Function at 0x4308b0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x458
mov esi, esp
lea eax, [0x44ad6c]
mov dword [esi + 0x42c], eax
mov al, byte [esi + 0x174]
mov byte [esi + 0x180], al
mov byte [esi + 0x178], 0xc8
mov byte [esi + 0x179], 0xc9
mov byte [esi + 0x17a], 0xcc
mov byte [esi + 0x17b], 0x4c
mov eax, 4
mov byte [esi + eax + 0x178], 0
add eax, 1
cmp eax, 5
jne 0x4308fa
xor ecx, ecx
cmp ecx, 5
jae 0x43096a
movzx edx, byte [esi + ecx + 0x178]
mov eax, ecx
add eax, 0x4327a752
mov edi, 0xad
sub edi, ecx
and edi, edx
xor edx, 0xffffffff
and eax, edx
or edi, eax
mov edx, edi
add edx, 0xb039bb65
mov eax, edx
shl eax, 1
and eax, 2
mov ebx, 0x1a
sub ebx, edi
and ebx, 0x38
mov edi, edx
and edi, 0xc7
or ebx, edi
and edx, eax
shl edx, 1
xor ebx, eax
xor ebx, 0x39
add ebx, edx
mov byte [esi + ecx + 0x178], bl
add ecx, 1
jmp 0x43090c
mov eax, dword [esi + 0x178]
mov ecx, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, dword [eax + 0x270]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 0x260]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x264]
sub eax, 2
sete byte [edx + 0xc]
mov eax, edx
add eax, 0x10
mov dword [esi + 0xc0], eax
mov dword [edx + 0x10], 0
mov eax, edx
add eax, 0x14
mov dword [esi + 0x2e4], eax
mov byte [edx + 0x14], 0
mov eax, edx
add eax, 0x28
mov dword [esi + 0xbc], eax
mov word [edx + 0x28], 0
mov eax, edx
add eax, 0x2a
mov dword [esi + 0x208], eax
mov byte [edx + 0x2a], 0
mov dword [esi + 0x170], 0
sub esp, 0x14
lea eax, [esi + 0x170]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4455d8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4455e8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x428], eax
mov eax, dword [esi + 0x42c]
mov ecx, dword [esi + 0x428]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x44ad74]
xor ecx, 0x5a245cef
sub eax, ecx
push eax
mov ebx, esp
mov dword [ebx], 0x44ad78
push eax
mov dword [esi + 0x280], esp
push eax
mov ecx, esp
mov dword [esi + 0x288], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44ad84]
mov dword [esi + 0x284], ecx
push eax
mov ecx, esp
mov dword [esi + 0x294], ecx
mov dword [ecx], 0x44ad8c
push eax
mov dword [esi + 0x28c], esp
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x44ad98
push eax
mov dword [esi + 0x290], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x44ada4
push eax
mov dword [esi + 0x2a8], esp
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x44adb0
push eax
mov dword [esi + 0x2a4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b8], ecx
mov dword [ecx], 0x44adbc
push eax
mov dword [esi + 0x2b4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2c0], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44adc8]
mov dword [esi + 0x2bc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x44add0
push eax
mov dword [esi + 0x2c4], esp
push eax
mov ecx, esp
mov dword [esi + 0x2d0], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44addc]
mov dword [esi + 0x2cc], ecx
push eax
mov ecx, esp
mov dword [esi + 0x2d8], ecx
mov dword [ecx], 0x44ade4
push eax
mov dword [esi + 0x2d4], esp
push eax
mov ecx, esp
mov dword [esi + 0x300], ecx
mov dword [ecx], 0x44adf0
push eax
mov dword [esi + 0x2f8], esp
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x44adfc
push eax
mov dword [esi + 0x2fc], esp
push eax
mov ecx, esp
mov dword [esi + 0x31c], ecx
mov dword [ecx], 0x44ae08
push eax
mov dword [esi + 0x314], esp
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44ae14]
mov dword [esi + 0x308], ecx
push eax
mov ecx, esp
mov dword [esi + 0x318], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44ae1c]
mov dword [esi + 0x310], ecx
push eax
mov ecx, esp
mov dword [esi + 0x328], ecx
mov dword [ecx], 0x44ae24
push eax
mov dword [esi + 0x320], esp
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x44ae30
push eax
mov dword [esi + 0x324], esp
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x44ae3c
push eax
mov dword [esi + 0x33c], esp
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44ae48]
mov dword [esi + 0x330], ecx
push eax
mov ecx, esp
mov dword [esi + 0x340], ecx
mov dword [ecx], 0x44ae50
push eax
mov dword [esi + 0x334], esp
push eax
mov ecx, esp
mov dword [esi + 0x354], ecx
mov dword [ecx], 0x44ae5c
push eax
mov dword [esi + 0x350], esp
push eax
mov ecx, esp
mov dword [esi + 0x34c], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44ae68]
mov dword [esi + 0x348], ecx
push eax
mov ecx, esp
mov dword [esi + 0x360], ecx
mov dword [ecx], 0x44ae70
push eax
mov dword [esi + 0x358], esp
push eax
mov ecx, esp
mov dword [esi + 0x364], ecx
mov dword [ecx], 0x44ae7c
push eax
mov dword [esi + 0x35c], esp
push eax
mov ecx, esp
mov dword [esi + 0x39c], ecx
mov dword [ecx], 0x44ae88
push eax
mov dword [esi + 0x38c], esp
push eax
mov ecx, esp
mov dword [esi + 0x388], ecx
mov dword [ecx], 0x44ae94
push eax
mov dword [esi + 0x384], esp
push eax
mov ecx, esp
mov dword [esi + 0x394], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44aea0]
mov dword [esi + 0x390], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a0], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44aea8]
mov dword [esi + 0x398], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3a8], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44aeb0]
mov dword [esi + 0x3a4], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3b0], ecx
mov dword [ecx], 0x44aeb8
push eax
mov dword [esi + 0x3ac], esp
push eax
mov ecx, esp
mov dword [esi + 0x3d8], ecx
mov dword [ecx], 0x44aec4
push eax
mov dword [esi + 0x3cc], esp
push eax
mov ecx, esp
mov dword [esi + 0x3c4], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44aed0]
mov dword [esi + 0x3c0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3d0], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44aed8]
mov dword [esi + 0x3c8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3dc], ecx
mov dword [ecx], 0x44aee0
push eax
mov dword [esi + 0x3d4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3f0], ecx
mov dword [ecx], 0x44aeec
push eax
mov dword [esi + 0x3e4], esp
push eax
mov ecx, esp
mov dword [esi + 0x3e8], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44aef8]
mov dword [esi + 0x3e0], ecx
push eax
mov ecx, esp
mov dword [esi + 0x3f4], ecx
mov dword [ecx], 0x44af00
push eax
mov dword [esi + 0x3ec], esp
push eax
mov ecx, esp
mov dword [esi + 0x404], ecx
mov dword [ecx], 0x44af0c
push eax
mov dword [esi + 0x400], esp
push eax
mov ecx, esp
mov dword [esi + 0x3fc], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44af18]
mov dword [esi + 0x3f8], ecx
push eax
mov ecx, esp
mov dword [esi + 0x40c], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44af20]
mov dword [esi + 0x408], ecx
push eax
mov ecx, esp
mov dword [esi + 0x414], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44af28]
mov dword [esi + 0x410], ecx
push eax
mov ecx, esp
mov dword [esi + 0x41c], ecx
mov dword [ecx], 0x44a460
mov ecx, dword [0x44af30]
mov dword [esi + 0x418], ecx
push eax
mov ecx, esp
mov dword [ecx], 0x44a460
mov edx, dword [0x44af38]
push eax
mov edi, esp
mov dword [esi + 0x2a0], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af40]
mov dword [esi + 0x29c], edi
push eax
mov edi, esp
mov dword [esi + 0x2e0], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af48]
mov dword [esi + 0x2dc], edi
push eax
mov edi, esp
mov dword [esi + 0x2ec], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af50]
mov dword [esi + 0x2e8], edi
push eax
mov edi, esp
mov dword [esi + 0x2f4], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af58]
mov dword [esi + 0x2f0], edi
push eax
mov edi, esp
mov dword [esi + 0x370], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af60]
mov dword [esi + 0x36c], edi
push eax
mov edi, esp
mov dword [esi + 0x378], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af68]
mov dword [esi + 0x374], edi
push eax
mov edi, esp
mov dword [esi + 0x380], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af70]
mov dword [esi + 0x37c], edi
push eax
mov edi, esp
mov dword [esi + 0x3bc], edi
mov dword [edi], 0x44a460
mov edi, dword [0x44af78]
mov dword [esi + 0x3b8], edi
jmp eax