Function at 0x449630
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57430d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xd0
push esi
push edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x3c], edx
push eax
push 0x57e6c0
push 1
push 0
push 0x57e6d0
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x28], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x44983b
mov eax, dword [ebp - 0x28]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [eax]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0xa0]
push eax
call edi
mov dword [ebp - 4], 0
lea eax, [ebp - 0x90]
movups xmm0, xmmword [ebp - 0xa0]
push eax
movups xmmword [ebp - 0xb0], xmm0
call edi
movups xmm0, xmmword [ebp - 0x90]
lea eax, [ebp - 0xe0]
push eax
movups xmmword [ebp - 0xc0], xmm0
call edi
movups xmm0, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x80]
push eax
movups xmmword [ebp - 0xd0], xmm0
call edi
mov byte [ebp - 4], 3
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb0]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc0]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xd0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x80]
push dword [ebp - 0x28]
movups xmmword [eax], xmm0
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x80]
push eax
call edi
lea eax, [ebp - 0xe0]
push eax
call edi
lea eax, [ebp - 0x90]
push eax
call edi
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
push eax
call edi
mov eax, dword [ebp - 0x28]
test esi, esi
js 0x449835
mov dword [ebp - 0x14], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.00544577
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x4497b9
push 0x588c74
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x44a085
jmp 0x4497bb
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44a085
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 5
push eax
push dword [esi]
push dword [ebp - 0x28]
call edi
or edi, 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44982e
mov ecx, dword [esi]
test ecx, ecx
je 0x449809
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449820
push eax
call fcn.005446bc
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00544491
mov eax, dword [ebp - 0x1c]
add esp, 8
test eax, eax
jns 0x449850
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebp - 0x14]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
call fcn.00544577
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 6
test esi, esi
je 0x4498a5
push dword [ebp - 0x30]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x4498a7
cmp dword [ebp - 0x30], eax
jne 0x44a08f
jmp 0x4498a7
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44a085
push 0
mov dword [ebp - 4], 7
push dword [esi]
push dword [ebp - 0x14]
call dword [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x449910
mov eax, dword [esi]
test eax, eax
je 0x4498ee
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449905
push eax
call fcn.005446bc
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00544491
add esp, 8
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x28]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x44993d
mov eax, dword [ebp - 0x14]
jmp 0x449835
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x68]
mov dword [ebp - 0x68], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x1c]
test eax, eax
jns 0x449966
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x449835
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x449955
mov ecx, dword [ebp - 0x50]
lea edx, [ebp - 0x54]
push edx
mov dword [ebp - 0x54], 0
push 2
mov eax, dword [ecx]
push ecx
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x50]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x449955
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x2c]
push edx
mov dword [ebp - 0x2c], 0
push 0x57e6b0
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x54]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x449955
call fcn.0042a680
mov ecx, eax
test ecx, ecx
je 0x44a099
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x58], eax
push str.Ql9nanceUnBnZWVjcA
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 8
call fcn.0042a8f0
test al, al
jne 0x449a16
push 0x14
push str.Ql9nanceUnBnZWVjcA
lea ecx, [ebp - 0x58]
call fcn.0042ac10
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x2c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x38], esi
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x38], ecx
call fcn.0042a390
add eax, 0x10
lea ecx, [ebp - 0x64]
mov dword [esi], eax
call fcn.00440b00
add esp, 4
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x30], eax
call fcn.00544577
mov esi, eax
add esp, 4
mov dword [ebp - 0x40], esi
mov byte [ebp - 4], 0xb
test esi, esi
je 0x449a94
push dword [ebp - 0x30]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x449a96
cmp dword [ebp - 0x30], eax
jne 0x44a0a3
jmp 0x449a96
xor esi, esi
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x40], esi
test esi, esi
je 0x44a0ad
mov byte [ebp - 4], 0xc
push dword [esi]
push dword [ebp - 0x2c]
call dword [ebp - 0x1c]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x449af0
mov eax, dword [esi]
test eax, eax
je 0x449ace
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449ae5
push eax
call fcn.005446bc
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00544491
add esp, 8
mov byte [ebp - 4], 9
mov eax, edi
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449b0e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042a680
mov ecx, eax
test ecx, ecx
je 0x44a0b7
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.Lzc1LisuLysuL1IuLjguLjguLg
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xd
call fcn.0042a8f0
test al, al
jne 0x449b4e
push 0x1c
push str.Lzc1LisuLysuL1IuLjguLjguLg
lea ecx, [ebp - 0x30]
call fcn.0042ac10
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x2c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x40], eax
call fcn.0042a390
add eax, 0x10
lea ecx, [ebp - 0x34]
mov dword [esi], eax
call fcn.00440b00
add esp, 4
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x1c], eax
call fcn.00544577
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x10
test esi, esi
je 0x449bcb
push dword [ebp - 0x1c]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x449bcd
cmp dword [ebp - 0x1c], eax
jne 0x44a0c1
jmp 0x449bcd
xor esi, esi
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44a0cb
mov byte [ebp - 4], 0x11
push dword [esi]
push dword [ebp - 0x2c]
call dword [ebp - 0x64]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x449c27
mov eax, dword [esi]
test eax, eax
je 0x449c05
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449c1c
push eax
call fcn.005446bc
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00544491
add esp, 8
mov byte [ebp - 4], 0xe
mov eax, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449c45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x2c]
push 1
push ecx
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
jns 0x449c65
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
jmp 0x44a00f
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x48], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44a00c
mov eax, dword [ebp - 0x48]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [ebx + 8]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
call fcn.00544577
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x12
test esi, esi
je 0x449cde
push dword [ebp - 0x1c]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x449ce0
cmp dword [ebp - 0x1c], eax
jne 0x44a0d5
jmp 0x449ce0
xor esi, esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44a085
mov byte [ebp - 4], 0x13
push dword [esi]
push dword [ebp - 0x48]
call dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, edi
mov byte [ebp - 4], 0xe
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x449d41
mov ecx, dword [esi]
test ecx, ecx
je 0x449d1f
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449d36
push eax
call fcn.005446bc
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00544491
add esp, 8
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x34], 0
jl 0x44a00c
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x44a00c
mov ecx, dword [ebp - 0x5c]
lea edx, [ebp - 0x60]
push edx
mov dword [ebp - 0x60], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x5c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44a00c
mov ecx, dword [ebp - 0x60]
lea edx, [ebp - 0x4c]
push edx
mov dword [ebp - 0x4c], 0
push str.MbLk
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x60]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44a00c
mov eax, dword [ebp - 0x4c]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
call fcn.00544577
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x14
test esi, esi
je 0x449e16
push dword [ebp - 0x1c]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x449e18
cmp dword [ebp - 0x1c], eax
jne 0x44a0df
jmp 0x449e18
xor esi, esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44a085
mov byte [ebp - 4], 0x15
push dword [esi]
push dword [ebp - 0x4c]
call dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov ecx, edi
mov byte [ebp - 4], 0xe
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x449e79
mov ecx, dword [esi]
test ecx, ecx
je 0x449e57
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449e6e
push eax
call fcn.005446bc
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00544491
add esp, 8
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x14]
jl 0x44a00f
mov dword [ebp - 0x6c], 0
mov eax, dword [eax]
push 0x588c78
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x34], eax
mov eax, 8
mov word [ebp - 0x80], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x78], eax
test eax, eax
je 0x44a085
movups xmm0, xmmword [ebp - 0x80]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x90]
push eax
movups xmmword [ebp - 0xd0], xmm0
call esi
movups xmm0, xmmword [ebp - 0x90]
lea eax, [ebp - 0xa0]
push eax
movups xmmword [ebp - 0xc0], xmm0
call esi
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x18]
movups xmm0, xmmword [ebp - 0xa0]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
push 0xc
movups xmmword [ebp - 0xb0], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
call fcn.00544577
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x19
test esi, esi
je 0x449f4d
push dword [ebp - 0x44]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x449f4f
cmp dword [ebp - 0x44], eax
jne 0x44a0e9
jmp 0x449f4f
xor esi, esi
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44a085
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x6c]
movups xmm0, xmmword [ebp - 0xd0]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0xb0]
push 6
push dword [ebp - 0x3c]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x14]
call dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x449fe4
mov ecx, dword [esi]
test ecx, ecx
je 0x449fc2
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449fd9
push eax
call fcn.005446bc
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00544491
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xa0]
push eax
call esi
lea eax, [ebp - 0x90]
push eax
call esi
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0xe
push eax
call esi
cmp dword [ebp - 0x3c], 0
jge 0x44a024
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 0
jmp 0x44a043
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 1
mov edx, dword [ebp - 0x40]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44a05a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x38]
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x44a06f
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0x1d]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.00543d00
push 0x8007000e
call fcn.00543d00
push 0x80004005
call fcn.0042abf0
push 0x8007000e
call fcn.00543d00
push 0x8007000e
call fcn.00543d00
push 0x80004005
call fcn.0042abf0
push 0x8007000e
call fcn.00543d00
push 0x8007000e
call fcn.00543d00
push 0x8007000e
call fcn.00543d00
push 0x8007000e
call fcn.00543d00
push 0x8007000e
call fcn.00543d00
int3