Function at 0x4d950a
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings

Disassembly:
push 0x47c
mov eax, 0x5ae7a9
call fcn.00553bf3
mov esi, edx
mov ebx, ecx
mov dword [ebp - 0x44c], ebx
mov eax, dword [ebp + 8]
and dword [ebp - 0x54], 0
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
lea edi, [ebp - 0x28]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
xor eax, eax
push edi
inc eax
push edi
mov byte [ebp - 4], al
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x4d9566
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004ba45b
jmp 0x4da3d6
push edi
push edi
push edi
push 3
push edi
push edi
push edi
push 0xffffffffffffffff
push edi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x4d958a
cmp eax, 0x80010119
je 0x4d958a
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4d9556
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], edi
push eax
push 0x5c6368
xor eax, eax
inc eax
push eax
push edi
push 0x5c6438
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4d9582
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x34]
push edx
push edi
push edi
push edi
push edi
push edi
push edi
mov dword [ebp - 0x34], edi
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x4d95d0
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x4d9582
push edi
push edi
push 3
push 3
push edi
push edi
push 0xa
push dword [ebp - 0x34]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x4d95f2
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x4d95c5
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], edi
push eax
push edi
push 0x30
push dword [ebp - 0x14]
lea eax, [ebp - 0x5e]
mov dword [ebp - 0xa0], 0x434d6746
push edi
sub esp, 0xc
mov dword [ebp - 0x9c], 0x596f4450
mov ecx, esp
mov dword [ebp - 0x98], 0x7935424c
lea edx, [ebp - 0xa0]
mov dword [ebp - 0x94], 0x78556a50
mov dword [ebp - 0x90], 0x6a52444d
push ecx
push eax
push edx
mov dword [ebp - 0x8c], 0x3274534c
mov dword [ebp - 0x88], 0x79356a4c
mov dword [ebp - 0x84], 0x71346a43
mov dword [ebp - 0x80], 0x2b6b484e
mov dword [ebp - 0x7c], 0x39634445
mov dword [ebp - 0x78], 0x2b51574a
mov dword [ebp - 0x74], 0x50493246
mov dword [ebp - 0x70], 0x41737746
mov dword [ebp - 0x6c], 0x48597a50
mov dword [ebp - 0x68], 0x3259434d
mov dword [ebp - 0x64], 0x41414141
mov word [ebp - 0x60], 0x674b
call fcn.00450208
lea ecx, [ebp - 0x458]
call fcn.005300dd
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00451547
push eax
lea ecx, [ebp - 0x14]
call fcn.004aca2b
mov byte [ebp - 4], 3
mov edx, dword [eax]
test edx, edx
je 0x4d96d4
mov edx, dword [edx]
jmp 0x4d96d6
mov edx, edi
mov eax, dword [ebp - 0x34]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov ecx, dword [ebp - 0x14]
mov esi, eax
test ecx, ecx
je 0x4d96f1
call fcn.004acada
mov dword [ebp - 0x14], edi
xor eax, eax
lea ecx, [ebp - 0x458]
inc eax
mov byte [ebp - 4], al
call fcn.004513e1
test esi, esi
js 0x4d95e7
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
call fcn.004bc614
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4da3a2
mov ebx, dword [ebp - 0x54]
xor esi, esi
inc esi
mov eax, dword [ecx]
lea edx, [ebp - 0x2c]
push edx
lea edx, [ebp - 0x3c]
push edx
push esi
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x2c], 0
je 0x4da39c
lea ecx, [ebp - 0x1c]
call fcn.004ba619
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp + 0xc]
sar eax, 2
test eax, eax
je 0x4da379
push edi
lea ecx, [ebp + 0xc]
call fcn.004ba377
mov ecx, dword [ebp - 0x3c]
lea esi, [ebp - 0x50]
push 0
push 0
push esi
mov edx, dword [ecx]
xor esi, esi
push esi
push dword [eax]
push ecx
call dword [edx + 0x10]
test eax, eax
js 0x4da32f
xor eax, eax
inc eax
cmp word [ebp - 0x50], ax
je 0x4da32f
cmp word [ebp - 0x50], si
je 0x4da32f
mov dword [ebp - 0x14], esi
call fcn.0045082c
push eax
lea ecx, [ebp - 0x14]
call fcn.004c3be8
mov byte [ebp - 4], 5
movzx eax, word [ebp - 0x50]
sub eax, 3
je 0x4da140
sub eax, 5
je 0x4da11e
sub eax, 3
je 0x4d9bfa
sub eax, 0xb
je 0x4d99f8
dec eax
jne 0x4da31e
push dword [ebp - 0x48]
lea eax, [ebp - 0x1c9]
mov dword [ebp - 0x278], 0x2b64435a
push esi
sub esp, 0xc
mov dword [ebp - 0x274], 0x4e736850
mov ecx, esp
mov dword [ebp - 0x270], 0x32736966
lea edx, [ebp - 0x278]
mov dword [ebp - 0x26c], 0x32347765
mov dword [ebp - 0x268], 0x4534524c
push ecx
push eax
push edx
mov dword [ebp - 0x264], 0x7a565342
mov dword [ebp - 0x260], 0x5645324e
mov dword [ebp - 0x25c], 0x4267414b
mov dword [ebp - 0x258], 0x5967425a
mov dword [ebp - 0x254], 0x6c733343
mov dword [ebp - 0x250], 0x694d324a
mov dword [ebp - 0x24c], 0x6c737a44
mov dword [ebp - 0x248], 0x63555865
mov dword [ebp - 0x244], 0x41597a46
mov dword [ebp - 0x240], 0x43775445
mov dword [ebp - 0x23c], 0x436b5143
mov dword [ebp - 0x238], 0x42344347
mov dword [ebp - 0x234], 0x3851534c
mov dword [ebp - 0x230], 0x36356942
mov dword [ebp - 0x22c], 0x6c744866
mov dword [ebp - 0x228], 0x2f636a4e
mov dword [ebp - 0x224], 0x494d4348
mov dword [ebp - 0x220], 0x50775742
mov dword [ebp - 0x21c], 0x3341334f
mov dword [ebp - 0x218], 0x4459414b
mov dword [ebp - 0x214], 0x39737764
mov dword [ebp - 0x210], 0x6138524e
mov dword [ebp - 0x20c], 0x45515165
mov dword [ebp - 0x208], 0x37637946
mov dword [ebp - 0x204], 0x766b6742
mov dword [ebp - 0x200], 0x6f6f4347
mov dword [ebp - 0x1fc], 0x776f7743
mov dword [ebp - 0x1f8], 0x6c774349
mov dword [ebp - 0x1f4], 0x5559514a
mov dword [ebp - 0x1f0], 0x476f7843
mov dword [ebp - 0x1ec], 0x72596844
mov dword [ebp - 0x1e8], 0x375a524e
mov dword [ebp - 0x1e4], 0x7373674b
mov dword [ebp - 0x1e0], 0x664d694d
mov dword [ebp - 0x1dc], 0x47775349
mov dword [ebp - 0x1d8], 0x4c6b5442
mov dword [ebp - 0x1d4], 0x4e386842
mov dword [ebp - 0x1d0], 0x41417766
mov word [ebp - 0x1cc], 0x4841
mov byte [ebp - 0x1ca], 0x30
call fcn.00450208
lea ecx, [ebp - 0x458]
call fcn.0052fed7
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.004ab6d2
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c3755
lea ecx, [ebp - 0x458]
jmp 0x4da2e3
push dword [ebp - 0x48]
lea eax, [ebp - 0x27a]
mov dword [ebp - 0x328], 0x3459445a
push esi
sub esp, 0xc
mov dword [ebp - 0x324], 0x33396a42
mov ecx, esp
mov dword [ebp - 0x320], 0x49635143
lea edx, [ebp - 0x328]
mov dword [ebp - 0x31c], 0x50415449
mov dword [ebp - 0x318], 0x45736944
push ecx
push eax
push edx
mov dword [ebp - 0x314], 0x6d305150
mov dword [ebp - 0x310], 0x35386a47
mov dword [ebp - 0x30c], 0x65517744
mov dword [ebp - 0x308], 0x7a6c3343
mov dword [ebp - 0x304], 0x4659794a
mov dword [ebp - 0x300], 0x2f746844
mov dword [ebp - 0x2fc], 0x464d7948
mov dword [ebp - 0x2f8], 0x6e306747
mov dword [ebp - 0x2f4], 0x31675443
mov dword [ebp - 0x2f0], 0x6749514b
mov dword [ebp - 0x2ec], 0x33597949
mov dword [ebp - 0x2e8], 0x7a634362
mov dword [ebp - 0x2e4], 0x35316a47
mov dword [ebp - 0x2e0], 0x766f7861
mov dword [ebp - 0x2dc], 0x32556a44
mov dword [ebp - 0x2d8], 0x47556948
mov dword [ebp - 0x2d4], 0x48676a64
mov dword [ebp - 0x2d0], 0x4d597a47
mov dword [ebp - 0x2cc], 0x6b776947
mov dword [ebp - 0x2c8], 0x4e774845
mov dword [ebp - 0x2c4], 0x5030674c
mov dword [ebp - 0x2c0], 0x42674247
mov dword [ebp - 0x2bc], 0x37787950
mov dword [ebp - 0x2b8], 0x496b675a
mov dword [ebp - 0x2b4], 0x77344245
mov dword [ebp - 0x2b0], 0x3463674b
mov dword [ebp - 0x2ac], 0x6c514449
mov dword [ebp - 0x2a8], 0x38647747
mov dword [ebp - 0x2a4], 0x32647a42
mov dword [ebp - 0x2a0], 0x6a67424a
mov dword [ebp - 0x29c], 0x4e77514b
mov dword [ebp - 0x298], 0x516f334a
mov dword [ebp - 0x294], 0x50775265
mov dword [ebp - 0x290], 0x78347961
mov dword [ebp - 0x28c], 0x63593265
mov dword [ebp - 0x288], 0x55675244
mov dword [ebp - 0x284], 0x6a51524a
mov dword [ebp - 0x280], 0x41414141
mov word [ebp - 0x27c], 0x4166
call fcn.00450208
lea ecx, [ebp - 0x464]
call fcn.0052fed7
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.004ab6d2
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c3755
lea ecx, [ebp - 0x464]
jmp 0x4da2e3
cmp word [ebp - 0x48], 0
je 0x4d9db4
push esi
sub esp, 0xc
mov dword [ebp - 0x1c8], 0x37415346
mov ecx, esp
mov dword [ebp - 0x1c4], 0x73687a4b
lea eax, [ebp - 0x132]
mov dword [ebp - 0x1c0], 0x394e7965
lea edx, [ebp - 0x1c8]
mov dword [ebp - 0x1bc], 0x54556947
push ecx
push eax
push edx
mov dword [ebp - 0x1b8], 0x37676d4b
mov dword [ebp - 0x1b4], 0x626b6741
mov dword [ebp - 0x1b0], 0x6b385462
mov dword [ebp - 0x1ac], 0x476f7a4f
mov dword [ebp - 0x1a8], 0x39565848
mov dword [ebp - 0x1a4], 0x54557948
mov dword [ebp - 0x1a0], 0x67414265
mov dword [ebp - 0x19c], 0x32525742
mov dword [ebp - 0x198], 0x30737746
mov dword [ebp - 0x194], 0x594d6e4b
mov dword [ebp - 0x190], 0x4677524a
mov dword [ebp - 0x18c], 0x6c49444c
mov dword [ebp - 0x188], 0x4c306a4d
mov dword [ebp - 0x184], 0x69387a4f
mov dword [ebp - 0x180], 0x546f6e5a
mov dword [ebp - 0x17c], 0x69704241
mov dword [ebp - 0x178], 0x58344264
mov dword [ebp - 0x174], 0x316f6d49
mov dword [ebp - 0x170], 0x335a6850
mov dword [ebp - 0x16c], 0x61456764
mov dword [ebp - 0x168], 0x6d68774c
mov dword [ebp - 0x164], 0x47594841
mov dword [ebp - 0x160], 0x7751575a
mov dword [ebp - 0x15c], 0x6d556841
mov dword [ebp - 0x158], 0x39595342
mov dword [ebp - 0x154], 0x69564765
mov dword [ebp - 0x150], 0x42555764
mov dword [ebp - 0x14c], 0x32466850
mov dword [ebp - 0x148], 0x56387764
mov dword [ebp - 0x144], 0x5663674e
mov dword [ebp - 0x140], 0x2f637763
mov dword [ebp - 0x13c], 0x4c4d5241
mov dword [ebp - 0x138], 0x41414141
mov word [ebp - 0x134], 0x4161
call fcn.00450208
lea ecx, [ebp - 0x488]
call fcn.0052fed7
add esp, 0xc
mov byte [ebp - 4], 6
or ebx, 2
jmp 0x4da0bc
push esi
sub esp, 0xc
mov dword [ebp - 0x448], 0x694d7a42
mov ecx, esp
mov dword [ebp - 0x444], 0x70635450
lea eax, [ebp - 0x329]
mov dword [ebp - 0x440], 0x75517946
lea edx, [ebp - 0x448]
mov dword [ebp - 0x43c], 0x6b6f4447
push ecx
push eax
mov dword [ebp - 0x438], 0x4634684a
mov dword [ebp - 0x434], 0x4834414e
mov dword [ebp - 0x430], 0x6e314242
mov dword [ebp - 0x42c], 0x6d776948
mov dword [ebp - 0x428], 0x44554842
mov dword [ebp - 0x424], 0x63495265
mov dword [ebp - 0x420], 0x55417a49
mov dword [ebp - 0x41c], 0x7946434c
mov dword [ebp - 0x418], 0x76676949
mov dword [ebp - 0x414], 0x4755524b
mov dword [ebp - 0x410], 0x52596741
mov dword [ebp - 0x40c], 0x47553343
mov dword [ebp - 0x408], 0x4c387a4a
mov dword [ebp - 0x404], 0x536b6749
mov dword [ebp - 0x400], 0x79735149
mov dword [ebp - 0x3fc], 0x69567748
mov dword [ebp - 0x3f8], 0x7673794c
mov dword [ebp - 0x3f4], 0x76675349
mov dword [ebp - 0x3f0], 0x47557a4b
mov dword [ebp - 0x3ec], 0x72597941
mov dword [ebp - 0x3e8], 0x59676949
mov dword [ebp - 0x3e4], 0x7a515863
mov dword [ebp - 0x3e0], 0x6d417a41
mov dword [ebp - 0x3dc], 0x38774166
mov dword [ebp - 0x3d8], 0x61777a49
mov dword [ebp - 0x3d4], 0x61514465
mov dword [ebp - 0x3d0], 0x49455365
mov dword [ebp - 0x3cc], 0x654d524a
mov dword [ebp - 0x3c8], 0x33416846
mov dword [ebp - 0x3c4], 0x6e385150
mov dword [ebp - 0x3c0], 0x63777a4e
mov dword [ebp - 0x3bc], 0x6777674c
mov dword [ebp - 0x3b8], 0x3630684c
mov dword [ebp - 0x3b4], 0x2f636a66
mov dword [ebp - 0x3b0], 0x2b556843
mov dword [ebp - 0x3ac], 0x5a734263
mov dword [ebp - 0x3a8], 0x6e63444a
mov dword [ebp - 0x3a4], 0x706f6946
mov dword [ebp - 0x3a0], 0x7463414a
mov dword [ebp - 0x39c], 0x426f774e
mov dword [ebp - 0x398], 0x5967324d
mov dword [ebp - 0x394], 0x44775150
mov dword [ebp - 0x390], 0x63556750
mov dword [ebp - 0x38c], 0x39746743
mov dword [ebp - 0x388], 0x7638684e
mov dword [ebp - 0x384], 0x6e637a49
mov dword [ebp - 0x380], 0x4b305247
mov dword [ebp - 0x37c], 0x4741524b
mov dword [ebp - 0x378], 0x3078694e
mov dword [ebp - 0x374], 0x78596865
mov dword [ebp - 0x370], 0x4759794b
mov dword [ebp - 0x36c], 0x4a6b534a
mov dword [ebp - 0x368], 0x6d385241
mov dword [ebp - 0x364], 0x6b63784a
mov dword [ebp - 0x360], 0x67736950
mov dword [ebp - 0x35c], 0x57454742
mov dword [ebp - 0x358], 0x38397a64
mov dword [ebp - 0x354], 0x45383348
mov dword [ebp - 0x350], 0x55677844
mov dword [ebp - 0x34c], 0x365a774f
mov dword [ebp - 0x348], 0x6b394443
mov dword [ebp - 0x344], 0x6a595449
mov dword [ebp - 0x340], 0x77494345
mov dword [ebp - 0x33c], 0x4b735850
mov dword [ebp - 0x338], 0x73515246
mov dword [ebp - 0x334], 0x52733343
mov dword [ebp - 0x330], 0x4141774e
mov word [ebp - 0x32c], 0x4d41
mov byte [ebp - 0x32a], 0x34
push edx
call fcn.00450208
lea ecx, [ebp - 0x470]
call fcn.0052fed7
add esp, 0xc
mov dword [ebp - 4], 7
or ebx, 4
mov ecx, eax
mov dword [ebp - 0x54], ebx
call fcn.004ab6d2
push edi
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.004ba377
push eax
lea ecx, [ebp - 0x1c]
call fcn.004ba5a1
push esi
mov ecx, eax
call fcn.004c3b9a
test bl, 4
je 0x4da0f8
and ebx, 0xfffffffb
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x54], ebx
call fcn.004ab565
mov dword [ebp - 4], 5
test bl, 2
je 0x4da31e
and ebx, 0xfffffffd
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x54], ebx
call fcn.004ab565
jmp 0x4da31e
mov esi, dword [ebp - 0x48]
lea ecx, [ebp + 0xc]
push edi
call fcn.004ba377
push eax
lea ecx, [ebp - 0x1c]
call fcn.004ba5a1
push esi
mov ecx, eax
call fcn.004c3b9a
jmp 0x4da31e
push dword [ebp - 0x48]
lea eax, [ebp - 0xa6]
mov dword [ebp - 0x130], 0x7134445a
push esi
sub esp, 0xc
mov dword [ebp - 0x12c], 0x77514149
mov ecx, esp
mov dword [ebp - 0x128], 0x49776d4f
lea edx, [ebp - 0x130]
mov dword [ebp - 0x124], 0x7a6c7947
mov dword [ebp - 0x120], 0x2f673242
push ecx
push eax
push edx
mov dword [ebp - 0x11c], 0x54497a47
mov dword [ebp - 0x118], 0x6d515462
mov dword [ebp - 0x114], 0x50677759
mov dword [ebp - 0x110], 0x7449514d
mov dword [ebp - 0x10c], 0x69516a47
mov dword [ebp - 0x108], 0x5551514c
mov dword [ebp - 0x104], 0x5934684f
mov dword [ebp - 0x100], 0x4e553341
mov dword [ebp - 0xfc], 0x4d734142
mov dword [ebp - 0xf8], 0x4b514146
mov dword [ebp - 0xf4], 0x32355242
mov dword [ebp - 0xf0], 0x70493241
mov dword [ebp - 0xec], 0x6e4d6947
mov dword [ebp - 0xe8], 0x346b6e4a
mov dword [ebp - 0xe4], 0x43635245
mov dword [ebp - 0xe0], 0x4173424b
mov dword [ebp - 0xdc], 0x74557866
mov dword [ebp - 0xd8], 0x6d34534b
mov dword [ebp - 0xd4], 0x5373544c
mov dword [ebp - 0xd0], 0x2b6b6d48
mov dword [ebp - 0xcc], 0x636f7946
mov dword [ebp - 0xc8], 0x59385441
mov dword [ebp - 0xc4], 0x6e635141
mov dword [ebp - 0xc0], 0x4d676e45
mov dword [ebp - 0xbc], 0x6263694a
mov dword [ebp - 0xb8], 0x67596949
mov dword [ebp - 0xb4], 0x6d515750
mov dword [ebp - 0xb0], 0x58517a42
mov dword [ebp - 0xac], 0x41414141
mov word [ebp - 0xa8], 0x4159
call fcn.00450208
lea ecx, [ebp - 0x47c]
call fcn.0052fed7
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004ab6d2
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c3755
lea ecx, [ebp - 0x47c]
add esp, 0xc
mov byte [ebp - 4], 5
call fcn.004ab565
push edi
lea ecx, [ebp + 0xc]
call fcn.004ba377
push eax
lea ecx, [ebp - 0x1c]
call fcn.004ba5a1
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
call fcn.004c2e65
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.004c318a
lea ecx, [ebp - 0x14]
call fcn.004c38e6
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
jmp 0x4da35a
push edi
lea ecx, [ebp + 0xc]
call fcn.004ba377
push eax
lea ecx, [ebp - 0x1c]
call fcn.004ba5a1
mov ecx, 0x5d0bb0
mov esi, eax
call fcn.004c3b60
push eax
push 0x5d0bb0
mov ecx, esi
call fcn.004c3ad4
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp + 0x10]
inc edi
sub eax, dword [ebp + 0xc]
sar eax, 2
cmp edi, eax
jb 0x4d976d
xor esi, esi
inc esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x28]
call fcn.004ba4a8
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x38]
push 0
pop edi
test ecx, ecx
jne 0x4d9739
mov ebx, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004ba45b
lea ecx, [ebp - 0x1c]
call fcn.004ba5f7
lea ecx, [ebp - 0x28]
call fcn.004bb5b4
lea ecx, [ebp + 0xc]
call fcn.004bb412
mov eax, ebx
call fcn.00553ba2
ret