Function at 0x42be70
Capabilities:
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x180
mov dword [esp + 0x10], edx
mov ebx, ecx
lea esi, [esp + 0x144]
xor edi, edi
xor edx, edx
mov eax, dword [0x49803c]
mov ecx, esi
xor eax, ebp
mov dword [esp + 0x178], eax
push 0
push 0x492a5c
call fcn.00428120
add esp, 8
cmp dword [esi + 0x1c], 0
jne 0x42c146
cmp byte [esp + 0x15c], 0
mov esi, 0
mov byte [esp + 0x140], 0
je 0x42c10a
movsd xmm0, qword [esp + 0x154]
movsd xmm2, qword [esp + 0x144]
movsd xmm1, qword [esp + 0x14c]
xor eax, eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], 0xf
mov byte [esp + 0x144], al
mov dword [esp + 0x120], eax
mov byte [esp + 0x15c], al
mov dword [esp + 0x124], eax
movsd qword [esp + 0x138], xmm0
movsd qword [esp + 0x130], xmm1
movsd qword [esp + 0x128], xmm2
mov byte [esp + 0x140], 1
mov esi, dword [esp + 0x138]
cmp dword [esp + 0x13c], 0xf
jbe 0x42bf5c
mov edi, dword [esp + 0x128]
jmp 0x42bf63
lea edi, [esp + 0x128]
cmp esi, 0xf
mov dword [esp + 0xc], ebx
ja 0x42cc39
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
mov ebx, 0xf
movsd qword [esp + 0x118], xmm1
movsd qword [esp + 0x110], xmm0
mov edi, 0x492a5c
mov dword [esp + 0x120], esi
mov dword [esp + 0x124], ebx
lea ecx, [esp + 0xf0]
xor edx, edx
push edi
call fcn.00428d30
add esp, 4
xor edx, edx
lea esi, [esp + 0xf0]
inc edx
mov ecx, esi
push 0
push edi
call fcn.00428120
add esp, 8
lea ecx, [esp + 0x144]
mov edx, esi
call fcn.00435090
cmp dword [esi + 0x1c], 0
mov edi, 0
jne 0x42c01d
cmp byte [esp + 0x108], 0
je 0x42c01d
mov eax, dword [esp + 0x104]
cmp eax, 0x10
jae 0x42c881
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0xf
mov byte [esp + 0xf0], 0
mov esi, dword [esp + 0x160]
test esi, esi
jne 0x42c0bf
cmp byte [esp + 0x15c], 0
je 0x42c08c
mov ecx, dword [esp + 0x158]
mov eax, dword [esp + 0x144]
xor edx, edx
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0xf
mov byte [esp + 0x144], dl
mov byte [esp + 0x15c], dl
cmp ecx, 0x10
jb 0x42c0bf
lea edi, [ecx + 1]
cmp edi, 0x1000
jae 0x42d3bb
push edi
push eax
call fcn.0045f3d1
add esp, 8
xor edi, edi
jmp 0x42c0bf
cmp ebx, 0xf
jbe 0x42c09a
mov eax, dword [esp + 0x110]
jmp 0x42c0a1
lea eax, [esp + 0x110]
lea ecx, [esp + 0xf0]
mov edx, 0x492a5c
push 0
push eax
call fcn.00427940
add esp, 8
mov ebx, dword [esp + 0x124]
cmp ebx, 0x10
jae 0x42c3c0
cmp byte [esp + 0x140], 0
je 0x42c106
mov eax, dword [esp + 0x13c]
mov ebx, dword [esp + 0xc]
cmp eax, 0x10
jae 0x42c812
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0xf
mov byte [esp + 0x128], 0
jmp 0x42c10a
mov ebx, dword [esp + 0xc]
test esi, esi
jne 0x42c146
cmp byte [esp + 0x15c], 0
je 0x42c146
mov eax, dword [esp + 0x158]
cmp eax, 0x10
jae 0x42c7dd
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0xf
mov byte [esp + 0x144], 0
mov ecx, ebx
call fcn.0042d430
lea eax, [esp + 0x128]
mov dword [eax], edi
push eax
push 0x461020
push 1
push edi
push 0x461030
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x42c385
mov esi, dword [esp + 0x128]
xorps xmm0, xmm0
movaps xmmword [esp + 0xe0], xmm0
movaps xmmword [esp + 0xd0], xmm0
movaps xmmword [esp + 0xc0], xmm0
movaps xmmword [esp + 0xb0], xmm0
mov eax, dword [esi]
mov ecx, dword [eax + 0x28]
call dword [section..00cfg]
sub esp, 0x44
movsd xmm0, qword [esp + 0x124]
movsd xmm1, qword [esp + 0x12c]
movsd qword [esp + 0x3c], xmm1
movsd qword [esp + 0x34], xmm0
movsd xmm0, qword [esp + 0x114]
movsd xmm1, qword [esp + 0x11c]
movsd qword [esp + 0x2c], xmm1
movsd qword [esp + 0x24], xmm0
movsd xmm0, qword [esp + 0x104]
movsd xmm1, qword [esp + 0x10c]
movsd qword [esp + 0x1c], xmm1
movsd qword [esp + 0x14], xmm0
movsd xmm0, qword [esp + 0xf4]
movsd xmm1, qword [esp + 0xfc]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 4], xmm0
mov dword [esp], esi
call ecx
test eax, eax
js 0x42c392
mov dword [esp + 0xc], ebx
xor ebx, ebx
mov dword [esp + 0x110], ebx
push 0x493a50
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, dword [esp + 0x110]
mov esi, dword [esp + 0x128]
mov dword [esp + 0x24], eax
mov dword [esp + 0x110], ebx
test edi, edi
je 0x42c272
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
mov eax, dword [esi]
mov ecx, dword [eax + 0x1c]
call dword [section..00cfg]
lea eax, [esp + 0x110]
push eax
push dword [esp + 0x28]
push esi
call ecx
mov edi, eax
test eax, eax
js 0x42c3aa
mov dword [esp + 0x20], edi
xor edi, edi
mov dword [esp + 0xac], edi
push 0x4939f4
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, dword [esp + 0xac]
mov esi, dword [esp + 0x110]
mov dword [esp + 0x14], eax
mov dword [esp + 0xac], edi
test ebx, ebx
je 0x42c2d9
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov eax, dword [esi]
mov ecx, dword [eax + 0x24]
call dword [section..00cfg]
lea ebx, [esp + 0xac]
push ebx
push dword [esp + 0x18]
push esi
call ecx
xor ecx, ecx
test eax, eax
mov eax, 0
jns 0x42c400
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x110]
mov dword [esp + 0xac], 0
test esi, esi
je 0x42c32d
mov eax, dword [esi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push esi
call ecx
xorps xmm0, xmm0
movaps xmmword [esp + 0x90], xmm0
mov eax, dword [edi]
mov ecx, dword [eax + 0x2c]
call dword [section..00cfg]
sub esp, 0x1c
movsd xmm0, qword [esp + 0xac]
movsd xmm1, qword [esp + 0xb4]
movsd qword [esp + 0x10], xmm1
movsd qword [esp + 8], xmm0
mov dword [esp + 0x18], ebx
mov dword [esp], edi
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call ecx
mov edi, eax
mov al, 1
test edi, edi
js 0x42c3e5
mov dword [esp + 0x20], edi
xor ecx, ecx
jmp 0x42c400
mov edi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x5d
jmp 0x42c39d
mov edi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x5f
call fcn.00428eb0
add esp, 4
jmp 0x42cc08
mov ecx, edi
mov edx, str.RegisterTask
push 0x64
call fcn.00428eb0
add esp, 4
jmp 0x42cbe0
mov eax, dword [esp + 0x110]
lea edx, [ebx + 1]
cmp edx, 0x1000
jae 0x42d360
push edx
push eax
call fcn.0045f3d1
add esp, 8
jmp 0x42c0c8
cmp edi, 0x800700b7
mov ecx, 0
jne 0x42c839
xor eax, eax
mov dword [esp + 0x20], 0x800700b7
mov esi, dword [esp + 0x128]
lea edi, [esp + 0x8c]
mov dword [esp + 0x2c], eax
xor ebx, ebx
mov dword [edi], ecx
mov eax, dword [esi]
mov ecx, dword [eax + 0x24]
call dword [section..00cfg]
push edi
push ebx
push esi
call ecx
test eax, eax
js 0x42c7c8
xor ebx, ebx
lea eax, [esp + 0xf0]
mov dword [esp + 0x88], ebx
mov dword [eax], ebx
push eax
call fcn.0041d370
add esp, 4
test al, al
jne 0x42c8a6
push 0x32
push str.GetTaskDescription
push str.Failed_to_get_install_directory
call fcn.00426ce0
add esp, 0xc
xor ebx, ebx
mov eax, dword [esp + 0xf0]
mov dword [esp + 0xf0], 0
test eax, eax
je 0x42c486
push eax
call fcn.0045f40c
add esp, 4
mov esi, 0x80004005
test bl, bl
je 0x42cb4d
push dword [esp + 0x88]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x8c]
lea edi, [esp + 0x84]
mov ebx, eax
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x1c]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
mov dword [esp + 0x1c], ebx
js 0x42c802
mov esi, dword [esp + 0x84]
mov eax, dword [esi]
mov ecx, dword [eax + 0x20]
call dword [section..00cfg]
push ebx
push esi
call ecx
test eax, eax
js 0x42c853
mov esi, dword [esp + 0x8c]
lea edi, [esp + 0x80]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x2c]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x42c86e
mov esi, dword [esp + 0x80]
mov eax, dword [esi]
mov ecx, dword [eax + 0x48]
call dword [section..00cfg]
push 0
push esi
call ecx
test eax, eax
js 0x42c945
mov esi, dword [esp + 0x80]
mov eax, dword [esi]
mov ecx, dword [eax + 0x38]
call dword [section..00cfg]
push 2
push esi
call ecx
test eax, eax
js 0x42c958
mov esi, dword [esp + 0x80]
mov eax, dword [esi]
mov ecx, dword [eax + 0x58]
call dword [section..00cfg]
push 0xffffffffffffffff
push esi
call ecx
test eax, eax
js 0x42cae6
mov esi, dword [esp + 0x80]
mov eax, dword [esi]
mov ecx, dword [eax + 0x40]
call dword [section..00cfg]
push 0
push esi
call ecx
test eax, eax
js 0x42caf6
push str.PT35M
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x80]
mov edi, eax
mov eax, dword [esi]
mov ecx, dword [eax + 0x70]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x42cc7a
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x18], edi
lea edi, [esp + 0x7c]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x1c]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x42cc95
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
mov ecx, dword [eax + 0x28]
call dword [section..00cfg]
push dword [esp + 0x14]
push esi
call ecx
test eax, eax
js 0x42cca5
mov esi, dword [esp + 0x8c]
lea edi, [esp + 0x78]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x24]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x42ccc4
mov esi, dword [esp + 0x78]
lea edi, [esp + 0x74]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x28]
call dword [section..00cfg]
push edi
push 2
push esi
call ecx
test eax, eax
js 0x42cce3
mov esi, dword [esp + 0x74]
lea edi, [esp + 0x70]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax]
call dword [section..00cfg]
push edi
push 0x461010
push esi
call ecx
test eax, eax
js 0x42cd02
mov edi, dword [esp + 0x10]
test edi, edi
je 0x42cd12
mov esi, dword [esp + 0x70]
mov eax, dword [esi]
mov ecx, dword [eax + 0x3c]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x42cd68
mov esi, dword [esp + 0x70]
mov eax, dword [esi]
mov ecx, dword [eax + 0x54]
call dword [section..00cfg]
push 1
push esi
call ecx
test eax, eax
js 0x42cd78
mov esi, dword [esp + 0x8c]
lea edi, [esp + 0x6c]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax + 0x44]
call dword [section..00cfg]
push edi
push esi
call ecx
test eax, eax
js 0x42cea7
mov esi, dword [esp + 0x6c]
xor edi, edi
lea ebx, [esp + 0x68]
mov dword [ebx], edi
mov eax, dword [esi]
mov ecx, dword [eax + 0x30]
call dword [section..00cfg]
push ebx
push edi
push esi
call ecx
test eax, eax
js 0x42cede
mov esi, dword [esp + 0x68]
lea edi, [esp + 0x64]
mov dword [edi], 0
mov eax, dword [esi]
mov ecx, dword [eax]
call dword [section..00cfg]
push edi
push str.MbLk
push esi
call ecx
test eax, eax
js 0x42cf2b
xor esi, esi
push esi
lea eax, [esp + 0x148]
push eax
call fcn.0041d900
add esp, 8
push dword [esp + 0x144]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0x144], esi
test eax, eax
je 0x42c77a
push eax
call fcn.0045f40c
add esp, 4
mov esi, dword [esp + 0x64]
mov eax, dword [esi]
mov ecx, dword [eax + 0x2c]
call dword [section..00cfg]
push dword [esp + 0x10]
push esi
call ecx
test eax, eax
jns 0x42cf8c
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xe0
call fcn.00428eb0
add esp, 4
cmp dword [esp + 0x10], 0
je 0x42cf41
push dword [esp + 0x10]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x42cf41
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x7f
call fcn.00428eb0
jmp 0x42cb69
mov ecx, dword [esp + 0x144]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x42d37f
push esi
push ecx
call fcn.0045f3d1
add esp, 8
jmp 0x42c128
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x88
jmp 0x42c861
mov ecx, dword [esp + 0x128]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x42d39e
push edi
push ecx
call fcn.0045f3d1
add esp, 8
xor edi, edi
jmp 0x42c0e6
mov ecx, edi
mov edx, str.RegisterTask
push 0x70
call fcn.00428eb0
add esp, 4
mov ebx, dword [esp + 0x14]
jmp 0x42cbbc
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x89
call fcn.00428eb0
add esp, 4
jmp 0x42cb25
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x8c
jmp 0x42cb04
mov ecx, dword [esp + 0xf0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x42d3d4
push esi
push ecx
call fcn.0045f3d1
add esp, 8
jmp 0x42bfff
mov eax, str._sdefaultagent_localized.ini
push dword [esp + 0xf0]
push eax
call fcn.0041d4e0
add esp, 8
mov edi, eax
inc edi
xor eax, eax
mov esi, edi
dec eax
add esi, edi
cmovb esi, eax
push esi
call fcn.0045f403
add esp, 4
push esi
push ebx
push eax
mov esi, eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push dword [esp + 0xf0]
mov eax, str._sdefaultagent_localized.ini
push eax
push 0xffffffffffffffff
push edi
mov edi, esi
push esi
call fcn.0041d540
add esp, 0x14
lea esi, [esp + 0x144]
mov ecx, esi
push ebx
mov dword [esp + 0x20], edi
push edi
call fcn.004253e0
lea eax, [esp + 0x88]
mov ecx, esi
push eax
push str.DefaultBrowserAgentTaskDescription
call fcn.004254e0
mov ecx, esi
call fcn.00425870
test eax, eax
je 0x42c96b
push eax
push 0x41
push str.GetTaskDescription
push str.Failed_to_read_task_description:__d
call fcn.00426ce0
add esp, 0x10
xor ebx, ebx
jmp 0x42c96d
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x8d
jmp 0x42cb04
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x8e
jmp 0x42cb04
mov bl, 1
mov ecx, dword [esp + 0x164]
test ecx, ecx
je 0x42c9bf
mov eax, dword [esp + 0x16c]
sub eax, ecx
cmp eax, 0x1000
jb 0x42c99e
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d425
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0045f3d1
add esp, 8
xor eax, eax
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], eax
mov ecx, dword [esp + 0x158]
test ecx, ecx
je 0x42ca11
mov eax, dword [esp + 0x160]
sub eax, ecx
cmp eax, 0x1000
jb 0x42c9f0
mov edx, dword [ecx - 4]
sub ecx, edx
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x42d425
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.0045f3d1
add esp, 8
xor eax, eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov esi, dword [esp + 0x14c]
test esi, esi
je 0x42ca97
mov edi, ebx
mov ebx, dword [esp + 0x150]
cmp esi, ebx
je 0x42ca4c
mov eax, dword [esi]
mov dword [esi], 0
test eax, eax
je 0x42ca3e
push eax
call fcn.0045f40c
add esp, 4
add esi, 4
cmp ebx, esi
jne 0x42ca29
mov esi, dword [esp + 0x14c]
mov eax, dword [esp + 0x154]
mov ebx, edi
sub eax, esi
cmp eax, 0x1000
jb 0x42ca74
mov ecx, dword [esi - 4]
add esi, 0xfffffffc
sub esi, ecx
cmp esi, 0x20
jae 0x42d425
add eax, 0x23
jmp 0x42ca76
mov ecx, esi
push eax
push ecx
call fcn.0045f3d1
add esp, 8
xor eax, eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 0x148], 0
test eax, eax
je 0x42cab6
push eax
call fcn.0045f40c
add esp, 4
mov eax, dword [esp + 0x144]
mov dword [esp + 0x144], 0
test eax, eax
je 0x42cad5
push eax
call fcn.0045f40c
add esp, 4
push dword [esp + 0x1c]
call fcn.0045f40c
add esp, 4
jmp 0x42c467
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x8f
jmp 0x42cb04
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x90
call fcn.00428eb0
add esp, 4
mov ebx, dword [esp + 0x80]
test ebx, ebx
je 0x42cb25
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov ebx, dword [esp + 0x84]
test ebx, ebx
je 0x42cb3e
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x42cb4d
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x88]
mov dword [esp + 0x88], 0
test eax, eax
je 0x42cb6c
push eax
call fcn.0045f40c
add esp, 4
mov ebx, dword [esp + 0x8c]
test ebx, ebx
je 0x42cb85
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
cmp dword [esp + 0x20], 0
mov ecx, dword [esp + 0x2c]
setns al
xor cl, 1
or cl, al
jne 0x42cbb6
mov edi, dword [esp + 0x110]
mov eax, dword [edi]
mov ecx, dword [eax + 0x30]
call dword [section..00cfg]
push 0
mov ebx, dword [esp + 0x18]
push ebx
push edi
call ecx
jmp 0x42cbba
mov ebx, dword [esp + 0x14]
mov edi, esi
test ebx, ebx
je 0x42cbc7
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov esi, dword [esp + 0xac]
test esi, esi
je 0x42cbe0
mov eax, dword [esi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push esi
call ecx
mov eax, dword [esp + 0x24]
test eax, eax
je 0x42cbef
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov esi, dword [esp + 0x110]
test esi, esi
je 0x42cc08
mov eax, dword [esi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push esi
call ecx
mov esi, dword [esp + 0x128]
test esi, esi
je 0x42cc21
mov eax, dword [esi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push esi
call ecx
mov ecx, dword [esp + 0x178]
xor ecx, ebp
call fcn.0045fb40
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ebx, esi
mov eax, SysReAllocString
or ebx, 0xf
cmp ebx, eax
cmovae ebx, eax
cmp ebx, 0xfff
jae 0x42cec2
lea eax, [ebx + 1]
push eax
call fcn.0045f34c
add esp, 4
lea ecx, [esi + 1]
mov dword [esp + 0x110], eax
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x42bf90
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x94
call fcn.00428eb0
add esp, 4
jmp 0x42cdea
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x97
jmp 0x42ccb3
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x99
call fcn.00428eb0
add esp, 4
mov edi, dword [esp + 0x18]
jmp 0x42cdd4
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x9c
call fcn.00428eb0
add esp, 4
mov edi, dword [esp + 0x18]
jmp 0x42cdbe
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0x9f
call fcn.00428eb0
add esp, 4
mov edi, dword [esp + 0x18]
jmp 0x42cda8
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xa3
jmp 0x42cd86
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
add eax, 0xffffffc4
adc edx, 0xffffffff
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xf0]
mov dword [esp + 0xf4], edx
push eax
lea eax, [esp + 0x148]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__gmtime64_s]
add esp, 8
test eax, eax
je 0x42cdfe
mov esi, 0x8007076d
mov ecx, 0x8007076d
mov edx, str.RegisterTask
push 0xc1
jmp 0x42cd86
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xa6
jmp 0x42cd86
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xd3
call fcn.00428eb0
add esp, 4
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x18]
test ebx, ebx
je 0x42cda8
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x42cdbe
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov ebx, dword [esp + 0x78]
test ebx, ebx
je 0x42cdd4
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov ebx, dword [esp + 0x7c]
test ebx, ebx
je 0x42cdea
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
test edi, edi
je 0x42cb0c
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x42cb0c
push 0x2a
call fcn.0045f403
add esp, 4
xor ebx, ebx
mov edi, eax
mov word [eax + 0x28], 0
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0x14], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x1c], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x24], ebx
mov dword [eax + 0x20], ebx
lea eax, [esp + 0x144]
push eax
push str._Y__m__dT_H:_M:_SZ
push 0x15
push edi
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_wcsftime]
add esp, 0x10
test eax, eax
je 0x42cef6
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x28], eax
mov eax, dword [eax]
mov ecx, dword [eax + 0x3c]
call dword [section..00cfg]
mov dword [esp + 0x10], esi
push esi
push dword [esp + 0x2c]
call ecx
mov esi, eax
test eax, eax
jns 0x42ce94
mov ecx, esi
mov edx, str.RegisterTask
push 0xd0
call fcn.00428eb0
add esp, 4
xor ebx, ebx
inc ebx
cmp dword [esp + 0x10], 0
je 0x42cf15
push dword [esp + 0x10]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x42cf15
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xd6
call fcn.00428eb0
add esp, 4
jmp 0x42cf6d
lea eax, [ebx + 0x24]
push eax
call fcn.0045f34c
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x42cc60
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xd9
call fcn.00428eb0
add esp, 4
jmp 0x42cf57
mov esi, 0x8007007a
mov ecx, 0x8007007a
mov edx, str.RegisterTask
push 0xcb
call fcn.00428eb0
add esp, 4
xor ebx, ebx
inc ebx
push edi
call fcn.0045f40c
add esp, 4
test ebx, ebx
jne 0x42cd8e
jmp 0x42c6aa
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xdc
call fcn.00428eb0
add esp, 4
mov ebx, dword [esp + 0x64]
test ebx, ebx
je 0x42cf57
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov ebx, dword [esp + 0x68]
test ebx, ebx
je 0x42cf6d
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
mov ebx, dword [esp + 0x6c]
test ebx, ebx
je 0x42cd8e
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push ebx
call ecx
jmp 0x42cd8e
lea esi, [esp + 0x144]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], 0
sub esp, 0xc
mov al, byte [esp + 0xfc]
mov ecx, esi
mov byte [esp + 4], al
mov dword [esp + 8], str.do_task__
mov dword [esp], 9
call fcn.00424520
push dword [esp + 0xc]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0x10]
mov edi, edx
sub edi, ecx
cmp edi, eax
jb 0x42d0f0
lea ebx, [ecx + eax]
cmp edx, 7
mov dword [esp + 0x154], ebx
jbe 0x42cffe
mov esi, dword [esp + 0x144]
add eax, eax
lea ecx, [esi + ecx*2]
push eax
push dword [esp + 0x10]
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esi + ebx*2], 0
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x158]
cmp ecx, eax
je 0x42d11e
lea edx, [eax + 1]
cmp ecx, 7
mov dword [esp + 0x154], edx
jbe 0x42d045
mov ecx, dword [esp + 0x144]
jmp 0x42d04c
lea ecx, [esp + 0x144]
mov word [ecx + eax*2], 0x22
mov word [ecx + eax*2 + 2], 0
cmp dword [esp + 0x158], 7
jbe 0x42d06c
mov eax, dword [esp + 0x144]
jmp 0x42d073
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x64]
mov edi, eax
mov eax, dword [esi]
mov ecx, dword [eax + 0x34]
call dword [section..00cfg]
mov ebx, edi
push edi
push esi
call ecx
test eax, eax
jns 0x42d14f
mov esi, eax
mov ecx, eax
mov edx, str.RegisterTask
push 0xe6
call fcn.00428eb0
add esp, 4
test ebx, ebx
je 0x42d0ba
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esp + 0x158]
cmp ecx, 8
jb 0x42c7ae
mov eax, dword [esp + 0x144]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x42d3ef
push edx
push eax
call fcn.0045f3d1
add esp, 8
jmp 0x42c7ae
sub esp, 0x10
mov cl, byte [esp + 0x100]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x154]
call fcn.00423e40
jmp 0x42d017
sub esp, 0x10
mov al, byte [esp + 0x100]
lea ecx, [esp + 0x154]
mov byte [esp + 4], al
xor eax, eax
mov dword [esp + 8], 0x4944c8
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00423e40
jmp 0x42d059
lea esi, [esp + 0xf0]
mov eax, 7
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov word [esi], 0
sub esp, 0xc
mov al, byte [esp + 0x6c]
mov ecx, esi
mov byte [esp + 4], al
mov dword [esp + 8], 0x4944cc
mov dword [esp], 0x1e
call fcn.00424520
push dword [esp + 0xc]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0x10]
mov edi, edx
sub edi, ecx
cmp edi, eax
jb 0x42d335
lea edi, [ecx + eax]
cmp edx, 7
mov dword [esp + 0x100], edi
jbe 0x42d1bf
mov esi, dword [esp + 0xf0]
add eax, eax
lea ecx, [esi + ecx*2]
push eax
push dword [esp + 0x10]
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esi + edi*2], 0
cmp dword [esp + 0x104], 7
jbe 0x42d1eb
mov eax, dword [esp + 0xf0]
jmp 0x42d1f2
lea eax, [esp + 0xf0]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0xac]
xorps xmm0, xmm0
lea ecx, [esp + 0x60]
mov edx, dword [esp + 0x8c]
mov edi, eax
mov dword [ecx], 0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x30], xmm0
mov ecx, dword [esi]
mov dword [esp + 0xc], edx
mov ecx, dword [ecx + 0x44]
call dword [section..00cfg]
sub esp, 0x48
movsd xmm0, qword [esp + 0x98]
movsd xmm1, qword [esp + 0xa0]
lea eax, [esp + 0xa8]
movsd qword [esp + 0x3c], xmm1
movsd qword [esp + 0x34], xmm0
movsd xmm0, qword [esp + 0x88]
movsd xmm1, qword [esp + 0x90]
movsd qword [esp + 0x28], xmm1
movsd qword [esp + 0x20], xmm0
movsd xmm0, qword [esp + 0x78]
movsd xmm1, qword [esp + 0x80]
movsd qword [esp + 0x18], xmm1
movsd qword [esp + 0x10], xmm0
mov dword [esp + 0x44], eax
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [esp + 0x30], 3
mov dword [esp + 0xc], 6
mov eax, dword [esp + 0x54]
mov dword [esp + 0x54], edi
mov dword [esp + 8], eax
call ecx
mov esi, eax
test eax, eax
jns 0x42d2d8
mov ecx, esi
mov edx, str.RegisterTask
push 0xef
call fcn.00428eb0
add esp, 4
mov edi, dword [esp + 0x60]
test edi, edi
je 0x42d2ee
mov eax, dword [edi]
mov ecx, dword [eax + 8]
call dword [section..00cfg]
push edi
call ecx
cmp dword [esp + 0xc], 0
je 0x42d2ff
push dword [esp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esp + 0x104]
cmp ecx, 8
jb 0x42d0af
mov eax, dword [esp + 0xf0]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x42d40a
push edx
push eax
call fcn.0045f3d1
add esp, 8
jmp 0x42d0af
sub esp, 0x10
mov cl, byte [esp + 0x70]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x100]
call fcn.00423e40
jmp 0x42d1d8
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x42d425
add ebx, 0x24
mov eax, ecx
xor edi, edi
mov edx, ebx
jmp 0x42c3d6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x42d425
add eax, 0x24
mov ecx, edx
xor edi, edi
mov esi, eax
jmp 0x42c7f3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x42d425
mov ebx, dword [esp + 0xc]
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x42c828
mov edx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, edx
cmp eax, 0x20
jae 0x42d425
add ecx, 0x24
mov eax, edx
mov edi, ecx
jmp 0x42c07e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x42d425
add eax, 0x24
mov ecx, edx
xor edi, edi
mov esi, eax
jmp 0x42c897
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x42d425
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42d0e1
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x42d425
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x42d326
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3