Function at 0x10005e0a
Capabilities:
Schedule task via itaskservice

Disassembly:
push 0x8d0
mov eax, 0x1000a73f
call fcn.100089be
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x104
mov dword [ebp - 0x850], ecx
lea ecx, [ebp - 0x218]
push ecx
push 0xffffffffffffffff
push eax
push 0
push 0
call edi
push 0x104
lea eax, [ebp - 0x628]
push eax
push 0xffffffffffffffff
push esi
push 0
push 0
call edi
mov esi, 0x104
lea eax, [ebp - 0x830]
push esi
push eax
push 0xffffffffffffffff
push ebx
xor ebx, ebx
push ebx
push ebx
call edi
push esi
lea eax, [ebp - 0x420]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x850]
push ebx
push ebx
call edi
lea eax, [ebp - 0x840]
mov dword [ebp - 0x840], ebx
push eax
push 0x1000b72c
push 1
push ebx
push 0x1000b8cc
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x10005eb1
push 0xfffffffffffffffd
pop eax
jmp 0x100064ed
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x88c]
push eax
call ebx
and dword [ebp - 4], 0
lea esi, [ebp - 0x88c]
lea edi, [ebp - 0x89c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x87c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x87c]
lea edi, [ebp - 0x8ac]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x8dc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x8dc]
lea edi, [ebp - 0x8bc]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x8cc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
sub esp, 0x10
mov eax, dword [ebp - 0x840]
mov edi, esp
mov byte [ebp - 4], 3
lea esi, [ebp - 0x89c]
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x8ac]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x8bc]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x8cc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x8cc]
push eax
call ebx
lea eax, [ebp - 0x8dc]
push eax
call ebx
lea eax, [ebp - 0x87c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x88c]
push eax
call ebx
test esi, esi
jns 0x10005f93
push 0xfffffffffffffffc
jmp 0x10005fed
xor edi, edi
lea ecx, [ebp - 0x83c]
push 0x1000b538
mov dword [ebp - 0x848], edi
call fcn.10005cb8
mov eax, dword [eax]
mov dword [ebp - 4], 4
test eax, eax
je 0x10005fbc
mov edx, dword [eax]
jmp 0x10005fbe
mov edx, edi
mov eax, dword [ebp - 0x840]
lea esi, [ebp - 0x848]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x83c]
test ecx, ecx
je 0x10005fe7
call fcn.10006a45
test esi, esi
jns 0x10006001
push 0xfffffffffffffffb
mov ecx, dword [ebp - 0x840]
pop esi
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov eax, esi
jmp 0x100064ed
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x83c]
call fcn.10005cb8
mov edx, dword [eax]
mov dword [ebp - 4], 5
test edx, edx
je 0x10006024
mov edx, dword [edx]
jmp 0x10006026
mov edx, edi
mov eax, dword [ebp - 0x848]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x83c]
test ecx, ecx
je 0x10006047
call fcn.10006a45
mov eax, dword [ebp - 0x840]
lea edx, [ebp - 0x838]
push edx
mov dword [ebp - 0x838], edi
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x840]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10006086
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xfffffffffffffffa
jmp 0x10005eab
mov eax, dword [ebp - 0x838]
lea edx, [ebp - 0x854]
mov dword [ebp - 0x854], edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x100060aa
push 0xfffffffffffffff9
jmp 0x100064af
mov eax, dword [ebp - 0x854]
lea edx, [ebp - 0x420]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x854]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x100060d6
push 0xfffffffffffffff8
jmp 0x100064af
mov eax, dword [ebp - 0x838]
lea edx, [ebp - 0x834]
mov dword [ebp - 0x834], edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
jns 0x100060fa
push 0xfffffffffffffff7
jmp 0x100064af
mov eax, dword [ebp - 0x834]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
mov eax, dword [ebp - 0x834]
mov ecx, dword [eax]
jns 0x1000611f
push eax
call dword [ecx + 8]
push 0xfffffffffffffff6
jmp 0x100064af
push 0x1000b53c
push eax
call dword [ecx + 0x70]
test eax, eax
mov eax, dword [ebp - 0x834]
mov ecx, dword [eax]
js 0x10006114
push edi
push eax
call dword [ecx + 0x48]
test eax, eax
mov eax, dword [ebp - 0x834]
mov ecx, dword [eax]
js 0x10006114
push edi
push eax
call dword [ecx + 0x40]
test eax, eax
mov eax, dword [ebp - 0x834]
jns 0x10006158
mov ecx, dword [eax]
jmp 0x10006114
mov dword [ebp - 0x84c], edi
lea edx, [ebp - 0x84c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x9c]
test eax, eax
jns 0x10006185
mov eax, dword [ebp - 0x834]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xffffffffffffffe8
jmp 0x100064af
mov eax, dword [ebp - 0x84c]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
jns 0x100061b5
call dword [ecx + 8]
mov eax, dword [ebp - 0x834]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xffffffffffffffe7
jmp 0x100064af
call dword [ecx + 8]
mov eax, dword [ebp - 0x834]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x838]
lea edx, [ebp - 0x858]
mov dword [ebp - 0x858], edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x100061e8
push 0xfffffffffffffff5
jmp 0x100064af
mov eax, dword [ebp - 0x858]
lea edx, [ebp - 0x868]
push edx
mov dword [ebp - 0x868], edi
push 9
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x858]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x1000621c
push 0xfffffffffffffff4
jmp 0x100064af
mov eax, dword [ebp - 0x868]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x838]
lea edx, [ebp - 0x85c]
mov dword [ebp - 0x85c], edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jns 0x1000624c
push 0xfffffffffffffff1
jmp 0x100064af
mov eax, dword [ebp - 0x85c]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov ecx, dword [ebp - 0x85c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10006273
push 0xfffffffffffffff0
jmp 0x100064af
mov eax, dword [ebp - 0x838]
lea edx, [ebp - 0x860]
mov dword [ebp - 0x860], edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x10006297
push 0xffffffffffffffef
jmp 0x100064af
mov eax, dword [ebp - 0x860]
lea edx, [ebp - 0x864]
push edx
mov dword [ebp - 0x864], edi
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov ecx, dword [ebp - 0x860]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x100062ca
push 0xffffffffffffffee
jmp 0x100064af
mov eax, dword [ebp - 0x864]
lea edx, [ebp - 0x844]
push edx
mov dword [ebp - 0x844], edi
push 0x1000b90c
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x864]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10006300
push 0xffffffffffffffed
jmp 0x100064af
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x83c]
call fcn.10005cb8
mov edx, dword [eax]
mov dword [ebp - 4], 6
test edx, edx
je 0x10006323
mov edx, dword [edx]
jmp 0x10006325
mov edx, edi
mov eax, dword [ebp - 0x844]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x83c]
test ecx, ecx
je 0x10006347
call fcn.10006a45
test esi, esi
jns 0x1000635e
mov eax, dword [ebp - 0x844]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xffffffffffffffec
jmp 0x100064af
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0x83c]
call fcn.10005cb8
mov edx, dword [eax]
mov dword [ebp - 4], 7
test edx, edx
je 0x10006381
mov edx, dword [edx]
jmp 0x10006383
mov edx, edi
mov eax, dword [ebp - 0x844]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x83c]
test ecx, ecx
je 0x100063a5
call fcn.10006a45
mov eax, dword [ebp - 0x844]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x100063bc
push 0xffffffffffffffeb
jmp 0x100064af
xor eax, eax
mov dword [ebp - 0x86c], edi
push 0x1000b548
lea ecx, [ebp - 0x87c]
mov word [ebp - 0x8ac], ax
call fcn.10005d03
mov esi, eax
mov dword [ebp - 4], 8
lea edi, [ebp - 0x8bc]
push 0x1000b548
lea ecx, [ebp - 0x88c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10005d03
mov esi, eax
mov byte [ebp - 4], 9
lea edi, [ebp - 0x89c]
lea eax, [ebp - 0x218]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x850]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10005cb8
mov edx, dword [eax]
mov byte [ebp - 4], 0xa
test edx, edx
je 0x1000642e
mov edx, dword [edx]
jmp 0x10006430
xor edx, edx
lea esi, [ebp - 0x86c]
mov eax, dword [ebp - 0x848]
push esi
sub esp, 0x10
lea esi, [ebp - 0x8bc]
mov edi, esp
mov ecx, dword [eax]
push 3
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x8ac]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x89c]
push 6
push dword [ebp - 0x838]
movsd dword es:[edi], dword [esi]
push edx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov ecx, dword [ebp - 0x850]
mov esi, eax
test ecx, ecx
je 0x10006493
call fcn.10006a45
and dword [ebp - 0x850], 0
lea eax, [ebp - 0x88c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x87c]
push eax
call ebx
test esi, esi
jns 0x100064c7
push 0xffffffffffffffea
mov ecx, dword [ebp - 0x848]
pop esi
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov ecx, dword [ebp - 0x838]
jmp 0x10005ff4
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x838]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x86c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
xor eax, eax
call fcn.1000896d
ret 0x10