Function at 0x427084
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x4498e0
push 1
xor edi, edi
push edi
push 0x449900
mov dword [ebp - 0x20], 0x2200
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jge 0x4270c9
cmp eax, edi
je 0x4270c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x4274a2
lea edx, [ebp - 0xc]
push edx
mov esi, 0x4498d0
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x427171
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x427194
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x427194
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x427191
push dword [ebp + 0x18]
lea eax, [ebp - 0x10]
call fcn.00404558
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
call esi
test eax, eax
js 0x427203
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], edi
je 0x4271b3
push 0x449abc
lea eax, [ebp - 0x10]
push eax
call fcn.0040904e
test eax, eax
je 0x4271b3
push edi
push dword [ebp + 0x18]
jmp 0x4271b9
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x4498f0
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x4270f3
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x42719e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x4271ab
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
jmp 0x4270b8
push edi
push 0x449e70
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
cmp eax, edi
mov dword [ebp - 0x18], eax
jge 0x427203
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.0040464c
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x4271e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x4271ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x4271fb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x4274a2
mov eax, dword [ebp - 4]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
cmp eax, edi
mov dword [ebp - 0x18], eax
jl 0x4271c9
call esi
test eax, eax
jns 0x427223
mov dword [ebp - 0x20], 0x200
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
jge 0x427247
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.0040464c
jmp 0x427191
mov eax, dword [ebp - 4]
push dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
jl 0x427237
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x427297
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x24]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x427297
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x427237
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x427237
push 0x30
xor esi, esi
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.00431420
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x64], ax
xor eax, eax
mov word [ebp - 0x34], ax
lea edi, [ebp - 0x32]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x34]
mov word [ebp - 0x60], ax
mov ax, word [ebp - 0x32]
mov word [ebp - 0x5e], ax
mov ax, word [ebp - 0x2e]
mov word [ebp - 0x5c], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x54], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x52], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx]
dec eax
je 0x4273a2
dec eax
je 0x427389
dec eax
je 0x42736c
dec eax
je 0x42734b
dec eax
je 0x427342
dec eax
je 0x427339
dec eax
jne 0x4273a2
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 4]
push 0xa
push edx
mov dword [ebp - 0x44], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x4273b1
mov dword [ebp - 0x44], 7
jmp 0x4273b1
mov dword [ebp - 0x44], 6
jmp 0x4273b1
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x44], 4
mov word [ebp - 0x3e], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
mov ax, word [ebx + 8]
jmp 0x4273ad
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
jmp 0x4273b1
mov ax, word [ebx + 4]
mov word [ebp - 0x40], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x44], 2
mov word [ebp - 0x3e], ax
jmp 0x4273b1
mov ax, word [ebx + 4]
mov dword [ebp - 0x44], 1
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x64]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jge 0x42740a
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x4273d1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.0040464c
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x4273e9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x4273f6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x427403
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x4274a2
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x1c]
push edx
push 0x449910
mov dword [ebp - 0x1c], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x1c]
jge 0x427433
cmp eax, esi
je 0x4273c4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4273c4
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x427453
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x1c]
jmp 0x427427
mov eax, dword [ebp - 0x1c]
cmp eax, esi
je 0x427460
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x42746d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.0040464c
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x427485
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x427492
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x42749f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
pop edi
pop esi
leave
ret