Function at 0x431270
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x310
mov dword [esp + 0x2f4], 0x448a9c
mov dword [esp + 0xc4], 0
lea eax, [esp + 0xc4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435d8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435e8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x2f0], eax
mov eax, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2f0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448aa4]
mov edx, ecx
and edx, 0x368330
add edx, edx
sub edx, ecx
lea eax, [edx + eax - 0x368330]
mov dword [esp + 0x2ec], 0x448aa8
mov dword [esp + 0x2e4], 0x448ab4
mov dword [esp + 0x2dc], 0x447f90
mov ecx, dword [0x448ac0]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x2d8], 0x448ac8
mov dword [esp + 0x2d0], 0x448ad4
mov dword [esp + 0x2c8], 0x448ae0
mov dword [esp + 0x2c0], 0x448aec
mov dword [esp + 0x2b8], 0x448af8
mov dword [esp + 0x2b0], 0x448b04
mov dword [esp + 0x2a8], 0x448b10
mov dword [esp + 0x2a0], 0x447f90
mov ecx, dword [0x448b1c]
mov dword [esp + 0x150], ecx
mov dword [esp + 0x29c], 0x448b24
mov dword [esp + 0x294], 0x448b30
mov dword [esp + 0x28c], 0x448b3c
mov dword [esp + 0x284], 0x447f90
mov ecx, dword [0x448b48]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x280], 0x447f90
mov ecx, dword [0x448b50]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x27c], 0x448b58
mov dword [esp + 0x274], 0x448b64
mov dword [esp + 0x26c], 0x448b70
mov dword [esp + 0x264], 0x448b7c
mov dword [esp + 0x25c], 0x447f90
mov ecx, dword [0x448b88]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x258], 0x447f90
mov ecx, dword [0x448b90]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x254], 0x448b98
mov dword [esp + 0x24c], 0x448ba4
mov dword [esp + 0x244], 0x448bb0
mov dword [esp + 0x23c], 0x447f90
mov ecx, dword [0x448bbc]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x238], 0x448bc4
mov dword [esp + 0x230], 0x448bd0
mov dword [esp + 0x228], 0x448bdc
mov dword [esp + 0x220], 0x448be8
mov dword [esp + 0x218], 0x448bf4
mov dword [esp + 0x210], 0x447f90
mov ecx, dword [0x448c00]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x20c], 0x447f90
mov ecx, dword [0x448c08]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x208], 0x447f90
mov ecx, dword [0x448c10]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x204], 0x448c18
mov dword [esp + 0x1fc], 0x447f90
mov ecx, dword [0x448c24]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x1f8], 0x447f90
mov ecx, dword [0x448c2c]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x1f4], 0x448c34
mov dword [esp + 0x1ec], 0x448c40
mov dword [esp + 0x1e4], 0x447f90
mov ecx, dword [0x448c4c]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x1e0], 0x447f90
mov ecx, dword [0x448c54]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x1dc], 0x447f90
mov edx, dword [0x448c5c]
mov dword [esp + 0x1d8], 0x448c64
mov dword [esp + 0x1d0], 0x448c70
mov dword [esp + 0x1c8], 0x447f90
mov esi, dword [0x448c7c]
mov dword [esp + 0x1c4], 0x447f90
mov ecx, dword [0x448c84]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x1c0], 0x447f90
mov ecx, dword [0x448c8c]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x1bc], 0x447f90
mov ecx, dword [0x448c94]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x1b8], 0x447f90
mov ecx, dword [0x448c9c]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x1b4], 0x447f90
mov ecx, dword [0x448ca4]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x1b0], 0x447f90
mov ecx, dword [0x448cac]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x1ac], 0x447f90
mov ecx, dword [0x448cb4]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x1a8], 0x447f90
mov ecx, dword [0x448cbc]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x1a4], 0x447f90
xor edi, edi
mov ecx, dword [str._e_3]
mov dword [esp + 0x1a0], ecx
jmp eax