Function at 0x426d09
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x44a8c0
push 1
xor edi, edi
push edi
push 0x44a8e0
mov dword [ebp - 0x20], 0x2200
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jge 0x426d4e
cmp eax, edi
je 0x426d47
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x427127
lea edx, [ebp - 0xc]
push edx
mov esi, 0x44a8b0
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x426df6
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x426e19
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x426e19
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x426e16
push dword [ebp + 0x18]
lea eax, [ebp - 0x10]
call fcn.004044e8
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
call esi
test eax, eax
js 0x426e88
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], edi
je 0x426e38
push 0x44aa9c
lea eax, [ebp - 0x10]
push eax
call fcn.00408f22
test eax, eax
je 0x426e38
push edi
push dword [ebp + 0x18]
jmp 0x426e3e
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x44a8d0
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x426d78
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x426e23
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x426e30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
jmp 0x426d3d
push edi
push 0x44ae50
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
cmp eax, edi
mov dword [ebp - 0x18], eax
jge 0x426e88
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004045dc
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x426e66
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x426e73
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x426e80
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x427127
mov eax, dword [ebp - 4]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
cmp eax, edi
mov dword [ebp - 0x18], eax
jl 0x426e4e
call esi
test eax, eax
jns 0x426ea8
mov dword [ebp - 0x20], 0x200
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
jge 0x426ecc
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004045dc
jmp 0x426e16
mov eax, dword [ebp - 4]
push dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
jl 0x426ebc
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x426f1c
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x24]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x426f1c
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x426ebc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x426ebc
push 0x30
xor esi, esi
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.004315c0
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x64], ax
xor eax, eax
mov word [ebp - 0x34], ax
lea edi, [ebp - 0x32]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x34]
mov word [ebp - 0x60], ax
mov ax, word [ebp - 0x32]
mov word [ebp - 0x5e], ax
mov ax, word [ebp - 0x2e]
mov word [ebp - 0x5c], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x54], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x52], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx]
dec eax
je 0x427027
dec eax
je 0x42700e
dec eax
je 0x426ff1
dec eax
je 0x426fd0
dec eax
je 0x426fc7
dec eax
je 0x426fbe
dec eax
jne 0x427027
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 4]
push 0xa
push edx
mov dword [ebp - 0x44], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x427036
mov dword [ebp - 0x44], 7
jmp 0x427036
mov dword [ebp - 0x44], 6
jmp 0x427036
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x44], 4
mov word [ebp - 0x3e], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
mov ax, word [ebx + 8]
jmp 0x427032
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
jmp 0x427036
mov ax, word [ebx + 4]
mov word [ebp - 0x40], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x44], 2
mov word [ebp - 0x3e], ax
jmp 0x427036
mov ax, word [ebx + 4]
mov dword [ebp - 0x44], 1
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x64]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jge 0x42708f
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x427056
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004045dc
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x42706e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x42707b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x427088
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x427127
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x1c]
push edx
push 0x44a8f0
mov dword [ebp - 0x1c], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x1c]
jge 0x4270b8
cmp eax, esi
je 0x427049
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x427049
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x4270d8
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x1c]
jmp 0x4270ac
mov eax, dword [ebp - 0x1c]
cmp eax, esi
je 0x4270e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x4270f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004045dc
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x42710a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x427117
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x427124
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
pop edi
pop esi
leave
ret