Function at 0x53fa20
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xe0
mov dword [esp + 8], ecx
mov eax, dword [0x5c4738]
xor eax, ebp
mov dword [esp + 0xd8], eax
xor eax, eax
lea esi, [esp + 0xd4]
mov dword [esi], eax
push esi
push 0x5894f0
push 1
push eax
push 0x592838
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov eax, dword [esi]
test eax, eax
je 0x53fb8f
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x60], xmm0
mov word [esp + 0x60], 0
movaps xmm0, xmmword [esp + 0x60]
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x30], xmm0
movaps xmmword [esp + 0x20], xmm0
mov ecx, dword [eax]
sub esp, 0x44
movaps xmm0, xmmword [esp + 0x94]
movups xmmword [esp + 0x34], xmm0
movaps xmm0, xmmword [esp + 0x84]
movups xmmword [esp + 0x24], xmm0
movaps xmm0, xmmword [esp + 0x74]
movups xmmword [esp + 0x14], xmm0
movaps xmm0, xmmword [esp + 0x64]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [ecx + 0x28]
test eax, eax
js 0x53fbf9
mov dword [esp + 0xc], esp
mov dword [esp + 0x10], 0xffffffff
mov esi, dword [esp + 0xd4]
test esi, esi
je 0x53faf2
mov eax, dword [esi]
push esi
call dword [eax + 4]
lea ebx, [esp + 0x10]
mov dword [ebx], 0
lea edi, [esp + 0x78]
mov dword [edi], 0xffffffff
mov ecx, edi
push 1
push 0x57d690
call fcn.00444f20
mov eax, dword [esi]
push ebx
push dword [edi]
push esi
call dword [eax + 0x1c]
mov ecx, edi
call fcn.00444f60
test esi, esi
je 0x53fb2e
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov esp, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x53fc63
mov esi, dword [esp + 8]
mov dword [esi], 0
cmp ebx, esi
je 0x53fcd4
mov dword [esi], eax
lea ecx, [esp + 0x60]
call fcn.00540560
mov eax, dword [esp + 0xd4]
test eax, eax
je 0x53fb77
mov dword [esp + 0xd4], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [esp + 0xd8]
xor ecx, ebp
call fcn.004d25a3
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0x60]
push eax
push esi
call fcn.00501dd0
add esp, 8
lea edi, [esp + 0x78]
mov ecx, edi
push esi
push 0x157
push str.GetTaskFolder
push 1
call fcn.00501b30
lea ecx, [esp + 0xb4]
push 0x58954a
push str.Failed_to_acquire_windows_scheduler_interface_to_stop_a_task
call fcn.004fc970
mov ecx, edi
call fcn.00501b70
cmp byte [esi + 0xb], 0
jns 0x53fbea
push dword [esp + 0x60]
call fcn.004cf0d6
add esp, 4
mov esi, dword [esp + 8]
mov dword [esi], 0
jmp 0x53fb5b
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0x14]
push eax
push esi
call fcn.00501dd0
add esp, 8
lea edi, [esp + 0x78]
mov ecx, edi
push esi
push 0x15c
push str.GetTaskFolder
push 1
call fcn.00501b30
lea ecx, [esp + 0xb4]
push 0x589576
push str.Failed_to_connect_to_scheduler_task_service
call fcn.004fc970
mov ecx, edi
call fcn.00501b70
cmp byte [esi + 0xb], 0
jns 0x53fc54
push dword [esp + 0x14]
call fcn.004cf0d6
add esp, 4
mov esi, dword [esp + 8]
mov dword [esi], 0
jmp 0x53fb52
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0x14]
push eax
push esi
call fcn.00501dd0
add esp, 8
lea edi, [esp + 0x78]
mov ecx, edi
push esi
push 0x161
push str.GetTaskFolder
push 1
call fcn.00501b30
lea ecx, [esp + 0xb4]
push 0x589597
push str.Cannot_get_scheduler_task_folder
call fcn.004fc970
mov ecx, edi
call fcn.00501b70
cmp byte [esi + 0xb], 0
jns 0x53fcbe
push dword [esp + 0x14]
call fcn.004cf0d6
add esp, 4
mov esi, dword [esp + 8]
mov dword [esi], 0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x53fb52
mov dword [esp + 0x10], 0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x53fb52