Function at 0x42b180
Capabilities:
Get session user name
Parse pe header
Resolve function by parsing pe exports
Schedule task via itaskscheduler

Disassembly:
push ebp
lea ebp, [esp - 0xd0]
sub esp, 0xd0
push 0xffffffffffffffff
push 0x639369
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x6eed24]
xor eax, ebp
mov dword [ebp + 0xcc], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
cmp byte [ebx + 0x6c], 0
je 0x42b234
mov eax, dword [ebx + 0x64]
cmp eax, dword [ebx + 0x8c]
jne 0x42b234
mov esi, dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0x44]
push eax
lea eax, [ebx + 0x6e]
push eax
call esi
lea eax, [ebp - 0x38]
push eax
lea eax, [ebx + 0x40]
push eax
call esi
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x34]
jne 0x42b234
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x38]
jne 0x42b234
mov eax, dword [ebx + 0x8c]
dec eax
cmp eax, 3
ja case.default.0x42b206
jmp dword [eax*4 + 0x42bfa0]
movzx ecx, word [ebx + 0x80]
movzx eax, word [ebx + 0x52]
cmp cx, ax
jmp 0x42b286
mov ax, word [ebx + 0x7e]
cmp ax, word [ebx + 0x50]
jne 0x42b234
mov ax, word [ebx + 0x82]
cmp ax, word [ebx + 0x54]
je case.default.0x42b206
cmp byte [ebx + 0x3c], 0
mov ecx, ebx
jne 0x42b298
push 0
call 0x42bfb0
jmp 0x42beef
movsx eax, word [ebx + 0x84]
cmp eax, dword [ebx + 0x58]
jne 0x42b234
mov ax, word [ebx + 0x86]
cmp ax, word [ebx + 0x5c]
jmp 0x42b232
mov ax, word [ebx + 0x88]
cmp ax, word [ebx + 0x5e]
jne 0x42b234
mov ax, word [ebx + 0x86]
cmp ax, word [ebx + 0x5c]
jne 0x42b234
mov ax, word [ebx + 0x8a]
cmp ax, word [ebx + 0x60]
jne 0x42b234
cmp byte [ebp + 0xd8], 0
jne 0x42b234
xor eax, eax
jmp 0x42beef
call fcn.0042aee0
test al, al
je 0x42b336
push 1
mov ecx, ebx
call 0x42bfb0
mov byte [ebx + 0x6c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x18]
mov ecx, ebx
push eax
call fcn.0042a8d0
mov edi, eax
test edi, edi
jns 0x42b359
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Cannot_get_Root_Folder_pointer:_0x_x.__wss
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
test eax, eax
je 0x42b32a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 3
jmp 0x42bee0
cmp byte [ebx + 0x6c], 0
je 0x42b2b2
cmp byte [ebp + 0xd8], 0
jne 0x42b2b2
mov ecx, ebx
call fcn.0042c940
jmp 0x42beef
mov esi, dword [ebp - 0x1c]
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x42b374
mov dword [ebp - 0x10], 0x649aa0
push 0xc
call fcn.004b2888
mov edi, eax
add esp, 4
mov dword [ebp - 0x40], edi
mov byte [ebp - 4], 4
test edi, edi
je 0x42b3b3
push dword [ebp - 0x10]
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [edi], eax
test eax, eax
jne 0x42b3b5
cmp dword [ebp - 0x10], eax
jne 0x42bf14
jmp 0x42b3b5
xor edi, edi
mov byte [ebp - 4], 1
mov dword [ebp - 0x10], edi
test edi, edi
je 0x42bf1e
push 0
push dword [edi]
mov byte [ebp - 4], 5
push esi
call dword [ebp - 0x34]
lea ecx, [ebp - 0x10]
call fcn.0042cf40
xor edi, edi
cmp byte [ebp + 0xd8], 0
je 0x42b400
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 6
test eax, eax
je 0x42b3f4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 7
jmp 0x42bee0
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
push edx
push 0
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 8
call dword [ecx + 0x24]
mov edi, eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x42b434
mov dword [ebp - 0x18], 0
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 0xa
call dword [ecx + 8]
mov byte [ebp - 4], 8
test edi, edi
jns 0x42b49f
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Failed_to_create_a_task_definition:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x42b482
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x42b493
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xd
jmp 0x42bee0
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x20]
push edx
push eax
mov byte [ebp - 4], 0xe
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edi, eax
test edi, edi
jns 0x42b535
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Cannot_get_identification_pointer:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x42b507
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x10
test eax, eax
je 0x42b518
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x11
test eax, eax
je 0x42b529
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x12
jmp 0x42bee0
mov esi, dword [ebp - 0x20]
push 0xc
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x34], eax
call fcn.004b2888
mov edi, eax
add esp, 4
mov dword [ebp - 0x40], edi
mov byte [ebp - 4], 0x13
test edi, edi
je 0x42b57c
push 0x64e160
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [edi], eax
test eax, eax
je 0x42bf28
jmp 0x42b57e
xor edi, edi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x10], edi
test edi, edi
je 0x42bf32
push dword [edi]
mov byte [ebp - 4], 0x14
push esi
call dword [ebp - 0x34]
lea ecx, [ebp - 0x10]
call fcn.0042cf40
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov esi, dword [ebp - 0x20]
mov ecx, 0x6f50d0
mov byte [ebp - 4], 0x15
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x50]
push eax
push 0x11
call fcn.0043d920
push 0xc
mov dword [ebp - 0x10], eax
call fcn.004b2888
mov edi, eax
add esp, 4
mov dword [ebp - 0x40], edi
mov byte [ebp - 4], 0x16
test edi, edi
je 0x42b615
push dword [ebp - 0x10]
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [edi], eax
test eax, eax
jne 0x42b617
cmp dword [ebp - 0x10], eax
jne 0x42bf3c
jmp 0x42b617
xor edi, edi
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x10], edi
test edi, edi
je 0x42bf46
push dword [edi]
mov byte [ebp - 4], 0x17
push esi
call dword [ebp - 0x34]
lea ecx, [ebp - 0x10]
call fcn.0042cf40
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x42b650
mov dword [ebp - 0x20], 0
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 0x19
call dword [ecx + 8]
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x30]
push edx
push eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov edi, eax
test edi, edi
jns 0x42b703
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Cannot_get_trigger_collection:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x1b
test eax, eax
je 0x42b6bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x50]
call fcn.00403130
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x42b6d5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x42b6e6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x42b6f7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1f
jmp 0x42bee0
push dword [ebx + 0x8c]
lea eax, [ebp - 0x30]
mov ecx, ebx
push eax
call fcn.00429b80
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x24]
push edx
push eax
mov byte [ebp - 4], 0x25
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov edi, eax
test edi, edi
jns 0x42b7d8
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Cannot_get_Task_collection_pointer:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x26
test eax, eax
je 0x42b780
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x27
test eax, eax
je 0x42b791
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x50]
call fcn.00403130
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x28
test eax, eax
je 0x42b7aa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x29
test eax, eax
je 0x42b7bb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x2a
test eax, eax
je 0x42b7cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x2b
jmp 0x42bee0
mov esi, dword [ebp - 0x24]
push 0xc
mov eax, dword [esi]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x34], eax
call fcn.004b2888
mov edi, eax
add esp, 4
mov dword [ebp - 0x40], edi
mov byte [ebp - 4], 0x2c
test edi, edi
je 0x42b81f
push 0x650dc4
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [edi], eax
test eax, eax
je 0x42bf50
jmp 0x42b821
xor edi, edi
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x10], edi
test edi, edi
je 0x42bf5a
push dword [edi]
mov byte [ebp - 4], 0x2d
push esi
call dword [ebp - 0x34]
lea ecx, [ebp - 0x10]
call fcn.0042cf40
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x2c]
push edx
push 0
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x2e
call dword [ecx + 0x30]
mov edi, eax
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x42b87a
mov dword [ebp - 0x24], 0
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 0x30
call dword [ecx + 8]
mov byte [ebp - 4], 0x2e
test edi, edi
jns 0x42b935
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Cannot_create_the_action:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x31
test eax, eax
je 0x42b8cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x32
test eax, eax
je 0x42b8dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x33
test eax, eax
je 0x42b8ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x50]
call fcn.00403130
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x34
test eax, eax
je 0x42b907
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x35
test eax, eax
je 0x42b918
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x36
test eax, eax
je 0x42b929
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x37
jmp 0x42bee0
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x38
call dword [ecx]
mov edi, eax
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x42b96f
mov dword [ebp - 0x2c], 0
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 0x3a
call dword [ecx + 8]
mov byte [ebp - 4], 0x38
test edi, edi
jns 0x42ba3b
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.QueryInterface_call_failed_on_IExecAction:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x3b
test eax, eax
je 0x42b9c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x3c
test eax, eax
je 0x42b9d2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x3d
test eax, eax
je 0x42b9e3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x3e
test eax, eax
je 0x42b9f4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x50]
call fcn.00403130
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x3f
test eax, eax
je 0x42ba0d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x40
test eax, eax
je 0x42ba1e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x41
test eax, eax
je 0x42ba2f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x42
jmp 0x42bee0
mov esi, dword [ebp - 0x28]
mov eax, dword [esi]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x42ba57
mov dword [ebp - 0x10], 0x649aa0
push 0xc
call fcn.004b2888
mov edi, eax
add esp, 4
mov dword [ebp - 0x40], edi
mov byte [ebp - 4], 0x43
test edi, edi
je 0x42ba96
push dword [ebp - 0x10]
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [edi], eax
test eax, eax
jne 0x42ba98
cmp dword [ebp - 0x10], eax
jne 0x42bf64
jmp 0x42ba98
xor edi, edi
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x10], edi
test edi, edi
je 0x42bf6e
push dword [edi]
mov byte [ebp - 4], 0x44
push esi
call dword [ebp - 0x34]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x38
mov edi, eax
call fcn.0042cf40
mov esi, dword [ebp - 0x28]
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x40], eax
mov eax, dword [ebx + 0x24]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x42badb
mov dword [ebp - 0x10], 0x649aa0
push 0xc
call fcn.004b2888
add esp, 4
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x45
test eax, eax
je 0x42bb1b
push dword [ebp - 0x10]
mov dword [eax + 4], 0
mov dword [eax + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
test eax, eax
jne 0x42bb1d
cmp dword [ebp - 0x10], eax
jne 0x42bf78
jmp 0x42bb1d
xor ecx, ecx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x34], ecx
test ecx, ecx
je 0x42bf82
push dword [ecx]
mov byte [ebp - 4], 0x46
push esi
call dword [ebp - 0x40]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x38
call fcn.0042cf40
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x42bb5e
mov dword [ebp - 0x28], 0
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 0x48
call dword [ecx + 8]
mov byte [ebp - 4], 0x38
test edi, edi
jns 0x42bc2a
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Cannot_add_path_for_executable_action:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x49
test eax, eax
je 0x42bbb0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x4a
test eax, eax
je 0x42bbc1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x4b
test eax, eax
je 0x42bbd2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x4c
test eax, eax
je 0x42bbe3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x50]
call fcn.00403130
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x4d
test eax, eax
je 0x42bbfc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x4e
test eax, eax
je 0x42bc0d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x4f
test eax, eax
je 0x42bc1e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x50
jmp 0x42bee0
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x3c]
push edx
push eax
mov byte [ebp - 4], 0x51
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x42bd2e
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x50]
mov esi, dword [ebp - 0x3c]
push 0xc
mov eax, dword [esi]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
call fcn.004b2888
mov edi, eax
add esp, 4
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 0x52
test edi, edi
je 0x42bc9c
push str.PT0S
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [edi], eax
test eax, eax
je 0x42bf8c
jmp 0x42bc9e
xor edi, edi
mov byte [ebp - 4], 0x51
mov dword [ebp - 0x34], edi
test edi, edi
je 0x42bf96
push dword [edi]
mov byte [ebp - 4], 0x53
push esi
call dword [ebp - 0x40]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x51
call fcn.0042cf40
mov eax, dword [ebp - 0x3c]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x10]
push edx
push eax
mov byte [ebp - 4], 0x54
mov ecx, dword [eax]
call dword [ecx + 0x9c]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x42bd1c
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x10]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x10]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x10]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0x55
test eax, eax
je 0x42bd2a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x51
mov eax, dword [ebx]
test eax, eax
jne 0x42bd39
mov eax, 0x649aa0
push eax
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042aff0
mov edi, eax
test edi, edi
jns 0x42be28
push 0
push 0x65
lea eax, [ebp]
push eax
push 0x400
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp]
push eax
push edi
push str.Error_saving_the_Task_:_0x_x.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x56
test eax, eax
je 0x42bd9d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x57
test eax, eax
je 0x42bdae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x58
test eax, eax
je 0x42bdbf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x59
test eax, eax
je 0x42bdd0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x5a
test eax, eax
je 0x42bde1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x50]
call fcn.00403130
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x5b
test eax, eax
je 0x42bdfa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x5c
test eax, eax
je 0x42be0b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x5d
test eax, eax
je 0x42be1c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x5e
jmp 0x42bee0
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x5f
test eax, eax
je 0x42be39
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x60
test eax, eax
je 0x42be4a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x61
test eax, eax
je 0x42be5b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x62
test eax, eax
je 0x42be6c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x63
test eax, eax
je 0x42be7d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x64
test eax, eax
je 0x42be91
push eax
call fcn.00446420
add esp, 4
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x65
test eax, eax
je 0x42beb7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x66
test eax, eax
je 0x42bec8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x67
test eax, eax
je 0x42bed9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x68
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x42beed
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xcc]
xor ecx, ebp
call fcn.004b2558
lea esp, [ebp + 0xd0]
pop ebp
ret 4
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
push 0x8007000e
call fcn.004b3420
or eax, 0x1d0042b2
mov dl, 66
add byte [eax - 0x4e], cl
inc edx
add byte [ecx - 0x4e], ah
inc edx
add byte [ebp - 0x73], dl
lodsb al, byte [esi]
and al, 0
idiv edi
inc dword [ecx + 0x900ec]
add byte [edx - 1], ch
push 0x6393c0
mov eax, dword fs:[0]
push eax
sub esp, 0x18
mov eax, dword [0x6eed24]
xor eax, ebp
mov dword [ebp + 0x8fc], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 1
push eax
push 0x653d60
push 1
push 0
push 0x653d80
call dword [sym.imp.ole32.dll_CoCreateInstance]
push 0
mov esi, eax
mov ecx, edi
push str.Cant_access_to_Windows_Scheduler:_0x_x.__ws
push esi
call fcn.0042ae30
test al, al
jne 0x42c052
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
mov ecx, dword [edi]
test ecx, ecx
jne 0x42c043
mov ecx, 0x649aa0
lea esi, [ebp - 0x10]
push esi
push 0x653d50
push ecx
push eax
call edx
mov esi, eax
test esi, esi
js 0x42c13f
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x42c076
mov dword [ebp - 0x10], 0
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 3
call dword [ecx + 8]
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov ecx, dword [edi]
test ecx, ecx
jne 0x42c089
mov ecx, 0x649aa0
push ecx
push eax
call edx
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c09a
mov eax, 0x649aa0
test esi, esi
jns 0x42c119
test eax, eax
jne 0x42c0e2
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_delete_Task__ws_from_Windows_Scheduler.__ws
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c0fc
push eax
push str.Cant_delete_Task__ws_from_Windows_Scheduler.__ws
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 4
test eax, eax
je 0x42c10d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 5
jmp 0x42c8f6
cmp byte [ebp + 0x908], 0
je 0x42c13f
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 6
test eax, eax
je 0x42c133
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 7
jmp 0x42c8f6
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x20]
mov ecx, dword [edi]
test ecx, ecx
jne 0x42c152
mov ecx, 0x649aa0
lea esi, [ebp - 0x10]
push esi
push 0x653d50
push 0x653d70
push ecx
push eax
call edx
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c171
mov eax, 0x649aa0
test esi, esi
jns 0x42c1f0
test eax, eax
jne 0x42c1b9
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_create_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c1d3
push eax
push str.Cant_create_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 8
test eax, eax
je 0x42c1e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 9
jmp 0x42c8f6
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov ecx, dword [edi + 0x18]
test ecx, ecx
jne 0x42c207
mov ecx, 0x649aa0
push ecx
push eax
call edx
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c218
mov eax, 0x649aa0
test esi, esi
jns 0x42c297
test eax, eax
jne 0x42c260
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_set_application_path_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c27a
push eax
push str.Cant_set_application_path_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x42c28b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xb
jmp 0x42c8f6
cmp dword [edi + 0x28], 0
jbe 0x42c348
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x88]
mov ecx, dword [edi + 0x24]
test ecx, ecx
jne 0x42c2b8
mov ecx, 0x649aa0
push ecx
push eax
call edx
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c2c9
mov eax, 0x649aa0
test esi, esi
jns 0x42c348
test eax, eax
jne 0x42c311
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_set_application_arguments_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c32b
push eax
push str.Cant_set_application_arguments_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x42c33c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xd
jmp 0x42c8f6
cmp dword [edi + 0x34], 0
jbe 0x42c3f6
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
mov ecx, dword [edi + 0x30]
test ecx, ecx
jne 0x42c366
mov ecx, 0x649aa0
push ecx
push eax
call edx
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c377
mov eax, 0x649aa0
test esi, esi
jns 0x42c3f6
test eax, eax
jne 0x42c3bf
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_set_comments_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c3d9
push eax
push str.Cant_set_comments_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x42c3ea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xf
jmp 0x42c8f6
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x3fc
push eax
lea eax, [ebp + 0x30]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
mov eax, dword [ebp - 0x10]
push 0
mov ecx, dword [eax]
je 0x42c41c
lea edx, [ebp + 0x30]
push edx
jmp 0x42c421
push str.Users
push eax
call dword [ecx + 0x78]
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c432
mov eax, 0x649aa0
test esi, esi
jns 0x42c4b1
test eax, eax
jne 0x42c47a
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_setup_auth_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c494
push eax
push str.Cant_setup_auth_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x10
test eax, eax
je 0x42c4a5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x11
jmp 0x42c8f6
mov eax, dword [ebp - 0x10]
push 0x2001
push eax
mov ecx, dword [eax]
call dword [ecx + 0x70]
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c4cc
mov eax, 0x649aa0
test esi, esi
jns 0x42c54b
test eax, eax
jne 0x42c514
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_set_flags_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c52e
push eax
push str.Cant_set_flags_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x12
test eax, eax
je 0x42c53f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x13
jmp 0x42c8f6
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x24], 0
lea edx, [ebp - 0x24]
push edx
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 0x14
call dword [ecx + 0xc]
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c57b
mov eax, 0x649aa0
test esi, esi
jns 0x42c60f
test eax, eax
jne 0x42c5c7
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_create_Trigger_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c5e1
push eax
push str.Cant_create_Trigger_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x15
test eax, eax
je 0x42c5f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x16
test eax, eax
je 0x42c603
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x17
jmp 0x42c8f6
push 0x30
lea eax, [ebp]
push 0
push eax
call fcn.004b40a0
mov eax, 0x30
add esp, 0xc
mov word [ebp], ax
movzx eax, word [edi + 0x6e]
mov word [ebp + 4], ax
movzx eax, word [edi + 0x70]
mov word [ebp + 6], ax
movzx eax, word [edi + 0x74]
mov word [ebp + 8], ax
movzx eax, word [edi + 0x76]
mov word [ebp + 0x10], ax
movzx eax, word [edi + 0x78]
mov word [ebp + 0x12], ax
mov eax, dword [edi + 0x8c]
mov dword [ebp + 0x20], eax
dec eax
cmp eax, 3
ja case.default.0x42c65f
jmp dword [eax*4 + 0x42c92c]
mov ax, word [edi + 0x80]
jmp 0x42c6c0
movzx eax, word [edi + 0x7e]
mov word [ebp + 0x24], ax
movzx eax, word [edi + 0x82]
mov word [ebp + 0x26], ax
jmp case.default.0x42c65f
movsx ecx, word [edi + 0x84]
mov eax, 1
dec ecx
shl eax, cl
mov dword [ebp + 0x24], eax
mov ax, word [edi + 0x86]
mov word [ebp + 0x28], ax
jmp case.default.0x42c65f
movzx eax, word [edi + 0x86]
mov word [ebp + 0x28], ax
movzx eax, word [edi + 0x88]
mov word [ebp + 0x26], ax
movzx eax, word [edi + 0x8a]
mov word [ebp + 0x24], ax
mov eax, dword [ebp - 0x18]
lea edx, [ebp]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c6de
mov eax, 0x649aa0
test esi, esi
jns 0x42c772
test eax, eax
jne 0x42c72a
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_set_Trigger_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c744
push eax
push str.Cant_set_Trigger_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
test eax, eax
je 0x42c755
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x19
test eax, eax
je 0x42c766
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1a
jmp 0x42c8f6
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x1c]
push edx
push 0x658334
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x1b
call dword [ecx]
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c79b
mov eax, 0x649aa0
test esi, esi
jns 0x42c840
test eax, eax
jne 0x42c7e7
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_prepare_saving_interface_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c801
push eax
push str.Cant_prepare_saving_interface_for_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x42c812
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x42c823
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x42c834
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1f
jmp 0x42c8f6
mov eax, dword [ebp - 0x1c]
push 1
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov esi, eax
mov eax, dword [edi]
test eax, eax
jne 0x42c85a
mov eax, 0x649aa0
test esi, esi
jns 0x42c8bc
test eax, eax
jne 0x42c8a2
push eax
push 0x65
lea eax, [ebp + 0x830]
push eax
push 0x400
push esi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x830]
push eax
push esi
push str.Cant_save_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2ab
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x18
jmp 0x42c8bc
push eax
push str.Cant_save_new_Task__ws_for_Windows_Scheduler.
push 1
push 0x2af
push str.e:workprgpdf5_builds_rc.328_trackerupdate_schedulertask.cpp
call fcn.00431810
add esp, 0x14
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x20
test eax, eax
je 0x42c8cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x21
test eax, eax
je 0x42c8de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x22
test eax, eax
je 0x42c8ef
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x23
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x42c903
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp + 0x8fc]
xor ecx, ebp
call fcn.004b2558
lea esp, [ebp + 0x900]
pop ebp
ret 4