Function at 0x4310f0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x320
mov dword [esp + 0x304], 0x448f60
mov dword [esp + 0xb8], 0
lea eax, [esp + 0xb8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4435e8
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4435f8
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
sub esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x448f68]
xor ecx, 0xab217d40
sub eax, ecx
mov dword [esp + 0x2fc], 0x448f6c
mov dword [esp + 0x2f4], 0x448f78
mov dword [esp + 0x2ec], 0x448f84
mov dword [esp + 0x2e4], 0x448f90
mov dword [esp + 0x2dc], 0x448f9c
mov dword [esp + 0x2d4], 0x448fa8
mov dword [esp + 0x2cc], 0x448fb4
mov dword [esp + 0x2c4], 0x448fc0
mov dword [esp + 0x2bc], 0x448fcc
mov dword [esp + 0x2b4], 0x448400
mov ecx, dword [0x448fd8]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x2b0], 0x448fe0
mov dword [esp + 0x2a8], 0x448400
mov ecx, dword [0x448fec]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x2a4], 0x448400
mov ecx, dword [0x448ff4]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x2a0], 0x448ffc
mov dword [esp + 0x298], 0x449008
mov dword [esp + 0x290], 0x448400
mov ecx, dword [0x449014]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x28c], 0x44901c
mov dword [esp + 0x284], 0x449028
mov dword [esp + 0x27c], 0x448400
mov ecx, dword [0x449034]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x278], 0x448400
mov ecx, dword [0x44903c]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x274], 0x449044
mov dword [esp + 0x26c], 0x449050
mov dword [esp + 0x264], 0x44905c
mov dword [esp + 0x25c], 0x448400
mov ecx, dword [0x449068]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x258], 0x448400
mov ecx, dword [0x449070]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x254], 0x449078
mov dword [esp + 0x24c], 0x449084
mov dword [esp + 0x244], 0x449090
mov dword [esp + 0x23c], 0x448400
mov ecx, dword [0x44909c]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x238], 0x448400
mov ecx, dword [0x4490a4]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x234], 0x4490ac
mov dword [esp + 0x22c], 0x4490b8
mov dword [esp + 0x224], 0x448400
mov ecx, dword [0x4490c4]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x220], 0x4490cc
mov dword [esp + 0x218], 0x4490d8
mov dword [esp + 0x210], 0x4490e4
mov dword [esp + 0x208], 0x448400
mov ecx, dword [0x4490f0]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x204], 0x448400
mov ecx, dword [0x4490f8]
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x200], 0x449100
mov dword [esp + 0x1f8], 0x44910c
mov dword [esp + 0x1f0], 0x448400
mov edx, dword [0x449118]
mov dword [esp + 0x1ec], 0x448400
mov ecx, dword [0x449120]
mov dword [esp + 0x1e8], 0x449128
mov dword [esp + 0x1e0], 0x449134
mov dword [esp + 0x1d8], 0x448400
mov esi, dword [0x449140]
mov dword [esp + 0x1d4], 0x448400
mov edi, dword [0x449148]
mov dword [esp + 0x148], edi
mov dword [esp + 0x1d0], 0x448400
mov edi, dword [0x449150]
mov dword [esp + 0x150], edi
mov dword [esp + 0x1cc], 0x448400
mov edi, dword [0x449158]
mov dword [esp + 0x170], edi
mov dword [esp + 0x1c8], 0x448400
mov edi, dword [0x449160]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x1c4], 0x448400
mov edi, dword [0x449168]
mov dword [esp + 0x168], edi
mov dword [esp + 0x1c0], 0x448400
mov edi, dword [0x449170]
mov dword [esp + 0x164], edi
mov dword [esp + 0x1bc], 0x448400
mov edi, dword [0x449178]
mov dword [esp + 0x178], edi
mov dword [esp + 0x1b8], 0x448400
mov edi, dword [0x449180]
mov dword [esp + 0x1a8], edi
mov dword [esp + 0x1b4], 0x448400
mov dword [esp + 0x2c], 0
mov edi, dword [0x449188]
jmp eax