Function at 0x44d050
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57eb79
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xd8
push esi
push edi
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x34], edx
push eax
push 0x588b18
push 1
push 0
push 0x588b28
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x2c], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x44dd1c
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x44dd1c
mov eax, dword [eax]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0xa8]
push eax
call edi
mov dword [ebp - 4], 0
lea eax, [ebp - 0x98]
movups xmm0, xmmword [ebp - 0xa8]
push eax
movups xmmword [ebp - 0xb8], xmm0
call edi
movups xmm0, xmmword [ebp - 0x98]
lea eax, [ebp - 0xe8]
push eax
movups xmmword [ebp - 0xc8], xmm0
call edi
movups xmm0, xmmword [ebp - 0xe8]
lea eax, [ebp - 0x88]
push eax
movups xmmword [ebp - 0xd8], xmm0
call edi
mov byte [ebp - 4], 3
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb8]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc8]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xd8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x88]
push dword [ebp - 0x2c]
movups xmmword [eax], xmm0
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x88]
push eax
call edi
lea eax, [ebp - 0xe8]
push eax
call edi
lea eax, [ebp - 0x98]
push eax
call edi
lea eax, [ebp - 0xa8]
mov dword [ebp - 4], 0xffffffff
push eax
call edi
mov eax, dword [ebp - 0x2c]
test esi, esi
js 0x44dd16
mov dword [ebp - 0x18], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x44d1ea
push 0x596830
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x44dd31
jmp 0x44d1ec
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44dd31
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 5
push eax
push dword [esi]
push dword [ebp - 0x2c]
call edi
or edi, 0xffffffff
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d25f
mov ecx, dword [esi]
test ecx, ecx
je 0x44d23a
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d251
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
mov eax, dword [ebp - 0x14]
add esp, 8
test eax, eax
js 0x44dd13
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44dd13
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 6
test esi, esi
je 0x44d2c4
push dword [ebp - 0x28]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d2c6
cmp dword [ebp - 0x28], eax
jne 0x44dd3b
jmp 0x44d2c6
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44dd31
push 0
mov dword [ebp - 4], 7
push dword [esi]
push dword [ebp - 0x18]
call dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44d32f
mov eax, dword [esi]
test eax, eax
je 0x44d30d
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d324
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
add esp, 8
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x1c]
push edx
mov dword [ebp - 0x1c], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44dd0e
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x44dd0e
mov dword [ebp - 0x4c], 0
lea edx, [ebp - 0x4c]
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0x1c]
test eax, eax
js 0x44dd00
cmp dword [ebp - 0x4c], 0
je 0x44dd00
call fcn.0042f1a0
mov ecx, eax
test ecx, ecx
je 0x44dd45
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x60], eax
push str.Q3hLOYgUZDOBZj9OyQQoMxc5JAzcdGay4X6PGU
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 8
call fcn.0042f410
test al, al
jne 0x44d3c9
push 0x27
push str.Q3hLOYgUZDOBZj9OyQQoMxc5JAzcdGay4X6PGU
lea ecx, [ebp - 0x60]
call fcn.0042f740
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x4c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x38], esi
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], ecx
call fcn.0042eab0
add eax, 0x10
lea ecx, [ebp - 0x50]
mov dword [esi], eax
call fcn.00445630
add esp, 4
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x28], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0xb
test esi, esi
je 0x44d447
push dword [ebp - 0x28]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d449
cmp dword [ebp - 0x28], eax
jne 0x44dd4f
jmp 0x44d449
xor esi, esi
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x48], esi
test esi, esi
je 0x44dd59
mov byte [ebp - 4], 0xc
push dword [esi]
push dword [ebp - 0x4c]
call dword [ebp - 0x14]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44d4a3
mov eax, dword [esi]
test eax, eax
je 0x44d481
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d498
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
add esp, 8
mov byte [ebp - 4], 9
mov eax, edi
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d4c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x64]
mov dword [ebp - 0x64], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x44dcbf
mov ecx, dword [ebp - 0x64]
test ecx, ecx
je 0x44dcbf
lea edx, [ebp - 0x68]
mov dword [ebp - 0x68], 0
mov eax, dword [ecx]
push edx
push 9
push ecx
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x64]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44dcbf
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x44dcbf
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
mov eax, dword [ecx]
push edx
push 0x588b38
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x68]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44dcbf
cmp dword [ebp - 0x3c], 0
je 0x44dcbf
call fcn.0042f1a0
mov ecx, eax
test ecx, ecx
je 0x44dd63
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x50], eax
push str.QWp2JSA0FYEScvyPgQhfJg0TVOg
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xd
call fcn.0042f410
test al, al
jne 0x44d594
push 0x1d
push str.QWp2JSA0FYEScvyPgQhfJg0TVOg
lea ecx, [ebp - 0x50]
call fcn.0042f740
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x3c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x48], esi
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x48], eax
call fcn.0042eab0
add eax, 0x10
lea ecx, [ebp - 0x58]
mov dword [esi], eax
call fcn.00445630
add esp, 4
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x28], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0x10
test esi, esi
je 0x44d611
push dword [ebp - 0x28]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d613
cmp dword [ebp - 0x28], eax
jne 0x44dd6d
jmp 0x44d613
xor esi, esi
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x44], esi
test esi, esi
je 0x44dd77
mov byte [ebp - 4], 0x11
push dword [esi]
push dword [ebp - 0x3c]
call dword [ebp - 0x14]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44d66d
mov eax, dword [esi]
test eax, eax
je 0x44d64b
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d662
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
add esp, 8
mov byte [ebp - 4], 0xe
mov eax, edi
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d68b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x3c]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
call fcn.0042f1a0
mov ecx, eax
test ecx, ecx
je 0x44dd81
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.SHRxEWRgg0Qmkb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x12
call fcn.0042f410
test al, al
jne 0x44d6df
push 0xe
push str.SHRxEWRgg0Qmkb
lea ecx, [ebp - 0x28]
call fcn.0042f740
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x3c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x44], esi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x44], eax
call fcn.0042eab0
add eax, 0x10
lea ecx, [ebp - 0x30]
mov dword [esi], eax
call fcn.00445630
add esp, 4
mov byte [ebp - 4], 0x14
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x14], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x15
test esi, esi
je 0x44d75c
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d75e
cmp dword [ebp - 0x14], eax
jne 0x44dd8b
jmp 0x44d75e
xor esi, esi
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44dd95
mov byte [ebp - 4], 0x16
push dword [esi]
push dword [ebp - 0x3c]
call dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d7bb
mov ecx, dword [esi]
test ecx, ecx
je 0x44d799
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d7b0
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
add esp, 8
mov byte [ebp - 4], 0x13
mov eax, edi
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d7d9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x58], 0
jl 0x44dc79
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x44dc79
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x17
test esi, esi
je 0x44d846
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d848
cmp dword [ebp - 0x14], eax
jne 0x44dd9f
jmp 0x44d848
xor esi, esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44dd31
mov byte [ebp - 4], 0x18
push dword [esi]
push dword [ebp - 0x5c]
call dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, edi
mov byte [ebp - 4], 0x13
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d8a9
mov ecx, dword [esi]
test ecx, ecx
je 0x44d887
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d89e
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
add esp, 8
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x30], 0
jl 0x44dc79
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x44dc79
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x44dc79
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], 0
mov eax, dword [ecx]
push edx
push 0
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x6c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44dc79
mov ecx, dword [ebp - 0x70]
test ecx, ecx
je 0x44dc79
lea edx, [ebp - 0x40]
mov dword [ebp - 0x40], 0
mov eax, dword [ecx]
push edx
push str.MbLk
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x70]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44dc79
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x44dc79
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x19
test esi, esi
je 0x44d996
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d998
cmp dword [ebp - 0x14], eax
jne 0x44dda9
jmp 0x44d998
xor esi, esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44dd31
mov byte [ebp - 4], 0x1a
push dword [esi]
push dword [ebp - 0x40]
call dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov ecx, edi
mov byte [ebp - 4], 0x13
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d9fc
mov ecx, dword [esi]
test ecx, ecx
je 0x44d9d7
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d9ee
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
mov eax, dword [ebp - 0x34]
add esp, 8
test eax, eax
js 0x44dc79
mov eax, dword [ebx + 8]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
cmp dword [eax - 0xc], 0
je 0x44dac0
mov eax, dword [ebp - 0x40]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x34], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x44da60
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44da62
cmp dword [ebp - 0x14], eax
jne 0x44ddb3
jmp 0x44da62
xor esi, esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44dd31
mov byte [ebp - 4], 0x1c
push dword [esi]
push dword [ebp - 0x40]
call dword [ebp - 0x34]
mov byte [ebp - 4], 0x13
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44dac0
mov eax, dword [esi]
test eax, eax
je 0x44da9e
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44dab5
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
add esp, 8
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x74], 0
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push 0x596844
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x88], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x44dd31
movups xmm0, xmmword [ebp - 0x88]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x98]
push eax
movups xmmword [ebp - 0xd8], xmm0
call esi
movups xmm0, xmmword [ebp - 0x98]
lea eax, [ebp - 0xa8]
push eax
movups xmmword [ebp - 0xc8], xmm0
call esi
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x1c]
movups xmm0, xmmword [ebp - 0xa8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x54]
push 0xc
movups xmmword [ebp - 0xb8], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
call fcn.0054fad4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x20
test esi, esi
je 0x44db90
push dword [ebp - 0x54]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44db92
cmp dword [ebp - 0x54], eax
jne 0x44ddbd
jmp 0x44db92
xor esi, esi
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44dd31
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x74]
movups xmm0, xmmword [ebp - 0xd8]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0xb8]
push 6
push dword [ebp - 0x34]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x18]
call dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44dc27
mov ecx, dword [esi]
test ecx, ecx
je 0x44dc05
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44dc1c
push eax
call fcn.0054fc27
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054fb04
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xa8]
push eax
call esi
lea eax, [ebp - 0x98]
push eax
call esi
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x13
push eax
call esi
cmp dword [ebp - 0x34], 0
jl 0x44dc79
cmp dword [ebp - 0x74], 0
je 0x44dc79
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 1
jmp 0x44dc8f
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 0
mov edx, dword [ebp - 0x44]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44dca6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44dcd5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x44dcd5
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 0
mov eax, dword [ebp - 0x38]
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x44dcea
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov al, byte [ebp - 0x1d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
jmp 0x44dd16
mov eax, dword [ebp - 0x18]
jmp 0x44dd16
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
xor al, al
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
push 0x80004005
call fcn.0042f720
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
push 0x80004005
call fcn.0042f720
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
push 0x80004005
call fcn.0042f720
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
push 0x8007000e
call fcn.0054f240
int3