Function at 0x4257ff
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x4488d0
push 1
xor edi, edi
push edi
push 0x4488f0
mov dword [ebp - 0x20], 0x2200
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jge 0x425844
cmp eax, edi
je 0x42583d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x425c1d
lea edx, [ebp - 0xc]
push edx
mov esi, 0x4488c0
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x4258ec
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x42590f
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x42590f
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x42590c
push dword [ebp + 0x18]
lea eax, [ebp - 0x10]
call fcn.004045e3
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
call esi
test eax, eax
js 0x42597e
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], edi
je 0x42592e
push 0x448aac
lea eax, [ebp - 0x10]
push eax
call fcn.00408fde
test eax, eax
je 0x42592e
push edi
push dword [ebp + 0x18]
jmp 0x425934
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x4488e0
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x42586e
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x425919
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x425926
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
jmp 0x425833
push edi
push 0x448e60
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
cmp eax, edi
mov dword [ebp - 0x18], eax
jge 0x42597e
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004046b1
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x42595c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x425969
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x425976
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x425c1d
mov eax, dword [ebp - 4]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
cmp eax, edi
mov dword [ebp - 0x18], eax
jl 0x425944
call esi
test eax, eax
jns 0x42599e
mov dword [ebp - 0x20], 0x200
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
jge 0x4259c2
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004046b1
jmp 0x42590c
mov eax, dword [ebp - 4]
push dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
jl 0x4259b2
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x425a12
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x24]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x425a12
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x4259b2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4259b2
push 0x30
xor esi, esi
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.004302c0
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x64], ax
xor eax, eax
mov word [ebp - 0x34], ax
lea edi, [ebp - 0x32]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x34]
mov word [ebp - 0x60], ax
mov ax, word [ebp - 0x32]
mov word [ebp - 0x5e], ax
mov ax, word [ebp - 0x2e]
mov word [ebp - 0x5c], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x54], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x52], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx]
dec eax
je 0x425b1d
dec eax
je 0x425b04
dec eax
je 0x425ae7
dec eax
je 0x425ac6
dec eax
je 0x425abd
dec eax
je 0x425ab4
dec eax
jne 0x425b1d
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 4]
push 0xa
push edx
mov dword [ebp - 0x44], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x425b2c
mov dword [ebp - 0x44], 7
jmp 0x425b2c
mov dword [ebp - 0x44], 6
jmp 0x425b2c
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x44], 4
mov word [ebp - 0x3e], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
mov ax, word [ebx + 8]
jmp 0x425b28
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
jmp 0x425b2c
mov ax, word [ebx + 4]
mov word [ebp - 0x40], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x44], 2
mov word [ebp - 0x3e], ax
jmp 0x425b2c
mov ax, word [ebx + 4]
mov dword [ebp - 0x44], 1
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x64]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jge 0x425b85
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x425b4c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004046b1
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x425b64
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x425b71
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x425b7e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x425c1d
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x1c]
push edx
push 0x448900
mov dword [ebp - 0x1c], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x1c]
jge 0x425bae
cmp eax, esi
je 0x425b3f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x425b3f
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x425bce
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x1c]
jmp 0x425ba2
mov eax, dword [ebp - 0x1c]
cmp eax, esi
je 0x425bdb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x425be8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004046b1
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x425c00
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x425c0d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x425c1a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
pop edi
pop esi
leave
ret