Function at 0x458663
Capabilities:
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
mov eax, dword [0x7aca10]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0x14]
push esi
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x24]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x84], eax
call fcn.00441fe8
push eax
lea ecx, [ebp - 0x78]
call fcn.00448d9c
cmp byte [ebp + 0x1c], 0
je 0x4586be
mov esi, str.___LogonTrigger__n_____Enabled_true__Enabled__n____LogonTrigger__n
push esi
call fcn.0044902d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x78]
call fcn.00449eae
call fcn.00441fe8
push eax
lea ecx, [ebp - 0x74]
call fcn.00448d9c
cmp byte [ebp + 0x20], 0
je 0x4586e8
mov esi, str._____Repetition__n_______Interval_PT1H__Interval__n_______Duration_P1D__Duration__n______Repetition__n
push esi
call fcn.0044902d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.00449eae
call fcn.00441fe8
push eax
lea ecx, [ebp - 0x6c]
call fcn.00448d9c
call fcn.00441fe8
push eax
lea ecx, [ebp - 0x68]
call fcn.00448d9c
cmp byte [ebp + 0x18], 0
je 0x458751
lea eax, [ebp - 0x64]
push eax
call fcn.00459d2a
pop ecx
mov ecx, eax
call fcn.004599ea
mov esi, eax
push esi
call fcn.0044902d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x6c]
call fcn.00449eae
lea ecx, [ebp - 0x64]
call fcn.00457901
mov esi, str._RunLevel_HighestAvailable__RunLevel__n
push esi
call fcn.0044902d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x68]
call fcn.00449eae
jmp 0x4587e8
xor esi, esi
mov dword [ebp - 0x94], vtable.ATL::CAccessToken.0
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x88], esi
call fcn.004577be
push esi
push 0x20008
lea ecx, [ebp - 0x94]
call fcn.00458cae
push esi
push 1
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x94]
call fcn.00457375
lea ecx, [ebp - 0x64]
call fcn.004599ea
mov esi, eax
push esi
call fcn.0044902d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x6c]
call fcn.00449eae
mov esi, str._LogonType_InteractiveToken__LogonType__n
push esi
call fcn.0044902d
pop ecx
push eax
push esi
lea ecx, [ebp - 0x68]
call fcn.00449eae
lea ecx, [ebp - 0x64]
call fcn.00457901
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], vtable.ATL::CAccessToken.0
call fcn.00457f4c
call fcn.00441fe8
push eax
lea ecx, [ebp - 0x70]
call fcn.00448d9c
push dword [ebx]
mov esi, dword [ebp - 0x68]
push dword [edi]
mov edi, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x7c]
push esi
push edi
push dword [ebp - 0x74]
push dword [eax]
mov eax, dword [ebp - 0x80]
push dword [ebp - 0x78]
push dword [eax]
lea eax, [ebp - 0x70]
push str.1.0.0.1
push str.__xml_version_1.0__encoding_UTF_16____n_Task_version_1.2__n__xmlns_http:__schemas.microsoft.com_windows_2004_02_mit_task___n___RegistrationInfo__n_____Version__s__Version__n_____Description__s__Description__n____RegistrationInfo__n___Triggers__n_____s_n_____CalendarTrigger__n_______StartBoundary__s__StartBoundary__n_______s_n_______ScheduleByDay__n_________DaysInterval_1__DaysInterval__n________ScheduleByDay__n______CalendarTrigger__n____Triggers__n___Principals__n_____Principal__n_______UserId__s__UserId__n_______s_n______Principal__n____Principals__n___Settings__n_____MultipleInstancesPolicy_IgnoreNew__MultipleInstancesPolicy__n_____DisallowStartIfOnBatteries_false__DisallowStartIfOnBatteries__n_____StartWhenAvailable_true__StartWhenAvailable__n_____RunOnlyIfNetworkAvailable_false__RunOnlyIfNetworkAvailable__n_____Enabled_true__Enabled__n_____RunOnlyIfIdle_false__RunOnlyIfIdle__n_____WakeToRun_false__WakeToRun__n_____ExecutionTimeLimit_PT72H__ExecutionTimeLimit__n____Settings__n___Actions__n_____Exec__n_______Command__s__Command__n_______Arguments__s__Arguments__n______Exec__n____Actions__n__Task__n
push eax
call fcn.00459953
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0x70]
add esp, 0x2c
push eax
call fcn.0045796c
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx - 0x10]
call fcn.00449d97
lea ecx, [esi - 0x10]
call fcn.00449d97
lea ecx, [edi - 0x10]
call fcn.00449d97
mov ecx, dword [ebp - 0x74]
lea ecx, [ecx - 0x10]
call fcn.00449d97
mov ecx, dword [ebp - 0x78]
lea ecx, [ecx - 0x10]
call fcn.00449d97
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a7ad5
mov esp, ebp
pop ebp
ret