Function at 0x432da0
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [esp + 0x50], eax
mov eax, dword [0x449640]
mov dword [esp + 4], 0xff09f9dd
mov dword [esp + 8], 0xe375fd65
mov dword [esp + 0xc], 0xe703e174
mov dword [esp + 0x10], 0xeb2ee509
mov dword [esp + 0x14], 0xef07e97e
mov dword [esp + 0x18], 0x9377ed76
mov dword [esp + 0x1c], 0x979691b5
mov word [esp + 0x20], 0
mov byte [esp + 0x22], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 0xa
mov edi, ecx
and edi, 0x15
mov edx, ecx
xor edx, 0xaa
add edx, esi
sub edx, edi
add edx, ecx
xor dl, byte [esp + ecx + 4]
add dl, 0xae
mov byte [esp + ecx + 4], dl
inc ecx
cmp ecx, 0x1f
jne 0x432e10
lea ecx, [esp + 0x60]
lea ebx, [esp + 0x8c]
lea edi, [esp + 4]
push ecx
push 8
push ebx
push 0xd
push edi
push 0
call eax
test eax, eax
jns 0x432e62
mov dword [esp + 0x8c], 0x3a0043
mov dword [esp + 0x90], 0x5c
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x44], 0
lea eax, [esp + 0x44]
push eax
push 0x43f670
push 1
push 0
push 0x43f680
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4333ff
mov dword [esp + 4], 0x316f3f6e
mov dword [esp + 8], 0x35663361
mov dword [esp + 0xc], 0x49733758
mov dword [esp + 0x10], 0x4d154b13
mov dword [esp + 0x14], 0x417c4f1a
mov dword [esp + 0x18], 0x4340
mov eax, 0x35
mov ecx, 0xcb
movzx edi, byte [esp + eax - 0x31]
mov edx, eax
and edx, edi
lea esi, [ecx + edx*2]
add edx, edx
xor esi, edi
not edx
add edx, eax
and edx, edi
add edx, edx
sub edx, esi
add dl, 0xf7
mov byte [esp + eax - 0x31], dl
inc eax
dec ecx
cmp eax, 0x4d
jne 0x432ef0
lea edi, [esp + 4]
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
lea edx, [esp + 0x40]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
test eax, eax
js 0x4333ee
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x5c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x4333e4
mov dword [esp + 0x74], esi
mov dword [esp + 4], 0x4fbf49a3
mov dword [esp + 8], 0x43424db0
mov dword [esp + 0xc], 0
mov eax, 0x92
mov ecx, 0x6d
nop
movzx esi, byte [esp + eax - 0x8e]
mov edx, ecx
xor edx, eax
and edx, esi
xor edx, eax
add dl, 0x26
mov byte [esp + eax - 0x8e], dl
inc eax
dec ecx
cmp eax, 0x9e
jne 0x432f90
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x4c], eax
mov dword [esp + 4], 0x4f8b49bf
mov dword [esp + 8], 0x43874db0
mov dword [esp + 0xc], 0x47b24187
mov dword [esp + 0x10], 0x7ba44564
mov dword [esp + 0x14], 0x7f847958
mov dword [esp + 0x18], 0x73817d8a
mov dword [esp + 0x1c], 0x7756718d
mov dword [esp + 0x20], 0x6bf3759f
mov dword [esp + 0x24], 0x6fb969fa
mov dword [esp + 0x28], 0x63816dba
mov dword [esp + 0x2c], 0x679f61a6
mov dword [esp + 0x30], 0x1bed6597
mov word [esp + 0x34], 0x1918
mov dword [esp + 0x36], 0
mov word [esp + 0x3a], 0
mov edx, 0x12
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + edx - 0xe]
mov ebx, esi
and ebx, edx
mov eax, ebx
or al, 0xfd
inc al
mov ecx, ebx
and cl, 0x7d
mul cl
mov ecx, eax
mov eax, esi
add cl, al
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub cl, al
movzx eax, cl
add eax, edx
add al, 0xa6
mov byte [esp + edx - 0xe], al
inc edx
cmp edx, 0x4a
jne 0x433040
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, dword [esp + 0x40]
mov ecx, dword [ebx]
lea edx, [esp + 0x5c]
push edx
push 0
push 0x30
mov dword [esp + 0x7c], eax
push eax
push dword [esp + 0x5c]
push ebx
call dword [ecx + 0x50]
test eax, eax
lea ebx, [esp + 0x8c]
js 0x4333ce
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
lea edx, [esp + 0x54]
lea esi, [esp + 0x58]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4333c4
cmp eax, 1
je 0x4333c4
cmp dword [esp + 0x54], 0
je 0x4333c4
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x58]
mov dword [esp + 4], 0x37cb39d7
mov dword [esp + 8], 0x33cb35ba
mov dword [esp + 0xc], 0xcf3a31d1
mov dword [esp + 0x10], 0xcb47cd1e
mov dword [esp + 0x14], 0xc738c93d
mov dword [esp + 0x18], 0xc34cc539
mov word [esp + 0x1c], 0xc1c0
mov dword [esp + 0x1e], 0
mov ecx, 0x77
mov edx, 0x5e21a089
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx - 0x73]
mov edi, esi
not edi
lea ebx, [edx - 0x5e21a000]
or ebx, edi
lea edi, [ecx - 1]
and edi, esi
xor esi, edx
sub edi, esi
add edi, edx
add ebx, ecx
or ebx, edi
add bl, 0xb2
mov byte [esp + ecx - 0x73], bl
inc ecx
dec edx
cmp ecx, 0x95
jne 0x433150
mov ecx, dword [eax]
push 0
push 0
lea esi, [esp + 0x80]
push esi
push 0
lea edi, [esp + 0x14]
push edi
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4333ac
cmp word [esp + 0x78], 8
jne 0x4333ac
mov esi, dword [esp + 0x80]
movzx ebx, word [esi]
test bx, bx
je 0x4331fd
lea eax, [esi + 2]
xor edi, edi
mov ecx, ebx
jmp 0x4331dc
inc edi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x4331ff
cmp cx, 0x7f
jbe 0x4331d0
movzx edx, cx
cmp edx, 0x7ff
ja 0x4331f2
add edi, 2
jmp 0x4331d1
cmp cx, 0xffff
je 0x4331d1
add edi, 3
jmp 0x4331d1
xor edi, edi
lea eax, [edi + 1]
push eax
call fcn.004081b0
add esp, 4
mov edx, eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x48], edi
test edi, edi
lea edi, [esp + 4]
je 0x43335e
mov edx, dword [esp + 0x3c]
test bx, bx
je 0x43335e
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, bx
lea edi, [esi + 2]
cmp bx, 0x7f
ja 0x433260
lea eax, [edx + 1]
mov byte [edx], bl
jmp 0x433282
cmp ebx, 0x7ff
ja 0x4332a3
cmp ecx, 2
jb 0x4332a3
mov eax, ebx
shr eax, 6
add al, 0xc0
mov byte [edx], al
and bl, 0x3f
or bl, 0x80
lea eax, [edx + 2]
mov byte [edx + 1], bl
mov esi, edi
lea edi, [esp + 4]
add ecx, edx
sub ecx, eax
mov edx, eax
movzx ebx, word [esi]
test bx, bx
je 0x43335e
test ecx, ecx
jne 0x433240
jmp 0x43335e
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x43330c
cmp ecx, 4
jb 0x43330c
movzx eax, word [esi + 2]
add esi, 4
shl ebx, 0xa
lea edi, [ebx + eax]
add edi, 0xfca02400
mov ebx, edi
shr ebx, 0x12
or bl, 0xf0
mov byte [edx], bl
mov ebx, edi
shr ebx, 0xc
and bl, 0x3f
or bl, 0x80
mov byte [edx + 1], bl
shr edi, 6
mov ebx, edi
not ebx
or ebx, 0x3f
add ebx, edi
lea edi, [esp + 4]
add bl, 0x81
mov byte [edx + 2], bl
mov bl, 0x3f
sub bl, al
and bl, 0x3f
xor bl, 0xbf
lea eax, [edx + 4]
mov byte [edx + 3], bl
jmp 0x433288
movzx eax, ax
cmp eax, 0xdc00
jne 0x433321
mov esi, edi
lea edi, [esp + 4]
jmp 0x43328e
cmp ecx, 3
jb 0x433357
mov eax, ebx
shr eax, 0xc
or al, 0xe0
mov byte [edx], al
mov eax, ebx
shr eax, 6
mov esi, eax
xor esi, 0xc0
or eax, 0x3f
and eax, esi
add al, 0x80
mov byte [edx + 1], al
lea eax, [edx + 3]
and bl, 0x3f
or bl, 0x80
mov byte [edx + 2], bl
jmp 0x433282
mov eax, edx
jmp 0x433282
mov byte [edx], 0
mov eax, 3
mov ecx, dword [esp + 0x48]
sub eax, ecx
cmp eax, 0xfffffffd
jae 0x433376
mov eax, 0xfffffffc
add eax, ecx
shr eax, 2
cmp eax, 3
lea ecx, [esp + 0x60]
lea esi, [esp + 0x78]
jb 0x43338d
mov eax, 3
lea eax, [eax*4 + 4]
push eax
mov ebx, dword [esp + 0x40]
push ebx
push ecx
call fcn.004081e0
add esp, 0xc
push ebx
call fcn.004081c0
add esp, 4
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ebx, [esp + 0x8c]
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x4c]
call esi
push dword [esp + 0x70]
call esi
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 4], 0
push 0x72a7c387
push dword [0x449638]
call fcn.0043bcb0
add esp, 8
push 0
push 0
push 0
push 0
push edi
push 0
push 0
push ebx
call eax
test eax, eax
je 0x4334e4
mov eax, dword [esp + 4]
mov dword [esp + 0x60], eax
xor esi, esi
jmp 0x43344f
add dword [esp + 0x50], 8
inc esi
cmp esi, 4
je 0x4334e4
mov eax, 0
test esi, esi
je 0x433462
cmp dword [esp + esi*4 + 0x60], 1
mov eax, esi
sbb eax, 0
mov eax, dword [esp + eax*4 + 0x60]
mov ecx, eax
and ecx, 0xffe5a7ba
mov edx, eax
and edx, 0x1a5845
or eax, 0x1a5845
imul eax, edx
xor edx, 0x1a5845
imul edx, ecx
add eax, edx
add eax, 0xebde8a13
mov dword [esp + esi*4 + 0x60], eax
mov edi, 0xffffffff
mov ebx, 0xfffffffe
push 0x10
push 9
push dword [esp + 0x58]
push eax
call fcn.00419410
add esp, 0x10
nop
nop
nop
add ebx, 2
cmp byte [eax + edi + 1], 0
lea edi, [edi + 1]
jne 0x4334b0
xor edi, 8
not ebx
and ebx, 0x10
mov ecx, ebx
sub ecx, edi
je 0x433440
sub edi, ebx
add eax, edi
push ecx
push 0x30
push eax
call fcn.00408240
add esp, 0xc
jmp 0x433440
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret