Function at 0x439f40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca2c8
mov eax, dword fs:[0]
push eax
sub esp, 0x804
mov eax, dword [0x51fee0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x7fc], eax
xor bl, bl
mov dword [ebp - 0x7d8], 0
lea eax, [ebp - 0x7d8]
push eax
push 0x4deab0
push 1
push 0
push 0x4deac0
mov dword [ebp - 4], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x439fdb
push eax
push str.EnumScheduledTasks_CoCreateInstance__d
push esi
call fcn.004060e0
mov eax, dword [ebp - 0x7d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x43ab4c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43ab4c
mov eax, dword [ebp - 0x7d8]
test eax, eax
jne 0x43a013
push str.EnumScheduledTasks_pITS_null
push esi
call fcn.004060e0
mov eax, dword [ebp - 0x7d8]
add esp, 8
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x43ab4c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43ab4c
mov dword [ebp - 0x7e8], 0
mov ecx, dword [eax]
lea edx, [ebp - 0x7e8]
push edx
push eax
mov byte [ebp - 4], 1
call dword [ecx + 0x14]
mov ecx, eax
test ecx, ecx
js 0x43ab12
mov eax, dword [ebp - 0x7e8]
test eax, eax
je 0x43ab12
lea edx, [ebp - 0x7d4]
push edx
lea edx, [ebp - 0x7dc]
push edx
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0x7d4], 0
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
js 0x43aa9c
mov ebx, dword [sym.imp.ole32.dll_CoTaskMemFree]
mov edi, edi
mov eax, dword [ebp - 0x7d4]
test eax, eax
je 0x43aa9c
mov edi, edi
dec eax
mov dword [ebp - 0x7d4], eax
mov eax, dword [0x51fab0]
mov ecx, 0x51fab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7f8], eax
mov eax, dword [0x51fab0]
mov ecx, 0x51fab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7f4], eax
mov eax, dword [0x51fab0]
mov ecx, 0x51fab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7f0], eax
mov eax, dword [0x51fab0]
mov ecx, 0x51fab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7ec], eax
mov ecx, dword [ebp - 0x7dc]
mov eax, dword [ebp - 0x7d4]
mov byte [ebp - 4], 2
mov edx, dword [ecx + eax*4]
test edx, edx
jne 0x43a10a
xor ecx, ecx
jmp 0x43a11f
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43a110
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x7f8]
call fcn.004097a0
call fcn.0043ad60
test al, al
jne 0x43a19a
mov esi, dword [0x521340]
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x70
mov eax, esi
sub eax, ecx
xor edi, edi
cmp eax, 0xe2
je 0x43a194
mov edi, edi
mov eax, esi
or eax, 0xffffff6e
add esi, eax
mov eax, esi
imul eax, esi
inc edi
cmp edi, eax
jg 0x43a194
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x70
mov eax, esi
sub eax, ecx
cmp eax, 0xe2
jne 0x43a160
mov dword [0x521340], edi
mov dword [ebp - 0x7e0], 0
mov edx, dword [ebp - 0x7dc]
mov eax, dword [ebp - 0x7d8]
lea ecx, [ebp - 0x7e0]
mov esi, dword [eax]
push ecx
mov ecx, dword [ebp - 0x7d4]
push 0x4deaa0
push dword [edx + ecx*4]
mov byte [ebp - 4], 3
push eax
call dword [esi + 0x18]
mov edi, dword [0x521340]
mov esi, eax
mov eax, edi
imul eax, edi
cdq
mov ecx, 0xc
idiv ecx
cmp edx, 2
jne 0x43a1f7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov dword [0x521340], edi
test esi, esi
js 0x43a473
mov esi, dword [ebp - 0x7e0]
test esi, esi
je 0x43a473
call fcn.0043ad60
test al, al
jne 0x43a254
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x64
sub edi, eax
xor ecx, ecx
lea eax, [edi + 0x63]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a63b0
push eax
call fcn.004a8200
mov esi, dword [ebp - 0x7e0]
add esp, 8
lea ecx, [ebp - 0x808]
mov dword [ebp - 0x808], 0
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x84]
test eax, eax
js 0x43a2a5
mov edx, dword [ebp - 0x808]
test edx, edx
je 0x43a2a5
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43a281
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x7f0]
call fcn.004097a0
push dword [ebp - 0x808]
call ebx
mov eax, dword [ebp - 0x7e0]
lea edx, [ebp - 0x800]
mov dword [ebp - 0x800], 0
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x8c]
test eax, eax
js 0x43a304
mov edx, dword [ebp - 0x800]
test edx, edx
je 0x43a304
mov ecx, edx
lea esi, [ecx + 2]
jmp 0x43a2e0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43a2e0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x7ec]
call fcn.004097a0
push dword [ebp - 0x800]
call ebx
mov eax, dword [ebp - 0x7e0]
lea edx, [ebp - 0x804]
mov dword [ebp - 0x804], 0
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x7c]
test eax, eax
js 0x43a473
cmp dword [ebp - 0x800], 0
je 0x43a473
mov edx, dword [ebp - 0x804]
test edx, edx
jne 0x43a344
xor ecx, ecx
jmp 0x43a35f
mov ecx, edx
lea esi, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43a350
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x7f4]
call fcn.004097a0
call fcn.0043ae40
test al, al
jne 0x43a3a4
mov ecx, dword [0x521340]
mov eax, ecx
sub eax, 0
je 0x43a39a
dec eax
je 0x43a38e
inc ecx
mov dword [0x521340], ecx
jmp 0x43a3a4
mov dword [0x521340], 0
jmp 0x43a3a4
mov dword [0x521340], 2
push dword [ebp - 0x804]
call ebx
mov eax, dword [ebp - 0x7f4]
cmp dword [eax - 0xc], 0
jne 0x43a3ca
push 0x13
push str.NT_AUTHORITYSYSTEM
lea ecx, [ebp - 0x7f4]
call fcn.004097a0
mov esi, dword [0x521340]
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
cdq
mov ecx, 5
idiv ecx
cmp edx, 2
jne 0x43a473
xor edx, edx
nop
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, esi
mov eax, edx
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
inc edx
add esi, eax
cmp edx, 0x100
jl 0x43a3f0
mov dword [0x521340], esi
mov ebx, dword [ebp - 0x7fc]
lea eax, [ebp - 0x7f8]
mov ecx, dword [ebx + 4]
cmp eax, ecx
jae 0x43a703
mov edi, dword [ebx]
cmp edi, eax
ja 0x43a703
mov edx, dword [ebx + 8]
mov esi, eax
sub esi, edi
cmp ecx, edx
jne 0x43a4f0
mov eax, edx
sub eax, ecx
sar eax, 4
cmp eax, 1
jae 0x43a4f0
sub ecx, edi
sar ecx, 4
mov eax, 0xfffffff
sub eax, ecx
cmp eax, 1
jb 0x43ab03
sub edx, edi
sar edx, 4
lea ebx, [ecx + 1]
mov ecx, edx
shr ecx, 1
mov eax, 0xfffffff
sub eax, ecx
cmp eax, edx
jae 0x43a4db
xor edx, edx
jmp 0x43a4dd
add edx, ecx
cmp edx, ebx
cmovb edx, ebx
mov ebx, dword [ebp - 0x7fc]
push edx
mov ecx, ebx
call fcn.0043ac60
and esi, 0xfffffff0
add esi, dword [ebx]
mov ebx, dword [ebx + 4]
mov dword [ebp - 0x810], ebx
mov dword [ebp - 0x80c], ebx
mov byte [ebp - 4], 4
test ebx, ebx
je 0x43a6f4
mov edi, dword [esi]
sub edi, 0x10
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
mov ecx, eax
jl 0x43a536
cmp ecx, dword [edi]
jne 0x43a536
mov eax, 1
lock xadd dword [edx], eax
jmp 0x43a57e
mov eax, dword [ecx]
push 2
push dword [edi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x7e4], edx
test edx, edx
je 0x43ab0d
mov eax, dword [edi + 4]
mov dword [edx + 4], eax
mov ecx, dword [edi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [edi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.004a8205
mov edi, dword [ebp - 0x7e4]
add esp, 0x10
lea eax, [edi + 0x10]
mov dword [ebx], eax
mov edi, dword [esi + 4]
sub edi, 0x10
mov byte [ebp - 4], 5
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
mov ecx, eax
jl 0x43a5ae
cmp ecx, dword [edi]
jne 0x43a5ae
mov eax, 1
lock xadd dword [edx], eax
jmp 0x43a5f6
mov eax, dword [ecx]
push 2
push dword [edi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x7e4], edx
test edx, edx
je 0x43ab0d
mov eax, dword [edi + 4]
mov dword [edx + 4], eax
mov ecx, dword [edi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [edi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.004a8205
mov edi, dword [ebp - 0x7e4]
add esp, 0x10
lea eax, [edi + 0x10]
mov dword [ebx + 4], eax
mov edi, dword [esi + 8]
sub edi, 0x10
mov byte [ebp - 4], 6
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
mov ecx, eax
jl 0x43a627
cmp ecx, dword [edi]
jne 0x43a627
mov eax, 1
lock xadd dword [edx], eax
jmp 0x43a66f
mov eax, dword [ecx]
push 2
push dword [edi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x7e4], edx
test edx, edx
je 0x43ab0d
mov eax, dword [edi + 4]
mov dword [edx + 4], eax
mov ecx, dword [edi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [edi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.004a8205
mov edi, dword [ebp - 0x7e4]
add esp, 0x10
lea eax, [edi + 0x10]
mov dword [ebx + 8], eax
mov esi, dword [esi + 0xc]
mov byte [ebp - 4], 7
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x43a6b5
cmp ecx, dword [esi - 0x10]
jne 0x43a6b5
lea edi, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
lea eax, [edi + 0x10]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x7fc]
add dword [eax + 4], 0x10
jmp 0x43a933
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x43ab0d
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov ecx, dword [esi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push esi
push eax
lea eax, [edi + 0x10]
push eax
call fcn.004a8205
lea eax, [edi + 0x10]
add esp, 0x10
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x7fc]
add dword [eax + 4], 0x10
jmp 0x43a933
mov edx, dword [ebx + 8]
cmp ecx, edx
jne 0x43a757
mov eax, edx
sub eax, ecx
sar eax, 4
cmp eax, 1
jae 0x43a757
mov esi, dword [ebx]
sub ecx, esi
sar ecx, 4
mov eax, 0xfffffff
sub eax, ecx
cmp eax, 1
jb 0x43ab03
sub edx, esi
sar edx, 4
lea edi, [ecx + 1]
mov ecx, edx
shr ecx, 1
mov eax, 0xfffffff
sub eax, ecx
cmp eax, edx
jae 0x43a748
xor edx, edx
jmp 0x43a74a
add edx, ecx
cmp edx, edi
cmovb edx, edi
push edx
mov ecx, ebx
call fcn.0043ac60
mov edi, dword [ebx + 4]
mov dword [ebp - 0x80c], edi
mov dword [ebp - 0x810], edi
mov byte [ebp - 4], 8
test edi, edi
je 0x43a92f
mov esi, dword [ebp - 0x7f8]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x43a79e
cmp ecx, dword [esi - 0x10]
jne 0x43a79e
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x43a7d7
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x43ab0d
mov eax, dword [esi - 0xc]
mov dword [ebx + 4], eax
mov ecx, dword [esi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push esi
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.004a8205
add esp, 0x10
lea eax, [ebx + 0x10]
mov dword [edi], eax
mov esi, dword [ebp - 0x7f4]
mov byte [ebp - 4], 9
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x43a80c
cmp ecx, dword [esi - 0x10]
jne 0x43a80c
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x43a845
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x43ab0d
mov eax, dword [esi - 0xc]
mov dword [ebx + 4], eax
mov ecx, dword [esi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push esi
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.004a8205
add esp, 0x10
lea eax, [ebx + 0x10]
mov dword [edi + 4], eax
mov esi, dword [ebp - 0x7f0]
mov byte [ebp - 4], 0xa
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x43a87b
cmp ecx, dword [esi - 0x10]
jne 0x43a87b
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x43a8b4
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x43ab0d
mov eax, dword [esi - 0xc]
mov dword [ebx + 4], eax
mov ecx, dword [esi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push esi
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.004a8205
add esp, 0x10
lea eax, [ebx + 0x10]
mov dword [edi + 8], eax
mov esi, dword [ebp - 0x7ec]
mov byte [ebp - 4], 0xb
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x43a8ea
cmp ecx, dword [esi - 0x10]
jne 0x43a8ea
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x43a923
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x43ab0d
mov eax, dword [esi - 0xc]
mov dword [ebx + 4], eax
mov ecx, dword [esi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push esi
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.004a8205
add esp, 0x10
lea eax, [ebx + 0x10]
mov ebx, dword [ebp - 0x7fc]
mov dword [edi + 0xc], eax
add dword [ebx + 4], 0x10
mov ecx, dword [ebp - 0x7dc]
mov eax, dword [ebp - 0x7d4]
mov ebx, dword [sym.imp.ole32.dll_CoTaskMemFree]
push dword [ecx + eax*4]
call ebx
mov eax, dword [ebp - 0x7e0]
mov byte [ebp - 4], 2
test eax, eax
je 0x43a95e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edx, dword [ebp - 0x7ec]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x43a982
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x7f0]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x43a9a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x7f4]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x43a9c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x7f8]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x43a9e2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x7d4]
test eax, eax
jne 0x43a090
push dword [ebp - 0x7dc]
call ebx
mov eax, dword [0x521340]
imul eax, eax
and eax, 0x8000000f
jns 0x43aa0c
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xf
jne 0x43aa78
xor esi, esi
call fcn.004a8009
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x7d8], xmm0
cmp esi, 0xf8
jb 0x43aa13
xor ecx, ecx
mov eax, 0xf7
cmp ecx, eax
jge 0x43aa6f
lea ecx, [ecx]
movsd xmm0, qword [ebp + eax*8 - 0x7d0]
movsd xmm1, qword [ebp + eax*8 - 0x7d8]
comisd xmm0, xmm1
jbe 0x43aa6a
movsd qword [ebp + eax*8 - 0x7d0], xmm1
movsd qword [ebp + eax*8 - 0x7d8], xmm0
dec eax
cmp eax, ecx
jg 0x43aa40
inc ecx
cmp ecx, 0xf8
jl 0x43aa34
mov eax, dword [ebp - 0x7e8]
lea edx, [ebp - 0x7d4]
mov ecx, dword [eax]
push edx
lea edx, [ebp - 0x7dc]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x43a080
mov eax, dword [0x521340]
mov ecx, eax
imul ecx, eax
imul eax, ecx
cdq
mov ecx, 0x15
idiv ecx
mov bl, 1
cmp edx, 0x13
jne 0x43aad6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [ebp - 0x7e8]
mov byte [ebp - 4], 0
test eax, eax
je 0x43aaea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x43ab4c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43ab4c
push str.vector_T__too_long
call fcn.004a6300
call fcn.0040c350
push ecx
push str.EnumScheduledTasks_Enum__d
push esi
call fcn.004060e0
mov eax, dword [ebp - 0x7e8]
add esp, 0xc
mov byte [ebp - 4], 0
test eax, eax
je 0x43ab35
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x7d8]
mov dword [ebp - 4], 0xffffffff
test ecx, ecx
je 0x43ab4c
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a7434
mov esp, ebp
pop ebp
ret