Function at 0x1020fa6
Capabilities:
Schedule task via itaskservice

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
push edi
push 1
push 0x4e5
push 0x1003af4
lea ecx, [ebp - 0x70]
call fcn.01055826
xor eax, eax
inc eax
mov word [ebp - 0x2c], ax
xor eax, eax
lea edi, [ebp - 0x2a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor ebx, ebx
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], ebx
mov eax, 0x4f2
cmp dword [ebp + 8], ebx
jne 0x1021007
mov dword [ebp - 0x70], 0x80070057
mov word [ebp - 0x6a], ax
jmp 0x1021298
mov word [ebp - 0x6c], ax
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x70], ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
xor eax, eax
mov word [ebp - 0x3c], ax
lea eax, [ebp - 8]
push eax
push 0x100a594
push 1
push ebx
push 0x100a7a4
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x4f8
jl 0x1020ffe
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x4f9
jl 0x1020ffe
mov word [ebp - 0x6c], ax
lea eax, [ebp - 4]
push eax
mov esi, 0x1002020
push esi
push dword [ebp - 8]
call fcn.0105ed94
mov dword [ebp - 0x70], eax
cmp eax, 0x80070003
je 0x1021110
cmp eax, 0x80070002
je 0x1021110
cmp eax, ebx
mov eax, 0x504
jl 0x1020ffe
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 4]
cmp eax, ebx
je 0x10210d6
mov dword [ebp - 4], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 4]
push eax
push esi
push dword [ebp - 8]
call fcn.0105ed94
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x507
jl 0x1020ffe
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0xc]
push edx
push eax
call dword [ecx + 0x4c]
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x508
jmp 0x1021128
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 0xc]
push edx
push ebx
push eax
call dword [ecx + 0x24]
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x500
jl 0x1020ffe
push dword [ebp + 8]
mov word [ebp - 0x6c], ax
push dword [ebp - 0xc]
call fcn.0102073f
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x50b
jl 0x1020ffe
push dword [ebp - 0xc]
mov word [ebp - 0x6c], ax
call fcn.01020ad9
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x50e
jl 0x1020ffe
push esi
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov word [ebp - 0x6c], ax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
mov dword [ebp - 0x10], eax
call edi
test eax, eax
mov eax, 0x511
jne 0x1021197
mov dword [ebp - 0x70], 0x8007000e
jmp 0x1020ffe
push 0x1003ae0
mov dword [ebp - 0x70], ebx
mov word [ebp - 0x6c], ax
call esi
push eax
mov dword [ebp - 0x14], eax
call edi
test eax, eax
mov eax, 0x514
je 0x102118b
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x14]
push 8
mov dword [ebp - 0x44], eax
pop eax
push 0x1003a80
mov dword [ebp - 0x70], ebx
mov word [ebp - 0x4c], ax
call esi
mov esi, eax
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
mov eax, 0x519
je 0x102118b
mov word [ebp - 0x6c], ax
push 8
pop eax
mov word [ebp - 0x2c], ax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x24], esi
cmp eax, ebx
je 0x1021201
mov dword [ebp - 4], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 8]
call fcn.0105ec3d
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x51f
jl 0x1020ffe
lea edx, [ebp - 4]
push edx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 5
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
push 6
push dword [ebp - 0xc]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x527
jl 0x1020ffe
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x18]
neg edx
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
sbb edx, edx
push edx
push eax
call dword [ecx + 0x2c]
mov dword [ebp - 0x70], eax
cmp eax, ebx
mov eax, 0x529
jl 0x1020ffe
mov word [ebp - 0x6c], ax
push dword [ebp - 0x10]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push dword [ebp - 0x14]
call esi
push dword [ebp - 0x1c]
call esi
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp - 0x70]
cmp eax, ebx
je 0x10212bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, ebx
je 0x10212ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x10212d7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, ebx
je 0x10212e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x70]
call fcn.01055a3c
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 4