Function at 0x44cca0
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57e829
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xd8
push esi
push edi
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x34], edx
push eax
push 0x588b18
push 1
push 0
push 0x588b28
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x2c], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x44d96c
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x44d96c
mov eax, dword [eax]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0xa8]
push eax
call edi
mov dword [ebp - 4], 0
lea eax, [ebp - 0x98]
movups xmm0, xmmword [ebp - 0xa8]
push eax
movups xmmword [ebp - 0xb8], xmm0
call edi
movups xmm0, xmmword [ebp - 0x98]
lea eax, [ebp - 0xe8]
push eax
movups xmmword [ebp - 0xc8], xmm0
call edi
movups xmm0, xmmword [ebp - 0xe8]
lea eax, [ebp - 0x88]
push eax
movups xmmword [ebp - 0xd8], xmm0
call edi
mov byte [ebp - 4], 3
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb8]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc8]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xd8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x88]
push dword [ebp - 0x2c]
movups xmmword [eax], xmm0
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x88]
push eax
call edi
lea eax, [ebp - 0xe8]
push eax
call edi
lea eax, [ebp - 0x98]
push eax
call edi
lea eax, [ebp - 0xa8]
mov dword [ebp - 4], 0xffffffff
push eax
call edi
mov eax, dword [ebp - 0x2c]
test esi, esi
js 0x44d966
mov dword [ebp - 0x18], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x44ce3a
push 0x596778
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x44d981
jmp 0x44ce3c
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44d981
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 5
push eax
push dword [esi]
push dword [ebp - 0x2c]
call edi
or edi, 0xffffffff
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44ceaf
mov ecx, dword [esi]
test ecx, ecx
je 0x44ce8a
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44cea1
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
mov eax, dword [ebp - 0x14]
add esp, 8
test eax, eax
js 0x44d963
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44d963
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 6
test esi, esi
je 0x44cf14
push dword [ebp - 0x28]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44cf16
cmp dword [ebp - 0x28], eax
jne 0x44d98b
jmp 0x44cf16
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44d981
push 0
mov dword [ebp - 4], 7
push dword [esi]
push dword [ebp - 0x18]
call dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44cf7f
mov eax, dword [esi]
test eax, eax
je 0x44cf5d
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44cf74
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
add esp, 8
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x1c]
push edx
mov dword [ebp - 0x1c], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44d95e
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x44d95e
mov dword [ebp - 0x4c], 0
lea edx, [ebp - 0x4c]
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0x1c]
test eax, eax
js 0x44d950
cmp dword [ebp - 0x4c], 0
je 0x44d950
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x44d995
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x60], eax
push str.NldsVNnA2vH0IWfFANEBRjge7V0IymTHpi0E0I
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 8
call fcn.0042f1c0
test al, al
jne 0x44d019
push 0x27
push str.NldsVNnA2vH0IWfFANEBRjge7V0IymTHpi0E0I
lea ecx, [ebp - 0x60]
call fcn.0042f4f0
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x4c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x38], esi
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], ecx
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x50]
mov dword [esi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x28], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0xb
test esi, esi
je 0x44d097
push dword [ebp - 0x28]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d099
cmp dword [ebp - 0x28], eax
jne 0x44d99f
jmp 0x44d099
xor esi, esi
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x48], esi
test esi, esi
je 0x44d9a9
mov byte [ebp - 4], 0xc
push dword [esi]
push dword [ebp - 0x4c]
call dword [ebp - 0x14]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44d0f3
mov eax, dword [esi]
test eax, eax
je 0x44d0d1
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d0e8
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
add esp, 8
mov byte [ebp - 4], 9
mov eax, edi
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d111
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x64]
mov dword [ebp - 0x64], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x44d90f
mov ecx, dword [ebp - 0x64]
test ecx, ecx
je 0x44d90f
lea edx, [ebp - 0x68]
mov dword [ebp - 0x68], 0
mov eax, dword [ecx]
push edx
push 9
push ecx
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x64]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44d90f
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x44d90f
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
mov eax, dword [ecx]
push edx
push 0x588b38
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x68]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44d90f
cmp dword [ebp - 0x3c], 0
je 0x44d90f
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x44d9b3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x50], eax
push str.QTBqeOA1fyDVcv5ZBhRDJlcP2Sg
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xd
call fcn.0042f1c0
test al, al
jne 0x44d1e4
push 0x1d
push str.QTBqeOA1fyDVcv5ZBhRDJlcP2Sg
lea ecx, [ebp - 0x50]
call fcn.0042f4f0
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x3c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x48], esi
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x48], eax
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x58]
mov dword [esi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x28], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0x10
test esi, esi
je 0x44d261
push dword [ebp - 0x28]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d263
cmp dword [ebp - 0x28], eax
jne 0x44d9bd
jmp 0x44d263
xor esi, esi
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x44], esi
test esi, esi
je 0x44d9c7
mov byte [ebp - 4], 0x11
push dword [esi]
push dword [ebp - 0x3c]
call dword [ebp - 0x14]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44d2bd
mov eax, dword [esi]
test eax, eax
je 0x44d29b
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d2b2
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
add esp, 8
mov byte [ebp - 4], 0xe
mov eax, edi
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d2db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x3c]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x44d9d1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.VzVvwMAdh3XAAE
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x12
call fcn.0042f1c0
test al, al
jne 0x44d32f
push 0xe
push str.VzVvwMAdh3XAAE
lea ecx, [ebp - 0x28]
call fcn.0042f4f0
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x3c]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x44], esi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x44], eax
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x30]
mov dword [esi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0x14
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x14], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x15
test esi, esi
je 0x44d3ac
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d3ae
cmp dword [ebp - 0x14], eax
jne 0x44d9db
jmp 0x44d3ae
xor esi, esi
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44d9e5
mov byte [ebp - 4], 0x16
push dword [esi]
push dword [ebp - 0x3c]
call dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d40b
mov ecx, dword [esi]
test ecx, ecx
je 0x44d3e9
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d400
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
add esp, 8
mov byte [ebp - 4], 0x13
mov eax, edi
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d429
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x58], 0
jl 0x44d8c9
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x44d8c9
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x17
test esi, esi
je 0x44d496
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d498
cmp dword [ebp - 0x14], eax
jne 0x44d9ef
jmp 0x44d498
xor esi, esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44d981
mov byte [ebp - 4], 0x18
push dword [esi]
push dword [ebp - 0x5c]
call dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, edi
mov byte [ebp - 4], 0x13
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d4f9
mov ecx, dword [esi]
test ecx, ecx
je 0x44d4d7
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d4ee
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
add esp, 8
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x30], 0
jl 0x44d8c9
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x44d8c9
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x44d8c9
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], 0
mov eax, dword [ecx]
push edx
push 0
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x6c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44d8c9
mov ecx, dword [ebp - 0x70]
test ecx, ecx
je 0x44d8c9
lea edx, [ebp - 0x40]
mov dword [ebp - 0x40], 0
mov eax, dword [ecx]
push edx
push str.MbLk
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x70]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44d8c9
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x44d8c9
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x19
test esi, esi
je 0x44d5e6
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d5e8
cmp dword [ebp - 0x14], eax
jne 0x44d9f9
jmp 0x44d5e8
xor esi, esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44d981
mov byte [ebp - 4], 0x1a
push dword [esi]
push dword [ebp - 0x40]
call dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov ecx, edi
mov byte [ebp - 4], 0x13
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d64c
mov ecx, dword [esi]
test ecx, ecx
je 0x44d627
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d63e
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
mov eax, dword [ebp - 0x34]
add esp, 8
test eax, eax
js 0x44d8c9
mov eax, dword [ebx + 8]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
cmp dword [eax - 0xc], 0
je 0x44d710
mov eax, dword [ebp - 0x40]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x34], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x44d6b0
push dword [ebp - 0x14]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d6b2
cmp dword [ebp - 0x14], eax
jne 0x44da03
jmp 0x44d6b2
xor esi, esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44d981
mov byte [ebp - 4], 0x1c
push dword [esi]
push dword [ebp - 0x40]
call dword [ebp - 0x34]
mov byte [ebp - 4], 0x13
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44d710
mov eax, dword [esi]
test eax, eax
je 0x44d6ee
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d705
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
add esp, 8
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x74], 0
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push 0x59678c
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x88], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x44d981
movups xmm0, xmmword [ebp - 0x88]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x98]
push eax
movups xmmword [ebp - 0xd8], xmm0
call esi
movups xmm0, xmmword [ebp - 0x98]
lea eax, [ebp - 0xa8]
push eax
movups xmmword [ebp - 0xc8], xmm0
call esi
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x1c]
movups xmm0, xmmword [ebp - 0xa8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x54]
push 0xc
movups xmmword [ebp - 0xb8], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
call fcn.0054f7c4
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x20
test esi, esi
je 0x44d7e0
push dword [ebp - 0x54]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44d7e2
cmp dword [ebp - 0x54], eax
jne 0x44da0d
jmp 0x44d7e2
xor esi, esi
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44d981
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x74]
movups xmm0, xmmword [ebp - 0xd8]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0xb8]
push 6
push dword [ebp - 0x34]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x18]
call dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44d877
mov ecx, dword [esi]
test ecx, ecx
je 0x44d855
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44d86c
push eax
call fcn.0054f917
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0054f7f4
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xa8]
push eax
call esi
lea eax, [ebp - 0x98]
push eax
call esi
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x13
push eax
call esi
cmp dword [ebp - 0x34], 0
jl 0x44d8c9
cmp dword [ebp - 0x74], 0
je 0x44d8c9
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 1
jmp 0x44d8df
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 0
mov edx, dword [ebp - 0x44]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d8f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44d925
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x44d925
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 0
mov eax, dword [ebp - 0x38]
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x44d93a
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov al, byte [ebp - 0x1d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
jmp 0x44d966
mov eax, dword [ebp - 0x18]
jmp 0x44d966
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
xor al, al
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
push 0x80004005
call fcn.0042f4d0
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
push 0x80004005
call fcn.0042f4d0
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
push 0x80004005
call fcn.0042f4d0
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
push 0x8007000e
call fcn.0054ef30
int3