Function at 0x4226e5
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x430468
push 1
xor edi, edi
push edi
push 0x430448
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jl 0x4228ba
lea edx, [ebp - 0xc]
push edx
mov esi, 0x430478
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x422763
cmp byte [ebp + 0x38], 0
mov eax, dword [ebp - 0xc]
je 0x422744
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
jmp 0x422783
cmp eax, edi
je 0x42274e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x42275b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
jmp 0x422a82
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x430458
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jl 0x42289d
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x4228a0
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x4228a0
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x42289d
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
js 0x422807
cmp dword [ebp + 0x18], edi
jne 0x4227e5
push edi
push 0x43075c
jmp 0x4227f4
test byte [ebp + 0x25], 0x20
je 0x4227ee
push edi
jmp 0x4227f1
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov esi, eax
cmp esi, edi
jl 0x42289d
mov eax, dword [ebp - 4]
push dword [ebp + 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
mov esi, eax
cmp esi, edi
jl 0x42289d
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
jns 0x42283b
test byte [ebp + 0x24], 1
je 0x422831
and dword [ebp + 0x24], 0xfffffffe
test byte [ebp + 0x25], 0x20
je 0x42283b
and byte [ebp + 0x25], 0xdf
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x4228a0
push dword [ebp + 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x4228a0
lea edx, [ebp - 0x10]
push edx
push edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x10], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x4228cb
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x18]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x4228cb
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x42289d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x4228aa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x4228b7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x4228c4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x422a82
push 0x30
xor esi, esi
lea eax, [ebp - 0x58]
push esi
push eax
call fcn.0042e270
xor eax, eax
mov word [ebp - 0x28], si
lea edi, [ebp - 0x26]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
add esp, 0xc
lea eax, [ebp - 0x28]
push eax
mov word [ebp - 0x58], 0x30
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x28]
mov word [ebp - 0x54], ax
mov ax, word [ebp - 0x26]
mov word [ebp - 0x52], ax
mov ax, word [ebp - 0x22]
mov word [ebp - 0x50], ax
mov ax, word [ebp + 0x30]
mov word [ebp - 0x48], ax
mov ax, word [ebp + 0x32]
mov word [ebp - 0x46], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x40], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
dec eax
je 0x4229d7
dec eax
je 0x4229be
dec eax
je 0x4229a1
dec eax
je 0x422980
dec eax
je 0x422977
dec eax
je 0x42296e
dec eax
jne 0x4229d7
mov eax, dword [ebp - 4]
xor edx, edx
mov dx, word [ebx + 4]
push 0xa
mov dword [ebp - 0x38], 5
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x28]
jmp 0x4229e6
mov dword [ebp - 0x38], 7
jmp 0x4229e6
mov dword [ebp - 0x38], 6
jmp 0x4229e6
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x38], 4
mov word [ebp - 0x32], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x30], ax
mov ax, word [ebx + 8]
jmp 0x4229e2
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x34], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x30], ax
jmp 0x4229e6
mov ax, word [ebx + 4]
mov word [ebp - 0x34], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x38], 2
mov word [ebp - 0x32], ax
jmp 0x4229e6
mov ax, word [ebx + 4]
mov dword [ebp - 0x38], 1
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jl 0x422a4c
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push 0x4304b8
mov dword [ebp - 0x14], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x14]
jl 0x422a42
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x422a33
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
jmp 0x422a3f
mov al, byte [ebp + 0x38]
neg al
sbb eax, eax
and eax, 0x50
mov edi, eax
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x422a4c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x422a59
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x422a66
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x422a73
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x422a80
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
pop edi
pop esi
leave
ret