Function at 0x1003eb10
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101c5c58
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x1022b584]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x6c], edi
push 0
mov dword [ebp - 0x7c], 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x1003eb5c
xor eax, eax
jmp 0x1003f3c3
push 0
push 0
push 0
push 3
push 6
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 0
push eax
push 0x101d78d4
push 1
push 0
push 0x101f4a68
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x1003ebc2
mov eax, dword [ebp - 0x44]
mov dword [edi + 0x14], 9
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x1003f3c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003f3c0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0xac]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0xac], xmm0
call esi
movups xmm0, xmmword [ebp - 0xac]
lea eax, [ebp - 0x9c]
push eax
movups xmmword [ebp - 0xcc], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x9c], xmm0
call esi
movups xmm0, xmmword [ebp - 0x9c]
lea eax, [ebp - 0x8c]
push eax
movups xmmword [ebp - 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x8c], xmm0
call esi
movups xmm0, xmmword [ebp - 0x8c]
lea eax, [ebp - 0xbc]
push eax
movups xmmword [ebp - 0x38], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0xbc], xmm0
call esi
movups xmm0, xmmword [ebp - 0xcc]
mov eax, dword [ebp - 0x44]
sub esp, 0x10
mov ecx, esp
mov byte [ebp - 4], 4
sub esp, 0x10
mov edx, dword [eax]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x20]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x38]
movups xmmword [ecx], xmm0
mov ecx, esp
movups xmm0, xmmword [ebp - 0xbc]
push eax
movups xmmword [ecx], xmm0
call dword [edx + 0x28]
mov esi, eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
jns 0x1003ecd9
mov eax, dword [ebp - 0x44]
mov dword [edi + 0x14], 0xa
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x1003f3c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003f3c0
mov dword [ebp - 0x54], 0
mov edi, dword [ebp - 0x44]
push 0x101d3558
mov byte [ebp - 4], 5
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov dword [ebp - 0x4c], esi
test esi, esi
je 0x1003f3de
mov eax, dword [edi]
lea ecx, [ebp - 0x54]
push ecx
push esi
push edi
mov byte [ebp - 4], 6
call dword [eax + 0x1c]
push esi
mov edi, eax
mov byte [ebp - 4], 5
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test edi, edi
jns 0x1003ed4d
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0
test eax, eax
je 0x1003ed30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x1003f3c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003f3c0
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x54]
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x5c], ecx
mov eax, dword [eax]
test eax, eax
jne 0x1003ed69
xor esi, esi
mov dword [ebp - 0x70], esi
jmp 0x1003ed7c
push eax
call edi
mov esi, eax
mov dword [ebp - 0x70], esi
test esi, esi
je 0x1003f3e8
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx]
push 0
push esi
push ecx
mov byte [ebp - 4], 7
call dword [eax + 0x3c]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x48]
push edx
push 0
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 8
call dword [ecx + 0x24]
test eax, eax
jns 0x1003edc8
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 5
test eax, eax
je 0x1003ed1f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003ed1f
mov ecx, dword [ebp - 0x44]
test ecx, ecx
je 0x1003eddc
mov dword [ebp - 0x44], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x50]
push edx
push eax
mov byte [ebp - 4], 9
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
mov eax, dword [ebp - 0x50]
jns 0x1003ee0b
mov byte [ebp - 4], 8
test eax, eax
je 0x1003edae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003edae
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.1003fde0
add esp, 4
mov eax, dword [eax]
mov byte [ebp - 4], 0xa
test eax, eax
jne 0x1003ee74
xor esi, esi
mov dword [ebp - 0x5c], esi
mov ecx, dword [ebp - 0x70]
push esi
push ecx
mov byte [ebp - 4], 0xb
mov eax, dword [ecx]
call dword [eax + 0x28]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [ebp - 0x4c]
or eax, 0xffffffff
mov byte [ebp - 4], 9
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1003ee5d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x5c], ecx
mov eax, dword [eax + 4]
test eax, eax
jne 0x1003ee86
xor esi, esi
mov dword [ebp - 0x4c], esi
jmp 0x1003ee99
push eax
call edi
mov esi, eax
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x1003f3f2
jmp 0x1003ee29
push eax
call edi
mov esi, eax
mov dword [ebp - 0x4c], esi
test esi, esi
je 0x1003f3fc
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx]
push esi
push ecx
mov byte [ebp - 4], 0xc
call dword [eax + 0x20]
push esi
mov byte [ebp - 4], 9
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x1003eec3
mov dword [ebp - 0x50], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x60]
push edx
push eax
mov byte [ebp - 4], 0xd
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x1003eef8
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 9
test eax, eax
je 0x1003eef0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
jmp 0x1003edfb
mov esi, dword [ebp - 0x6c]
lea eax, [ebp - 0x60]
push eax
mov ecx, esi
call fcn.1003f430
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x68]
push edx
push eax
mov byte [ebp - 4], 0xe
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x1003ef35
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1003eedf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003eedf
mov eax, dword [esi + 0xc]
xor esi, esi
mov dword [ebp - 0x4c], eax
mov edi, dword [eax + 4]
sub edi, dword [eax]
sar edi, 2
test edi, edi
je 0x1003ef71
nop dword [eax]
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1003ef22
mov eax, dword [ecx]
lea edx, [ebp - 0x68]
inc esi
push esi
push edx
mov eax, dword [eax + 0xc]
call eax
test eax, eax
je 0x1003ef22
mov eax, dword [ebp - 0x4c]
cmp esi, edi
jb 0x1003ef50
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x64]
push edx
push eax
mov byte [ebp - 4], 0xf
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
mov eax, dword [ebp - 0x64]
jns 0x1003efa0
mov byte [ebp - 4], 0xe
test eax, eax
je 0x1003ef22
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003ef22
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x70]
push eax
call fcn.1003fde0
add esp, 4
mov eax, dword [eax]
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov byte [ebp - 4], 0x10
test eax, eax
jne 0x1003f014
xor esi, esi
mov dword [ebp - 0x4c], esi
mov ecx, dword [ebp - 0x5c]
push esi
push ecx
mov byte [ebp - 4], 0x11
mov eax, dword [ecx]
call dword [eax + 0x20]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [ebp - 0x70]
or eax, 0xffffffff
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1003eff8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x64]
push 0x101d72f8
mov dword [ebp - 0x4c], eax
call edi
mov esi, eax
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x1003f406
jmp 0x1003f026
push eax
call edi
mov esi, eax
mov dword [ebp - 0x4c], esi
test esi, esi
je 0x1003f410
jmp 0x1003efc4
mov ecx, dword [ebp - 0x4c]
push esi
push ecx
mov byte [ebp - 4], 0x12
mov eax, dword [ecx]
call dword [eax + 0x40]
push esi
mov byte [ebp - 4], 0xf
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x64]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x58]
push edx
push eax
mov byte [ebp - 4], 0x13
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
mov eax, dword [ebp - 0x58]
jns 0x1003f07f
mov byte [ebp - 4], 0xf
test eax, eax
je 0x1003f077
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
jmp 0x1003ef90
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x40]
mov eax, dword [ebp - 0x58]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x58]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov eax, dword [ebp - 0x58]
push str.PT0S
mov dword [ebp - 0x4c], eax
call edi
mov esi, eax
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x1003f41a
mov ecx, dword [ebp - 0x4c]
push esi
push ecx
mov byte [ebp - 4], 0x14
mov eax, dword [ecx]
call dword [eax + 0x70]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x74]
push edx
push eax
mov byte [ebp - 4], 0x15
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
js 0x1003f0f6
mov eax, dword [ebp - 0x74]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x1003f10a
mov dword [ebp - 0x58], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x78], 0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x8c]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x8c], xmm0
call esi
movups xmm0, xmmword [ebp - 0x8c]
lea eax, [ebp - 0x9c]
push eax
movups xmmword [ebp - 0x38], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x9c], xmm0
call esi
movups xmm0, xmmword [ebp - 0x9c]
lea eax, [ebp - 0xac]
push eax
movups xmmword [ebp - 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0xac], xmm0
call esi
mov eax, dword [ebp - 0x6c]
movups xmm0, xmmword [ebp - 0xac]
mov edx, dword [ebp - 0x54]
mov byte [ebp - 4], 0x19
mov eax, dword [eax]
mov dword [ebp - 0x5c], edx
movups xmmword [ebp - 0xcc], xmm0
test eax, eax
jne 0x1003f18e
xor esi, esi
mov dword [ebp - 0x4c], esi
jmp 0x1003f1a1
push eax
call edi
mov esi, eax
mov dword [ebp - 0x4c], esi
test esi, esi
je 0x1003f424
mov edx, dword [ebp - 0x5c]
movups xmm0, xmmword [ebp - 0x38]
mov ecx, dword [edx]
lea eax, [ebp - 0x78]
push eax
sub esp, 0x10
mov byte [ebp - 4], 0x1a
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x20]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0xcc]
push 6
push dword [ebp - 0x48]
movups xmmword [eax], xmm0
push esi
push edx
call dword [ecx + 0x44]
mov edi, eax
push esi
mov dword [ebp - 0x4c], edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xac]
push eax
call esi
lea eax, [ebp - 0x9c]
push eax
call esi
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x16
push eax
call esi
test edi, edi
jns 0x1003f30c
mov eax, dword [ebp - 0x6c]
mov dword [eax + 0x14], 0xc
call fcn.100a97a0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1003f2e2
push 0x1c
push str.Common_task_schedule_info.cc
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.1000cf00
push 3
push 0x101d1fdc
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.1000cf00
mov byte [ebp - 4], 0x1c
call fcn.100a97a0
mov edi, eax
lea ecx, [ebp - 0x164]
push 0x458
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.10007f90
mov esi, eax
push str.register_fail_:
push esi
mov byte [ebp - 4], 0x1d
call fcn.10008dd0
add esp, 8
mov ecx, esi
push dword [ebp - 0x4c]
call fcn.10032da0
mov eax, dword [edi]
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x164]
call fcn.10008e90
lea ecx, [ebp - 0x40]
call fcn.10007310
lea ecx, [ebp - 0x28]
call fcn.10007310
mov eax, dword [ebp - 0x78]
mov byte [ebp - 4], 0x15
test eax, eax
je 0x1003f2f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x1003f304
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
jmp 0x1003f069
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x7c], 1
mov byte [ebp - 4], 0x15
test eax, eax
je 0x1003f324
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x1003f335
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x1003f346
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x1003f357
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1003f368
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 9
test eax, eax
je 0x1003f379
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 8
test eax, eax
je 0x1003f38a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 5
test eax, eax
je 0x1003f39b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0
test eax, eax
je 0x1003f3ac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 4], 0xffffffff
test ecx, ecx
je 0x1003f3c0
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101799ce
mov esp, ebp
pop ebp
ret
push 0x8007000e
call fcn.10009b10
push 0x8007000e
call fcn.10009b10
push 0x8007000e
call fcn.10009b10
push 0x8007000e
call fcn.10009b10
push 0x8007000e
call fcn.10009b10
push 0x8007000e
call fcn.10009b10
push 0x8007000e
call fcn.10009b10
push 0x8007000e
call fcn.10009b10
int3