Function at 0x432a60
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa8
mov eax, dword [ebp + 8]
mov dword [esp + 0x68], eax
mov eax, dword [0x448584]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], 0x9321917d
mov dword [esp + 0x24], 0x9f0d9d05
mov dword [esp + 0x28], 0x9b379904
mov dword [esp + 0x2c], 0x874a8511
mov dword [esp + 0x30], 0x832b8112
mov dword [esp + 0x34], 0x8f238d12
mov dword [esp + 0x38], 0x8b8a8965
mov byte [esp + 0x3c], 0
xor ebx, ebx
xor edx, edx
movzx ecx, byte [esp + edx + 0x20]
mov dword [esp + 4], ecx
mov eax, edx
xor eax, 0x64b8a970
mov esi, ebx
and esi, 0x1e
sub esi, eax
lea eax, [esi + 0x5e7c0454]
mov dword [esp + 8], eax
mov eax, 0xa183fbab
sub eax, esi
or eax, ecx
mov edi, 0xab
sub edi, esi
and edi, ecx
xor edi, eax
and edi, dword [esp + 8]
mov ecx, edi
and ecx, 0xfd
mov eax, edi
or eax, 0xfd
inc eax
imul eax, ecx
mov ecx, edi
and ecx, 2
or edi, 2
imul edi, ecx
sub eax, edi
add eax, esi
add eax, 0x5e7c0454
add al, byte [esp + 4]
add al, 0x8c
mov byte [esp + edx + 0x20], al
inc edx
add ebx, 2
cmp edx, 0x1d
jne 0x432ac0
lea eax, [esp + 0x58]
lea esi, [esp + 0x94]
lea edi, [esp + 0x20]
push eax
push 8
push esi
push 0xd
push edi
push 0
call dword [esp + 0x2c]
test eax, eax
jns 0x432b5e
mov dword [esp + 0x94], 0x3a0043
mov dword [esp + 0x98], 0x5c
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x1c], 0
lea eax, [esp + 0x1c]
push eax
push 0x43e670
push 1
push 0
push 0x43e680
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4330e8
mov dword [esp + 0x20], 0x519f4f9e
mov dword [esp + 0x24], 0x55865381
mov dword [esp + 0x28], 0x59935788
mov dword [esp + 0x2c], 0x5d955b93
mov dword [esp + 0x30], 0x616c5f8a
mov word [esp + 0x34], 0x6360
mov dword [esp + 0x36], 0
mov eax, 0x2f767972
mov ecx, edi
movzx esi, byte [ecx]
mov edx, eax
or edx, esi
lea edi, [eax - 0x2f767900]
and edi, esi
not edx
or edx, edi
mov esi, 1
sub esi, edx
not esi
or esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
add dl, 0x3e
mov byte [ecx], dl
inc ecx
dec eax
cmp eax, 0x2f767958
jne 0x432bf0
lea ebx, [esp + 0x20]
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
test eax, eax
js 0x4330cc
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x34]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x4330c2
mov dword [esp + 0x20], 0x590d5bed
mov dword [esp + 0x24], 0x5d5e5f04
mov word [esp + 0x28], 0
xor eax, eax
nop
mov ecx, eax
add cl, 0xef
xor cl, byte [esp + eax + 0x20]
add cl, 0x55
mov byte [esp + eax + 0x20], cl
inc eax
cmp eax, 0xa
jne 0x432c90
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 8], eax
mov dword [esp + 0x20], 0x59015b11
mov dword [esp + 0x24], 0x5d055f04
mov dword [esp + 0x28], 0x51065319
mov dword [esp + 0x2c], 0x55285730
mov dword [esp + 0x30], 0xa9f0ab34
mov dword [esp + 0x34], 0xadffaffe
mov dword [esp + 0x38], 0xa1c2a3ff
mov dword [esp + 0x3c], 0xa519a709
mov dword [esp + 0x40], 0xb9cfbb16
mov dword [esp + 0x44], 0xbd1fbfce
mov dword [esp + 0x48], 0xb1edb3fa
mov dword [esp + 0x4c], 0xb5e3b7e1
mov word [esp + 0x50], 0x8bb4
mov dword [esp + 0x52], 0
mov word [esp + 0x56], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xef
xor cl, byte [esp + eax + 0x20]
add cl, 0x55
mov byte [esp + eax + 0x20], cl
mov ecx, eax
and ecx, 1
and eax, 0x3e
mov edx, eax
xor edx, 0xfffffffe
xor eax, 0x3e
or eax, edx
not eax
add eax, ecx
cmp eax, 0x38
jb 0x432d30
mov dword [esp + 0x14], esi
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x18]
mov ecx, dword [esi]
lea edx, [esp + 0x74]
push edx
push 0
push 0x30
mov dword [esp + 0x88], eax
push eax
push dword [esp + 0x18]
push esi
call dword [ecx + 0x50]
test eax, eax
js 0x4330ac
mov dword [esp + 0x6c], 0
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
lea edx, [esp + 0x6c]
lea esi, [esp + 0x70]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4330a2
cmp eax, 1
je 0x4330a2
cmp dword [esp + 0x6c], 0
je 0x4330a2
lea esi, [esp + 0x80]
push esi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x20], 0x1e907d9
mov dword [esp + 0x24], 0xde903f2
mov dword [esp + 0x28], 0x9fa0fef
mov dword [esp + 0x2c], 0x15f50bde
mov dword [esp + 0x30], 0x11f417e3
mov dword [esp + 0x34], 0x1de013ff
mov word [esp + 0x38], 0x1f1c
mov dword [esp + 0x3a], 0
mov byte [esp + 0x3e], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xc1
xor dl, byte [esp + ecx + 0x20]
add dl, 0x3b
mov byte [esp + ecx + 0x20], dl
inc ecx
cmp ecx, 0x1f
jne 0x432e30
mov ecx, dword [eax]
push 0
push 0
push esi
push 0
push ebx
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x433091
cmp word [esp + 0x80], 8
jne 0x433091
mov esi, dword [esp + 0x88]
movzx ecx, word [esi]
test cx, cx
je 0x432ebd
lea eax, [esi + 2]
xor ebx, ebx
jmp 0x432e9c
inc ebx
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x432ebf
cmp cx, 0x7f
jbe 0x432e90
movzx edx, cx
cmp edx, 0x7ff
ja 0x432eb2
add ebx, 2
jmp 0x432e91
cmp cx, 0xffff
je 0x432e91
add ebx, 3
jmp 0x432e91
xor ebx, ebx
lea eax, [ebx + 1]
push eax
call fcn.00408770
add esp, 4
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
test ebx, ebx
je 0x433031
movzx eax, word [esi]
mov ecx, dword [esp + 0xc]
mov dword [esp + 4], ecx
test ax, ax
je 0x433031
mov edx, ebx
mov ecx, dword [esp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 0x10], ebx
nop
nop
nop
movzx eax, ax
lea ecx, [esi + 2]
cmp ax, 0x7f
ja 0x432f20
mov esi, dword [esp + 4]
lea edi, [esi + 1]
mov byte [esi], al
jmp 0x432f48
cmp eax, 0x7ff
ja 0x432f69
cmp edx, 2
jb 0x432f69
mov ebx, eax
shr ebx, 6
add bl, 0xc0
mov esi, dword [esp + 4]
mov byte [esi], bl
mov ebx, dword [esp + 0x10]
and al, 0x3f
or al, 0x80
lea edi, [esi + 2]
mov byte [esi + 1], al
mov eax, esi
mov esi, ecx
add edx, eax
sub edx, edi
mov dword [esp + 4], edi
movzx eax, word [esi]
test ax, ax
je 0x433031
test edx, edx
jne 0x432f00
jmp 0x433031
mov edi, eax
and edi, 0xfc00
cmp edi, 0xd800
jne 0x432fdc
cmp edx, 4
jb 0x432fdc
movzx ecx, word [esi + 2]
mov dword [esp + 0x78], ecx
shl eax, 0xa
lea ebx, [eax + ecx]
add ebx, 0xfca02400
mov eax, ebx
shr eax, 0x12
add al, 0xf0
mov ecx, dword [esp + 4]
mov byte [ecx], al
mov edi, ebx
shr edi, 0xc
mov eax, edi
not eax
or eax, 0x3f
add eax, edi
add al, 0x81
mov byte [ecx + 1], al
mov eax, ecx
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [ecx + 2], bl
mov ebx, dword [esp + 0x10]
add esi, 4
mov ecx, dword [esp + 0x78]
and cl, 0x3f
or cl, 0x80
mov byte [eax + 3], cl
lea edi, [eax + 4]
jmp 0x432f4c
movzx esi, di
cmp esi, 0xdc00
jne 0x432fee
mov esi, ecx
jmp 0x432f54
cmp edx, 3
mov esi, ecx
jb 0x433026
mov ebx, eax
shr ebx, 0xc
or bl, 0xe0
mov ecx, dword [esp + 4]
mov byte [ecx], bl
mov ebx, eax
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [ecx + 1], bl
mov ebx, dword [esp + 0x10]
and al, 0x3f
or al, 0x80
mov byte [ecx + 2], al
mov eax, ecx
lea edi, [ecx + 3]
jmp 0x432f4c
mov eax, dword [esp + 4]
mov edi, eax
jmp 0x432f4c
mov eax, dword [esp + 4]
mov byte [eax], 0
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov dword [esp + 0x58], eax
mov eax, ebx
not eax
and eax, 4
and ebx, 0xfffffffb
sub ebx, eax
cmp ebx, 4
jb 0x433081
mov eax, dword [ecx + 4]
mov dword [esp + 0x5c], eax
mov eax, ebx
not eax
and eax, 4
and ebx, 0xfffffffb
sub ebx, eax
cmp ebx, 4
jb 0x433081
mov eax, dword [ecx + 8]
mov dword [esp + 0x60], eax
and ebx, 0xfffffffc
cmp ebx, 4
je 0x433081
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x64], eax
push ecx
call fcn.00408780
add esp, 4
lea esi, [esp + 0x80]
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x70]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 8]
call esi
push dword [esp + 0x7c]
call esi
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [esp + 0x94]
lea edi, [esp + 0x20]
mov dword [esp + 0x20], 0
push 0x72a7c387
push dword [0x44857c]
call fcn.0043ae20
add esp, 8
push 0
push 0
push 0
push 0
push edi
push 0
push 0
push esi
call eax
test eax, eax
je 0x4331d4
mov eax, dword [esp + 0x20]
mov dword [esp + 0x58], eax
xor esi, esi
jmp 0x43313f
add dword [esp + 0x68], 8
inc esi
cmp esi, 4
je 0x4331d4
mov eax, 0
test esi, esi
je 0x433152
cmp dword [esp + esi*4 + 0x58], 1
mov eax, esi
sbb eax, 0
mov eax, dword [esp + eax*4 + 0x58]
mov ecx, eax
and ecx, 0xffe5a7ba
mov edx, eax
and edx, 0x1a5845
or eax, 0x1a5845
imul eax, edx
xor edx, 0x1a5845
imul edx, ecx
add eax, edx
add eax, 0xebde8a13
mov dword [esp + esi*4 + 0x58], eax
mov edi, 0xffffffff
mov ebx, 0xfffffffe
push 0x10
push 9
push dword [esp + 0x70]
push eax
call fcn.004196f0
add esp, 0x10
nop
nop
nop
add ebx, 2
cmp byte [eax + edi + 1], 0
lea edi, [edi + 1]
jne 0x4331a0
xor edi, 8
not ebx
and ebx, 0x10
mov ecx, ebx
sub ecx, edi
je 0x433130
sub edi, ebx
add eax, edi
push ecx
push 0x30
push eax
call fcn.00408880
add esp, 0xc
jmp 0x433130
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret