Function at 0x431370
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x320
mov dword [esp + 0x304], 0x448cbc
mov dword [esp + 0xe0], 0
lea eax, [esp + 0xe0]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448cc4]
xor ecx, 0xf7a6fa4a
sub eax, ecx
mov dword [esp + 0x2fc], 0x448cc8
mov dword [esp + 0x2f4], 0x448cd4
mov dword [esp + 0x2ec], 0x448ce0
mov dword [esp + 0x2e4], 0x448cec
mov dword [esp + 0x2dc], 0x448cf8
mov dword [esp + 0x2d4], 0x448d04
mov dword [esp + 0x2cc], 0x448d10
mov dword [esp + 0x2c4], 0x448d1c
mov dword [esp + 0x2bc], 0x448160
mov ecx, dword [0x448d28]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x2b8], 0x448d30
mov dword [esp + 0x2b0], 0x448d3c
mov dword [esp + 0x2a8], 0x448d48
mov dword [esp + 0x2a0], 0x448160
mov ecx, dword [0x448d54]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x29c], 0x448d5c
mov dword [esp + 0x294], 0x448160
mov ecx, dword [0x448d68]
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x290], 0x448d70
mov dword [esp + 0x288], 0x448d7c
mov dword [esp + 0x280], 0x448160
mov ecx, dword [0x448d88]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x27c], 0x448d90
mov dword [esp + 0x274], 0x448d9c
mov dword [esp + 0x26c], 0x448da8
mov dword [esp + 0x264], 0x448db4
mov dword [esp + 0x25c], 0x448dc0
mov dword [esp + 0x254], 0x448160
mov ecx, dword [0x448dcc]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x250], 0x448dd4
mov dword [esp + 0x248], 0x448160
mov ecx, dword [0x448de0]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x244], 0x448de8
mov dword [esp + 0x23c], 0x448df4
mov dword [esp + 0x234], 0x448e00
mov dword [esp + 0x22c], 0x448160
mov ecx, dword [0x448e0c]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x228], 0x448e14
mov dword [esp + 0x220], 0x448160
mov ecx, dword [0x448e20]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x21c], 0x448160
mov ecx, dword [0x448e28]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x218], 0x448160
mov ecx, dword [0x448e30]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x214], 0x448e38
mov dword [esp + 0x20c], 0x448160
mov ecx, dword [0x448e44]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x208], 0x448160
mov ecx, dword [0x448e4c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x204], 0x448160
mov ecx, dword [0x448e54]
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x200], 0x448e5c
mov dword [esp + 0x1f8], 0x448e68
mov dword [esp + 0x1f0], 0x448160
mov ecx, dword [0x448e74]
mov dword [esp + 0x1ec], 0x448e7c
mov dword [esp + 0x1e4], 0x448e88
mov dword [esp + 0x1dc], 0x448160
mov esi, dword [0x448e94]
mov dword [esp + 0x1d8], 0x448160
mov edx, dword [0x448e9c]
mov dword [esp + 0x15c], edx
mov dword [esp + 0x1d4], 0x448160
mov edx, dword [0x448ea4]
mov dword [esp + 0x164], edx
mov dword [esp + 0x1d0], 0x448160
mov edx, dword [0x448eac]
mov dword [esp + 0x168], edx
mov dword [esp + 0x1cc], 0x448160
mov edx, dword [0x448eb4]
mov dword [esp + 0x180], edx
mov dword [esp + 0x1c8], 0x448160
mov edx, dword [0x448ebc]
mov dword [esp + 0x17c], edx
mov dword [esp + 0x1c4], 0x448160
mov edx, dword [0x448ec4]
mov dword [esp + 0x178], edx
mov dword [esp + 0x1c0], 0x448160
mov edx, dword [0x448ecc]
mov dword [esp + 0x174], edx
mov dword [esp + 0x1bc], 0x448160
mov edx, dword [0x448ed4]
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x1b8], 0x448160
xor edi, edi
mov ebx, dword [0x448edc]
jmp eax