Function at 0x40d0e0
Capabilities:
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
sub esp, 0x8c
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x10]
push eax
push 0x41f8b0
push 1
push 0
push 0x41fac0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x40d115
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x2c]
push ecx
call esi
mov edx, dword [esp + 0x38]
mov edi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
lea eax, [esp + 0x7c]
push eax
mov dword [esp + 0x9c], edx
call esi
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x88]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
call esi
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x6c]
push ecx
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], eax
call esi
mov esi, dword [esp + 0x98]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x5c]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x70]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x74]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x78]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x70]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x74]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x78]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x9c]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xb0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xb4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xb8]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x6c]
push ecx
mov edi, eax
call esi
lea edx, [esp + 0x5c]
push edx
call esi
lea eax, [esp + 0x7c]
push eax
call esi
lea ecx, [esp + 0x2c]
push ecx
call esi
xor ebp, ebp
cmp edi, ebp
jge 0x40d26a
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
lea eax, [ebp - 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
push 0x41d2b4
lea ecx, [esp + 0x20]
call fcn.0040d030
mov eax, dword [eax]
cmp eax, ebp
je 0x40d282
mov ecx, dword [eax]
jmp 0x40d284
xor ecx, ecx
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
lea edi, [esp + 0x28]
push edi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea ecx, [esp + 0x1c]
mov edi, eax
call fcn.0040d090
cmp edi, ebp
jge 0x40d2c1
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0xfffffffd
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x18], ebp
mov ecx, dword [eax]
push ebp
push eax
mov eax, dword [ecx + 0x38]
call eax
mov edi, eax
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebp
jge 0x40d305
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0xfffffffc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x24]
mov dword [esp + 0x24], ebp
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
mov ecx, dword [esp + 0x24]
cmp ecx, ebp
jne 0x40d34a
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0xfffffffb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
xor eax, eax
cmp ecx, ebp
jle 0x40d43e
mov edx, dword [esp + 0x14]
lea ebx, [eax + 1]
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], ebp
mov ecx, 3
mov word [esp + 0x30], cx
mov ebp, dword [esp + 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebp
mov ebp, dword [esp + 0x44]
mov ecx, ebx
mov dword [esp + 0x48], ecx
mov edi, dword [edx]
mov dword [eax + 4], ebp
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x4c]
push edx
mov edx, dword [edi + 0x20]
mov dword [eax + 0xc], ecx
call edx
mov edi, eax
lea eax, [esp + 0x2c]
push eax
call esi
xor ebp, ebp
cmp edi, ebp
jl 0x40d4d9
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
mov edi, eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
cmp edi, ebp
jl 0x40d4a5
cmp eax, ebp
jl 0x40d4a5
mov edi, dword [esp + 0xa0]
mov ecx, dword [esp + 0x20]
push edi
push ecx
call fcn.0041000b
add esp, 8
test eax, eax
jne 0x40d45d
mov edx, dword [esp + 0x1c]
push edi
push edx
call fcn.0041000b
add esp, 8
test eax, eax
jne 0x40d45d
mov eax, dword [esp + 0x20]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push eax
call edi
mov ecx, dword [esp + 0x1c]
push ecx
call edi
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, ebx
cmp eax, dword [esp + 0x24]
jl 0x40d354
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
mov ecx, dword [esp + 0x20]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ecx
call esi
mov edx, dword [esp + 0x1c]
push edx
call esi
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0xfffffffa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
pop edi
pop esi
pop ebp
mov eax, 0xfffffff9
pop ebx
add esp, 0x8c
ret