Function at 0x43e710
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56243d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xc8
push esi
push edi
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x34], edx
push eax
push 0x56b678
push 1
push 0
push 0x56b688
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2c], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x43e91b
mov eax, dword [ebp - 0x2c]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [eax]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0
lea eax, [ebp - 0x88]
movups xmm0, xmmword [ebp - 0x98]
push eax
movups xmmword [ebp - 0xa8], xmm0
call edi
movups xmm0, xmmword [ebp - 0x88]
lea eax, [ebp - 0xd8]
push eax
movups xmmword [ebp - 0xb8], xmm0
call edi
movups xmm0, xmmword [ebp - 0xd8]
lea eax, [ebp - 0x78]
push eax
movups xmmword [ebp - 0xc8], xmm0
call edi
mov byte [ebp - 4], 3
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xa8]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb8]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x78]
push dword [ebp - 0x2c]
movups xmmword [eax], xmm0
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x78]
push eax
call edi
lea eax, [ebp - 0xd8]
push eax
call edi
lea eax, [ebp - 0x88]
push eax
call edi
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 0xffffffff
push eax
call edi
mov eax, dword [ebp - 0x2c]
test esi, esi
js 0x43e915
mov dword [ebp - 0x18], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.00532272
mov esi, eax
add esp, 4
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x43e899
push 0x57ec7c
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x43f13e
jmp 0x43e89b
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], esi
test esi, esi
je 0x43f13e
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 5
push eax
push dword [esi]
push dword [ebp - 0x2c]
call edi
or edi, 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x43e90e
mov ecx, dword [esi]
test ecx, ecx
je 0x43e8e9
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43e900
push eax
call fcn.00532487
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00532241
mov eax, dword [ebp - 0x24]
add esp, 8
test eax, eax
jns 0x43e930
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebp - 0x18]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
call fcn.00532272
mov esi, eax
add esp, 4
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 6
test esi, esi
je 0x43e985
push dword [ebp - 0x24]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x43e987
cmp dword [ebp - 0x24], eax
jne 0x43f148
jmp 0x43e987
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], esi
test esi, esi
je 0x43f13e
push 0
mov dword [ebp - 4], 7
push dword [esi]
push dword [ebp - 0x18]
call dword [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x43e9f0
mov eax, dword [esi]
test eax, eax
je 0x43e9ce
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43e9e5
push eax
call fcn.00532487
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00532241
add esp, 8
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x1c]
push edx
mov dword [ebp - 0x1c], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x43ea1d
mov eax, dword [ebp - 0x18]
jmp 0x43e915
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x58]
mov dword [ebp - 0x58], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x1c]
test eax, eax
jns 0x43ea46
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
jmp 0x43e915
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x48], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x43ea35
mov ecx, dword [ebp - 0x48]
lea edx, [ebp - 0x4c]
push edx
mov dword [ebp - 0x4c], 0
push 2
mov eax, dword [ecx]
push ecx
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x48]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x43ea35
mov ecx, dword [ebp - 0x4c]
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x30], 0
push 0x56b668
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x4c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x43ea35
sub esp, 0x18
mov ecx, esp
push 0xd
push str.Daily_Trigger
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x64]
call fcn.00437680
mov dword [ebp - 4], 8
add esp, 0x14
mov eax, dword [ebp - 0x30]
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x14], esi
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x3c], eax
lea ecx, [ecx - 0x10]
call fcn.00425550
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [esi], eax
call fcn.00437b50
add esp, 4
mov byte [ebp - 4], 9
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x24], eax
call fcn.00532272
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0xa
test esi, esi
je 0x43eb5d
push dword [ebp - 0x24]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x43eb5f
cmp dword [ebp - 0x24], eax
jne 0x43f152
jmp 0x43eb5f
xor esi, esi
mov byte [ebp - 4], 9
mov dword [ebp - 0x20], esi
test esi, esi
je 0x43f15c
mov byte [ebp - 4], 0xb
push dword [esi]
push dword [ebp - 0x30]
call dword [ebp - 0x3c]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x43ebb9
mov eax, dword [esi]
test eax, eax
je 0x43eb97
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43ebae
push eax
call fcn.00532487
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00532241
add esp, 8
mov byte [ebp - 4], 8
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43ebd7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
mov ecx, esp
push 0x13
push str.1970_01_01T00:00:00
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x60]
call fcn.00437680
mov byte [ebp - 4], 0xc
add esp, 0x14
mov eax, dword [ebp - 0x30]
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x20], esi
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x14], eax
lea ecx, [ecx - 0x10]
call fcn.00425550
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00437b50
add esp, 4
mov byte [ebp - 4], 0xd
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x24], eax
call fcn.00532272
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0xe
test esi, esi
je 0x43ec7e
push dword [ebp - 0x24]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x43ec80
cmp dword [ebp - 0x24], eax
jne 0x43f166
jmp 0x43ec80
xor esi, esi
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x20], esi
test esi, esi
je 0x43f170
mov byte [ebp - 4], 0xf
push dword [esi]
push dword [ebp - 0x30]
call dword [ebp - 0x14]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x43ecda
mov eax, dword [esi]
test eax, eax
je 0x43ecb8
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43eccf
push eax
call fcn.00532487
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00532241
add esp, 8
mov byte [ebp - 4], 0xc
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43ecf8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x30]
push 1
push ecx
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
jns 0x43ed18
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
jmp 0x43f0c2
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x40]
mov dword [ebp - 0x40], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x30]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x43f0bf
mov eax, dword [ebp - 0x40]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 8]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
call fcn.00532272
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x10
test esi, esi
je 0x43ed91
push dword [ebp - 0x24]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x43ed93
cmp dword [ebp - 0x24], eax
jne 0x43f17a
jmp 0x43ed93
xor esi, esi
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x20], esi
test esi, esi
je 0x43f13e
mov byte [ebp - 4], 0x11
push dword [esi]
push dword [ebp - 0x40]
call dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, edi
mov byte [ebp - 4], 0xc
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x43edf4
mov ecx, dword [esi]
test ecx, ecx
je 0x43edd2
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43ede9
push eax
call fcn.00532487
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00532241
add esp, 8
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x14], 0
jl 0x43f0bf
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x43f0bf
mov ecx, dword [ebp - 0x50]
lea edx, [ebp - 0x54]
push edx
mov dword [ebp - 0x54], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x50]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x43f0bf
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x44]
push edx
mov dword [ebp - 0x44], 0
push str.MbLk
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x54]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x43f0bf
mov eax, dword [ebp - 0x44]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
call fcn.00532272
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x12
test esi, esi
je 0x43eec9
push dword [ebp - 0x24]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x43eecb
cmp dword [ebp - 0x24], eax
jne 0x43f184
jmp 0x43eecb
xor esi, esi
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x20], esi
test esi, esi
je 0x43f13e
mov byte [ebp - 4], 0x13
push dword [esi]
push dword [ebp - 0x44]
call dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov ecx, edi
mov byte [ebp - 4], 0xc
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x43ef2c
mov ecx, dword [esi]
test ecx, ecx
je 0x43ef0a
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43ef21
push eax
call fcn.00532487
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00532241
add esp, 8
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x18]
jl 0x43f0c2
mov dword [ebp - 0x5c], 0
mov eax, dword [eax]
push 0x57ece0
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x14], eax
mov eax, 8
mov word [ebp - 0x78], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x70], eax
test eax, eax
je 0x43f13e
movups xmm0, xmmword [ebp - 0x78]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x88]
push eax
movups xmmword [ebp - 0xc8], xmm0
call esi
movups xmm0, xmmword [ebp - 0x88]
lea eax, [ebp - 0x98]
push eax
movups xmmword [ebp - 0xb8], xmm0
call esi
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x1c]
movups xmm0, xmmword [ebp - 0x98]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
push 0xc
movups xmmword [ebp - 0xa8], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
call fcn.00532272
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x17
test esi, esi
je 0x43f000
push dword [ebp - 0x38]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x43f002
cmp dword [ebp - 0x38], eax
jne 0x43f18e
jmp 0x43f002
xor esi, esi
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x20], esi
test esi, esi
je 0x43f13e
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x5c]
movups xmm0, xmmword [ebp - 0xc8]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0xa8]
push 6
push dword [ebp - 0x34]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x18]
call dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x43f097
mov ecx, dword [esi]
test ecx, ecx
je 0x43f075
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43f08c
push eax
call fcn.00532487
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00532241
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x98]
push eax
call esi
lea eax, [ebp - 0x88]
push eax
call esi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0xc
push eax
call esi
cmp dword [ebp - 0x34], 0
jge 0x43f0d7
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x25], 0
jmp 0x43f0f6
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x25], 1
mov edx, dword [ebp - 0x60]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43f110
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x64]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x43f128
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0x25]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
push 0x8007000e
call fcn.00531ab0
int3