Function at 0x40d240
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca928
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x538
push ebx
push esi
push edi
mov edi, ecx
push 0
mov dword [ebp - 4], 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x40d27d
xor bl, bl
jmp 0x40da8e
push 0
push 0
push 0
push 3
push 6
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
xor eax, eax
mov dword [ebp - 0x60], 7
push 0xffffffffffffffff
push eax
mov word [ebp - 0x74], ax
lea ecx, [ebp - 0x74]
lea eax, [ebp + 8]
mov dword [ebp - 0x64], 0
push eax
call fcn.00414690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 1
push eax
push 0x4d4fec
push 1
push 0
push 0x4d506c
mov dword [ebp - 0x1c], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x40da3c
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x98]
push eax
call ebx
movdqu xmm0, xmmword [ebp - 0x98]
lea eax, [ebp - 0x88]
push eax
movdqu xmmword [ebp - 0xb8], xmm0
call ebx
movdqu xmm0, xmmword [ebp - 0x88]
lea eax, [ebp - 0xa8]
push eax
movdqu xmmword [ebp - 0xc8], xmm0
call ebx
movdqu xmm0, xmmword [ebp - 0xa8]
lea eax, [ebp - 0xf0]
push eax
movdqu xmmword [ebp - 0xd8], xmm0
call ebx
mov byte [ebp - 4], 5
sub esp, 0x10
movdqu xmm0, xmmword [ebp - 0xb8]
mov ecx, dword [ebp - 0x1c]
mov eax, esp
sub esp, 0x10
mov edx, dword [ecx]
movdqu xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movdqu xmm0, xmmword [ebp - 0xc8]
movdqu xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movdqu xmm0, xmmword [ebp - 0xd8]
movdqu xmmword [eax], xmm0
mov eax, esp
movdqu xmm0, xmmword [ebp - 0xf0]
push ecx
movdqu xmmword [eax], xmm0
call dword [edx + 0x28]
mov esi, eax
lea eax, [ebp - 0xf0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 1
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
jns 0x40d3e2
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor bl, bl
jmp 0x40da69
push 0x500050
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], 0
call fcn.0040b140
mov byte [ebp - 4], 6
mov eax, dword [eax]
test eax, eax
je 0x40d404
mov edx, dword [eax]
jmp 0x40d406
xor edx, edx
mov eax, dword [ebp - 0x1c]
lea esi, [ebp - 0x14]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
test esi, esi
jns 0x40d43c
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor bl, bl
jmp 0x40da69
push str.Time_Trigger_Task
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 7
mov eax, dword [eax]
test eax, eax
je 0x40d457
mov edx, dword [eax]
jmp 0x40d459
xor edx, edx
mov eax, dword [ebp - 0x14]
push 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.0040b1d0
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x10]
push edx
mov dword [ebp - 0x10], 0
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x1c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x40d4ac
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor bl, bl
jmp 0x40da69
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
js 0x40da2a
push 0x500054
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 8
mov eax, dword [eax]
test eax, eax
je 0x40d4e3
mov edx, dword [eax]
jmp 0x40d4e5
xor edx, edx
mov eax, dword [ebp - 0x3c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
js 0x40da2a
mov eax, dword [ebp - 0x34]
push 3
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov ecx, dword [ebp - 0x34]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
js 0x40da2a
mov eax, dword [ebp - 0x2c]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x48], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
js 0x40da2a
push str.PT5M
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 9
mov eax, dword [eax]
test eax, eax
je 0x40d5bc
mov edx, dword [eax]
jmp 0x40d5be
xor edx, edx
mov eax, dword [ebp - 0x48]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x4c]
mov dword [ebp - 0x4c], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x40da2a
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x40]
push edx
mov dword [ebp - 0x40], 0
push 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x4c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x24]
push edx
mov dword [ebp - 0x24], 0
push 0x4d50ec
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x40]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x38]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x40da2a
push str.PT5M
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
test eax, eax
je 0x40d687
mov edx, dword [eax]
jmp 0x40d689
xor edx, edx
mov eax, dword [ebp - 0x38]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
test esi, esi
js 0x40da2a
push 0x500078
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
test eax, eax
je 0x40d6c4
mov edx, dword [eax]
jmp 0x40d6c6
xor edx, edx
mov eax, dword [ebp - 0x38]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
js 0x40da2a
push str.Trigger1
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 0xc
mov eax, dword [eax]
test eax, eax
je 0x40d715
mov edx, dword [eax]
jmp 0x40d717
xor edx, edx
mov eax, dword [ebp - 0x24]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
test esi, esi
js 0x40da2a
push str.2030_05_02T08:00:00
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 0xd
mov eax, dword [eax]
test eax, eax
je 0x40d752
mov edx, dword [eax]
jmp 0x40d754
xor edx, edx
mov eax, dword [ebp - 0x24]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
test esi, esi
js 0x40da2a
lea eax, [ebp - 0x58]
push eax
call fcn.00423aaf
mov eax, edi
cdq
add dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
adc dword [ebp - 0x54], edx
call fcn.00423551
push eax
push str._Y__m__dT_H:_M:_S
lea eax, [ebp - 0x140]
push 0x50
push eax
call fcn.004228e0
lea eax, [ebp - 0x140]
mov byte [ebp - 0x1d], 0
mov ecx, esp
push eax
call fcn.00412c40
mov dl, byte [ebp - 0x1d]
lea ecx, [ebp - 0xe0]
call fcn.00412900
add esp, 0x18
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
jb 0x40d7d2
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
test eax, eax
je 0x40d7e9
mov edx, dword [eax]
jmp 0x40d7eb
xor edx, edx
mov eax, dword [ebp - 0x24]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x18]
mov esi, eax
call fcn.0040b1d0
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 1
call fcn.00413210
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
js 0x40da2a
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x44]
push edx
mov dword [ebp - 0x44], 0
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov ecx, dword [ebp - 0x30]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x28]
push edx
mov dword [ebp - 0x28], 0
push 0x4d511c
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x44]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
cmp dword [ebp - 0x60], 8
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x18]
cmovae eax, dword [ebp - 0x74]
push eax
call fcn.0040b140
mov byte [ebp - 4], 0x10
mov edx, dword [eax]
test edx, edx
je 0x40d8b1
mov edx, dword [edx]
jmp 0x40d8b3
xor edx, edx
mov eax, dword [ebp - 0x28]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
test esi, esi
jns 0x40d8dd
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x40da2a
push str.__Task
lea ecx, [ebp - 0x18]
call fcn.0040b140
mov byte [ebp - 4], 0x11
mov eax, dword [eax]
test eax, eax
je 0x40d8f8
mov edx, dword [eax]
jmp 0x40d8fa
xor edx, edx
mov eax, dword [ebp - 0x28]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.0040b1d0
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x40da2a
push ecx
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x5c], 0
call fcn.0040b400
movdqu xmm0, xmmword [eax]
lea eax, [ebp - 0x88]
push eax
movdqu xmmword [ebp - 0xd8], xmm0
call ebx
movdqu xmm0, xmmword [ebp - 0x88]
lea eax, [ebp - 0x98]
push eax
movdqu xmmword [ebp - 0xc8], xmm0
call ebx
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x18]
movdqu xmm0, xmmword [ebp - 0x98]
push str.Time_Trigger_Task
movdqu xmmword [ebp - 0xb8], xmm0
call fcn.0040b140
mov byte [ebp - 4], 0x15
mov esi, dword [eax]
test esi, esi
je 0x40d993
mov esi, dword [esi]
jmp 0x40d995
xor esi, esi
movdqu xmm0, xmmword [ebp - 0xd8]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x5c]
push eax
sub esp, 0x10
mov eax, esp
mov edx, dword [ecx]
push 3
sub esp, 0x10
movdqu xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movdqu xmm0, xmmword [ebp - 0xc8]
movdqu xmmword [eax], xmm0
mov eax, esp
movdqu xmm0, xmmword [ebp - 0xb8]
push 6
push dword [ebp - 0x10]
movdqu xmmword [eax], xmm0
push esi
push ecx
call dword [edx + 0x44]
lea ecx, [ebp - 0x18]
mov esi, eax
call fcn.0040b1d0
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x98]
push eax
call ebx
lea eax, [ebp - 0x88]
push eax
call ebx
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 1
push eax
call ebx
test esi, esi
jns 0x40da46
push esi
push str.RegisterTaskDefinition._Err:__X_n
lea eax, [ebp - 0x540]
push 0x400
push eax
call fcn.0042052a
add esp, 0x10
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor bl, bl
jmp 0x40da69
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov bl, 1
cmp dword [ebp - 0x60], 8
jb 0x40da7a
push dword [ebp - 0x74]
call fcn.00422587
add esp, 4
xor eax, eax
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x64], 0
mov word [ebp - 0x74], ax
cmp dword [ebp + 0x1c], 8
jb 0x40da9f
push dword [ebp + 8]
call fcn.00422587
add esp, 4
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret