44c15c
push eax
mov dword [esi + 0x298], esp
push eax
mov eax, esp
mov dword [esi + 0x2c8], eax
mov dword [eax], 0x44c164
push eax
mov dword [esi + 0x2c0], esp
push eax
mov eax, esp
mov dword [esi + 0x2c4], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x2bc], eax
mov dword [eax], 0x5c
push eax
mov eax, esp
mov dword [esi + 0x2b8], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x2b4], eax
mov dword [eax], 0x5d
push eax
mov eax, esp
mov dword [esi + 0x2b0], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x2ac], eax
mov dword [eax], 0x5e
push eax
mov eax, esp
mov dword [esi + 0x2e8], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x2e0], eax
mov dword [eax], 0x5f
push eax
mov eax, esp
mov dword [esi + 0x2e4], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x2d0], eax
mov dword [eax], 0x60
push eax
mov eax, esp
mov dword [esi + 0x2dc], eax
mov dword [eax], 0x44c16c
push eax
mov dword [esi + 0x2d4], esp
push eax
mov eax, esp
mov dword [esi + 0x2d8], eax
mov dword [eax], 0x44c174
push eax
mov dword [esi + 0x2cc], esp
push eax
mov eax, esp
mov dword [esi + 0x2f8], eax
mov dword [eax], 0x44c17c
push eax
mov dword [esi + 0x2f4], esp
push eax
mov eax, esp
mov dword [esi + 0x2f0], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x2ec], eax
mov dword [eax], 0x64
push eax
mov eax, esp
mov dword [esi + 0x300], eax
mov dword [eax], 0x44c184
push eax
mov dword [esi + 0x2fc], esp
push eax
mov eax, esp
mov dword [esi + 0x410], eax
mov dword [eax], 0x44c18c
push eax
mov dword [esi + 0x408], esp
push eax
mov ecx, esp
mov dword [esi + 0x40c], ecx
mov dword [ecx], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x3fc], ecx
mov dword [ecx], 0x67
push eax
mov ecx, esp
mov dword [esi + 0x3f8], ecx
mov dword [ecx], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x3e8], eax
mov dword [eax], 0x68
push eax
mov eax, esp
mov dword [esi + 0x3e4], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x3c4], eax
mov dword [eax], 0x69
push eax
mov eax, esp
mov dword [esi + 0x3f0], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x3cc], eax
mov dword [eax], 0x6a
push eax
mov eax, esp
mov dword [esi + 0x3d4], eax
mov dword [eax], 0x44c194
push eax
mov dword [esi + 0x3c0], esp
push eax
mov ecx, esp
mov dword [esi + 0x400], ecx
mov dword [ecx], 0x44c19c
push eax
mov dword [esi + 0x3ec], esp
push eax
mov eax, esp
mov dword [esi + 0x3e0], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [esi + 0x3bc], eax
mov dword [eax], 0x6d
push eax
mov eax, esp
mov dword [esi + 0x3c8], eax
mov dword [eax], 0x44c1a4
push eax
mov dword [esi + 0x3b0], esp
push eax
mov eax, esp
mov dword [esi + 0x414], eax
mov dword [eax], 0x44c1ac
push eax
mov dword [esi + 0x404], esp
push eax
mov eax, esp
mov dword [esi + 0x3f4], eax
mov dword [eax], 0x44ba00
push eax
mov eax, esp
mov dword [eax], 0x70
push eax
mov ebx, esp
mov dword [esi + 0x3d8], ebx
mov dword [ebx], 0x44ba00
push eax
mov ebx, esp
mov dword [esi + 0x3b8], ebx
mov dword [ebx], 0x71
push eax
mov ebx, esp
mov dword [esi + 0x3b4], ebx
mov dword [ebx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x398], edx
mov dword [edx], 0x72
push eax
mov ebx, esp
mov dword [esi + 0x3a8], ebx
mov dword [ebx], 0x44c1b4
push eax
mov dword [esi + 0x394], esp
push eax
mov ebx, esp
mov dword [ebx], 0x44c1bc
push eax
mov dword [esi + 0x3ac], esp
push eax
mov edx, esp
mov dword [esi + 0x3a4], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x388], edx
mov dword [edx], 0x75
push eax
mov edx, esp
mov dword [esi + 0x384], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x364], edx
mov dword [edx], 0x76
push eax
mov edx, esp
mov dword [esi + 0x360], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x344], edx
mov dword [edx], 0x77
push eax
mov edx, esp
mov dword [esi + 0x348], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x338], edx
mov dword [edx], pe_nt_image_headers32
push eax
mov edx, esp
mov dword [esi + 0x33c], edx
mov dword [edx], 0x44c1c4
push eax
mov dword [esi + 0x334], esp
push eax
mov edx, esp
mov dword [esi + 0x39c], edx
mov dword [edx], 0x44c1cc
push eax
mov dword [esi + 0x38c], esp
push eax
mov edx, esp
mov dword [esi + 0x374], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x354], edx
mov dword [edx], 0x7b
push eax
mov edx, esp
mov dword [esi + 0x368], edx
mov dword [edx], 0x44c1d4
push eax
mov dword [esi + 0x34c], esp
push eax
mov edx, esp
mov dword [esi + 0x390], edx
mov dword [edx], 0x44c1dc
push eax
mov dword [esi + 0x36c], esp
push eax
mov edx, esp
mov dword [esi + 0x35c], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x340], edx
mov dword [edx], 0x7e
push eax
mov edx, esp
mov dword [esi + 0x370], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x350], edx
mov dword [edx], 0x7f
push eax
mov edx, esp
mov dword [esi + 0x37c], edx
mov dword [edx], 0x44ba00
push eax
mov edx, esp
mov dword [esi + 0x358], edx
mov dword [edx], 0x80
push eax
mov edx, esp
mov dword [edx], 0x44ba00
push eax
mov edi, esp
mov dword [esi + 0x380], edi
mov dword [edi], 0x81
push eax
mov ecx, esp
mov dword [esi + 0x228], ecx
mov dword [ecx], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x224], ecx
mov dword [ecx], 0x53
push eax
mov ecx, esp
mov dword [esi + 0x2a4], ecx
mov dword [ecx], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x62
push eax
mov ecx, esp
mov dword [esi + 0x308], ecx
mov dword [ecx], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x6b
push eax
mov ecx, esp
mov dword [esi + 0x310], ecx
mov dword [ecx], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x6e
push eax
mov ecx, esp
mov dword [esi + 0x318], ecx
mov dword [ecx], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x314], ecx
mov dword [ecx], 0x73
push eax
mov ecx, esp
mov dword [esi + 0x324], ecx
mov dword [ecx], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x79
push eax
mov edi, esp
mov dword [edi], 0x44ba00
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x7c
jmp dword [esi + 0x22c]