Function at 0x41a991
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x434f8c
push 1
xor edi, edi
push edi
push 0x434fac
mov dword [ebp - 0x18], 0x2200
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jge 0x41a9d6
cmp eax, edi
je 0x41a9cf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x41ad24
lea edx, [ebp - 0xc]
push edx
mov esi, 0x434f7c
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x41aa57
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41aa76
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41aa76
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x41aa73
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
js 0x41aaa2
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push edi
cmp dword [ebp + 0x18], edi
jne 0x41aa95
push 0x435508
jmp 0x41aa98
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x434f9c
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x41a9fc
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x41aa80
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x41aa8d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
jmp 0x41a9c5
push dword [ebp + 0x18]
push eax
call dword [ecx + 0x78]
mov esi, eax
cmp esi, edi
jl 0x41aa73
mov eax, dword [ebp - 4]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
mov esi, eax
cmp esi, edi
jl 0x41aa73
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
jns 0x41aac5
mov dword [ebp - 0x18], 0x200
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41aa76
push dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41aa76
lea edx, [ebp - 0x10]
push edx
push edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x10], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x41ab30
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x41ab30
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x41aa73
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41aa73
push 0x30
xor esi, esi
lea eax, [ebp - 0x5c]
push esi
push eax
call fcn.00423730
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x5c], ax
xor eax, eax
mov word [ebp - 0x2c], ax
lea edi, [ebp - 0x2a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x2c]
mov word [ebp - 0x58], ax
mov ax, word [ebp - 0x2a]
mov word [ebp - 0x56], ax
mov ax, word [ebp - 0x26]
mov word [ebp - 0x54], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x4c], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x4a], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x44], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x40], eax
mov eax, dword [ebx]
dec eax
je 0x41ac3b
dec eax
je 0x41ac22
dec eax
je 0x41ac05
dec eax
je 0x41abe4
dec eax
je 0x41abdb
dec eax
je 0x41abd2
dec eax
jne 0x41ac3b
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 4]
push 0xa
push edx
mov dword [ebp - 0x3c], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x41ac4a
mov dword [ebp - 0x3c], 7
jmp 0x41ac4a
mov dword [ebp - 0x3c], 6
jmp 0x41ac4a
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x3c], 4
mov word [ebp - 0x36], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x34], ax
mov ax, word [ebx + 8]
jmp 0x41ac46
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x38], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x34], ax
jmp 0x41ac4a
mov ax, word [ebx + 4]
mov word [ebp - 0x38], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x3c], 2
mov word [ebp - 0x36], ax
jmp 0x41ac4a
mov ax, word [ebx + 4]
mov dword [ebp - 0x3c], 1
mov word [ebp - 0x38], ax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x5c]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jge 0x41ac98
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x41ac6a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x41ac77
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x41ac84
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x41ac91
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x41ad24
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push 0x434fbc
mov dword [ebp - 0x14], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x14]
jge 0x41acc1
cmp eax, esi
je 0x41ac5d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41ac5d
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x41ace1
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x14]
jmp 0x41acb5
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x41acee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x41acfb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x41ad08
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x41ad15
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x41ad22
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
pop edi
pop esi
leave
ret