Function at 0x54aca0
Capabilities:
Create thread
Terminate process

Disassembly:
mov eax, 0x24fc
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0x24f8], eax
push ebx
push esi
mov esi, dword [esp + 0x250c]
push edi
mov edi, dword [esp + 0x250c]
xor ebx, ebx
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], esi
cmp edi, ebx
je 0x54bb22
cmp byte [edi], bl
je 0x54bb22
push ebp
push 0x207
lea eax, [esp + 0xced]
push ebx
push eax
mov byte [esp + 0xcf4], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0xf01]
push ebx
push ecx
mov byte [esp + 0xf08], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0x7f1]
push ebx
push edx
mov byte [esp + 0x7f8], bl
call fcn.005dfd60
add esp, 0x24
mov ebp, 0x104
mov dword [esp + 0x18], ebp
mov dword [esp + 0x30], ebx
cmp esi, ebx
je 0x54ad72
cmp byte [esi], bl
je 0x54ad72
push edi
push esi
lea eax, [esp + 0xcf0]
push str.SoftwareMicroWorldeScan_For_Windows_sSchedulerJobs_s
push eax
call fcn.005dfb23
push 0x65635c
push esi
call fcn.005f095a
add esp, 0x18
test eax, eax
jne 0x54ad90
jmp 0x54ad88
push edi
lea ecx, [esp + 0xcec]
push str.SoftwareMicroWorldeScan_For_WindowsODSSchedulerJobs_s
push ecx
call fcn.005dfb23
add esp, 0xc
mov dword [esp + 0x30], 1
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0xef4]
push eax
push str.Schedule
lea ecx, [esp + 0xcf4]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x7d8]
push eax
push str.ScheduleDateTime
lea ecx, [esp + 0xcf4]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], ebp
call fcn.004d5770
cmp byte [esp + 0xef0], bl
je 0x54bb21
xor eax, eax
mov dword [esp + 0x3a], eax
mov dword [esp + 0x3e], eax
mov dword [esp + 0x42], eax
mov word [esp + 0x46], ax
lea eax, [esp + 0xef0]
xor edx, edx
push eax
mov word [esp + 0x3c], dx
call fcn.005e0909
push 0x103
lea ecx, [esp + 0x5d5]
push ebx
push ecx
mov ebp, eax
mov byte [esp + 0x5dc], bl
call fcn.005dfd60
add esp, 0x10
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x24], ebx
cmp byte [esp + 0x7d4], bl
je 0x54bb21
push 1
push ebx
push 0x2c
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x5dc]
push eax
lea ecx, [esp + 0x7e8]
push ecx
call fcn.004e1380
lea edx, [esp + 0x5e4]
push edx
call fcn.004e3310
lea eax, [esp + 0x5e8]
push eax
call fcn.005e0909
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x5fc]
mov dword [esp + 0x58], eax
push edx
lea eax, [esp + 0x808]
push eax
mov byte [esp + 0x604], bl
call fcn.004e1380
lea ecx, [esp + 0x604]
push ecx
call fcn.004e3310
lea edx, [esp + 0x608]
push edx
call fcn.005e0909
add esp, 0x40
push 1
push ebx
mov dword [esp + 0x3c], eax
push 0x2c
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x5dc]
push ecx
lea edx, [esp + 0x7e8]
push edx
mov byte [esp + 0x5e4], bl
call fcn.004e1380
lea eax, [esp + 0x5e4]
push eax
call fcn.004e3310
lea ecx, [esp + 0x5e8]
push ecx
call fcn.005e0909
push 1
push ebx
push 0x2c
lea edx, [esp + 0x58]
mov dword [esp + 0x5ec], eax
push edx
lea eax, [esp + 0x5fc]
push eax
lea ecx, [esp + 0x808]
push ecx
mov byte [esp + 0x604], bl
call fcn.004e1380
lea edx, [esp + 0x604]
push edx
call fcn.004e3310
lea eax, [esp + 0x608]
push eax
call fcn.005e0909
add esp, 0x40
push 1
push ebx
push 0x2c
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x5dc]
mov edi, eax
mov byte [esp + 0x5dc], bl
push edx
lea eax, [esp + 0x7e8]
push eax
call fcn.004e1380
lea ecx, [esp + 0x5e4]
push ecx
call fcn.004e3310
lea edx, [esp + 0x5e8]
push edx
call fcn.005e0909
push 1
push ebx
mov dword [esp + 0x38], eax
push 0x2c
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x5fc]
push ecx
lea edx, [esp + 0x808]
push edx
mov byte [esp + 0x604], bl
call fcn.004e1380
lea eax, [esp + 0x604]
push eax
call fcn.004e3310
lea ecx, [esp + 0x608]
push ecx
call fcn.005e0909
add esp, 0x40
lea edx, [esp + 0x38]
mov esi, eax
push edx
dec esi
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 1]
cmp eax, 4
ja case.default.0x54b001
jmp dword [eax*4 + 0x54bb3c]
movzx eax, word [esp + 0x38]
mov ecx, dword [esp + 0x5c0]
mov si, word [esp + 0x40]
mov dx, word [esp + 0x3a]
cmp eax, ecx
jne case.default.0x54b001
movzx ebp, dx
cmp ebp, dword [esp + 0x34]
jne 0x54b07c
movzx ebp, word [esp + 0x3e]
cmp ebp, dword [esp + 0x28]
jne 0x54b07c
movzx ebp, si
cmp ebp, edi
jne 0x54b07c
movzx ebp, word [esp + 0x42]
cmp ebp, dword [esp + 0x10]
jne 0x54b07c
push ebx
mov dword [esp + 0x18], 0x1e13380
call fcn.005e0ab6
mov edi, dword [esp + 0x18]
add esp, 4
xor esi, esi
add edi, eax
adc esi, edx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], 1
jmp 0x54b78c
cmp eax, ecx
jne case.default.0x54b001
movzx eax, dx
cmp eax, dword [esp + 0x34]
jne case.default.0x54b001
movzx ecx, word [esp + 0x3e]
cmp ecx, dword [esp + 0x28]
jne case.default.0x54b001
movzx eax, si
cmp eax, edi
jb 0x54bb21
jne case.default.0x54b001
movzx edx, word [esp + 0x42]
cmp edx, dword [esp + 0x10]
jmp 0x54b1d8
movzx eax, word [esp + 0x42]
mov ecx, dword [esp + 0x10]
cmp eax, ecx
jne 0x54b1d8
push ebx
mov dword [esp + 0x18], 0xe10
call fcn.005e0ab6
mov edi, dword [esp + 0x18]
add esp, 4
xor esi, esi
add edi, eax
adc esi, edx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], 2
jmp 0x54b78c
movzx eax, word [esp + 0x40]
mov cx, word [esp + 0x42]
cmp eax, edi
jne 0x54b1c7
movzx edx, cx
cmp edx, dword [esp + 0x10]
jne 0x54b1c5
push ebx
mov dword [esp + 0x18], 0x15180
call fcn.005e0ab6
mov dword [esp + 0x28], 3
jmp 0x54b1ab
movzx ecx, word [esp + 0x3c]
cmp ecx, esi
jne case.default.0x54b001
movzx eax, word [esp + 0x40]
mov cx, word [esp + 0x42]
cmp eax, edi
jne 0x54b1c7
movzx edx, cx
cmp edx, dword [esp + 0x10]
jne 0x54b1c5
push ebx
mov dword [esp + 0x18], 0x93a80
call fcn.005e0ab6
mov dword [esp + 0x28], 4
jmp 0x54b1ab
movzx ecx, word [esp + 0x3e]
cmp ecx, dword [esp + 0x28]
jne case.default.0x54b001
movzx eax, word [esp + 0x40]
mov cx, word [esp + 0x42]
cmp eax, edi
jne 0x54b1c7
movzx edx, cx
cmp edx, dword [esp + 0x10]
jne 0x54b1c5
push ebx
mov dword [esp + 0x18], 0x28de80
call fcn.005e0ab6
mov dword [esp + 0x28], 5
mov edi, dword [esp + 0x18]
add esp, 4
xor esi, esi
add edi, eax
adc esi, edx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
jmp 0x54b78c
cmp eax, edi
jb 0x54bb21
cmp eax, edi
jne case.default.0x54b001
movzx eax, cx
cmp eax, dword [esp + 0x10]
jb 0x54bb21
lea ecx, [esp + 0x28]
push ecx
push str.RunJobIfMissed
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x38], 1
call fcn.004d5820
cmp dword [esp + 0x28], ebx
je 0x54bb21
cmp dword [esp + 0x30], ebx
je 0x54b217
cmp dword [0x75e9d8], ebx
jmp 0x54b21d
cmp dword [0x75e9dc], ebx
jne 0x54bb21
push 0x103
lea edx, [esp + 0x9e1]
push ebx
push edx
mov dword [esp + 0x40], ebx
mov byte [esp + 0x9e8], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0x6e1]
push ebx
push eax
mov byte [esp + 0x6e8], bl
call fcn.005dfd60
push 0xfff
lea ecx, [esp + 0x1525]
push ebx
push ecx
mov byte [esp + 0x152c], bl
call fcn.005dfd60
add esp, 0x24
lea edx, [esp + 0x5c0]
push edx
lea eax, [esp + 0x6d4]
push eax
push str.JobName
lea ecx, [esp + 0xcf4]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x5d4], 0x104
call fcn.004d5770
mov edi, dword [esp + 0x4c]
push edi
lea edx, [esp + 0x9e0]
push str.AVP10_s
push edx
call fcn.005dfb23
push 0xabcd
lea eax, [esp + 0x1518]
push eax
lea ecx, [esp + 0x9f0]
push ecx
call fcn.004f24a0
add esp, 0x18
push ebx
push 1
lea edx, [esp + 0x1510]
push edx
push 1
push ebx
call fcn.00507920
mov dword [esp + 0x34], eax
cmp eax, ebx
je 0x54b3e7
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x54b3eb
lea eax, [esp + 0x6d0]
push eax
lea ecx, [esp + 0x8dc]
push 0x61c29c
push ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x3c], ebx
call fcn.005dfb23
add esp, 0xc
push edi
push ebx
push ebx
push ebx
lea edx, [esp + 0x20]
push edx
push str.escanpro.exe
call fcn.00503770
cmp eax, 1
jne 0x54b3e7
lea eax, [esp + 0x8d8]
push eax
push 1
push ebx
push ebx
lea ecx, [esp + 0x40]
push ecx
push str.mwavscan
call fcn.00503770
test eax, eax
jne 0x54b3e7
mov ebp, dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edx, dword [esp + 0x10]
push edx
push edi
lea eax, [esp + 0x1308]
push str._JOB__Orphaned_Job___s__was_found_A___Terminating_eScanPro_PID:_u
push eax
call fcn.005dfb23
push ebx
push 1
lea ecx, [esp + 0x1318]
push ecx
push 0x6aec98
call fcn.004311c0
mov edx, dword [esp + 0x30]
push edx
push ebx
push 0x1fffff
call fcn.004e45c0
mov esi, eax
add esp, 0x2c
cmp esi, ebx
je 0x54b3c7
push ebx
push esi
call ebp
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x54b3cd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
push ebx
push ebx
push ebx
lea eax, [esp + 0x20]
push eax
push str.escanpro.exe
call fcn.00503770
cmp eax, 1
je 0x54b374
jmp 0x54b3eb
mov dword [esp + 0x28], ebx
lea ecx, [esp + 0x34]
push ecx
call fcn.004dca10
cmp dword [esp + 0x28], ebx
je 0x54bb21
push 0x103
lea edx, [esp + 0x6d5]
push ebx
push edx
mov byte [esp + 0x6dc], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0x120d]
push ebx
push eax
mov byte [esp + 0x1214], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x9f9]
push ebx
push ecx
mov byte [esp + 0xa00], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0xc0d]
push ebx
push edx
mov byte [esp + 0xc14], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0xb15]
push ebx
push eax
mov byte [esp + 0xb1c], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x1035]
push ebx
push ecx
mov byte [esp + 0x103c], bl
call fcn.005dfd60
mov eax, dword [esp + 0x90]
add esp, 0x48
cmp eax, ebx
je 0x54b4c6
cmp byte [eax], bl
je 0x54b4c6
push edi
push eax
lea edx, [esp + 0x6d8]
push str.SoftwareMicroWorldeScan_for_WindowsSchedLastRun_s__s
push edx
call fcn.005dfb23
add esp, 0x10
jmp 0x54b4dc
push edi
lea eax, [esp + 0x6d4]
push str.SoftwareMicroWorldeScan_for_WindowsSchedLastRunODS__s
push eax
call fcn.005dfb23
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
push str.NextRunInc
lea edx, [esp + 0x6d8]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x34], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x24], ebx
call fcn.004d5820
lea eax, [esp + 0x24]
push eax
push str.NextRunType
lea ecx, [esp + 0x6d8]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea edx, [esp + 0x1c]
push edx
push str.NextRunSec
lea eax, [esp + 0x6d8]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5820
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1200]
push edx
push str.JobName
lea eax, [esp + 0x6dc]
push eax
mov esi, 0x104
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], esi
call fcn.004d5770
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0xbe8]
push edx
push str.ScheduleDateTime
lea eax, [esp + 0x6dc]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], esi
call fcn.004d5770
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x9e0]
push edx
push str.JobName
lea eax, [esp + 0xcf4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], esi
call fcn.004d5770
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0xae4]
push edx
push str.ScheduleDateTime
lea eax, [esp + 0xcf4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], esi
call fcn.004d5770
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0xff8]
push edx
push str.Schedule
lea eax, [esp + 0xcf4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], esi
call fcn.004d5770
mov ecx, dword [esp + 0x1c]
or ecx, dword [esp + 0x20]
je 0x54bb21
cmp dword [esp + 0x14], ebx
je 0x54bb21
lea edx, [esp + 0x11fc]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x54bb21
lea ecx, [esp + 0xff4]
push ecx
call fcn.005e0909
add esp, 4
cmp eax, dword [esp + 0x24]
jne 0x54bb21
lea edx, [esp + 0xbe4]
push edx
lea eax, [esp + 0xae4]
push eax
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x54bb21
push ebx
call fcn.005e0ab6
mov ebp, edx
add esp, 4
cmp ebp, dword [esp + 0x20]
mov dword [esp + 0x5c0], eax
jl 0x54bb21
jg 0x54b6a7
cmp eax, dword [esp + 0x1c]
jbe 0x54bb21
lea ecx, [esp + 0x50]
push ecx
mov byte [esp + 0x54], bl
mov dword [esp + 0x55], ebx
mov dword [esp + 0x59], ebx
mov word [esp + 0x5d], bx
mov byte [esp + 0x5f], bl
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
cmp byte [esp + 0x50], bl
jne 0x54b6da
cmp dword [0x75e8c0], 1
jne 0x54bb21
push 0x103
lea edx, [esp + 0x8dd]
push ebx
push edx
mov byte [esp + 0x8e4], bl
call fcn.005dfd60
add esp, 0xc
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x8dc]
push ecx
push str.NextRunTimeStr
lea edx, [esp + 0x6dc]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], esi
call fcn.004d5770
lea eax, [esp + 0x8d8]
push eax
lea ecx, [esp + 0x9e0]
push ecx
lea edx, [esp + 0x1308]
push str._JOB__Next_Runtime_of_Job___s__was__s._This_was_missed._So_executing_job_now...
push edx
call fcn.005dfb23
push ebx
push 1
lea eax, [esp + 0x1318]
push eax
push 0x6aec98
call fcn.004311c0
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
add esp, 0x20
cmp ebp, esi
jl 0x54b78c
mov ecx, dword [esp + 0x5c0]
jg 0x54b772
cmp ecx, edi
jb 0x54b78c
mov eax, dword [esp + 0x14]
add edi, eax
adc esi, ebx
cmp ebp, esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
jg 0x54b776
jl 0x54b78c
cmp ecx, edi
jae 0x54b776
push 0x53c
lea ecx, [esp + 0x88]
push ebx
push ecx
call fcn.005dfd60
push 0x103
lea edx, [esp + 0x8e9]
push ebx
push edx
mov byte [esp + 0x8f0], bl
call fcn.005dfd60
push 0x103
lea eax, [esp + 0xafd]
push ebx
push eax
mov byte [esp + 0xb04], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x6f9]
push ebx
push ecx
mov byte [esp + 0x700], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0xc19]
push ebx
push edx
mov byte [esp + 0xc20], bl
call fcn.005dfd60
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x84]
add esp, 0x3c
mov dword [esp + 0x84], ebx
mov dword [esp + 0x98], edi
mov dword [esp + 0x9c], esi
mov dword [esp + 0xa4], ecx
cmp eax, ebx
je 0x54b864
cmp byte [eax], bl
je 0x54b864
push eax
lea edx, [esp + 0x1b0]
push edx
mov dword [esp + 0x88], ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, 0x104
jmp 0x54b92a
push 0x60c81c
lea eax, [esp + 0x1b0]
push eax
mov dword [esp + 0x88], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xbe8]
push edx
push str.AllowUserToCancelScanning
lea eax, [esp + 0xcf4]
push eax
mov esi, 0x104
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x8dc]
push edx
push str.Foreground
lea eax, [esp + 0xcf4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
xor ecx, ecx
cmp byte [esp + 0x8d8], 0x31
lea edx, [esp + 0x18]
sete cl
push edx
lea eax, [esp + 0xae4]
push eax
push str.ScanPriority
mov dword [esp + 0x24], esi
mov dword [esp + 0x9c], ecx
lea ecx, [esp + 0xcf4]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004d5770
lea edx, [esp + 0xae0]
push edx
call fcn.005e0909
add esp, 4
mov dword [esp + 0x94], eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x1304]
push ecx
push str.ScheduleDateTime
lea edx, [esp + 0xcf4]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x6d4]
push ecx
push str.JobName
lea edx, [esp + 0xcf4]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
cmp byte [esp + 0x6d0], bl
je 0x54bb21
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x6d0]
mov byte [esp + eax + 0x2b0], cl
inc eax
cmp cl, bl
jne 0x54b990
mov esi, dword [esp + 0x4c]
lea edx, [esp + 0x3b4]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x54b9b2
xor eax, eax
mov edi, edi
mov cl, byte [esp + eax + 0x1300]
mov byte [esp + eax + 0x4b8], cl
inc eax
cmp cl, bl
jne 0x54b9c0
cmp byte [esp + 0xbe4], 0x30
jne 0x54ba0e
push 0x75df40
push 0x60cf3c
push str.ScheduledJobCompleted
push 0x60da74
call fcn.004e0cb0
push 0x75df40
push esi
push str.ScheduledJobName
push 0x60da74
call fcn.004e0cb0
add esp, 0x20
lea eax, [esp + 0x6d0]
push eax
push esi
lea ecx, [esp + 0xffc]
push str._JOB__B__Starting_Job:__s__Name:_s_
push ecx
call fcn.005dfb23
push ebx
push 1
lea edx, [esp + 0x100c]
push edx
push 0x6aec98
call fcn.004311c0
mov eax, dword [esp + 0x3c]
add esp, 0x20
or eax, dword [esp + 0x20]
je 0x54baea
lea ecx, [esp + 0x1c]
push ecx
call fcn.005e37cf
mov esi, eax
mov ecx, 9
lea edi, [esp + 0x60]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x70]
lea edx, [esp + 0x5c4]
push edx
inc eax
push eax
call fcn.004d94f0
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x80]
push edx
push eax
mov eax, dword [esp + 0x80]
add ecx, 0x76c
push ecx
lea edx, [esp + 0x5dc]
push edx
push eax
lea ecx, [esp + 0xcc]
push str._02d__s__04d__02d:_02d:_02d
push ecx
call fcn.005dfb23
lea edx, [esp + 0xd4]
push edx
lea eax, [esp + 0x1024]
push str._JOB__B__Next_Run_Time_of_this_Job:__s
push eax
call fcn.005dfb23
push ebx
push 1
lea ecx, [esp + 0x1034]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x48
lea edx, [esp + 0x80]
push edx
push ebx
push 0x5490a0
call fcn.005e07ac
add esp, 0xc
cmp eax, 0xffffffff
je 0x54bb21
cmp dword [esp + 0x84], ebx
jne 0x54bb21
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 1
call esi
cmp dword [esp + 0x84], ebx
je 0x54bb14
pop ebp
mov ecx, dword [esp + 0x2504]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005dfbbe
add esp, 0x24fc
ret