Function at 0x44d5e0
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4aca09
mov eax, dword fs:[0]
push eax
sub esp, 0x4ec
mov eax, dword [0x4dc6e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x464], eax
lea eax, [ebp - 0x450]
push eax
mov dword [ebp - 0x45c], 0
call fcn.0044de40
add esp, 4
lea eax, [ebp - 0x460]
mov dword [ebp - 4], 0
push eax
push 0x4c51ac
push 1
push 0
push 0x4c53bc
mov dword [ebp - 0x460], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
js 0x44de07
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x498]
push eax
call edi
movdqu xmm0, xmmword [ebp - 0x498]
lea eax, [ebp - 0x4a8]
push eax
movdqu xmmword [ebp - 0x4f8], xmm0
call edi
movdqu xmm0, xmmword [ebp - 0x4a8]
lea eax, [ebp - 0x4b8]
push eax
movdqu xmmword [ebp - 0x4e8], xmm0
call edi
movdqu xmm0, xmmword [ebp - 0x4b8]
lea eax, [ebp - 0x4c8]
push eax
movdqu xmmword [ebp - 0x4d8], xmm0
call edi
movdqu xmm0, xmmword [ebp - 0x4f8]
mov ecx, dword [ebp - 0x460]
sub esp, 0x10
mov eax, esp
mov byte [ebp - 4], 4
sub esp, 0x10
mov edx, dword [ecx]
movdqu xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movdqu xmm0, xmmword [ebp - 0x4e8]
movdqu xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movdqu xmm0, xmmword [ebp - 0x4d8]
movdqu xmmword [eax], xmm0
mov eax, esp
movdqu xmm0, xmmword [ebp - 0x4c8]
push ecx
movdqu xmmword [eax], xmm0
call dword [edx + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x4c8]
push eax
call ebx
lea eax, [ebp - 0x4b8]
push eax
call ebx
lea eax, [ebp - 0x4a8]
push eax
call ebx
lea eax, [ebp - 0x498]
mov byte [ebp - 4], 0
push eax
call ebx
test esi, esi
jns 0x44d759
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x44de07
push 0x4afa48
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x458], 0
call fcn.00403690
mov eax, dword [eax]
mov byte [ebp - 4], 5
test eax, eax
je 0x44d781
mov edx, dword [eax]
jmp 0x44d783
xor edx, edx
mov eax, dword [ebp - 0x460]
lea esi, [ebp - 0x458]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0
mov esi, eax
call fcn.0048c930
test esi, esi
jns 0x44d7bd
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x44de07
cmp dword [ebp - 0x43c], 8
lea eax, [ebp - 0x450]
lea ecx, [ebp - 0x468]
cmovae eax, dword [ebp - 0x450]
push eax
call fcn.00403690
mov edx, dword [eax]
mov byte [ebp - 4], 6
test edx, edx
je 0x44d7eb
mov edx, dword [edx]
jmp 0x44d7ed
xor edx, edx
mov eax, dword [ebp - 0x458]
push 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0
call fcn.0048c930
cmp byte [ebp + 8], 0
je 0x44ddf9
mov eax, dword [ebp - 0x460]
lea edx, [ebp - 0x454]
push edx
mov dword [ebp - 0x454], 0
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov esi, eax
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x44d857
mov eax, dword [ebp - 0x458]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x44de07
mov eax, dword [ebp - 0x454]
lea edx, [ebp - 0x480]
mov dword [ebp - 0x480], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
js 0x44d94e
mov eax, dword [ebp - 0x480]
push 0x4b0220
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
mov eax, dword [ebp - 0x480]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x44d94e
mov eax, dword [ebp - 0x454]
lea edx, [ebp - 0x470]
mov dword [ebp - 0x470], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov esi, eax
test esi, esi
js 0x44d94e
mov eax, dword [ebp - 0x470]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov esi, eax
mov eax, dword [ebp - 0x470]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x44d94e
mov eax, dword [ebp - 0x470]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x454]
lea edx, [ebp - 0x488]
mov dword [ebp - 0x488], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
js 0x44d94e
mov eax, dword [ebp - 0x488]
lea edx, [ebp - 0x47c]
push edx
mov dword [ebp - 0x47c], 0
push 9
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov esi, eax
mov eax, dword [ebp - 0x488]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x44d96b
mov eax, dword [ebp - 0x458]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x454]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x44de07
mov eax, dword [ebp - 0x47c]
lea edx, [ebp - 0x474]
push edx
mov dword [ebp - 0x474], 0
push 0x4c525c
mov ecx, dword [eax]
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x47c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x44d94e
push 0x4bcc3c
lea ecx, [ebp - 0x45c]
call fcn.00403690
mov eax, dword [eax]
mov byte [ebp - 4], 7
test eax, eax
je 0x44d9bc
mov edx, dword [eax]
jmp 0x44d9be
xor edx, edx
mov eax, dword [ebp - 0x474]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 0
call fcn.0048c930
push 0
push 0
push 0
push 0x104
lea eax, [ebp - 0x420]
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.004835d0
add esp, 0x28
lea eax, [ebp - 0x420]
lea ecx, [ebp - 0x438]
push eax
call fcn.0044d510
push 0x4afa48
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 8
call fcn.0044d590
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.0044d590
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
lea ecx, [ebp - 0x45c]
cmovae eax, dword [ebp - 0x438]
push eax
call fcn.00403690
mov edx, dword [eax]
mov byte [ebp - 4], 9
test edx, edx
je 0x44da76
mov edx, dword [edx]
jmp 0x44da78
xor edx, edx
mov eax, dword [ebp - 0x474]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 8
mov esi, eax
call fcn.0048c930
mov eax, dword [ebp - 0x474]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x44ddad
mov eax, dword [ebp - 0x454]
lea edx, [ebp - 0x478]
mov dword [ebp - 0x478], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov esi, eax
test esi, esi
js 0x44ddad
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x484]
push edx
mov dword [ebp - 0x484], 0
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov esi, eax
mov eax, dword [ebp - 0x478]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x44ddad
mov eax, dword [ebp - 0x484]
lea edx, [ebp - 0x46c]
push edx
mov dword [ebp - 0x46c], 0
push 0x4c530c
mov ecx, dword [eax]
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x484]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x44ddad
push dword [ebp - 0x464]
lea ecx, [ebp - 0x464]
call fcn.00403690
mov eax, dword [eax]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x44db5c
mov edx, dword [eax]
jmp 0x44db5e
xor edx, edx
mov eax, dword [ebp - 0x46c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 8
mov esi, eax
call fcn.0048c930
push 0x4bcc58
lea ecx, [ebp - 0x464]
call fcn.00403690
mov edx, dword [eax]
mov byte [ebp - 4], 0xb
test edx, edx
je 0x44db9a
mov edx, dword [edx]
jmp 0x44db9c
xor edx, edx
mov eax, dword [ebp - 0x46c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 8
call fcn.0048c930
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
js 0x44ddad
call fcn.004529e0
test al, al
je 0x44dc2d
mov eax, dword [ebp - 0x454]
lea edx, [ebp - 0x45c]
mov dword [ebp - 0x45c], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x45c]
lea edx, [ebp - 0x438]
cmp dword [ebp - 0x424], 8
cmovae edx, dword [ebp - 0x438]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x45c]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0x468], 0
call fcn.004529e0
test al, al
je 0x44dc5d
push 0x4bcc60
lea ecx, [ebp - 0x4c8]
call fcn.00427c80
mov esi, eax
mov byte [ebp - 4], 0xc
mov ebx, 1
jmp 0x44dc78
lea eax, [ebp - 0x4a8]
push eax
call edi
lea esi, [ebp - 0x4a8]
mov dword [ebp - 4], 0xd
mov ebx, 2
push 0x4af9b8
lea ecx, [ebp - 0x4b8]
mov dword [ebp - 0x45c], ebx
call fcn.00427c80
movdqu xmm0, xmmword [eax]
lea eax, [ebp - 0x498]
mov dword [ebp - 4], 0xe
push eax
movdqu xmmword [ebp - 0x4d8], xmm0
call edi
movdqu xmm0, xmmword [ebp - 0x498]
cmp dword [ebp - 0x43c], 8
lea eax, [ebp - 0x450]
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0xf
cmovae eax, dword [ebp - 0x450]
movdqu xmmword [ebp - 0x4e8], xmm0
push eax
movdqu xmm0, xmmword [esi]
movdqu xmmword [ebp - 0x4f8], xmm0
call fcn.00403690
mov edi, dword [eax]
mov byte [ebp - 4], 0x10
test edi, edi
je 0x44dcf8
mov edi, dword [edi]
jmp 0x44dcfa
xor edi, edi
mov eax, dword [ebp - 0x458]
movdqu xmm0, xmmword [ebp - 0x4d8]
mov esi, dword [eax]
lea eax, [ebp - 0x468]
push eax
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.004529e0
movdqu xmm0, xmmword [ebp - 0x4e8]
xor ecx, ecx
test al, al
setne cl
add ecx, 3
push ecx
sub esp, 0x10
mov eax, esp
sub esp, 0x10
movdqu xmmword [eax], xmm0
mov eax, esp
movdqu xmm0, xmmword [ebp - 0x4f8]
push 6
push dword [ebp - 0x454]
movdqu xmmword [eax], xmm0
push edi
push dword [ebp - 0x458]
call dword [esi + 0x44]
lea ecx, [ebp - 0x464]
mov esi, eax
call fcn.0048c930
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x498]
push eax
call edi
lea eax, [ebp - 0x4b8]
push eax
call edi
test bl, 2
je 0x44dd94
lea eax, [ebp - 0x4a8]
and ebx, 0xfffffffd
push eax
call edi
mov dword [ebp - 4], 8
test bl, 1
je 0x44dda9
lea eax, [ebp - 0x4c8]
push eax
call edi
test esi, esi
jns 0x44ddd2
mov eax, dword [ebp - 0x458]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x454]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x438]
call fcn.00403730
jmp 0x44de07
mov eax, dword [ebp - 0x454]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x468]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0
call fcn.00403730
mov eax, dword [ebp - 0x458]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
xor esi, esi
cmp dword [ebp - 0x43c], 8
jb 0x44de1e
push dword [ebp - 0x450]
call fcn.0048f453
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048fc6c
mov esp, ebp
pop ebp
ret