Function at 0x424744
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x4478b0
push 1
xor edi, edi
push edi
push 0x4478d0
mov dword [ebp - 0x18], 0x2200
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jge 0x424789
cmp eax, edi
je 0x424782
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x424ad8
lea edx, [ebp - 0xc]
push edx
mov esi, 0x4478a0
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x42480a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x424829
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x424829
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x424826
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
js 0x424855
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push edi
cmp dword [ebp + 0x18], edi
jne 0x424848
push 0x447e40
jmp 0x42484b
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x4478c0
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x4247af
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x424833
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x424840
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
jmp 0x424778
push dword [ebp + 0x18]
push eax
call dword [ecx + 0x78]
mov esi, eax
cmp esi, edi
jl 0x424826
mov eax, dword [ebp - 4]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
mov esi, eax
cmp esi, edi
jl 0x424826
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
jns 0x424878
mov dword [ebp - 0x18], 0x200
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x424829
push dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x424829
lea edx, [ebp - 0x10]
push edx
push edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x10], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x4248e3
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x4248e3
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x424826
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x424826
push 0x30
xor esi, esi
lea eax, [ebp - 0x5c]
push esi
push eax
call fcn.0042e8b0
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x5c], ax
xor eax, eax
mov word [ebp - 0x2c], ax
lea edi, [ebp - 0x2a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x2c]
mov word [ebp - 0x58], ax
mov ax, word [ebp - 0x2a]
mov word [ebp - 0x56], ax
mov ax, word [ebp - 0x26]
mov word [ebp - 0x54], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x4c], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x4a], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x44], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x40], eax
mov eax, dword [ebx]
dec eax
je 0x4249ee
dec eax
je 0x4249d5
dec eax
je 0x4249b8
dec eax
je 0x424997
dec eax
je 0x42498e
dec eax
je 0x424985
dec eax
jne 0x4249ee
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 4]
push 0xa
push edx
mov dword [ebp - 0x3c], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x4249fd
mov dword [ebp - 0x3c], 7
jmp 0x4249fd
mov dword [ebp - 0x3c], 6
jmp 0x4249fd
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x3c], 4
mov word [ebp - 0x36], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x34], ax
mov ax, word [ebx + 8]
jmp 0x4249f9
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x38], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x34], ax
jmp 0x4249fd
mov ax, word [ebx + 4]
mov word [ebp - 0x38], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x3c], 2
mov word [ebp - 0x36], ax
jmp 0x4249fd
mov ax, word [ebx + 4]
mov dword [ebp - 0x3c], 1
mov word [ebp - 0x38], ax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x5c]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jge 0x424a4b
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x424a1d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x424a2a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x424a37
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x424a44
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x424ad8
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push 0x4478e0
mov dword [ebp - 0x14], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x14]
jge 0x424a74
cmp eax, esi
je 0x424a10
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x424a10
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x424a94
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x14]
jmp 0x424a68
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x424aa1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x424aae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x424abb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x424ac8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x424ad5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
pop edi
pop esi
leave
ret