Function at 0x41db20
Capabilities:
Access peb ldr_data
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x472bad
mov eax, dword fs:[0]
push eax
sub esp, 0x288
mov eax, dword [0x492afc]
xor eax, esp
mov dword [esp + 0x284], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x492afc]
xor eax, esp
push eax
lea eax, [esp + 0x29c]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esp + 0x2ac]
xor ebx, ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x14], ebx
mov cl, 0x4c
mov byte [esp + 0x32], cl
mov al, 0x45
mov byte [esp + 0x72], cl
mov cl, 0x6e
mov byte [esp + 0x71], al
mov byte [esp + 0x73], al
mov al, 0x20
mov byte [esp + 0x80], cl
mov byte [esp + 0x8d], cl
lea ecx, [esp + 0x30]
mov byte [esp + 0x76], al
mov byte [esp + 0x78], al
mov byte [esp + 0x7d], al
mov al, 0x63
push ecx
lea ecx, [esp + 0x28]
mov dword [esp + 0x2a8], ebx
mov byte [esp + 0x34], 0x57
mov byte [esp + 0x35], 0x51
mov byte [esp + 0x37], bl
mov byte [esp + 0x74], 0x53
mov byte [esp + 0x78], 0x43
mov byte [esp + 0x79], 0x54
mov byte [esp + 0x7b], 0x2a
mov byte [esp + 0x7d], 0x46
mov byte [esp + 0x7e], 0x52
mov byte [esp + 0x7f], 0x4f
mov byte [esp + 0x80], 0x4d
mov byte [esp + 0x82], 0x77
mov byte [esp + 0x83], 0x69
mov byte [esp + 0x85], 0x33
mov byte [esp + 0x86], 0x32
mov byte [esp + 0x87], 0x5f
mov byte [esp + 0x88], 0x55
mov byte [esp + 0x89], 0x73
mov byte [esp + 0x8a], 0x65
mov byte [esp + 0x8b], 0x72
mov byte [esp + 0x8c], 0x41
mov byte [esp + 0x8d], al
mov byte [esp + 0x8e], al
mov byte [esp + 0x8f], 0x6f
mov byte [esp + 0x90], 0x75
mov byte [esp + 0x92], 0x74
mov byte [esp + 0x93], bl
call fcn.0040a6d0
lea edx, [esp + 0x70]
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x2a8], 1
call fcn.0040a6d0
mov eax, dword [0x498418]
mov edx, dword [eax + 0xc]
mov ecx, 0x498418
mov byte [esp + 0x2a4], 2
call edx
add eax, 0x10
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x2a8], 3
call fcn.0041d9c0
test eax, eax
jne 0x41dd1d
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x2a4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41dce9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x20]
call fcn.00402910
lea ecx, [esp + 0x24]
call fcn.00402910
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2a4], 0xffffffff
cmp eax, ebx
je 0x41dd16
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor eax, eax
jmp 0x41e01c
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x40]
push eax
push 0x480b08
push 1
push ebx
push 0x480bd8
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jge 0x41dd4b
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x41dcc1
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
lea edx, [esp + 0x38]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x479188
push eax
mov eax, dword [ecx + 0xc]
call eax
cmp eax, ebx
jge 0x41dd76
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x41dcc1
mov eax, dword [esp + 0x38]
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
cmp eax, ebx
jge 0x41dda3
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [esp + 0x18]
call fcn.004028c0
jmp 0x41dce9
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x41ddaf
mov edx, dword [eax]
jmp 0x41ddb1
xor edx, edx
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x41ddbd
mov ecx, dword [eax]
jmp 0x41ddbf
xor ecx, ecx
mov eax, dword [esp + 0x38]
mov esi, dword [eax]
lea edi, [esp + 0x14]
push edi
push ebx
push 0x30
push edx
push ecx
push eax
mov eax, dword [esi + 0x50]
call eax
cmp eax, ebx
jge 0x41dded
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [esp + 0x18]
call fcn.004028c0
jmp 0x41dce9
push 0x206
lea ecx, [esp + 0x96]
xor eax, eax
push ebx
push ecx
mov dword [esp + 0x48], ebx
mov word [esp + 0x9c], ax
call fcn.00443d20
mov eax, dword [esp + 0x20]
add esp, 0xc
cmp eax, ebx
je 0x41dfe1
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x1c], ebx
mov edx, dword [eax]
mov edx, dword [edx + 0x10]
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x20]
push ecx
push 1
push 0xffffffffffffffff
push eax
mov byte [esp + 0x2b8], 4
call edx
cmp dword [esp + 0x3c], ebx
je 0x41dfc9
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x38], 0x53
mov byte [esp + 0x39], 0x49
mov byte [esp + 0x3a], 0x44
mov byte [esp + 0x3b], bl
call fcn.0040a6d0
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x30]
mov byte [esp + 0x2a8], 5
mov byte [esp + 0x6c], 0x4e
mov byte [esp + 0x6d], 0x61
mov byte [esp + 0x6e], 0x6d
mov byte [esp + 0x6f], 0x65
mov byte [esp + 0x70], bl
call fcn.0040a6d0
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x2a4], 6
cmp eax, ebx
je 0x41deb6
mov eax, dword [eax]
jmp 0x41deb8
xor eax, eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
push ebx
push ebx
lea ebp, [esp + 0x60]
push ebp
push ebx
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
cmp eax, ebx
jl 0x41df91
cmp word [esp + 0x58], 1
je 0x41df91
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x41deed
mov ecx, dword [eax]
jmp 0x41deef
xor ecx, ecx
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
push ebx
push ebx
lea ebp, [esp + 0x50]
push ebp
push ebx
push ecx
push eax
mov eax, dword [edx + 0x10]
call eax
cmp eax, ebx
jl 0x41df91
cmp word [esp + 0x48], 1
je 0x41df91
mov ecx, dword [esp + 0x60]
push ecx
push edi
call fcn.00445f39
add esp, 8
test eax, eax
jne 0x41df57
mov edx, dword [esp + 0x50]
push edx
lea eax, [esp + 0x94]
push 0x104
push eax
call fcn.00444105
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x9c]
push ecx
push 0x104
push edx
call fcn.00444105
add esp, 0x18
lea eax, [esp + 0x48]
push eax
call esi
lea ecx, [esp + 0x58]
push ecx
call esi
lea ecx, [esp + 0x2c]
call fcn.00402910
lea ecx, [esp + 0x28]
call fcn.00402910
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x2a4], 3
cmp eax, ebx
je 0x41dfbb
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x41dfbb
lea ecx, [esp + 0x2c]
call fcn.00402910
lea ecx, [esp + 0x28]
call fcn.00402910
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x2a4], 3
cmp eax, ebx
je 0x41dfbb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
cmp eax, ebx
jne 0x41de27
jmp 0x41dfe1
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x2a4], 3
cmp eax, ebx
je 0x41dfe1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x18]
call fcn.004028c0
lea ecx, [esp + 0x20]
call fcn.00402910
lea ecx, [esp + 0x24]
call fcn.00402910
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2a4], 0xffffffff
cmp eax, ebx
je 0x41e017
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 1
mov ecx, dword [esp + 0x29c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x284]
xor ecx, esp
call fcn.004424e7
add esp, 0x294
ret 4