Function at 0x100713e
Capabilities:
Schedule task via itaskscheduler

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x118
mov eax, dword [0x100c084]
and dword [ebp - 0xec], 0
and dword [ebp - 0xfc], 0
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0x20]
push ebx
mov dword [ebp - 0x108], eax
mov eax, dword [ebp + 0x24]
push esi
mov dword [ebp - 0x104], eax
mov eax, dword [0x100c0d4]
test eax, eax
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x118], edi
mov dword [ebp - 0xf4], 1
je 0x10076ea
lea ecx, [ebp - 0xe4]
push ecx
call eax
test al, al
je 0x10076ea
mov ebx, 0x1d6e
push ebx
call fcn.010052af
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push eax
push edi
call esi
test eax, eax
jne 0x10071fa
push ebx
call fcn.010052af
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor eax, eax
mov dword [ebp - 0xf8], eax
jmp 0x100722f
mov ebx, 0x1d6d
push ebx
call fcn.010052af
push eax
push edi
call esi
test eax, eax
jne 0x1007995
push ebx
call fcn.010052af
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0xf8], 1
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x110], 0
lea edi, [eax + eax*2]
lea edi, [ebp + edi*8 - 0x98]
mov ebx, 0x1bbe
je 0x100726c
and dword [ebp - 0xf4], 0
push 0x1bbd
call fcn.010052af
push eax
push dword [ebp - 0x110]
call esi
test eax, eax
jne 0x1007534
mov byte [edi], 1
cmp dword [ebp + 0x10], 0xffffffff
mov esi, 0x100c0d8
je 0x100731c
xor eax, eax
cmp dword [ebp + 0x10], 0x64
mov dword [ebp - 0xf4], eax
ja 0x1007558
push 0x20
lea ecx, [ebp - 0x24]
push ecx
push eax
push eax
push 5
call dword [sym.imp.ntdll.dll_NtPowerInformation]
cmp dword [ebp - 0x1c], 0
mov ecx, dword [ebp + 0x10]
je 0x10072e0
mov eax, dword [ebp - 0xc]
imul eax, eax, 0x64
xor edx, edx
div dword [ebp - 0x1c]
cmp ecx, eax
jae 0x10072e0
push eax
push 0x1d86
mov dword [ebp + 0x10], eax
call fcn.010052af
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add esp, 0xc
push esi
add eax, 0x40
push eax
call fcn.0100961e
mov ecx, dword [ebp + 0x10]
mov dword [edi + 4], ecx
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x94]
jae 0x100731c
push ecx
push 0x1d87
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x94], ecx
call fcn.010052af
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add esp, 0xc
push esi
add eax, 0x40
push eax
call fcn.0100961e
cmp dword [ebp - 0x100], 0
je 0x100734f
and dword [ebp - 0xf4], 0
push 0x1bbd
call fcn.010052af
push eax
push dword [ebp - 0x100]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1007562
or dword [edi + 0x10], 1
cmp dword [ebp - 0x10c], 0
je 0x1007382
and dword [ebp - 0xf4], 0
push 0x1bbd
call fcn.010052af
push eax
push dword [ebp - 0x10c]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100758c
or dword [edi + 0x10], 2
cmp dword [ebp - 0xe8], 0
je 0x10073b4
and dword [ebp - 0xf4], 0
push 0x1d74
call fcn.010052af
push eax
push dword [ebp - 0xe8]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10075b6
and dword [edi + 8], eax
cmp dword [ebp - 0x108], 0
je 0x10073e7
and dword [ebp - 0xf4], 0
push 0x1bbd
call fcn.010052af
push eax
push dword [ebp - 0x108]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1007659
or dword [edi + 0xc], 4
cmp dword [ebp - 0x104], 0
je 0x1007723
push 0x1bbd
call fcn.010052af
push eax
push dword [ebp - 0x104]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10076fc
push eax
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jl 0x10076a9
lea eax, [ebp - 0xec]
push eax
push 0x1002878
push 1
push 0
push 0x1002858
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
mov dword [ebp - 0xe8], eax
jl 0x100750a
mov ebx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax]
lea edx, [ebp - 0xf0]
push edx
push 0x1002888
lea ebx, [ebx*4 + 0x10027d4]
push dword [ebx]
push eax
call dword [ecx + 0x18]
test eax, eax
mov dword [ebp - 0xe8], eax
jge 0x10074f2
and eax, 0xffff
cmp eax, 2
jne 0x10074fe
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax]
lea edx, [ebp - 0xf0]
push edx
push 0x1002888
push 0x1002868
push dword [ebx]
push eax
call dword [ecx + 0x20]
test eax, eax
mov dword [ebp - 0xe8], eax
jl 0x10074fe
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
lea edx, [ebp - 0x114]
push edx
push 0x10033b4
push eax
call dword [ecx]
test eax, eax
mov dword [ebp - 0xe8], eax
jl 0x10074f2
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
push 1
push 0
push eax
call dword [ecx + 0x18]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [ebp - 0xe8], 0
jl 0x10076a9
mov eax, dword [ebp - 0xf8]
push dword [eax*4 + 0x10027d4]
push 0x1002d24
jmp 0x10076c1
push ebx
call fcn.010052af
push eax
push dword [ebp - 0x110]
call esi
test eax, eax
jne 0x100754e
mov byte [edi], al
jmp 0x100726c
push 0x1d7a
jmp 0x100799a
push 0x1d7b
jmp 0x100799a
push ebx
call fcn.010052af
push eax
push dword [ebp - 0x100]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1007582
and dword [edi + 0x10], 0xfffffffe
jmp 0x100734f
push 0x1d7c
jmp 0x100799a
push ebx
call fcn.010052af
push eax
push dword [ebp - 0x10c]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10075ac
and dword [edi + 0x10], 0xfffffffd
jmp 0x1007382
push 0x1d7d
jmp 0x100799a
push 0x1d60
call fcn.010052af
push eax
push dword [ebp - 0xe8]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10075ef
cmp dword [0x100c324], eax
je 0x10075e5
mov dword [edi + 8], 2
jmp 0x10073b4
push 0x1d82
jmp 0x100799a
push 0x1d66
call fcn.010052af
push eax
push dword [ebp - 0xe8]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1007628
cmp dword [0x100c320], eax
je 0x100761e
mov dword [edi + 8], 3
jmp 0x10073b4
push 0x1d83
jmp 0x100799a
push 0x1d67
call fcn.010052af
push eax
push dword [ebp - 0xe8]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100764f
mov dword [edi + 8], 6
jmp 0x10073b4
push 0x1d7e
jmp 0x100799a
push ebx
call fcn.010052af
push eax
push dword [ebp - 0x108]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100769f
cmp dword [ebp - 0xf8], eax
jne 0x1007696
push 0x1d88
call fcn.010052af
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100961e
jmp 0x10073e7
and dword [edi + 0xc], 0xfffffffb
jmp 0x10073e7
push 0x1d7f
jmp 0x100799a
mov eax, dword [ebp - 0xf8]
push dword [eax*4 + 0x10027d4]
push 0x1d81
call fcn.010052af
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add esp, 0xc
add eax, 0x20
push esi
push eax
call fcn.0100961e
or dword [edi + 0x10], 4
lea eax, [ebp - 0xe4]
push eax
call fcn.01005692
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.01008cd8
leave
ret 0x20
push ebx
call fcn.010052af
push eax
push dword [ebp - 0x104]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1007719
and dword [edi + 0x10], 0xfffffffb
jmp 0x10076de
push 0x1d80
jmp 0x100799a
cmp dword [ebp - 0xf4], 0
je 0x10076de
push 0x1d6a
call fcn.010052af
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100961e
push 0x1d6b
call fcn.010052af
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100961e
push dword [ebp - 0x118]
push 0x1d6c
call fcn.010052af
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add esp, 0xc
push esi
add eax, 0x20
push eax
call fcn.0100961e
mov al, byte [edi]
neg al
sbb eax, eax
add eax, ebx
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1d6f
push esi
add eax, 0x20
push eax
call fcn.01005335
push dword [edi + 4]
push 0x1d70
call fcn.010052af
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add esp, 0xc
push esi
add eax, 0x20
push eax
call fcn.0100961e
mov eax, dword [edi + 0x10]
and al, 1
neg al
sbb eax, eax
add eax, ebx
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1d71
push esi
add eax, 0x20
push eax
call fcn.01005335
mov eax, dword [edi + 0x10]
and al, 2
neg al
sbb eax, eax
add eax, ebx
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1d72
push esi
add eax, 0x20
push eax
call fcn.01005335
mov eax, dword [edi + 8]
test eax, eax
jne 0x100781a
mov eax, 0x1d74
jmp 0x1007846
cmp eax, 2
jne 0x1007826
mov eax, 0x1d60
jmp 0x1007846
cmp eax, 3
jne 0x1007832
mov eax, 0x1d66
jmp 0x1007846
xor ecx, ecx
cmp eax, 6
setne cl
dec ecx
and ecx, 0xfffffff2
add ecx, 0x1d75
mov eax, ecx
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1d73
push esi
add eax, 0x20
push eax
call fcn.01005335
mov eax, dword [edi + 0xc]
and al, 4
neg al
sbb eax, eax
add eax, ebx
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1d76
push esi
add eax, 0x20
push eax
call fcn.01005335
mov eax, dword [edi + 0x10]
and al, 4
neg al
sbb eax, eax
add eax, ebx
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1d77
push esi
add eax, 0x20
push eax
call fcn.01005335
xor edi, edi
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jl 0x100791d
lea eax, [ebp - 0xec]
push eax
push 0x1002878
push 1
push edi
push 0x1002858
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x100791d
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax]
lea edx, [ebp - 0xf0]
push edx
mov edx, dword [ebp - 0xf8]
push 0x1002888
push dword [edx*4 + 0x10027d4]
push eax
call dword [ecx + 0x18]
test eax, eax
jl 0x1007911
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
lea edx, [ebp - 0xfc]
push edx
push eax
call dword [ecx + 0x84]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0xfc], edi
je 0x1007957
push dword [ebp - 0xfc]
call fcn.01007111
push eax
push 0x1d78
call fcn.010052af
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add esp, 0xc
push esi
add eax, 0x20
push eax
call fcn.0100961e
jmp 0x1007970
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1d74
push 0x1d78
push esi
add eax, 0x20
push eax
call fcn.01005335
cmp dword [ebp - 0xfc], edi
je 0x100798a
push dword [ebp - 0xfc]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0xfc], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x10076ea
push 0x1d79
call fcn.010052af
mov dword [0x100c310], eax
xor eax, eax
jmp 0x10076ed