Function at 0x485053
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push esi
push edi
lea eax, [ebp - 8]
push eax
push 0x4ed0cc
push 1
xor edi, edi
push edi
push 0x4ed0ec
mov dword [ebp - 0x20], 0x2200
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 8]
jge 0x485098
cmp eax, edi
je 0x485091
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x485466
lea edx, [ebp - 0xc]
push edx
mov esi, 0x4ed0bc
push esi
push dword [ebp + 8]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 4], edi
jl 0x485141
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x485164
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov esi, eax
cmp esi, edi
mov eax, dword [ebp - 4]
jl 0x485164
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, edi
jl 0x485161
push dword [ebp + 0x18]
lea eax, [ebp - 0x10]
push eax
call fcn.004054bc
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
call esi
test eax, eax
js 0x4851d0
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], edi
je 0x485183
push 0x4eea90
lea eax, [ebp - 0x10]
push eax
call fcn.0043b5ea
test eax, eax
je 0x485183
push edi
push dword [ebp + 0x18]
jmp 0x485189
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 4]
push edx
push esi
push 0x4ed0dc
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, edi
jge 0x4850c2
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x48516e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x48517b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
jmp 0x485087
push edi
push 0x4ed604
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
cmp eax, edi
mov dword [ebp - 0x18], eax
jge 0x4851d0
lea ecx, [ebp - 0x10]
call fcn.004029ae
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x4851ae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x4851bb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x4851c8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x485466
mov eax, dword [ebp - 4]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
cmp eax, edi
mov dword [ebp - 0x18], eax
jl 0x485199
call esi
test eax, eax
jns 0x4851f0
mov dword [ebp - 0x20], 0x200
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov esi, eax
cmp esi, edi
jge 0x485211
lea ecx, [ebp - 0x10]
call fcn.004029ae
jmp 0x485161
mov eax, dword [ebp - 4]
push dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
cmp esi, edi
jl 0x485204
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x14]
push edx
push edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x485261
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x24]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, edi
jge 0x485261
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x485204
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x485204
push 0x30
xor esi, esi
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.004b4140
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x64], ax
xor eax, eax
mov word [ebp - 0x34], ax
lea edi, [ebp - 0x32]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x34]
mov word [ebp - 0x60], ax
mov ax, word [ebp - 0x32]
mov word [ebp - 0x5e], ax
mov ax, word [ebp - 0x2e]
mov word [ebp - 0x5c], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x54], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x52], ax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx]
dec eax
je 0x48536c
dec eax
je 0x485353
dec eax
je 0x485336
dec eax
je 0x485315
dec eax
je 0x48530c
dec eax
je 0x485303
dec eax
jne 0x48536c
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 4]
push 0xa
push edx
mov dword [ebp - 0x44], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x48537b
mov dword [ebp - 0x44], 7
jmp 0x48537b
mov dword [ebp - 0x44], 6
jmp 0x48537b
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x44], 4
mov word [ebp - 0x3e], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
mov ax, word [ebx + 8]
jmp 0x485377
mov ecx, dword [ebx + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], eax
mov ax, word [ebx + 0xc]
mov word [ebp - 0x3c], ax
jmp 0x48537b
mov ax, word [ebx + 4]
mov word [ebp - 0x40], ax
mov ax, word [ebx + 0xc]
mov dword [ebp - 0x44], 2
mov word [ebp - 0x3e], ax
jmp 0x48537b
mov ax, word [ebx + 4]
mov dword [ebp - 0x44], 1
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x64]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, esi
jge 0x4853d1
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x48539b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x10]
call fcn.004029ae
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x4853b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x4853bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x4853ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x485466
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x1c]
push edx
push 0x4ed10c
mov dword [ebp - 0x1c], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
mov eax, dword [ebp - 0x1c]
jge 0x4853fa
cmp eax, esi
je 0x48538e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x48538e
mov ecx, dword [eax]
push 1
push esi
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x48541a
mov eax, dword [ebp - 8]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x1c]
jmp 0x4853ee
mov eax, dword [ebp - 0x1c]
cmp eax, esi
je 0x485427
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x485434
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x10]
call fcn.004029ae
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x485449
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x485456
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x485463
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
pop edi
pop esi
leave
ret