Function at 0x48481d
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x4ed0cc
push 1
xor edi, edi
push edi
push 0x4ed0ec
mov dword [ebp - 0x20], 0x2200
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jge 0x484862
cmp eax, edi
je 0x48485b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x484c30
lea edx, [ebp - 0xc]
push edx
mov esi, 0x4ed0bc
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x48490b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x48492e
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x48492e
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x48492b
push dword [ebp + 0x18]
lea eax, [ebp - 0x10]
push eax
call fcn.004054af
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
call esi
test eax, eax
js 0x48499a
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], edi
je 0x48494d
push 0x4eeb34
lea eax, [ebp - 0x10]
push eax
call fcn.0043b02c
test eax, eax
je 0x48494d
push edi
push dword [ebp + 0x18]
jmp 0x484953
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x4ed0dc
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x48488c
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x484938
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x484945
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
jmp 0x484851
push edi
push 0x4ed6cc
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
cmp eax, edi
mov dword [ebp - 0x18], eax
jge 0x48499a
lea ecx, [ebp - 0x10]
call fcn.00402964
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x484978
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x484985
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x484992
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x484c30
mov eax, dword [ebp - 4]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
cmp eax, edi
mov dword [ebp - 0x18], eax
jl 0x484963
call esi
test eax, eax
jns 0x4849ba
mov dword [ebp - 0x20], 0x200
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
jge 0x4849db
lea ecx, [ebp - 0x10]
call fcn.00402964
jmp 0x48492b
mov eax, dword [ebp - 4]
push dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
jl 0x4849ce
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x484a2b
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x24]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x484a2b
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x4849ce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4849ce
push 0x30
xor esi, esi
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.004b3b00
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x64], ax
xor eax, eax
mov word [ebp - 0x34], ax
lea edi, [ebp - 0x32]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x34]
mov word [ebp - 0x60], ax
mov ax, word [ebp - 0x32]
mov word [ebp - 0x5e], ax
mov ax, word [ebp - 0x2e]
mov word [ebp - 0x5c], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x54], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x52], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx]
dec eax
je 0x484b36
dec eax
je 0x484b1d
dec eax
je 0x484b00
dec eax
je 0x484adf
dec eax
je 0x484ad6
dec eax
je 0x484acd
dec eax
jne 0x484b36
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 4]
push 0xa
push edx
mov dword [ebp - 0x44], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x484b45
mov dword [ebp - 0x44], 7
jmp 0x484b45
mov dword [ebp - 0x44], 6
jmp 0x484b45
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x44], 4
mov word [ebp - 0x3e], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
mov ax, word [ebx + 8]
jmp 0x484b41
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
jmp 0x484b45
mov ax, word [ebx + 4]
mov word [ebp - 0x40], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x44], 2
mov word [ebp - 0x3e], ax
jmp 0x484b45
mov ax, word [ebx + 4]
mov dword [ebp - 0x44], 1
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x64]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jge 0x484b9b
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x484b65
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x10]
call fcn.00402964
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x484b7a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x484b87
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x484b94
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x484c30
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x1c]
push edx
push 0x4ed10c
mov dword [ebp - 0x1c], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x1c]
jge 0x484bc4
cmp eax, esi
je 0x484b58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x484b58
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x484be4
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x1c]
jmp 0x484bb8
mov eax, dword [ebp - 0x1c]
cmp eax, esi
je 0x484bf1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x484bfe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x10]
call fcn.00402964
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x484c13
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x484c20
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x484c2d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
pop edi
pop esi
leave
ret