Function at 0x47e1a0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dedc2
mov eax, dword fs:[0]
push eax
sub esp, 0x2c8
push esi
push edi
lea edi, [ebp - 0x2d4]
mov ecx, 0xb2
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x67a114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x258], 0
push 0xc
lea ecx, [ebp - 0x20]
call fcn.00467400
lea ecx, [ebp - 0x20]
call fcn.00418a80
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], 0xd
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x47e276
mov esi, esp
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jge 0x47e276
mov ecx, 0x698644
call fcn.00409340
test eax, eax
je 0x47e26d
mov ecx, dword [ebp - 0x28]
push ecx
push str.com_initialize_failed_hres_x_n
push 0xb07
push 0x5e6434
push 4
mov ecx, 0x698644
call fcn.00409340
mov edx, 0xd0
imul ecx, edx, 0
add eax, ecx
push eax
call fcn.00482bc0
add esp, 0x18
xor edx, edx
jne 0x47e22d
jmp 0x47efb2
push 4
lea ecx, [ebp - 0x30]
call fcn.00467400
push 0x5e6444
lea ecx, [ebp - 0x30]
call fcn.0041dff0
mov byte [ebp - 4], 1
push 4
lea ecx, [ebp - 0x3c]
call fcn.00467400
push 0x5e645c
lea ecx, [ebp - 0x3c]
call fcn.0041dff0
mov byte [ebp - 4], 2
push 0xc
lea ecx, [ebp - 0x50]
call fcn.00467400
lea ecx, [ebp - 0x23d]
call fcn.0044b500
push eax
push 0x100
lea ecx, [ebp - 0x50]
call fcn.0044daa0
mov byte [ebp - 4], 3
mov dword [ebp - 0x58], 0
jmp 0x47e2e5
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x50]
call fcn.00479930
cmp dword [ebp - 0x58], eax
jae 0x47e306
mov ecx, dword [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x50]
call fcn.004521e0
mov dword [eax], 0
jmp 0x47e2dc
cmp dword [ebp + 0xc], 0
je 0x47e401
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x25c]
add eax, 1
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x25c]
mov dl, byte [ecx]
mov byte [ebp - 0x261], dl
add dword [ebp - 0x25c], 1
cmp byte [ebp - 0x261], 0
jne 0x47e328
mov eax, dword [ebp - 0x25c]
sub eax, dword [ebp - 0x260]
mov dword [ebp - 0x268], eax
je 0x47e401
mov ecx, 1
test ecx, ecx
je 0x47e3d2
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x70]
push eax
call fcn.00455780
add esp, 8
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x270], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x270]
call fcn.00468430
push eax
lea ecx, [ebp - 0x244]
call fcn.0041dff0
mov dword [ebp - 0x274], eax
mov edx, dword [ebp - 0x274]
push edx
lea ecx, [ebp - 0x30]
call fcn.00451900
lea ecx, [ebp - 0x244]
call fcn.0041e100
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.0041e090
jmp 0x47e401
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x248]
call fcn.0041dff0
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
push ecx
lea ecx, [ebp - 0x30]
call fcn.00451900
lea ecx, [ebp - 0x248]
call fcn.0041e100
cmp dword [ebp + 0x10], 0
je 0x47e451
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x27c]
add eax, 1
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x27c]
mov dl, byte [ecx]
mov byte [ebp - 0x281], dl
add dword [ebp - 0x27c], 1
cmp byte [ebp - 0x281], 0
jne 0x47e41f
mov eax, dword [ebp - 0x27c]
sub eax, dword [ebp - 0x280]
mov dword [ebp - 0x288], eax
jne 0x47e47f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x50]
call fcn.00450740
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.0041e100
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0041e100
jmp 0x47efb2
mov ecx, 1
test ecx, ecx
je 0x47e511
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.00455780
add esp, 8
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x290], ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x290]
call fcn.00468430
push eax
lea ecx, [ebp - 0x24c]
call fcn.0041dff0
mov dword [ebp - 0x294], eax
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x298], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x298]
push eax
lea ecx, [ebp - 0x3c]
call fcn.0041e250
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x24c]
call fcn.0041e100
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.0041e090
jmp 0x47e554
mov ecx, dword [ebp + 0x10]
push ecx
lea ecx, [ebp - 0x250]
call fcn.0041dff0
mov dword [ebp - 0x29c], eax
mov edx, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x3c]
call fcn.0041e250
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.0041e100
mov esi, esp
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jge 0x47e5eb
mov ecx, 0x698644
call fcn.00409340
test eax, eax
je 0x47e5be
mov ecx, dword [ebp - 0x28]
push ecx
push str.com_initialize_security_failed_hres_x_n
push 0xb26
push 0x5e64a8
push 4
mov ecx, 0x698644
call fcn.00409340
mov edx, 0xd0
imul ecx, edx, 0
add eax, ecx
push eax
call fcn.00482bc0
add esp, 0x18
xor edx, edx
jne 0x47e57e
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x50]
call fcn.00450740
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.0041e100
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0041e100
jmp 0x47efb2
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa8], 0
mov esi, esp
lea eax, [ebp - 0x90]
push eax
push 0x5ea958
push 1
push 0
push 0x5ea948
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x47ef86
mov esi, esp
lea ecx, [ebp - 0x9c]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x30]
call fcn.0041e1b0
push eax
mov edx, dword [ebp - 0x90]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x90]
push ecx
mov edx, dword [eax + 0xc]
call edx
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jge 0x47e6c5
mov ecx, 0x698644
call fcn.00409340
test eax, eax
je 0x47e6bc
mov eax, dword [ebp - 0x28]
push eax
push str.connect_server_failed_hres_x_n
push 0xb32
push 0x5e64d8
push 4
mov ecx, 0x698644
call fcn.00409340
mov ecx, 0xd0
imul edx, ecx, 0
add eax, edx
push eax
call fcn.00482bc0
add esp, 0x18
xor eax, eax
jne 0x47e67c
jmp 0x47ef69
mov esi, esp
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x9c]
push ecx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x47ef4c
mov esi, esp
lea edx, [ebp - 0xa8]
push edx
push 0
push 0x30
lea ecx, [ebp - 0x3c]
call fcn.0041e1b0
push eax
push 0x5e64e8
lea ecx, [ebp - 0x254]
call fcn.0041dff0
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a8], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x2a8]
call fcn.0041e1b0
push eax
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, dword [edx + 0x50]
call ecx
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x254]
call fcn.0041e100
cmp dword [ebp - 0x28], 0
jge 0x47e79f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x50]
call fcn.00450740
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.0041e100
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0041e100
jmp 0x47efb2
mov dword [ebp - 0xb4], 0
cmp dword [ebp - 0xa8], 0
je 0x47ef4c
mov dword [ebp - 0xbc], 0
mov esi, esp
lea edx, [ebp - 0xb4]
push edx
push 0
lea ecx, [ebp - 0x50]
call fcn.004521e0
push eax
lea ecx, [ebp - 0x50]
call fcn.00479930
push eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0xa8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa8]
push edx
mov eax, dword [ecx + 0x10]
call eax
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0x28], 0
jl 0x47ef2f
mov dword [ebp - 0xc0], 0
jmp 0x47e825
mov ecx, dword [ebp - 0xc0]
add ecx, 1
mov dword [ebp - 0xc0], ecx
mov edx, dword [ebp - 0xc0]
cmp edx, dword [ebp - 0xb4]
jae 0x47eeab
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x50]
call fcn.004521e0
mov ecx, dword [eax]
mov dword [ebp - 0x2ac], ecx
mov esi, esp
lea edx, [ebp - 0xc8]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x2ac]
push eax
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1c]
call eax
cmp esi, esp
call fcn.0048678d
test eax, eax
jne 0x47eea6
lea ecx, [ebp - 0xf0]
call fcn.0042f3c0
mov byte [ebp - 4], 9
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0xf0]
push edx
call fcn.00422250
add esp, 4
mov ecx, eax
call fcn.00412fc0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x108], 0
mov esi, esp
lea eax, [ebp - 0xfc]
push eax
push 1
mov ecx, dword [ebp - 0xc8]
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
cmp esi, esp
call fcn.0048678d
mov esi, esp
lea edx, [ebp - 0x108]
push edx
push 1
mov eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
cmp esi, esp
call fcn.0048678d
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x114], ecx
jmp 0x47e922
mov edx, dword [ebp - 0x114]
add edx, 1
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x108]
jg 0x47ee69
mov esi, esp
lea ecx, [ebp - 0x12c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp esi, esp
call fcn.0048678d
mov esi, esp
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0xc8]
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jge 0x47e9c7
mov ecx, 0x698644
call fcn.00409340
test eax, eax
je 0x47e9be
mov edx, dword [ebp - 0x114]
push edx
mov eax, dword [ebp + 0x10]
push eax
push 0x5e64f0
push 0xb58
push 0x5e6528
push 4
mov ecx, 0x698644
call fcn.00409340
mov ecx, 0xd0
imul edx, ecx, 0
add eax, edx
push eax
call fcn.00482bc0
add esp, 0x1c
xor eax, eax
jne 0x47e977
jmp 0x47ee64
push 4
lea ecx, [ebp - 0x138]
call fcn.00467400
mov ecx, dword [ebp - 0x124]
push ecx
lea ecx, [ebp - 0x138]
call fcn.0041dff0
mov byte [ebp - 4], 0xa
mov esi, esp
lea edx, [ebp - 0x150]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp esi, esp
call fcn.0048678d
mov eax, dword [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x50]
call fcn.004521e0
mov ecx, dword [eax]
mov dword [ebp - 0x2b0], ecx
mov esi, esp
push 0
push 0
lea edx, [ebp - 0x150]
push edx
push 0
lea ecx, [ebp - 0x138]
call fcn.0041e1b0
push eax
mov eax, dword [ebp - 0x2b0]
push eax
mov ecx, dword [ebp - 0x2b0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0x28], 0
jge 0x47eab1
mov ecx, 0x698644
call fcn.00409340
test eax, eax
je 0x47eaa8
movzx ecx, word [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x124]
push edx
mov eax, dword [ebp + 0x10]
push eax
push 0x5e6538
push 0xb63
push 0x5e6578
push 4
mov ecx, 0x698644
call fcn.00409340
mov ecx, 0xd0
imul edx, ecx, 0
add eax, edx
push eax
call fcn.00482bc0
add esp, 0x20
xor eax, eax
jne 0x47ea59
jmp 0x47ee3f
movzx ecx, word [ebp - 0x150]
test ecx, ecx
je 0x47eada
movzx edx, word [ebp - 0x150]
cmp edx, 1
je 0x47eada
movzx eax, word [ebp - 0x150]
cmp eax, 0x1000
jl 0x47ebcf
mov ecx, 1
test ecx, ecx
je 0x47eb77
mov edx, dword [ebp - 0x124]
push edx
lea eax, [ebp - 0x16c]
push eax
call fcn.00455b00
add esp, 8
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b8], ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2b8]
call fcn.00409420
push eax
lea ecx, [ebp - 0x184]
call fcn.00409510
mov byte [ebp - 4], 0xc
push 0x5e5976
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00403420
add esp, 4
mov ecx, eax
call fcn.00422c10
mov ecx, eax
call fcn.00412fc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x184]
call fcn.004094c0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x16c]
call fcn.004094c0
jmp 0x47ebca
lea ecx, [ebp - 0x138]
call fcn.0041e1e0
push eax
lea ecx, [ebp - 0x19c]
call fcn.00409510
mov byte [ebp - 4], 0xd
push 0x5e5977
lea ecx, [ebp - 0x19c]
push ecx
lea edx, [ebp - 0xf0]
push edx
call fcn.00403420
add esp, 4
mov ecx, eax
call fcn.00422c10
mov ecx, eax
call fcn.00412fc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x19c]
call fcn.004094c0
jmp 0x47ee3f
mov esi, esp
lea eax, [ebp - 0x1b0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp esi, esp
call fcn.0048678d
mov esi, esp
push 8
push 0
push 0x409
lea ecx, [ebp - 0x150]
push ecx
lea edx, [ebp - 0x1b0]
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jge 0x47ecdf
mov ecx, 0x698644
call fcn.00409340
test eax, eax
je 0x47ecd2
call fcn.0047ace0
mov dword [ebp - 0x2bc], eax
mov esi, esp
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1cc]
push ecx
mov edx, dword [ebp - 0x2bc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [eax + 8]
call edx
cmp esi, esp
call fcn.0048678d
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2c4], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2c4]
call fcn.00409420
push eax
mov ecx, dword [ebp - 0x28]
push ecx
movzx edx, word [ebp - 0x150]
push edx
mov eax, dword [ebp - 0x124]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x5e6588
push 0xb75
push str.wmi_get_class
push 4
mov edx, 0xd0
imul esi, edx, 0
mov ecx, 0x698644
call fcn.00409340
add eax, esi
push eax
call fcn.00482bc0
add esp, 0x28
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1cc]
call fcn.004094c0
xor eax, eax
jne 0x47ec18
jmp 0x47ee29
mov ecx, 1
test ecx, ecx
je 0x47edbe
mov edx, dword [ebp - 0x124]
push edx
lea eax, [ebp - 0x1e4]
push eax
call fcn.00455b00
add esp, 8
mov dword [ebp - 0x2c8], eax
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2cc], ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x2cc]
call fcn.00409420
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00409510
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x214]
push eax
call fcn.00455b00
add esp, 8
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp - 0x2d4], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2d4]
call fcn.00409420
push eax
lea edx, [ebp - 0x1fc]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00403420
add esp, 4
mov ecx, eax
call fcn.00422c10
mov ecx, eax
call fcn.00412fc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x214]
call fcn.004094c0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1fc]
call fcn.004094c0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e4]
call fcn.004094c0
jmp 0x47ee13
lea ecx, [ebp - 0x138]
call fcn.0041e1e0
push eax
lea ecx, [ebp - 0x22c]
call fcn.00409510
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00403420
add esp, 4
mov ecx, eax
call fcn.00422c10
mov ecx, eax
call fcn.00412fc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x22c]
call fcn.004094c0
mov esi, esp
lea ecx, [ebp - 0x1b0]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp esi, esp
call fcn.0048678d
mov esi, esp
lea edx, [ebp - 0x150]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp esi, esp
call fcn.0048678d
mov esi, esp
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp esi, esp
call fcn.0048678d
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x138]
call fcn.0041e100
jmp 0x47e913
cmp dword [ebp - 0xc8], 0
je 0x47ee88
mov esi, esp
mov ecx, dword [ebp - 0xc8]
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
cmp esi, esp
call fcn.0048678d
lea edx, [ebp - 0xf0]
push edx
lea ecx, [ebp - 0x20]
call fcn.00476970
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf0]
call fcn.004227a0
jmp 0x47e816
lea eax, [ebp - 0x50]
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x230]
call fcn.00467060
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x230]
call fcn.00467090
mov dword [ebp - 0x238], eax
jmp 0x47eee7
mov ecx, dword [ebp - 0x234]
add ecx, 4
mov dword [ebp - 0x234], ecx
mov edx, dword [ebp - 0x234]
cmp edx, dword [ebp - 0x238]
je 0x47ef2f
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x23c], eax
mov ecx, dword [ebp - 0x23c]
cmp dword [ecx], 0
je 0x47ef2d
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx]
mov eax, dword [eax]
mov esi, esp
push edx
mov ecx, dword [eax + 8]
call ecx
cmp esi, esp
call fcn.0048678d
jmp 0x47eed8
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx]
mov esi, esp
mov ecx, dword [ebp - 0xa8]
push ecx
mov edx, dword [eax + 8]
call edx
cmp esi, esp
call fcn.0048678d
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax]
mov esi, esp
mov edx, dword [ebp - 0x9c]
push edx
mov eax, dword [ecx + 8]
call eax
cmp esi, esp
call fcn.0048678d
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx]
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [edx + 8]
call ecx
cmp esi, esp
call fcn.0048678d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x50]
call fcn.00450740
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.0041e100
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0041e100
xor edx, edx
jne 0x47e209
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x47efc9
mov esi, esp
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, esp
call fcn.0048678d
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0044dda0
mov edx, dword [ebp - 0x258]
or edx, 1
mov dword [ebp - 0x258], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004228a0
mov eax, dword [ebp + 8]
push edx
mov ecx, ebp
push eax
lea edx, [0x47f030]
call fcn.00486739
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004862cc
add esp, 0x2d4
cmp ebp, esp
call fcn.0048678d
mov esp, ebp
pop ebp
ret