Function at 0x1000d292
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push 0x64
mov eax, 0x10031dd1
call fcn.10022f29
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x2c], 0x2200
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
push eax
push 0x100353fc
push 1
push ebx
push 0x1003541c
mov dword [ebp - 4], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jge 0x1000d2e4
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x1000d2dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x1000d713
mov dword [ebp - 0x18], ebx
lea edx, [ebp - 0x18]
push edx
mov edi, 0x100353ec
push edi
push dword [ebp + 8]
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
mov dword [ebp - 0x10], ebx
cmp eax, ebx
mov byte [ebp - 4], 2
jl 0x1000d39c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov edi, eax
cmp edi, ebx
jl 0x1000d3bc
mov eax, dword [ebp - 0x10]
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
mov edi, eax
cmp edi, ebx
jl 0x1000d3bc
mov eax, dword [ebp - 0x10]
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov edi, eax
cmp edi, ebx
jl 0x1000d3bc
push dword [ebp + 0x18]
lea eax, [ebp - 0x1c]
push eax
call fcn.100021bd
mov byte [ebp - 4], 3
mov edi, dword [sym.imp.KERNEL32.dll_GetVersion]
call edi
test eax, eax
js 0x1000d441
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], ebx
je 0x1000d3e6
push str.SYSTEM
lea eax, [ebp - 0x1c]
push eax
call fcn.10001d61
test eax, eax
je 0x1000d3e6
push ebx
push dword [ebp + 0x18]
jmp 0x1000d3ec
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push edi
push 0x1003540c
push dword [ebp + 8]
push eax
call dword [ecx + 0x20]
mov edi, eax
cmp edi, ebx
jge 0x1000d319
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x1000d3cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x1000d2cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000d2cc
push ebx
push 0x1003784c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
cmp eax, ebx
mov dword [ebp - 0x24], eax
jge 0x1000d441
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.100024ba
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x1000d418
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x1000d428
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x1000d439
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
jmp 0x1000d713
mov eax, dword [ebp - 0x10]
push dword [ebp + 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
cmp eax, ebx
mov dword [ebp - 0x24], eax
jl 0x1000d3fc
call edi
test eax, eax
jns 0x1000d461
mov dword [ebp - 0x2c], 0x200
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa8]
mov edi, eax
cmp edi, ebx
jge 0x1000d485
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.100024ba
jmp 0x1000d3bc
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov edi, eax
cmp edi, ebx
jl 0x1000d475
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], ebx
lea edx, [ebp - 0x20]
push edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x18]
test eax, eax
jge 0x1000d4dd
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
lea edx, [ebp - 0x30]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jge 0x1000d4dd
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x20]
cmp eax, ebx
je 0x1000d475
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000d475
push 0x30
lea eax, [ebp - 0x70]
push ebx
push eax
call fcn.10020bd0
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0x70], ax
xor eax, eax
mov word [ebp - 0x40], ax
lea edi, [ebp - 0x3e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x40]
mov word [ebp - 0x6c], ax
mov ax, word [ebp - 0x3e]
mov word [ebp - 0x6a], ax
mov ax, word [ebp - 0x3a]
mov word [ebp - 0x68], ax
mov ax, word [ebp + 0x28]
mov word [ebp - 0x60], ax
mov ax, word [ebp + 0x2a]
mov word [ebp - 0x5e], ax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x54], eax
mov eax, dword [esi]
dec eax
je 0x1000d5e6
dec eax
je 0x1000d5cd
dec eax
je 0x1000d5b0
dec eax
je 0x1000d58f
dec eax
je 0x1000d586
dec eax
je 0x1000d57d
dec eax
jne 0x1000d5e6
movzx edx, word [esi + 4]
mov eax, dword [ebp - 0x10]
push 0xa
push edx
mov dword [ebp - 0x50], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
jmp 0x1000d5f5
mov dword [ebp - 0x50], 7
jmp 0x1000d5f5
mov dword [ebp - 0x50], 6
jmp 0x1000d5f5
mov ecx, dword [esi + 4]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x50], 4
mov word [ebp - 0x4a], ax
mov ax, word [esi + 0xc]
mov word [ebp - 0x48], ax
mov ax, word [esi + 8]
jmp 0x1000d5f1
mov ecx, dword [esi + 4]
xor eax, eax
inc eax
dec ecx
shl eax, cl
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x4c], eax
mov ax, word [esi + 0xc]
mov word [ebp - 0x48], ax
jmp 0x1000d5f5
mov ax, word [esi + 4]
mov word [ebp - 0x4c], ax
mov ax, word [esi + 0xc]
mov dword [ebp - 0x50], 2
mov word [ebp - 0x4a], ax
jmp 0x1000d5f5
mov ax, word [esi + 4]
mov dword [ebp - 0x50], 1
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
lea edx, [ebp - 0x70]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, ebx
jge 0x1000d65d
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x20]
cmp eax, ebx
je 0x1000d619
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.100024ba
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x1000d635
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x1000d645
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x1000d656
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x1000d713
mov dword [ebp - 0x28], ebx
lea edx, [ebp - 0x28]
push edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0x1003542c
push eax
call dword [ecx]
mov esi, eax
cmp esi, ebx
jge 0x1000d691
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x1000d608
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000d608
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push 1
push ebx
push eax
call dword [ecx + 0x18]
mov esi, eax
cmp esi, ebx
jge 0x1000d6b1
mov eax, dword [ebp - 0x14]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
jmp 0x1000d67b
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x1000d6c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x20]
cmp eax, ebx
je 0x1000d6d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.100024ba
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x1000d6ef
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x1000d6ff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x1000d710
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x50
pop eax
call fcn.10023001
ret