Function at 0x44b090
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6692f1
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x718924]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, dword [ebp + 0xc]
mov esi, ecx
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0x18]
mov dword [ebx], 0
mov dword [ecx + 0x10], 0
cmp dword [ecx + 0x14], 8
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x64], eax
jb 0x44b0fc
mov esi, dword [ecx]
xor ecx, ecx
mov word [esi], cx
mov dword [edx + 0x10], ecx
mov ecx, edx
cmp dword [edx + 0x14], 8
jb 0x44b10e
mov ecx, dword [edx]
xor edx, edx
mov word [ecx], dx
mov ecx, eax
mov dword [eax + 0x10], edx
cmp dword [eax + 0x14], 8
jb 0x44b120
mov ecx, dword [eax]
xor eax, eax
mov word [ecx], ax
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x30]
push eax
push 0x6745f8
push 1
push 0
push 0x683d4c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
js 0x44b387
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x24]
push eax
call esi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xcc]
push eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0xbc]
push eax
call esi
mov eax, dword [ebp - 0xb4]
mov edi, dword [ebp - 0xbc]
mov ebx, dword [ebp - 0xb8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0xdc]
push eax
call esi
mov edx, dword [ebp - 0x5c]
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0x30]
sub esp, 0x10
mov byte [ebp - 4], 5
mov dword [ecx], edx
mov edx, dword [ebp - 0x88]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x94]
mov dword [ecx + 0xc], edx
mov ecx, esp
mov edx, dword [ebp - 0xac]
sub esp, 0x10
mov esi, dword [eax]
mov dword [ecx], edx
mov edx, dword [ebp - 0x9c]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x7c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x80]
mov dword [ecx + 0xc], edx
mov ecx, esp
mov edx, dword [ebp - 0x84]
sub esp, 0x10
mov dword [ecx], edi
mov dword [ecx + 4], ebx
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x60]
mov dword [ecx + 0xc], edx
mov edx, esp
mov ecx, dword [ebp - 0xdc]
push eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xd4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xd0]
mov dword [edx + 0xc], ecx
call dword [esi + 0x28]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, eax
lea eax, [ebp - 0xdc]
push eax
call esi
lea eax, [ebp - 0xbc]
push eax
call esi
lea eax, [ebp - 0xcc]
push eax
call esi
lea eax, [ebp - 0x24]
push eax
call esi
test edi, edi
jns 0x44b2bd
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x44b2b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x44b85d
mov dword [ebp - 0x38], 0
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x60]
push str.SMD
mov byte [ebp - 4], 6
call fcn.00448d80
mov eax, dword [eax]
mov byte [ebp - 4], 7
test eax, eax
je 0x44b2e6
mov ecx, dword [eax]
jmp 0x44b2e8
xor ecx, ecx
mov eax, dword [esi]
lea edx, [ebp - 0x38]
push edx
push ecx
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x60]
mov esi, eax
call fcn.00449570
test esi, esi
jns 0x44b31b
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x44b847
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
jmp 0x44b847
mov dword [ebp - 0x34], 0
push dword [ebp - 0x58]
mov esi, dword [ebp - 0x38]
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 8
call fcn.0044f290
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 9
test eax, eax
je 0x44b346
mov ecx, dword [eax]
jmp 0x44b348
xor ecx, ecx
mov eax, dword [esi]
lea edx, [ebp - 0x34]
push edx
push ecx
push esi
call dword [eax + 0x34]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 8
mov esi, eax
call fcn.00449570
mov eax, dword [ebp - 0x34]
test esi, esi
jns 0x44b3a4
mov byte [ebp - 4], 6
test eax, eax
je 0x44b376
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 1
test eax, eax
je 0x44b387
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
test ecx, ecx
je 0x44b85b
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
jmp 0x44b85b
mov dword [ebp - 0x6c], 0
lea edx, [ebp - 0x6c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
jns 0x44b3c0
mov eax, dword [ebp - 0x34]
jmp 0x44b368
mov eax, dword [ebp - 0x6c]
cmp eax, 1
je 0x44b3d0
test eax, eax
je 0x44b3d0
mov bl, 1
jmp 0x44b3d2
xor bl, bl
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x3c]
push edx
push eax
mov byte [ebp - 4], 0xa
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov esi, eax
test esi, esi
jns 0x44b409
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 8
test eax, eax
je 0x44b401
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
jmp 0x44b368
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x40]
push edx
push eax
mov byte [ebp - 4], 0xb
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
mov eax, dword [ebp - 0x40]
test esi, esi
jns 0x44b43a
mov byte [ebp - 4], 0xa
test eax, eax
je 0x44b3f0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x44b3f0
mov dword [ebp - 0x70], 0
lea edx, [ebp - 0x70]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x1c]
cmp dword [ebp - 0x70], 0
je 0x44b608
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x44]
push edx
push 1
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0xc
call dword [ecx + 0x20]
mov esi, eax
mov eax, dword [ebp - 0x44]
test esi, esi
jns 0x44b48b
mov byte [ebp - 4], 0xb
test eax, eax
je 0x44b486
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
jmp 0x44b42a
mov dword [ebp - 0x74], 0
lea edx, [ebp - 0x74]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x48]
mov esi, eax
test esi, esi
jns 0x44b4a7
mov eax, dword [ebp - 0x44]
jmp 0x44b478
cmp word [ebp - 0x74], 0xffff
mov dword [ebp - 0x48], 0
sete bh
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x48]
push edx
push eax
mov byte [ebp - 4], 0xd
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov esi, eax
mov eax, dword [ebp - 0x48]
test esi, esi
jns 0x44b4e3
mov byte [ebp - 4], 0xc
test eax, eax
je 0x44b4de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
jmp 0x44b478
mov ecx, dword [eax]
lea edx, [ebp - 0x90]
push edx
push eax
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
jns 0x44b4fb
mov eax, dword [ebp - 0x48]
jmp 0x44b4d0
mov eax, dword [ebp - 0x90]
test eax, eax
je 0x44b5e6
push eax
lea ecx, [ebp - 0x58]
call fcn.00448d80
mov eax, dword [eax]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x44b520
mov eax, dword [eax]
jmp 0x44b522
xor eax, eax
mov esi, dword [ebp - 0x64]
mov ecx, esi
push eax
call fcn.004496a0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.00449570
push 0xffffffffffffffff
push 0x5c
mov ecx, esi
call fcn.0044ea30
cmp eax, 0xffffffff
jne 0x44b54d
xor eax, eax
jmp 0x44b559
push 0xffffffffffffffff
push 0x5c
mov ecx, esi
call fcn.0044ea30
inc eax
push dword [esi + 0x10]
mov ecx, esi
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ee20
push eax
mov ecx, esi
call fcn.00449600
lea ecx, [ebp - 0x2c]
call fcn.00448fb0
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x4c]
push edx
push eax
mov byte [ebp - 4], 0xf
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov esi, eax
mov eax, dword [ebp - 0x4c]
test esi, esi
jns 0x44b5af
mov byte [ebp - 4], 0xd
test eax, eax
je 0x44b5a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
jmp 0x44b4d0
mov dword [ebp - 0x78], 0
lea edx, [ebp - 0x78]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jns 0x44b5cb
mov eax, dword [ebp - 0x4c]
jmp 0x44b599
cmp dword [ebp - 0x78], 0
jne 0x44b66a
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x44b5e6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x44b5f7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x44b608
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x44b619
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 8
test eax, eax
je 0x44b62a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 6
test eax, eax
je 0x44b63b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 1
test eax, eax
je 0x44b64c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x44b660
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, 0x80004005
jmp 0x44b85d
mov dword [ebp - 0x54], 0
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x54]
push edx
push 1
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x10
call dword [ecx + 0x20]
mov esi, eax
test esi, esi
jns 0x44b6a3
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x44b69b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
jmp 0x44b599
mov dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x11
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x50]
test esi, esi
jns 0x44b6d8
mov byte [ebp - 4], 0x10
test eax, eax
je 0x44b68a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x44b68a
mov ecx, dword [eax]
lea edx, [ebp - 0x98]
push edx
push eax
call dword [ecx + 0x28]
mov esi, eax
mov eax, dword [ebp - 0x50]
test esi, esi
js 0x44b6c8
mov ecx, dword [eax]
lea edx, [ebp - 0xa0]
push edx
push eax
call dword [ecx + 0x30]
mov esi, eax
test esi, esi
jns 0x44b706
mov eax, dword [ebp - 0x50]
jmp 0x44b6c8
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x44b73e
push eax
lea ecx, [ebp - 0x64]
call fcn.00448d80
mov eax, dword [eax]
mov byte [ebp - 4], 0x12
test eax, eax
je 0x44b727
mov eax, dword [eax]
jmp 0x44b729
xor eax, eax
mov ecx, dword [ebp - 0x68]
push eax
call fcn.004496a0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x11
call fcn.00449570
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x44b775
push eax
lea ecx, [ebp - 0x68]
call fcn.00448d80
mov eax, dword [eax]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x44b75f
mov eax, dword [eax]
jmp 0x44b761
xor eax, eax
mov ecx, dword [ebp - 0xa4]
push eax
call fcn.004496a0
lea ecx, [ebp - 0x68]
call fcn.00449570
test bl, bl
je 0x44b784
test bh, bh
je 0x44b784
mov eax, 1
jmp 0x44b786
xor eax, eax
mov ecx, dword [ebp - 0xa8]
mov byte [ebp - 4], 0x10
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x44b79f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x44b7b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x44b7c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x44b7d2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x44b7e3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x44b7f4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 8
test eax, eax
je 0x44b805
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 6
test eax, eax
je 0x44b816
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 1
test eax, eax
je 0x44b847
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x44b847
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x44b85b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004cb998
mov esp, ebp
pop ebp
ret 0x14