Function at 0x431670
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x330
mov dword [esp + 0x328], 0x448e5c
mov dword [esp + 0xc0], 0
lea eax, [esp + 0xc0]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435d8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435e8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x324], eax
mov eax, dword [esp + 0x328]
mov ecx, dword [esp + 0x324]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448e64]
xor ecx, 0x34a9196d
sub eax, ecx
mov dword [esp + 0x320], 0x4483c0
mov ebx, dword [0x448e68]
mov dword [esp + 0x31c], 0x448e70
mov dword [esp + 0x314], 0x448e7c
mov dword [esp + 0x30c], 0x4483c0
mov ecx, dword [0x448e88]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x308], 0x4483c0
mov ecx, dword [0x448e90]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x304], 0x448e98
mov dword [esp + 0x2fc], 0x448ea4
mov dword [esp + 0x2f4], 0x448eb0
mov dword [esp + 0x2ec], 0x4483c0
mov ecx, dword [0x448ebc]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x2e8], 0x448ec4
mov dword [esp + 0x2e0], 0x448ed0
mov dword [esp + 0x2d8], 0x448edc
mov dword [esp + 0x2d0], 0x448ee8
mov dword [esp + 0x2c8], 0x4483c0
mov ecx, dword [0x448ef4]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x2c4], 0x448efc
mov dword [esp + 0x2bc], 0x448f08
mov dword [esp + 0x2b4], 0x448f14
mov dword [esp + 0x2ac], 0x4483c0
mov ecx, dword [0x448f20]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x2a8], 0x4483c0
mov ecx, dword [0x448f28]
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x2a4], 0x448f30
mov dword [esp + 0x29c], 0x448f3c
mov dword [esp + 0x294], 0x448f48
mov dword [esp + 0x28c], 0x448f54
mov dword [esp + 0x284], 0x448f60
mov dword [esp + 0x27c], 0x448f6c
mov dword [esp + 0x274], 0x4483c0
mov ecx, dword [0x448f78]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x270], 0x448f80
mov dword [esp + 0x268], 0x448f8c
mov dword [esp + 0x260], 0x448f98
mov dword [esp + 0x258], 0x4483c0
mov ecx, dword [0x448fa4]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x254], 0x448fac
mov dword [esp + 0x24c], 0x4483c0
mov ecx, dword [0x448fb8]
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x248], 0x448fc0
mov dword [esp + 0x240], 0x448fcc
mov dword [esp + 0x238], 0x4483c0
mov ecx, dword [0x448fd8]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x234], 0x4483c0
mov ecx, dword [0x448fe0]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x230], 0x448fe8
mov dword [esp + 0x228], 0x448ff4
mov dword [esp + 0x220], 0x4483c0
mov ecx, dword [0x449000]
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x21c], 0x449008
mov dword [esp + 0x214], 0x449014
mov dword [esp + 0x20c], 0x4483c0
mov esi, dword [0x449020]
mov dword [esp + 0x208], 0x4483c0
mov edx, dword [0x449028]
mov dword [esp + 0x204], 0x4483c0
mov ecx, dword [0x449030]
mov dword [esp + 0x200], 0x449038
mov dword [esp + 0x1f8], 0x449044
mov dword [esp + 0x1f0], 0x4483c0
mov edi, dword [0x449050]
mov dword [esp + 0x164], edi
mov dword [esp + 0x1ec], 0x4483c0
mov edi, dword [0x449058]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x1e8], 0x4483c0
mov edi, dword [0x449060]
mov dword [esp + 0x17c], edi
mov dword [esp + 0x1e4], 0x4483c0
mov edi, dword [0x449068]
mov dword [esp + 0x194], edi
mov dword [esp + 0x1e0], 0x4483c0
mov edi, dword [0x449070]
mov dword [esp + 0x190], edi
mov dword [esp + 0x1dc], 0x4483c0
mov edi, dword [0x449078]
mov dword [esp + 0x18c], edi
mov dword [esp + 0x1d8], 0x4483c0
mov edi, dword [str.Jw_]
mov dword [esp + 0x188], edi
mov dword [esp + 0x1d4], 0x4483c0
mov edi, dword [0x449088]
mov dword [esp + 0x184], edi
mov dword [esp + 0x1d0], 0x4483c0
mov edi, dword [0x449090]
mov dword [esp + 0x1bc], edi
mov dword [esp + 0x1cc], 0x4483c0
mov edi, dword [0x449098]
mov dword [esp + 0x1a0], edi
xor edi, edi
jmp eax