Function at 0x477705
Capabilities:
Schedule task via itaskservice

Disassembly:
push 0x70
mov eax, 0x480459
call fcn.004026ff
mov dword [ebp - 0x4c], ecx
xor edi, edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], edi
push 0x414898
lea ecx, [ebp - 0x3c]
call fcn.004144c7
push 0x47973c
lea ecx, [ebp - 0x38]
call fcn.00417f25
push dword [ebp + 0x14]
lea ecx, [ebp + 0x14]
call fcn.00417f25
mov esi, 0x479730
push esi
lea ecx, [ebp - 0x48]
call fcn.004144c7
push esi
lea ecx, [ebp - 0x7c]
call fcn.004772d9
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x11
cmp dword [ebp + 0xc], edi
je 0x4777ab
push 0x479720
lea ecx, [ebp + 0xc]
call fcn.00417f25
push eax
lea ecx, [ebp + 0x14]
call fcn.00464bf3
push dword [ebp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp + 0x14]
push 0x4796b8
push 4
call fcn.004015a0
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x413ec0
push 0x17
push edi
push 0x413f9c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov ebx, 0x8000ffff
jl 0x4777e4
cmp dword [ebp - 0x20], edi
jne 0x477800
push esi
push 0x479608
push 1
call fcn.004015a0
add esp, 0xc
cmp esi, edi
jl 0x477f6e
mov esi, ebx
xor edi, edi
cmp esi, edi
jl 0x477f6e
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
mov eax, dword [ebp - 0x20]
lea esi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jge 0x477861
push esi
push 0x479588
push 0x43bbc4
push 1
call fcn.004015a0
add esp, 0x10
jmp 0x477f6e
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp - 0x3c]
push eax
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jl 0x47787d
cmp dword [ebp - 0x2c], 0
jne 0x477897
push esi
push 0x479500
push 1
call fcn.004015a0
add esp, 0xc
test esi, esi
jl 0x477f6e
mov esi, ebx
test esi, esi
jl 0x477f6e
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x28]
push edx
push dword [ebp + 0x14]
push eax
call dword [ecx + 0x34]
mov esi, eax
xor edi, edi
cmp esi, edi
mov ebx, 0x43bbc4
jl 0x4779c7
push 0x479470
push 8
call fcn.004015a0
mov eax, dword [ebp - 0x28]
pop ecx
pop ecx
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x2c]
cmp eax, edi
jge 0x4778ee
push eax
push 0x4793e8
push ebx
push 1
call fcn.004015a0
add esp, 0x10
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push eax
call dword [ecx + 0x4c]
mov esi, eax
cmp esi, edi
jge 0x477909
push esi
push 0x479358
jmp 0x477926
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x477931
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push edx
push eax
call dword [ecx + 0x24]
mov esi, eax
cmp esi, edi
jge 0x477931
push esi
push 0x4792c8
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
mov dword [ebp + 0xc], edi
jl 0x477ed8
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x477edf
mov ecx, dword [eax]
lea edx, [ebp + 0xc]
push edx
push eax
call dword [ecx + 0x1c]
mov esi, eax
cmp esi, edi
jge 0x477968
push esi
push 0x479240
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp dword [ebp + 0xc], 1
jne 0x4779aa
push 3
pop eax
mov word [ebp - 0x6c], ax
mov dword [ebp - 0x64], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov byte [ebp - 4], 0x12
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
mov esi, eax
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x11
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x477ed8
jle 0x477ed8
push dword [ebp + 0xc]
push 0x479180
push 4
call fcn.004015a0
add esp, 0xc
jmp 0x477ed8
cmp dword [ebp + 0x10], edi
je 0x477ed8
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push edi
push eax
call dword [ecx + 0x24]
mov esi, eax
cmp esi, edi
jge 0x4779ec
push esi
push 0x479100
jmp 0x477a09
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x477a14
mov ecx, dword [eax]
lea edx, [ebp - 0x18]
push edx
push eax
call dword [ecx + 0x1c]
mov esi, eax
cmp esi, edi
jge 0x477a14
push esi
push 0x479060
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp dword [ebp - 0x18], edi
je 0x477bb9
cmp esi, edi
jl 0x477be1
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0xc]
call fcn.00451d77
push 0x40b468
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x13
call fcn.00417f25
push eax
lea ecx, [ebp + 0xc]
call fcn.00464bf3
push dword [ebp + 0x10]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
lea eax, [ebp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.00464bf3
mov eax, dword [ebp - 0x18]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x50]
mov esi, eax
test esi, esi
jge 0x477a85
push esi
push 0x478fe8
push ebx
push 1
call fcn.004015a0
add esp, 0x10
push dword [ebp + 0xc]
mov byte [ebp - 4], 0x11
call edi
test esi, esi
jl 0x477be1
mov esi, dword [ebp - 0x18]
push 0x478fb4
lea ecx, [ebp + 0xc]
call fcn.00417f25
mov eax, dword [eax]
mov ecx, dword [esi]
push eax
push esi
mov byte [ebp - 4], 0x14
call dword [ecx + 0x38]
push dword [ebp + 0xc]
mov esi, eax
mov byte [ebp - 4], 0x11
call edi
test esi, esi
jge 0x477acd
push esi
push 0x478f30
jmp 0x477bd6
push 0x478ef0
lea ecx, [ebp + 0xc]
call fcn.00417f25
lea eax, [ebp + 0x14]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x15
call fcn.00464bf3
mov eax, dword [ebp - 0x18]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov esi, eax
test esi, esi
jge 0x477b0d
push esi
push 0x478e60
push ebx
push 1
call fcn.004015a0
add esp, 0x10
push dword [ebp + 0xc]
mov byte [ebp - 4], 0x11
call edi
test esi, esi
jl 0x477be1
mov esi, dword [ebp - 0x18]
push 0x478e30
lea ecx, [ebp + 0xc]
call fcn.00417f25
mov eax, dword [eax]
mov ecx, dword [esi]
push eax
push esi
mov byte [ebp - 4], 0x16
call dword [ecx + 0x60]
push dword [ebp + 0xc]
mov esi, eax
mov byte [ebp - 4], 0x11
call edi
test esi, esi
jge 0x477b55
push esi
push 0x478da8
jmp 0x477bd6
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x58]
mov esi, eax
test esi, esi
jge 0x477b78
push esi
push 0x478d08
jmp 0x477bd6
mov esi, dword [ebp - 0x18]
push 0x478d00
lea ecx, [ebp + 0xc]
call fcn.00417f25
mov eax, dword [eax]
mov ecx, dword [esi]
push eax
push esi
mov byte [ebp - 4], 0x17
call dword [ecx + 0x30]
push dword [ebp + 0xc]
mov esi, eax
mov byte [ebp - 4], 0x11
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jge 0x477bbd
push esi
push 0x478c78
push ebx
push 1
call fcn.004015a0
add esp, 0x10
test esi, esi
jl 0x477be1
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x24]
push edx
push eax
call dword [ecx + 0x3c]
mov esi, eax
test esi, esi
jge 0x477be1
push esi
push 0x478be8
push ebx
push 1
call fcn.004015a0
add esp, 0x10
mov eax, dword [ebp - 0x24]
xor edi, edi
cmp eax, edi
je 0x477c5d
cmp esi, edi
jl 0x477c85
push dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x477c09
push esi
push 0x478b68
jmp 0x477c7a
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov esi, eax
cmp esi, edi
jge 0x477c23
push esi
push 0x478ae0
jmp 0x477c7a
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push 3
push eax
call dword [ecx + 0x38]
mov esi, eax
cmp esi, edi
jge 0x477c3c
push esi
push 0x478a50
jmp 0x477c7a
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x48]
mov esi, eax
cmp esi, edi
jge 0x477c61
push esi
push 0x4789c0
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
jl 0x477c85
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push eax
call dword [ecx + 0x2c]
mov esi, eax
cmp esi, edi
jge 0x477c85
push esi
push 0x478928
push ebx
push 1
call fcn.004015a0
add esp, 0x10
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x477d2f
cmp esi, edi
jl 0x477ed8
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xb0]
mov esi, eax
cmp esi, edi
jge 0x477cb2
push esi
push 0x478898
jmp 0x477cfa
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x48]
mov esi, eax
cmp esi, edi
jge 0x477ccb
push esi
push 0x4787d0
jmp 0x477cfa
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x40]
mov esi, eax
cmp esi, edi
jge 0x477ce4
push esi
push 0x478728
jmp 0x477cfa
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x58]
mov esi, eax
cmp esi, edi
jge 0x477d0a
push esi
push 0x478688
push ebx
push 1
call fcn.004015a0
add esp, 0x10
jmp 0x477ed8
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push 2
push eax
call dword [ecx + 0x38]
mov esi, eax
cmp esi, edi
jge 0x477d38
push esi
push 0x4785e8
push ebx
push 1
call fcn.004015a0
mov eax, dword [ebp - 0x14]
add esp, 0x10
cmp esi, edi
jge 0x477d3b
jmp 0x477ed8
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x477d64
mov ecx, dword [eax]
lea edx, [ebp - 0x44]
push edx
push 0x47976c
push eax
call dword [ecx]
mov esi, eax
cmp esi, edi
jge 0x477d6c
push esi
push 0x478548
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
jl 0x477ed8
mov eax, dword [ebp - 0x44]
cmp eax, edi
je 0x477d92
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x28]
mov esi, eax
cmp esi, edi
jge 0x477d9a
push esi
push 0x478498
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
jl 0x477ed8
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x477dc2
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
call dword [ecx + 0x44]
mov esi, eax
cmp esi, edi
jge 0x477dca
push esi
push 0x478410
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
jl 0x477ed8
mov eax, dword [ebp - 0x34]
cmp eax, edi
je 0x477df4
push dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
mov esi, eax
cmp esi, edi
jge 0x477dfd
push esi
push 0x478388
push ebx
push 1
call fcn.004015a0
mov eax, dword [ebp - 0x34]
add esp, 0x10
cmp esi, edi
jge 0x477e00
jmp 0x477ed8
mov eax, dword [ebp - 0x34]
cmp eax, edi
je 0x477e26
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push edi
push eax
call dword [ecx + 0x30]
mov esi, eax
cmp esi, edi
jge 0x477e2e
push esi
push 0x4782e0
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
jl 0x477ed8
mov eax, dword [ebp - 0x40]
cmp eax, edi
je 0x477e5a
mov ecx, dword [eax]
lea edx, [ebp - 0x30]
push edx
push 0x47975c
push eax
call dword [ecx]
mov esi, eax
cmp esi, edi
jge 0x477e5e
push esi
push 0x478248
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
jl 0x477ed8
cmp dword [ebp - 0x30], edi
je 0x477ed8
push 0x47822c
lea ecx, [ebp + 0xc]
call fcn.004144c7
mov eax, dword [ebp - 0x30]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 0x18
call dword [ecx + 0x2c]
mov esi, eax
cmp esi, edi
jge 0x477e8e
push esi
push 0x4781a8
jmp 0x477ec0
mov esi, dword [ebp - 0x30]
push 0x478194
lea ecx, [ebp + 0x10]
call fcn.00417f25
mov eax, dword [eax]
mov ecx, dword [esi]
push eax
push esi
mov byte [ebp - 4], 0x19
call dword [ecx + 0x34]
push dword [ebp + 0x10]
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp esi, edi
jge 0x477ecb
push esi
push 0x478108
push ebx
push 1
call fcn.004015a0
add esp, 0x10
push dword [ebp + 0xc]
mov byte [ebp - 4], 0x11
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor edi, edi
cmp dword [ebp - 0x1c], edi
jne 0x477f07
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x477f07
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push edx
push eax
call dword [ecx + 0x24]
mov esi, eax
cmp esi, edi
jge 0x477f0b
push esi
push 0x4792c8
push ebx
push 1
call fcn.004015a0
add esp, 0x10
cmp esi, edi
jl 0x477f6e
cmp dword [ebp - 0x1c], edi
je 0x477f24
mov ecx, dword [ebp - 0x4c]
push edi
push dword [ebp + 0x18]
push dword [ebp - 0x10]
push dword [ebp - 0x1c]
call fcn.004757bf
mov esi, eax
cmp esi, edi
jl 0x477f6e
mov eax, dword [ebp - 0x2c]
cmp eax, edi
je 0x477f6e
cmp dword [ebp - 0x10], edi
je 0x477f6e
lea edx, [ebp - 0x28]
push edx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 5
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x7c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 6
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
push dword [ebp + 0x14]
movsd dword es:[edi], dword [esi]
push eax
call dword [ecx + 0x44]
mov esi, eax
push esi
push dword [ebp + 0x14]
push 0x478088
push 4
call fcn.004015a0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
add esp, 0x10
lea eax, [ebp - 0x5c]
push eax
call edi
lea eax, [ebp - 0x7c]
push eax
call edi
push dword [ebp - 0x48]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
push dword [ebp + 0x14]
call edi
push dword [ebp - 0x38]
call edi
push dword [ebp - 0x3c]
call edi
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x477fbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 9
test eax, eax
je 0x477fcf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 8
test eax, eax
je 0x477fe0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 7
test eax, eax
je 0x477ff1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 6
test eax, eax
je 0x478002
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 5
test eax, eax
je 0x478013
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 4
test eax, eax
je 0x478024
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 3
test eax, eax
je 0x478035
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 2
test eax, eax
je 0x478046
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 1
test eax, eax
je 0x478057
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0
test eax, eax
je 0x478068
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
test eax, eax
je 0x478079
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
call fcn.00402739
ret 0x14