Function at 0x41a52e
Capabilities:
Reference wmi statements

Disassembly:
push 0x64
mov eax, 0x554595
call fcn.0050b5da
mov esi, dword [ebp + 8]
xor eax, eax
mov word [ebp - 0x44], ax
xor ebx, ebx
lea eax, [ebp - 0x44]
mov dword [ebp - 0x70], ebx
push eax
lea eax, [ebp - 0x55]
mov byte [ebp - 0x55], bl
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 7
push eax
mov dword [ebp - 0x34], ebx
call fcn.0041a437
push ebx
push 1
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.004069fb
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0x17
push ebx
push 0x58711c
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
call fcn.0041a7a2
test eax, eax
jns 0x41a613
mov al, byte [ebp - 0x2c]
lea ecx, [esi + 4]
mov byte [esi], al
lea eax, [ebp - 0x28]
push eax
call fcn.004056db
lea ecx, [ebp - 0x68]
call fcn.0041a45e
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 4], 3
test ecx, ecx
je 0x41a5cf
mov dword [ebp - 0x4c], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x50]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x41a5e3
mov dword [ebp - 0x50], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x41a5f7
mov dword [ebp - 0x48], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], bl
test eax, eax
je 0x41a78f
mov dword [ebp - 0x54], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41a78f
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x48]
push edx
push ebx
push ebx
mov ecx, dword [eax]
push ebx
push ebx
push ebx
push ebx
push str.ROOTCIMV2
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x41a639
mov al, byte [ebp - 0x2c]
mov byte [esi], al
jmp 0x41a72c
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push dword [ebp - 0x48]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x41a62f
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x50]
push edx
push ebx
push 0x30
mov ecx, dword [eax]
push 0x5870a8
push 0x587094
push eax
call dword [ecx + 0x50]
test eax, eax
js 0x41a62f
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x6c]
push edx
lea edx, [ebp - 0x4c]
mov dword [ebp - 0x6c], ebx
push edx
mov ecx, dword [eax]
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x41a62f
cmp dword [ebp - 0x6c], 0
je 0x41a62f
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x68]
push ebx
push ebx
push edx
mov ecx, dword [eax]
push ebx
push 0x58712c
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x41a62f
mov ecx, dword [ebp - 0x60]
mov eax, 0x587138
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41a6d7
test dx, dx
je 0x41a6d3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41a6d7
add eax, 4
add ecx, 4
test dx, dx
jne 0x41a6b1
mov eax, ebx
jmp 0x41a6dc
sbb eax, eax
or eax, 1
test eax, eax
je 0x41a62f
mov edi, 0x587184
push edi
call fcn.0040701e
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00406c8c
push dword [ebp - 0x60]
call fcn.0040701e
pop ecx
push eax
push dword [ebp - 0x60]
lea ecx, [ebp - 0x28]
call fcn.00406b56
mov edi, 0x57c8fc
push edi
call fcn.0040701e
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00406b56
mov byte [ebp - 0x2c], 1
mov byte [esi], 1
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 4]
call fcn.004056db
lea ecx, [ebp - 0x68]
call fcn.0041a45e
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 4], 3
test ecx, ecx
je 0x41a754
mov dword [ebp - 0x4c], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x50]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x41a768
mov dword [ebp - 0x50], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x41a77c
mov dword [ebp - 0x48], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x54]
mov byte [ebp - 4], bl
test ecx, ecx
je 0x41a78f
mov dword [ebp - 0x54], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.004069fb
mov eax, esi
call fcn.0050b58c
ret