Function at 0x430790
Capabilities:
Connect to wmi namespace via wbemlocator
Get os information via kuser_shared_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x468
mov eax, dword [ebp + 8]
mov dword [esp + 0x44c], 0x44d084
mov ecx, dword [0x7ffe026c]
mov dword [eax], ecx
mov ecx, dword [0x7ffe0270]
mov dword [eax + 4], ecx
mov ecx, dword [0x7ffe0260]
mov dword [eax + 8], ecx
mov ecx, dword [0x7ffe0264]
sub ecx, 2
sete byte [eax + 0xc]
mov edi, eax
add edi, 0x10
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esp + 0x208], ecx
mov byte [eax + 0x14], 0
mov ebx, eax
add ebx, 0x28
mov word [eax + 0x28], 0
mov esi, eax
add esi, 0x2a
mov byte [eax + 0x2a], 0
mov dword [esp + 0x188], 0
lea eax, [esp + 0x188]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x448070
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x448080
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x448], eax
mov eax, dword [esp + 0x44c]
mov ecx, dword [esp + 0x448]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x444], 0x44d08c
mov dword [esp + 0x43c], 0x44d094
mov dword [esp + 0x434], 0x44c8e0
mov dword [esp + 0x430], 0x58
mov dword [esp + 0x42c], 0x44d09c
mov dword [esp + 0x424], 0x44d0a4
mov dword [esp + 0x41c], 0x44c8e0
mov dword [esp + 0x418], 0x5b
mov dword [esp + 0x414], 0x44c8e0
mov dword [esp + 0x410], 0x5c
mov dword [esp + 0x40c], 0x44c8e0
mov dword [esp + 0x408], 0x5d
mov dword [esp + 0x404], 0x44d0ac
mov dword [esp + 0x3fc], 0x44d0b4
mov dword [esp + 0x3f4], 0x44d0bc
mov dword [esp + 0x3ec], 0x44c8e0
mov dword [esp + 0x3e8], 0x61
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x3e0], 0x62
mov dword [esp + case.0x4302bf.20], 0x44d0c4
mov dword [esp + case.0x4302bf.22], 0x44d0cc
mov dword [esp + case.0x42bc23.174], 0x44d0d4
mov dword [esp + case.0x42bc23.173], 0x44d0dc
mov dword [esp + case.0x42bc23.170], 0x44d0e4
mov dword [esp + case.0x42bc23.147], 0x44d0ec
mov dword [esp + case.0x42bc23.145], 0x44d0f4
mov dword [esp + case.0x42bc23.146], 0x44d0fc
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x398], 0x6b
mov dword [esp + case.0x42bc23.188], 0x44d104
mov dword [esp + case.0x42bc23.149], 0x44d10c
mov dword [esp + case.0x42bc23.155], 0x44d114
mov dword [esp + case.0x42bc23.151], 0x44d11c
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x370], 0x70
mov dword [esp + case.0x42bc23.153], 0x44d124
mov dword [esp + case.0x42bc23.154], 0x44d12c
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x358], 0x73
mov dword [esp + case.0x42bc23.159], 0x44d134
mov dword [esp + case.0x42bc23.157], 0x44d13c
mov dword [esp + case.0x42bc23.157], 0x44d144
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x338], 0x77
mov dword [esp + case.0x42bc23.191], 0x44d14c
mov dword [esp + case.0x42bc23.191], 0x44d154
mov dword [esp + case.0x42bc23.167], 0x44d15c
mov dword [esp + case.0x42bc23.163], 0x44d164
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x310], 0x7c
mov dword [esp + case.0x42bc23.165], 0x44d16c
mov dword [esp + case.0x42bc23.165], 0x44d174
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x2f8], 0x7f
mov dword [esp + case.0x42bc23.168], 0x44d17c
mov dword [esp + case.0x42bc23.169], 0x44d184
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x2e0], 0x82
mov dword [esp + case.0x42bc23.194], 0x44d18c
mov dword [esp + case.0x42bc23.172], 0x44d194
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x2c8], 0x85
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x2c0], 0x86
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x2b8], 0x87
mov dword [esp + case.0x42bc23.195], 0x44d19c
mov dword [esp + case.0x42bc23.177], 0x44d1a4
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x2a0], 0x8a
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x298], 0x8b
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x290], 0x8c
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x288], 0x8d
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x280], 0x8e
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x278], 0x56
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x270], 0x59
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x268], 0x5f
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x260], 0x63
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x258], 0x69
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x250], 0x6c
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x248], 0x71
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x240], 0x75
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x238], pe_nt_image_headers32
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x230], 0x7d
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x228], 0x80
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x220], 0x83
mov dword [esp + case.0x42bc23.40], 0x44c8e0
mov dword [esp + 0x218], 0x88
jmp eax