Function at 0x41b109
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x425418
push 1
xor edi, edi
push edi
push 0x4253f8
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jl 0x41b2de
lea edx, [ebp - 0xc]
push edx
mov esi, 0x425428
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x41b187
cmp byte [ebp + 0x38], 0
mov eax, dword [ebp - 0xc]
je 0x41b168
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
jmp 0x41b1a7
cmp eax, edi
je 0x41b172
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x41b17f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
jmp 0x41b4dd
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x425408
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jl 0x41b2c1
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41b2c4
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41b2c4
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x41b2c1
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
js 0x41b22b
cmp dword [ebp + 0x18], edi
jne 0x41b209
push edi
push 0x427638
jmp 0x41b218
test byte [ebp + 0x25], 0x20
je 0x41b212
push edi
jmp 0x41b215
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov esi, eax
cmp esi, edi
jl 0x41b2c1
mov eax, dword [ebp - 4]
push dword [ebp + 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
mov esi, eax
cmp esi, edi
jl 0x41b2c1
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
jns 0x41b25f
test byte [ebp + 0x24], 1
je 0x41b255
and dword [ebp + 0x24], 0xfffffffe
test byte [ebp + 0x25], 0x20
je 0x41b25f
and byte [ebp + 0x25], 0xdf
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41b2c4
push dword [ebp + 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x41b2c4
lea edx, [ebp - 0x10]
push edx
push edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x10], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x41b2ef
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x18]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x41b2ef
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x41b2c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x41b2ce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x41b2db
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x41b2e8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x41b4dd
push 0x30
xor esi, esi
lea eax, [ebp - 0x58]
push esi
push eax
call fcn.00423c90
xor eax, eax
mov word [ebp - 0x28], si
lea edi, [ebp - 0x26]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
add esp, 0xc
lea eax, [ebp - 0x28]
push eax
mov word [ebp - 0x58], 0x30
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x28]
mov word [ebp - 0x54], ax
mov ax, word [ebp - 0x26]
mov word [ebp - 0x52], ax
mov ax, word [ebp - 0x22]
mov word [ebp - 0x50], ax
mov ax, word [ebp + 0x30]
mov word [ebp - 0x48], ax
mov ax, word [ebp + 0x32]
mov word [ebp - 0x46], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x40], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
dec eax
je 0x41b3fb
dec eax
je 0x41b3e2
dec eax
je 0x41b3c5
dec eax
je 0x41b3a4
dec eax
je 0x41b39b
dec eax
je 0x41b392
dec eax
jne 0x41b3fb
mov eax, dword [ebp - 4]
xor edx, edx
mov dx, word [ebx + 4]
push 0xa
mov dword [ebp - 0x38], 5
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x28]
jmp 0x41b40a
mov dword [ebp - 0x38], 7
jmp 0x41b40a
mov dword [ebp - 0x38], 6
jmp 0x41b40a
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x38], 4
mov word [ebp - 0x32], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x30], ax
mov ax, word [ebx + 8]
jmp 0x41b406
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x34], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x30], ax
jmp 0x41b40a
mov ax, word [ebx + 4]
mov word [ebp - 0x34], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x38], 2
mov word [ebp - 0x32], ax
jmp 0x41b40a
mov ax, word [ebx + 4]
mov dword [ebp - 0x38], 1
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jl 0x41b462
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push 0x425448
mov dword [ebp - 0x14], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x14]
jl 0x41b458
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x41b49a
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x41b462
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x41b46f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x41b47c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x41b489
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x41b496
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x41b4dd
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x41b4a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x41b4b4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x41b4c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x41b4ce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x41b4db
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
pop edi
pop esi
leave
ret