Function at 0x445439
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings

Disassembly:
push 0x5c0
mov eax, 0x49142a
call fcn.0045a8ee
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
and dword [ebp - 0x58], 0
mov dword [ebp - 0x590], ebx
mov dword [ebp - 0x48], eax
and dword [ebp - 4], 0
lea edi, [ebp - 0x54]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], edi
xor eax, eax
push edi
inc eax
push edi
mov byte [ebp - 4], al
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x445497
lea eax, [ebp - 0x54]
mov ecx, ebx
push eax
call fcn.0040a195
jmp 0x446667
push edi
push edi
push edi
push 3
push edi
push edi
push edi
push 0xffffffffffffffff
push edi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x4454bb
cmp eax, 0x80010119
je 0x4454bb
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x445487
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], edi
push eax
push 0x49d0b0
xor eax, eax
inc eax
push eax
push edi
push 0x49d180
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4454b3
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x24]
push edx
push edi
push edi
push edi
push edi
push edi
push edi
mov dword [ebp - 0x24], edi
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x445501
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x4454b3
push edi
push edi
push 3
push 3
push edi
push edi
push 0xa
push dword [ebp - 0x24]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x445523
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x4454f6
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], edi
push eax
push edi
push 0x30
push dword [ebp - 0x48]
lea eax, [ebp - 0x3d]
mov dword [ebp - 0xa8], 0x45307848
push edi
sub esp, 0xc
mov dword [ebp - 0xa4], 0x31686965
mov ecx, esp
mov dword [ebp - 0xa0], 0x7545685a
lea edx, [ebp - 0x5a]
mov dword [ebp - 0x9c], 0x34554142
lea esi, [ebp - 0xa8]
mov dword [ebp - 0x98], 0x526f674e
push eax
push edx
push esi
mov dword [ebp - 0x94], 0x7067424b
mov dword [ebp - 0x90], 0x2f42774b
mov dword [ebp - 0x8c], 0x2b6f415a
mov dword [ebp - 0x88], 0x566b5246
mov dword [ebp - 0x84], 0x6b6f5441
mov dword [ebp - 0x80], 0x75557742
mov dword [ebp - 0x7c], 0x44497a4c
mov dword [ebp - 0x78], 0x62735345
mov dword [ebp - 0x74], 0x35345848
mov dword [ebp - 0x70], 0x53457a4f
mov dword [ebp - 0x6c], 0x62304344
mov dword [ebp - 0x68], 0x76634443
mov dword [ebp - 0x64], 0x39415148
mov dword [ebp - 0x60], 0x41414141
mov word [ebp - 0x5c], 0x774d
call fcn.0040a169
lea eax, [ebp - 0x59c]
push eax
call fcn.0042a0a8
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.004103c8
push eax
lea ecx, [ebp - 0x48]
call fcn.00423310
mov edx, dword [eax]
mov byte [ebp - 4], 3
test edx, edx
je 0x445624
mov edx, dword [edx]
jmp 0x445626
mov edx, edi
mov eax, dword [ebp - 0x24]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov ecx, dword [ebp - 0x48]
mov esi, eax
test ecx, ecx
je 0x445641
call fcn.004442dd
mov dword [ebp - 0x48], edi
xor eax, eax
lea ecx, [ebp - 0x59c]
inc eax
mov byte [ebp - 4], al
call fcn.00455078
test esi, esi
js 0x445518
mov dword [ebp - 0x18], edi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.00451ed3
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
mov byte [ebp - 4], 4
test ecx, ecx
je 0x446633
mov ebx, dword [ebp - 0x58]
mov eax, dword [ecx]
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
xor edx, edx
inc edx
push edx
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x1c], 0
je 0x44662d
lea ecx, [ebp - 0x18]
call fcn.00455570
mov eax, dword [ebp + 0x18]
mov esi, edi
sub eax, dword [ebp + 0x14]
sar eax, 2
mov dword [ebp - 0x48], edi
test eax, eax
je 0x44660d
push esi
lea ecx, [ebp + 0x14]
call fcn.00455534
mov ecx, dword [ebp - 0x2c]
push edi
push edi
lea edi, [ebp - 0x3c]
mov edx, dword [ecx]
push edi
xor edi, edi
push edi
push dword [eax]
push ecx
call dword [edx + 0x10]
test eax, eax
js 0x4465bf
xor eax, eax
inc eax
cmp word [ebp - 0x3c], ax
je 0x4465bf
cmp word [ebp - 0x3c], di
je 0x4465bf
mov dword [ebp - 0x44], edi
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x44]
call fcn.00409d6c
movzx eax, word [ebp - 0x3c]
mov byte [ebp - 4], 5
sub eax, 3
je 0x446355
sub eax, 5
je 0x44632c
sub eax, 3
je 0x445d1d
sub eax, 0xb
je 0x4459cc
dec eax
jne 0x446318
push dword [ebp - 0x34]
lea eax, [ebp - 0x3d]
mov dword [ebp - 0x224], 0x786b5462
push edi
sub esp, 0xc
mov dword [ebp - 0x220], 0x6b414743
mov ecx, esp
mov dword [ebp - 0x21c], 0x324e7843
lea edx, [ebp - 0x15a]
mov dword [ebp - 0x218], 0x4c677a45
lea edi, [ebp - 0x224]
mov dword [ebp - 0x214], 0x55386742
push eax
push edx
push edi
mov dword [ebp - 0x210], 0x42554364
mov dword [ebp - 0x20c], 0x7a495249
mov dword [ebp - 0x208], 0x4677684c
mov dword [ebp - 0x204], 0x675a7747
mov dword [ebp - 0x200], 0x6e707747
mov dword [ebp - 0x1fc], 0x62516865
mov dword [ebp - 0x1f8], 0x30634242
mov dword [ebp - 0x1f4], 0x70494459
mov dword [ebp - 0x1f0], 0x46555146
mov dword [ebp - 0x1ec], 0x52596e4e
mov dword [ebp - 0x1e8], 0x63384143
mov dword [ebp - 0x1e4], 0x5441414a
mov dword [ebp - 0x1e0], 0x646f5365
mov dword [ebp - 0x1dc], 0x5141435a
mov dword [ebp - 0x1d8], 0x72736a4a
mov dword [ebp - 0x1d4], 0x4d4d6942
mov dword [ebp - 0x1d0], 0x67736866
mov dword [ebp - 0x1cc], 0x72496848
mov dword [ebp - 0x1c8], 0x766b4443
mov dword [ebp - 0x1c4], 0x496b5244
mov dword [ebp - 0x1c0], 0x38387947
mov dword [ebp - 0x1bc], 0x72557a64
mov dword [ebp - 0x1b8], 0x2f6b5165
mov dword [ebp - 0x1b4], 0x68415359
mov dword [ebp - 0x1b0], 0x496b7865
mov dword [ebp - 0x1ac], 0x63345442
mov dword [ebp - 0x1a8], 0x7a675248
mov dword [ebp - 0x1a4], 0x6d556945
mov dword [ebp - 0x1a0], 0x4d596942
mov dword [ebp - 0x19c], 0x436f434e
mov dword [ebp - 0x198], 0x726b5243
mov dword [ebp - 0x194], 0x6859444a
mov dword [ebp - 0x190], 0x756f4150
mov dword [ebp - 0x18c], 0x3359794c
mov dword [ebp - 0x188], 0x6d786945
mov dword [ebp - 0x184], 0x6351444a
mov dword [ebp - 0x180], 0x32347748
mov dword [ebp - 0x17c], 0x6445534b
mov dword [ebp - 0x178], 0x2f514446
mov dword [ebp - 0x174], 0x6641414c
mov dword [ebp - 0x170], 0x564d5444
mov dword [ebp - 0x16c], 0x4134534a
mov dword [ebp - 0x168], 0x76495366
mov dword [ebp - 0x164], 0x4d517a42
mov dword [ebp - 0x160], 0x41414141
mov word [ebp - 0x15c], 0x516b
call fcn.0040a169
lea eax, [ebp - 0x59c]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.004103eb
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0042b625
lea ecx, [ebp - 0x59c]
add esp, 0xc
mov byte [ebp - 4], 5
call fcn.00455078
push esi
lea ecx, [ebp + 0x14]
call fcn.00455534
push eax
lea ecx, [ebp - 0x18]
call fcn.004247c0
lea ecx, [ebp - 0x44]
push ecx
mov ecx, eax
call fcn.00423f23
push 0xffffffffffffffff
lea ecx, [ebp - 0x44]
call fcn.00444354
lea ecx, [ebp - 0x44]
call fcn.0040b7b5
jmp 0x446316
push dword [ebp - 0x34]
mov dword [ebp - 0x430], 0x75675362
lea edx, [ebp - 0x2fc]
push edi
mov dword [ebp - 0x42c], 0x376b6d4b
lea edi, [ebp - 0x430]
mov dword [ebp - 0x428], 0x77704450
mov dword [ebp - 0x424], 0x776b5448
mov dword [ebp - 0x420], 0x6b51674f
mov dword [ebp - 0x41c], 0x2b67584d
mov dword [ebp - 0x418], 0x7a554243
mov dword [ebp - 0x414], 0x566f794b
mov dword [ebp - 0x410], 0x6b59534f
mov dword [ebp - 0x40c], 0x556f5447
mov dword [ebp - 0x408], 0x45774242
mov dword [ebp - 0x404], 0x3778684c
mov dword [ebp - 0x400], 0x53304259
mov dword [ebp - 0x3fc], 0x6e6c3365
mov dword [ebp - 0x3f8], 0x6e453342
mov dword [ebp - 0x3f4], 0x49457945
mov dword [ebp - 0x3f0], 0x686b514c
mov dword [ebp - 0x3ec], 0x33736846
mov dword [ebp - 0x3e8], 0x4c594144
mov dword [ebp - 0x3e4], 0x6a4d7a44
mov dword [ebp - 0x3e0], 0x706f4445
mov dword [ebp - 0x3dc], 0x486b5146
mov dword [ebp - 0x3d8], 0x7a4e534d
mov dword [ebp - 0x3d4], 0x50307844
mov dword [ebp - 0x3d0], 0x56674849
mov dword [ebp - 0x3cc], 0x42775149
mov dword [ebp - 0x3c8], 0x324a6848
mov dword [ebp - 0x3c4], 0x7951774f
mov dword [ebp - 0x3c0], 0x69426850
mov dword [ebp - 0x3bc], 0x6d496743
mov dword [ebp - 0x3b8], 0x536f4449
mov dword [ebp - 0x3b4], 0x6f63774b
mov dword [ebp - 0x3b0], 0x51307759
mov dword [ebp - 0x3ac], 0x6d344441
mov dword [ebp - 0x3a8], 0x466b6e49
mov dword [ebp - 0x3a4], 0x59387a4a
mov dword [ebp - 0x3a0], 0x4559674c
mov dword [ebp - 0x39c], 0x6c4a4365
mov dword [ebp - 0x398], 0x3855414e
mov dword [ebp - 0x394], 0x4667534b
mov dword [ebp - 0x390], 0x6c56514c
mov dword [ebp - 0x38c], 0x30354447
mov dword [ebp - 0x388], 0x49634144
mov dword [ebp - 0x384], 0x676f6846
mov dword [ebp - 0x380], 0x4c34424b
mov dword [ebp - 0x37c], 0x4d775761
mov dword [ebp - 0x378], 0x79514447
mov dword [ebp - 0x374], 0x34495149
mov dword [ebp - 0x370], 0x36734350
mov dword [ebp - 0x36c], 0x4834694b
mov dword [ebp - 0x368], 0x34684366
mov dword [ebp - 0x364], 0x5151434f
mov dword [ebp - 0x360], 0x6d30434e
mov dword [ebp - 0x35c], 0x38386947
mov dword [ebp - 0x358], 0x4a45424b
mov dword [ebp - 0x354], 0x34706a4a
mov dword [ebp - 0x350], 0x49455163
mov dword [ebp - 0x34c], 0x75776866
mov dword [ebp - 0x348], 0x57596742
mov dword [ebp - 0x344], 0x6d6b7865
mov dword [ebp - 0x340], 0x58517847
mov dword [ebp - 0x33c], 0x4d633246
mov dword [ebp - 0x338], 0x42674349
mov dword [ebp - 0x334], 0x6c344345
mov dword [ebp - 0x330], 0x56516862
mov dword [ebp - 0x32c], 0x6d595344
mov dword [ebp - 0x328], 0x7a64524c
mov dword [ebp - 0x324], 0x5434424f
mov dword [ebp - 0x320], 0x4659794f
mov dword [ebp - 0x31c], 0x70304342
mov dword [ebp - 0x318], 0x5941514a
mov dword [ebp - 0x314], 0x78416948
mov dword [ebp - 0x310], 0x7159694d
mov dword [ebp - 0x30c], 0x366f424a
mov dword [ebp - 0x308], 0x42593345
mov dword [ebp - 0x304], 0x41456a4b
mov dword [ebp - 0x300], 0x68444141
sub esp, 0xc
lea eax, [ebp - 0x3d]
mov ecx, esp
push eax
push edx
push edi
call fcn.0040a169
lea eax, [ebp - 0x5b4]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.004103eb
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0042b625
lea ecx, [ebp - 0x5b4]
jmp 0x44598c
cmp word [ebp - 0x34], 0
je 0x445f1e
push edi
sub esp, 0xc
mov dword [ebp - 0x158], 0x39344448
mov ecx, esp
mov dword [ebp - 0x154], 0x514d434b
lea eax, [ebp - 0x3d]
mov dword [ebp - 0x150], 0x76306948
lea edx, [ebp - 0xa9]
mov dword [ebp - 0x14c], 0x446b7943
push eax
push edx
lea edi, [ebp - 0x158]
mov dword [ebp - 0x148], 0x4a49444d
push edi
mov dword [ebp - 0x144], 0x49557749
mov dword [ebp - 0x140], 0x2b595464
mov dword [ebp - 0x13c], 0x61384244
mov dword [ebp - 0x138], 0x6b635443
mov dword [ebp - 0x134], 0x5530484c
mov dword [ebp - 0x130], 0x37687846
mov dword [ebp - 0x12c], 0x50634241
mov dword [ebp - 0x128], 0x79383241
mov dword [ebp - 0x124], 0x41674446
mov dword [ebp - 0x120], 0x696f6946
mov dword [ebp - 0x11c], 0x38564764
mov dword [ebp - 0x118], 0x2b645248
mov dword [ebp - 0x114], 0x75494444
mov dword [ebp - 0x110], 0x39416747
mov dword [ebp - 0x10c], 0x6c357947
mov dword [ebp - 0x108], 0x7173674d
mov dword [ebp - 0x104], 0x796b6949
mov dword [ebp - 0x100], 0x4f6f774f
mov dword [ebp - 0xfc], 0x4c67424a
mov dword [ebp - 0xf8], 0x53344264
mov dword [ebp - 0xf4], 0x75593263
mov dword [ebp - 0xf0], 0x4f515263
mov dword [ebp - 0xec], 0x764a6749
mov dword [ebp - 0xe8], 0x62634247
mov dword [ebp - 0xe4], 0x656f6e42
mov dword [ebp - 0xe0], 0x5951544a
mov dword [ebp - 0xdc], 0x336b6a45
mov dword [ebp - 0xd8], 0x41734345
mov dword [ebp - 0xd4], 0x7968544a
mov dword [ebp - 0xd0], 0x6f454446
mov dword [ebp - 0xcc], 0x59385143
mov dword [ebp - 0xc8], 0x656f4145
mov dword [ebp - 0xc4], 0x354d514d
mov dword [ebp - 0xc0], 0x6e4d6947
mov dword [ebp - 0xbc], 0x69387765
mov dword [ebp - 0xb8], 0x4e597748
mov dword [ebp - 0xb4], 0x33344246
mov dword [ebp - 0xb0], 0x4141774a
mov word [ebp - 0xac], 0x4841
mov byte [ebp - 0xaa], 0x73
call fcn.0040a169
lea eax, [ebp - 0x5c0]
push eax
call fcn.0042a1df
add esp, 0x10
mov byte [ebp - 4], 6
or ebx, 2
jmp 0x4462b0
mov dword [ebp - 0x588], 0x6b306944
mov dword [ebp - 0x584], 0x42516a50
mov dword [ebp - 0x580], 0x7968545a
mov dword [ebp - 0x57c], 0x79675346
mov dword [ebp - 0x578], 0x2f45784c
mov dword [ebp - 0x574], 0x7673524a
mov dword [ebp - 0x570], 0x5759424b
mov dword [ebp - 0x56c], 0x386f5441
mov dword [ebp - 0x568], 0x4341685a
mov dword [ebp - 0x564], 0x6d675466
mov dword [ebp - 0x560], 0x63773342
mov dword [ebp - 0x55c], 0x7a594444
mov dword [ebp - 0x558], 0x30394145
mov dword [ebp - 0x554], 0x3735684b
mov dword [ebp - 0x550], 0x7a4e7845
mov dword [ebp - 0x54c], 0x75676a4e
mov dword [ebp - 0x548], 0x4b416848
mov dword [ebp - 0x544], 0x31417741
mov dword [ebp - 0x540], 0x6e51444c
mov dword [ebp - 0x53c], 0x675a6742
mov dword [ebp - 0x538], 0x5a514466
mov dword [ebp - 0x534], 0x314d4743
mov dword [ebp - 0x530], 0x3852584f
mov dword [ebp - 0x52c], 0x486f7963
mov dword [ebp - 0x528], 0x5263534d
mov dword [ebp - 0x524], 0x34554364
mov dword [ebp - 0x520], 0x33596849
mov dword [ebp - 0x51c], 0x7763784f
mov dword [ebp - 0x518], 0x4d305247
mov dword [ebp - 0x514], 0x33673342
mov dword [ebp - 0x510], 0x356c6a42
mov dword [ebp - 0x50c], 0x4d304443
mov dword [ebp - 0x508], 0x4459525a
mov dword [ebp - 0x504], 0x53304141
mov dword [ebp - 0x500], 0x66597963
mov dword [ebp - 0x4fc], 0x754d4143
mov dword [ebp - 0x4f8], 0x52515445
mov dword [ebp - 0x4f4], 0x38596d4b
mov dword [ebp - 0x4f0], 0x66417a62
mov dword [ebp - 0x4ec], 0x35344165
mov dword [ebp - 0x4e8], 0x5949434d
mov dword [ebp - 0x4e4], 0x6449674f
mov dword [ebp - 0x4e0], 0x72595346
mov dword [ebp - 0x4dc], 0x68387a49
mov dword [ebp - 0x4d8], 0x324e784c
mov dword [ebp - 0x4d4], 0x2f516a4c
mov dword [ebp - 0x4d0], 0x31396945
mov dword [ebp - 0x4cc], 0x486b4445
mov dword [ebp - 0x4c8], 0x69744250
mov dword [ebp - 0x4c4], 0x47346a50
mov dword [ebp - 0x4c0], 0x426b4344
mov dword [ebp - 0x4bc], 0x5430444e
mov dword [ebp - 0x4b8], 0x785a5159
mov dword [ebp - 0x4b4], 0x3973484b
mov dword [ebp - 0x4b0], 0x55595342
mov dword [ebp - 0x4ac], 0x34516d44
mov dword [ebp - 0x4a8], 0x736f7741
mov dword [ebp - 0x4a4], 0x6c527947
mov dword [ebp - 0x4a0], 0x64635447
mov dword [ebp - 0x49c], 0x5534584f
mov dword [ebp - 0x498], 0x63556865
mov dword [ebp - 0x494], 0x7a635348
mov dword [ebp - 0x490], 0x466f515a
mov dword [ebp - 0x48c], 0x72345463
mov dword [ebp - 0x488], 0x514d7a4e
mov dword [ebp - 0x484], 0x4d6b524d
mov dword [ebp - 0x480], 0x785a684b
mov dword [ebp - 0x47c], 0x774d784d
mov dword [ebp - 0x478], 0x4d6f4249
mov dword [ebp - 0x474], 0x4677544f
mov dword [ebp - 0x470], 0x6b347950
mov dword [ebp - 0x46c], 0x77644443
mov dword [ebp - 0x468], 0x42455343
mov dword [ebp - 0x464], 0x376c6a45
mov dword [ebp - 0x460], 0x776c334f
mov dword [ebp - 0x45c], 0x6f30694d
mov dword [ebp - 0x458], 0x6f4d584c
mov dword [ebp - 0x454], 0x76417965
mov dword [ebp - 0x450], 0x51453250
mov dword [ebp - 0x44c], 0x6a454144
mov dword [ebp - 0x448], 0x3868524b
push edi
sub esp, 0xc
mov dword [ebp - 0x444], 0x674d5248
mov ecx, esp
mov dword [ebp - 0x440], 0x5363685a
lea eax, [ebp - 0x3d]
mov dword [ebp - 0x43c], 0x62346a4d
lea edx, [ebp - 0x430]
mov dword [ebp - 0x438], 0x416f694f
push eax
push edx
lea edi, [ebp - 0x588]
mov dword [ebp - 0x434], 0x35444141
push edi
call fcn.0040a169
lea eax, [ebp - 0x5cc]
push eax
call fcn.0042a1df
add esp, 0x10
mov dword [ebp - 4], 7
or ebx, 4
mov ecx, eax
mov dword [ebp - 0x58], ebx
call fcn.004103eb
push esi
lea ecx, [ebp + 0x14]
mov edi, eax
call fcn.00455534
push eax
lea ecx, [ebp - 0x18]
call fcn.004247c0
push edi
mov esi, eax
call fcn.0040be23
pop ecx
push eax
push edi
mov ecx, esi
call fcn.0040bd90
test bl, 4
je 0x4462f6
and ebx, 0xfffffffb
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 0x58], ebx
call fcn.00455078
mov dword [ebp - 4], 5
test bl, 2
je 0x446313
and ebx, 0xfffffffd
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 0x58], ebx
call fcn.00455078
mov esi, dword [ebp - 0x48]
xor edi, edi
mov ecx, dword [ebp - 0x44]
mov byte [ebp - 4], 4
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
jmp 0x4465ee
mov edi, dword [ebp - 0x34]
lea ecx, [ebp + 0x14]
push esi
call fcn.00455534
push eax
lea ecx, [ebp - 0x18]
call fcn.004247c0
push edi
mov esi, eax
call fcn.0040be23
pop ecx
push eax
push edi
mov ecx, esi
call fcn.0040bd90
jmp 0x446313
push dword [ebp - 0x34]
lea eax, [ebp - 0x3d]
mov dword [ebp - 0x2fc], 0x73415362
push edi
sub esp, 0xc
mov dword [ebp - 0x2f8], 0x3338444c
mov ecx, esp
mov dword [ebp - 0x2f4], 0x7063414f
lea edx, [ebp - 0x226]
mov dword [ebp - 0x2f0], 0x4267434e
lea edi, [ebp - 0x2fc]
mov dword [ebp - 0x2ec], 0x4b385145
push eax
push edx
push edi
mov dword [ebp - 0x2e8], 0x30554763
mov dword [ebp - 0x2e4], 0x30387749
mov dword [ebp - 0x2e0], 0x514d4741
mov dword [ebp - 0x2dc], 0x6963474d
mov dword [ebp - 0x2d8], 0x68416849
mov dword [ebp - 0x2d4], 0x41417746
mov dword [ebp - 0x2d0], 0x78524746
mov dword [ebp - 0x2cc], 0x52637946
mov dword [ebp - 0x2c8], 0x3556674d
mov dword [ebp - 0x2c4], 0x324a5342
mov dword [ebp - 0x2c0], 0x7555324e
mov dword [ebp - 0x2bc], 0x4c454864
mov dword [ebp - 0x2b8], 0x624d7850
mov dword [ebp - 0x2b4], 0x6a6f6d49
mov dword [ebp - 0x2b0], 0x316b6a50
mov dword [ebp - 0x2ac], 0x4b345347
mov dword [ebp - 0x2a8], 0x4a34424f
mov dword [ebp - 0x2a4], 0x3331674a
mov dword [ebp - 0x2a0], 0x66347a4c
mov dword [ebp - 0x29c], 0x63735349
mov dword [ebp - 0x298], 0x4b455363
mov dword [ebp - 0x294], 0x4130514d
mov dword [ebp - 0x290], 0x35555745
mov dword [ebp - 0x28c], 0x6d5a514d
mov dword [ebp - 0x288], 0x3649414c
mov dword [ebp - 0x284], 0x2f38514c
mov dword [ebp - 0x280], 0x42635766
mov dword [ebp - 0x27c], 0x39566750
mov dword [ebp - 0x278], 0x2f516e46
mov dword [ebp - 0x274], 0x4e516763
mov dword [ebp - 0x270], 0x67635148
mov dword [ebp - 0x26c], 0x30595846
mov dword [ebp - 0x268], 0x48635148
mov dword [ebp - 0x264], 0x67464447
mov dword [ebp - 0x260], 0x42416e5a
mov dword [ebp - 0x25c], 0x69776a48
mov dword [ebp - 0x258], 0x7a6c6a44
mov dword [ebp - 0x254], 0x7a526759
mov dword [ebp - 0x250], 0x4a6f7a4d
mov dword [ebp - 0x24c], 0x65346742
mov dword [ebp - 0x248], 0x31775442
mov dword [ebp - 0x244], 0x2b4a7943
mov dword [ebp - 0x240], 0x31676841
mov dword [ebp - 0x23c], 0x2b64474d
mov dword [ebp - 0x238], 0x33304144
mov dword [ebp - 0x234], 0x42305448
mov dword [ebp - 0x230], 0x346b474e
mov dword [ebp - 0x22c], 0x41414141
mov word [ebp - 0x228], 0x516d
call fcn.0040a169
lea eax, [ebp - 0x5a8]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004103eb
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0042b625
lea ecx, [ebp - 0x5a8]
jmp 0x44598c
push esi
lea ecx, [ebp + 0x14]
call fcn.00455534
push eax
lea ecx, [ebp - 0x18]
call fcn.004247c0
push 0x494c54
mov esi, eax
call fcn.0040be23
pop ecx
push eax
push 0x494c54
mov ecx, esi
call fcn.0040bd90
mov esi, dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp + 0x18]
inc esi
sub eax, dword [ebp + 0x14]
sar eax, 2
mov dword [ebp - 0x48], esi
cmp esi, eax
jb 0x4456c5
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x54]
call fcn.00456c83
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x28]
test ecx, ecx
jne 0x445689
mov ebx, dword [ebp - 0x590]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [ebp - 0x54]
mov ecx, ebx
push eax
call fcn.0040a195
lea ecx, [ebp - 0x18]
call fcn.004234bd
lea ecx, [ebp - 0x54]
call fcn.004550ba
lea ecx, [ebp + 0x14]
call fcn.00455094
mov eax, ebx
call fcn.0045a89d
ret