Function at 0x469ff8
Capabilities:
Get session user name
Query or enumerate registry value
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x730
mov eax, dword [0x56afe8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
lea ecx, [ebp - 0x6a8]
push ebx
push ebx
push dword [ebp + 8]
push ebx
call fcn.00469e42
push ebx
call sub.msvcrt.dll__time64
add eax, dword [ebp - 0x6a8]
pop ecx
adc edx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], edx
call fcn.00403a64
push eax
lea ecx, [ebp - 0x6d4]
call fcn.00402a6b
call fcn.00403a64
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00402a6b
call fcn.00403a64
push eax
lea ecx, [ebp - 0x6cc]
call fcn.00402a6b
call fcn.00403a64
push eax
lea ecx, [ebp - 0x6c8]
call fcn.00402a6b
call fcn.00403a64
push eax
lea ecx, [ebp - 0x6d8]
call fcn.00402a6b
call fcn.00403a64
push eax
lea ecx, [ebp - 0x6f0]
call fcn.00402a6b
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0046b97d
test eax, eax
je 0x46a0c2
mov eax, dword [eax + 0x10]
inc eax
jmp 0x46a0c4
mov eax, ebx
mov edi, 0x53658c
mov esi, edi
cmp eax, 0xa
jl 0x46a0d5
mov esi, 0x52b130
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0046b97d
test eax, eax
je 0x46a0f1
mov eax, dword [eax + 0x10]
inc eax
jmp 0x46a0f3
mov eax, ebx
push eax
lea eax, [ebp - 0x6d0]
push esi
push eax
call fcn.00415254
add esp, 0xc
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0x6c0]
push eax
call fcn.0046b97d
test eax, eax
je 0x46a11f
mov eax, dword [eax + 0xc]
jmp 0x46a121
mov eax, ebx
mov esi, edi
cmp eax, 0xa
jl 0x46a12d
mov esi, 0x52b130
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0046b97d
test eax, eax
je 0x46a148
mov eax, dword [eax + 0xc]
jmp 0x46a14a
mov eax, ebx
push eax
lea eax, [ebp - 0x6cc]
push esi
push eax
call fcn.00415254
add esp, 0xc
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0x6c0]
push eax
call fcn.0046b97d
or esi, 0xffffffff
test eax, eax
je 0x46a179
mov eax, dword [eax + 8]
jmp 0x46a17b
mov eax, esi
mov dword [ebp - 0x6a0], edi
cmp eax, 0xa
jl 0x46a190
mov dword [ebp - 0x6a0], 0x52b130
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0046b97d
test eax, eax
je 0x46a1ab
mov eax, dword [eax + 8]
jmp 0x46a1ad
mov eax, esi
push eax
push dword [ebp - 0x6a0]
lea eax, [ebp - 0x6c8]
push eax
call fcn.00415254
add esp, 0xc
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0x6c0]
push eax
call fcn.0046b97d
test eax, eax
je 0x46a1de
mov eax, dword [eax + 4]
jmp 0x46a1e0
mov eax, esi
mov dword [ebp - 0x6a0], edi
cmp eax, 0xa
jl 0x46a1f5
mov dword [ebp - 0x6a0], 0x52b130
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0046b97d
test eax, eax
je 0x46a210
mov eax, dword [eax + 4]
jmp 0x46a212
mov eax, esi
push eax
push dword [ebp - 0x6a0]
lea eax, [ebp - 0x6d8]
push eax
call fcn.00415254
add esp, 0xc
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0x6c0]
push eax
call fcn.0046b97d
test eax, eax
je 0x46a242
mov eax, dword [eax]
jmp 0x46a244
mov eax, esi
cmp eax, 0xa
jl 0x46a24e
mov edi, 0x52b130
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0046b97d
test eax, eax
je 0x46a266
mov esi, dword [eax]
push esi
lea eax, [ebp - 0x6f0]
push edi
push eax
call fcn.00415254
mov esi, dword [ebp - 0x6f0]
lea ecx, [ebp - 0x6c0]
mov edi, dword [ebp - 0x6d8]
add esp, 0xc
push esi
push edi
push dword [ebp - 0x6c8]
push dword [ebp - 0x6cc]
push dword [ebp - 0x6d0]
call fcn.0046ba57
push eax
lea eax, [ebp - 0x6d4]
push str._d__s__sT_s:_s:_s
push eax
call fcn.00415254
add esp, 0x20
call fcn.00403a64
push eax
lea ecx, [ebp - 0x6a0]
call fcn.00402a6b
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x46a33d
push eax
push str._nCoInitializeEx_failed:__x
call fcn.005236d4
pop ecx
pop ecx
mov ecx, dword [ebp - 0x6a0]
lea ecx, [ecx - 0x10]
call fcn.004042e9
lea ecx, [esi - 0x10]
call fcn.004042e9
lea ecx, [edi - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6c8]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6cc]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6d0]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6d4]
lea ecx, [ecx - 0x10]
call fcn.004042e9
xor eax, eax
jmp 0x46acca
push 0x208
lea eax, [ebp - 0x620]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x620]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x6b4]
mov dword [ebp - 0x6b4], ebx
push eax
push 0x54ca5c
push 1
push ebx
push 0x54ca6c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x46a394
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x46a2e0
lea eax, [ebp - 0x710]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x710]
lea edi, [ebp - 0x684]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x730]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x730]
lea edi, [ebp - 0x66c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x720]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x720]
lea edi, [ebp - 0x648]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x6b0]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 0x10
mov eax, dword [ebp - 0x6b4]
mov edi, esp
lea esi, [ebp - 0x684]
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x66c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x648]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x6b0]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x6b0]
push eax
call edi
lea eax, [ebp - 0x720]
push eax
call edi
lea eax, [ebp - 0x730]
push eax
call edi
lea eax, [ebp - 0x710]
push eax
call edi
test esi, esi
js 0x46a4be
push 0x528004
lea ecx, [ebp - 0x6a4]
mov dword [ebp - 0x694], ebx
call fcn.00413061
mov eax, dword [eax]
test eax, eax
je 0x46a490
mov edx, dword [eax]
jmp 0x46a492
mov edx, ebx
mov eax, dword [ebp - 0x6b4]
lea esi, [ebp - 0x694]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov ecx, dword [ebp - 0x6a4]
mov esi, eax
test ecx, ecx
je 0x46a4b7
call fcn.0041873f
test esi, esi
jns 0x46a4c9
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x6b4]
jmp 0x46a6eb
push str.360_360_
lea ecx, [ebp - 0x6a4]
call fcn.00413061
mov edx, dword [eax]
test edx, edx
je 0x46a4e3
mov edx, dword [edx]
jmp 0x46a4e5
mov edx, ebx
mov eax, dword [ebp - 0x694]
push ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x6a4]
test ecx, ecx
je 0x46a502
call fcn.0041873f
mov eax, dword [ebp - 0x6b4]
lea edx, [ebp - 0x690]
push edx
mov dword [ebp - 0x690], ebx
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x6b4]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x46a542
mov eax, dword [ebp - 0x694]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
xor ebx, ebx
inc ebx
jmp 0x46a6f1
mov eax, dword [ebp - 0x690]
lea edx, [ebp - 0x6ec]
mov dword [ebp - 0x6ec], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
js 0x46a6d9
mov eax, dword [ebp - 0x6ec]
push str.360_360_
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x6ec]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x46a6d9
mov eax, dword [ebp - 0x690]
lea edx, [ebp - 0x69c]
mov dword [ebp - 0x69c], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
js 0x46a6d9
push 0xb
pop eax
mov word [ebp - 0x6b0], ax
lea ecx, [ebp - 0x6b0]
xor eax, eax
mov word [ebp - 0x6a8], ax
mov eax, dword [ebp - 0x69c]
mov esi, dword [eax]
call fcn.00469eb7
movzx eax, ax
push eax
push dword [ebp - 0x69c]
call dword [esi + 0x48]
mov esi, eax
lea eax, [ebp - 0x6b0]
push eax
call edi
test esi, esi
jns 0x46a5fe
mov eax, dword [ebp - 0x69c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x46a6d9
push 0xb
pop eax
mov word [ebp - 0x6b0], ax
lea ecx, [ebp - 0x6b0]
xor eax, eax
mov word [ebp - 0x6a8], ax
mov eax, dword [ebp - 0x69c]
mov esi, dword [eax]
call fcn.00469eb7
movzx eax, ax
push eax
push dword [ebp - 0x69c]
call dword [esi + 0x40]
mov esi, eax
lea eax, [ebp - 0x6b0]
push eax
call edi
mov eax, dword [ebp - 0x69c]
mov ecx, dword [eax]
test esi, esi
js 0x46a5f5
push 1
push eax
call dword [ecx + 0x58]
mov ecx, dword [ebp - 0x69c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x46a6d9
mov eax, dword [ebp - 0x690]
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x6e8], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x46a6d9
mov eax, dword [ebp - 0x6e8]
lea edx, [ebp - 0x6e4]
push edx
mov dword [ebp - 0x6e4], ebx
push 9
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x6e8]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x46a6d9
mov eax, dword [ebp - 0x6e4]
lea edx, [ebp - 0x6c4]
push edx
mov dword [ebp - 0x6c4], ebx
push 0x54ca7c
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x6e4]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x46a6fc
mov eax, dword [ebp - 0x694]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x690]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x46ac66
push str.Trigger1
lea ecx, [ebp - 0x6a4]
call fcn.00413061
mov edx, dword [eax]
test edx, edx
je 0x46a716
mov edx, dword [edx]
jmp 0x46a718
mov edx, ebx
mov eax, dword [ebp - 0x6c4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x6a4]
test ecx, ecx
je 0x46a734
call fcn.0041873f
push dword [ebp - 0x6d4]
lea ecx, [ebp - 0x6a4]
call fcn.00413061
mov edx, dword [eax]
test edx, edx
je 0x46a74f
mov edx, dword [edx]
jmp 0x46a751
mov edx, ebx
mov eax, dword [ebp - 0x6c4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x6a4]
test ecx, ecx
je 0x46a76d
call fcn.0041873f
xor eax, eax
mov dword [ebp - 0x700], 0x104
mov word [ebp - 0x418], ax
lea eax, [ebp - 0x700]
push eax
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x638]
call fcn.004108e3
mov esi, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
lea eax, [ebp - 0x6f4]
push eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x6f8], 1
push eax
lea eax, [ebp - 0x6f8]
mov dword [ebp - 0x6f4], 0x208
push eax
push str.USERDNSDOMAIN
push str.Volatile_Environment
push SysReAllocStringLen
call esi
test eax, eax
jne 0x46a8ca
mov ecx, 0x82
lea edi, [ebp - 0x20c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x6f4]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x6f8]
push eax
push str.USERDOMAIN
push str.Volatile_Environment
push SysReAllocStringLen
call esi
test eax, eax
jne 0x46a8ca
push 0x528004
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x68c]
call fcn.004108e3
push eax
lea eax, [ebp - 0x674]
push eax
call fcn.00424243
add esp, 0xc
lea ecx, [ebp - 0x638]
cmp dword [ebp - 0x624], 8
jb 0x46a865
mov ecx, dword [ebp - 0x638]
push dword [ebp - 0x628]
push ecx
mov ecx, eax
call fcn.00422558
mov byte [ebp - 0x6a4], bl
lea ecx, [ebp - 0x650]
push dword [ebp - 0x6a4]
mov dword [ebp - 0x640], ebx
push eax
mov dword [ebp - 0x63c], ebx
call fcn.00410cac
lea eax, [ebp - 0x650]
push eax
lea ecx, [ebp - 0x638]
call fcn.004132cc
lea ecx, [ebp - 0x650]
call fcn.00410d88
lea ecx, [ebp - 0x674]
call fcn.00410d88
lea ecx, [ebp - 0x68c]
call fcn.00410d88
cmp dword [ebp - 0x624], 8
lea eax, [ebp - 0x638]
jb 0x46a8df
mov eax, dword [ebp - 0x638]
push eax
lea ecx, [ebp - 0x6a4]
call fcn.00413061
mov edx, dword [eax]
test edx, edx
je 0x46a8f5
mov edx, dword [edx]
jmp 0x46a8f7
mov edx, ebx
mov eax, dword [ebp - 0x6c4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov ecx, dword [ebp - 0x6a4]
mov esi, eax
test ecx, ecx
je 0x46a915
call fcn.0041873f
mov ecx, dword [ebp - 0x6c4]
push ecx
mov eax, dword [ecx]
call dword [eax + 8]
test esi, esi
jns 0x46a953
mov eax, dword [ebp - 0x694]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x690]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x638]
call fcn.00410d88
jmp 0x46ac66
mov eax, dword [ebp - 0x690]
lea edx, [ebp - 0x698]
mov dword [ebp - 0x698], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jns 0x46a9a0
mov eax, dword [ebp - 0x694]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x690]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x698]
test eax, eax
je 0x46a943
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x46a943
mov esi, dword [ebp - 0x698]
lea ecx, [ebp - 0x6a4]
push str.Users
call fcn.0041ad1a
mov ecx, dword [esi]
push dword [eax]
push esi
call dword [ecx + 0x40]
push dword [ebp - 0x6a4]
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
js 0x46a970
mov eax, dword [ebp - 0x698]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x46a970
mov eax, dword [ebp - 0x690]
lea edx, [ebp - 0x6e0]
mov dword [ebp - 0x6e0], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
js 0x46a970
mov eax, dword [ebp - 0x6e0]
lea edx, [ebp - 0x6dc]
push edx
mov dword [ebp - 0x6dc], ebx
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov ecx, dword [ebp - 0x6e0]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x46a970
mov eax, dword [ebp - 0x6dc]
lea edx, [ebp - 0x6b8]
push edx
mov dword [ebp - 0x6b8], ebx
push str.MbLk
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x6dc]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x46a970
lea eax, [ebp - 0x620]
push eax
lea ecx, [ebp - 0x6a4]
call fcn.00413061
mov edx, dword [eax]
test edx, edx
je 0x46aa82
mov edx, dword [edx]
jmp 0x46aa84
mov edx, ebx
mov eax, dword [ebp - 0x6b8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov ecx, dword [ebp - 0x6a4]
mov esi, eax
test ecx, ecx
je 0x46aaa2
call fcn.0041873f
test esi, esi
jns 0x46aab7
mov eax, dword [ebp - 0x6b8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x46a970
push dword [0x5771dc]
call fcn.00416dce
pop ecx
lea ecx, [ebp - 0x6a4]
test eax, eax
je 0x46aad4
push str.pagetype:25_fromplantask__from360js
jmp 0x46aad9
push str.pagetype:25_fromplantask
call fcn.00413061
mov edx, dword [eax]
test edx, edx
je 0x46aae8
mov edx, dword [edx]
jmp 0x46aaea
mov edx, ebx
mov eax, dword [ebp - 0x6b8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov ecx, dword [ebp - 0x6a4]
mov esi, eax
test ecx, ecx
je 0x46ab08
call fcn.0041873f
mov eax, dword [ebp - 0x6b8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x46a970
push 0x527fb4
lea ecx, [ebp - 0x720]
mov dword [ebp - 0x6fc], ebx
call fcn.004130e5
mov esi, eax
lea edi, [ebp - 0x648]
lea eax, [ebp - 0x710]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x710]
lea edi, [ebp - 0x66c]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x730]
push str.BuiltinAdministrators
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004130e5
mov esi, eax
lea edi, [ebp - 0x684]
push str.360_360_
lea ecx, [ebp - 0x6a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00413061
mov edx, dword [eax]
test edx, edx
je 0x46ab91
mov edx, dword [edx]
jmp 0x46ab93
mov edx, ebx
lea esi, [ebp - 0x6fc]
mov eax, dword [ebp - 0x694]
push esi
sub esp, 0x10
lea esi, [ebp - 0x648]
mov edi, esp
mov ecx, dword [eax]
push 4
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x66c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x684]
push 6
push dword [ebp - 0x690]
movsd dword es:[edi], dword [esi]
push edx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov ecx, dword [ebp - 0x6a4]
mov edi, eax
test ecx, ecx
je 0x46abf5
call fcn.0041873f
mov dword [ebp - 0x6a4], ebx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x730]
push eax
call esi
lea eax, [ebp - 0x710]
push eax
call esi
lea eax, [ebp - 0x720]
push eax
call esi
mov eax, dword [ebp - 0x694]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x690]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
js 0x46a988
mov eax, dword [ebp - 0x6fc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x698]
test eax, eax
je 0x46ac58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x638]
call fcn.00410d88
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x6a0]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6f0]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6d8]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6c8]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6cc]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6d0]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x6d4]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00522d04
leave
ret 4