Function at 0x432060
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x498
mov esi, esp
mov eax, dword [ebp + 8]
lea ecx, [0x44d1c4]
mov dword [esi + 0x44c], ecx
mov cl, byte [esi + 0x170]
mov byte [esi + 0x174], cl
mov byte [esi + 8], 0x4c
mov byte [esi + 9], 0x4f
mov byte [esi + 0xa], 0x30
mov byte [esi + 0xb], 0xd0
xor ecx, ecx
cmp ecx, 4
jae 0x4320cb
movzx edi, byte [esi + ecx + 8]
mov edx, ecx
add edx, 0xd
mov ebx, edi
xor ebx, 0xffffffff
and edx, ebx
mov ebx, 0xf2
sub ebx, ecx
and ebx, edi
or edx, ebx
add dl, 0xbf
mov byte [esi + ecx + 8], dl
add ecx, 1
jmp 0x43209e
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x26c]
mov dword [eax], edx
mov edx, dword [ecx + 0x270]
mov dword [eax + 4], edx
mov edx, dword [ecx + 0x260]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0x264]
sub ecx, 2
sete byte [eax + 0xc]
mov ecx, eax
add ecx, 0x10
mov dword [esi + 0xa4], ecx
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x320], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x18], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x444], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0x2c], 0
sub esp, 0x14
lea eax, [esi + 0x2c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x447a18
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x447a28
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x448], eax
mov eax, dword [esi + 0x44c]
mov ecx, dword [esi + 0x448]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x244], eax
push eax
mov eax, esp
mov dword [esi + 0x24c], eax
mov dword [eax], 0x44d1cc
push eax
mov dword [esi + 0x248], esp
push eax
mov eax, esp
mov dword [esi + 0x254], eax
mov dword [eax], 0x44d1d4
push eax
mov dword [esi + 0x250], esp
push eax
mov eax, esp
mov dword [esi + 0x2b4], eax
mov dword [eax], 0x44d1dc
push eax
mov dword [esi + 0x2a0], esp
push eax
mov eax, esp
mov dword [esi + 0x2ac], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x28c], eax
mov dword [eax], 0x4d
push eax
mov eax, esp
mov dword [esi + 0x294], eax
mov dword [eax], 0x44d1e4
push eax
mov dword [esi + 0x280], esp
push eax
mov eax, esp
mov dword [esi + 0x2b8], eax
mov dword [eax], 0x44d1ec
push eax
mov dword [esi + 0x2a4], esp
push eax
mov eax, esp
mov dword [esi + 0x290], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x274], eax
mov dword [eax], 0x50
push eax
mov eax, esp
mov dword [esi + 0x27c], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x270], eax
mov dword [eax], 0x51
push eax
mov eax, esp
mov dword [esi + 0x26c], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x268], eax
mov dword [eax], 0x52
push eax
mov eax, esp
mov dword [esi + 0x264], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x25c], eax
mov dword [eax], 0x53
push eax
mov eax, esp
mov dword [esi + 0x260], eax
mov dword [eax], 0x44d1f4
push eax
mov dword [esi + 0x258], esp
push eax
mov eax, esp
mov dword [esi + 0x2bc], eax
mov dword [eax], 0x44d1fc
push eax
mov dword [esi + 0x2b0], esp
push eax
mov eax, esp
mov dword [esi + 0x2a8], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x284], eax
mov dword [eax], 0x56
push eax
mov eax, esp
mov dword [esi + 0x298], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x278], eax
mov dword [eax], 0x57
push eax
mov eax, esp
mov dword [esi + 0x29c], eax
mov dword [eax], 0x44d204
push eax
mov dword [esi + 0x288], esp
push eax
mov eax, esp
mov dword [esi + 0x2c4], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x2c0], eax
mov dword [eax], 0x59
push eax
mov eax, esp
mov dword [esi + 0x2e0], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x2d0], eax
mov dword [eax], 0x5a
push eax
mov eax, esp
mov dword [esi + 0x2d4], eax
mov dword [eax], 0x44d20c
push eax
mov dword [esi + 0x2c8], esp
push eax
mov eax, esp
mov dword [esi + 0x2e4], eax
mov dword [eax], 0x44d214
push eax
mov dword [esi + 0x2d8], esp
push eax
mov eax, esp
mov dword [esi + 0x2dc], eax
mov dword [eax], 0x44d21c
push eax
mov dword [esi + 0x2cc], esp
push eax
mov eax, esp
mov dword [esi + 0x2ec], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x2e8], eax
mov dword [eax], 0x5e
push eax
mov eax, esp
mov dword [esi + 0x304], eax
mov dword [eax], 0x44d224
push eax
mov dword [esi + 0x2fc], esp
push eax
mov eax, esp
mov dword [esi + 0x31c], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x318], eax
mov dword [eax], 0x60
push eax
mov eax, esp
mov dword [esi + 0x334], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x328], eax
mov dword [eax], 0x61
push eax
mov eax, esp
mov dword [esi + 0x32c], eax
mov dword [eax], 0x44d22c
push eax
mov dword [esi + 0x324], esp
push eax
mov eax, esp
mov dword [esi + 0x378], eax
mov dword [eax], 0x44d234
push eax
mov dword [esi + 0x370], esp
push eax
mov eax, esp
mov dword [esi + 0x36c], eax
mov dword [eax], 0x44d23c
push eax
mov dword [esi + 0x358], esp
push eax
mov eax, esp
mov dword [esi + 0x368], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x350], eax
mov dword [eax], 0x65
push eax
mov eax, esp
mov dword [esi + 0x35c], eax
mov dword [eax], 0x44d244
push eax
mov dword [esi + 0x348], esp
push eax
mov eax, esp
mov dword [esi + 0x374], eax
mov dword [eax], 0x44d24c
push eax
mov dword [esi + 0x360], esp
push eax
mov eax, esp
mov dword [esi + 0x354], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x33c], eax
mov dword [eax], 0x68
push eax
mov eax, esp
mov dword [esi + 0x344], eax
mov dword [eax], 0x44d254
push eax
mov dword [esi + 0x338], esp
push eax
mov eax, esp
mov dword [esi + 0x364], eax
mov dword [eax], 0x44d25c
push eax
mov dword [esi + 0x34c], esp
push eax
mov eax, esp
mov dword [esi + 0x340], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x330], eax
mov dword [eax], 0x6b
push eax
mov eax, esp
mov dword [esi + 0x388], eax
mov dword [eax], 0x44d264
push eax
mov dword [esi + 0x380], esp
push eax
mov eax, esp
mov dword [esi + 0x384], eax
mov dword [eax], 0x44d26c
push eax
mov dword [esi + 0x37c], esp
push eax
mov eax, esp
mov dword [esi + 0x39c], eax
mov dword [eax], 0x44d274
push eax
mov dword [esi + 0x398], esp
push eax
mov eax, esp
mov dword [esi + 0x394], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x390], eax
mov dword [eax], 0x6f
push eax
mov eax, esp
mov dword [esi + 0x3a8], eax
mov dword [eax], 0x44d27c
push eax
mov dword [esi + 0x3a4], esp
push eax
mov eax, esp
mov dword [esi + 0x424], eax
mov dword [eax], 0x44d284
push eax
mov dword [esi + 0x410], esp
push eax
mov eax, esp
mov dword [esi + 0x420], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x408], eax
mov dword [eax], 0x72
push eax
mov eax, esp
mov dword [esi + 0x404], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x3e4], eax
mov dword [eax], 0x73
push eax
mov eax, esp
mov dword [esi + 0x42c], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x414], eax
mov dword [eax], 0x74
push eax
mov eax, esp
mov dword [esi + 0x418], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x3f8], eax
mov dword [eax], 0x75
push eax
mov eax, esp
mov dword [esi + 0x3fc], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x3d4], eax
mov dword [eax], 0x76
push eax
mov eax, esp
mov dword [esi + 0x3e8], eax
mov dword [eax], 0x44d28c
push eax
mov dword [esi + 0x3c8], esp
push eax
mov eax, esp
mov dword [esi + 0x40c], eax
mov dword [eax], 0x44d294
push eax
mov dword [esi + 0x3f0], esp
push eax
mov eax, esp
mov dword [esi + 0x3e0], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x3c4], eax
mov dword [eax], 0x79
push eax
mov eax, esp
mov dword [esi + 0x3dc], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x3c0], eax
mov dword [eax], 0x7a
push eax
mov eax, esp
mov dword [esi + 0x3f4], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x3d0], eax
mov dword [eax], 0x7b
push eax
mov eax, esp
mov dword [esi + 0x400], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x3d8], eax
mov dword [eax], 0x7c
push eax
mov eax, esp
mov dword [esi + 0x3ec], eax
mov dword [eax], 0x44d29c
push eax
mov dword [esi + 0x3cc], esp
push eax
mov ecx, esp
mov dword [esi + 0x1c4], ecx
mov dword [ecx], 0x44d2a4
push eax
mov dword [esi + 0x440], esp
push eax
mov ecx, esp
mov dword [ecx], 0x44cb90
push eax
mov edx, esp
mov dword [edx], 0x7f
push eax
mov eax, esp
mov dword [esi + 0x434], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x428], eax
mov dword [eax], 0x80
push eax
mov eax, esp
mov dword [esi + 0x430], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x41c], eax
mov dword [eax], 0x81
push eax
mov eax, esp
mov dword [esi + 0x230], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x22c], eax
mov dword [eax], 0x4e
push eax
mov eax, esp
mov dword [esi + 0x238], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x234], eax
mov dword [eax], 0x54
push eax
mov eax, esp
mov dword [esi + 0x240], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x23c], eax
mov dword [eax], 0x5b
push eax
mov eax, esp
mov dword [esi + 0x2f4], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x2f0], eax
mov dword [eax], 0x62
push eax
mov eax, esp
mov dword [esi + 0x300], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x2f8], eax
mov dword [eax], 0x66
push eax
mov eax, esp
mov dword [esi + 0x30c], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x308], eax
mov dword [eax], 0x69
push eax
mov eax, esp
mov dword [esi + 0x314], eax
mov dword [eax], 0x44cb90
push eax
mov eax, esp
mov dword [esi + 0x310], eax
mov dword [eax], 0x6d
push eax
mov eax, esp
mov dword [esi + 0x3b4], eax
mov dword [eax], 0x44cb90
push eax
mov ebx, esp
mov dword [ebx], 0x77
push eax
mov eax, esp
mov dword [eax], 0x44cb90
push eax
mov edi, esp
mov dword [esi + 0x3b8], edi
mov dword [edi], 0x7d
jmp dword [esi + 0x244]