Function at 0x1000bb4f
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push 0x98
mov eax, 0x10078b0d
call fcn.1005f56c
mov eax, dword [ebp + 8]
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, dword [ebp + 0x14]
xor ecx, ecx
push ecx
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0xc]
push ecx
push 0xffffffffffffffff
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x10]
push eax
push ecx
push 0xfde9
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x80], ecx
call edi
xor ecx, ecx
push 2
pop edx
mov esi, eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1005f209
pop ecx
push esi
push eax
push 0xffffffffffffffff
push dword [ebp - 0x8c]
mov esi, 0xfde9
push 0
push esi
mov dword [ebp - 0x9c], eax
call edi
xor eax, eax
push eax
push eax
push 0xffffffffffffffff
push dword [ebp - 0x78]
push eax
push esi
call edi
xor ecx, ecx
push 2
pop edx
mov esi, eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1005f209
pop ecx
push esi
push eax
push 0xffffffffffffffff
push dword [ebp - 0x78]
mov esi, 0xfde9
push 0
push esi
mov dword [ebp - 0x90], eax
call edi
xor eax, eax
push eax
push eax
push 0xffffffffffffffff
push dword [ebp - 0x74]
push eax
push esi
call edi
push 2
xor ecx, ecx
pop edx
mov esi, eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1005f209
pop ecx
push esi
push eax
push 0xffffffffffffffff
push dword [ebp - 0x74]
mov esi, 0xfde9
push 0
push esi
mov dword [ebp - 0x98], eax
call edi
xor eax, eax
push eax
push eax
push 0xffffffffffffffff
push ebx
push eax
push esi
call edi
xor ecx, ecx
push 2
pop edx
mov esi, eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1005f209
pop ecx
push esi
push eax
push 0xffffffffffffffff
push ebx
push 0
mov esi, 0xfde9
push esi
mov dword [ebp - 0x94], eax
call edi
push 0x100b0b80
lea ecx, [ebp - 0x84]
call fcn.10001898
movzx eax, byte [ebp + 0x1c]
mov esi, dword [ebp + 0x18]
mov ebx, dword [ebp - 0x74]
and dword [ebp - 4], 0
push eax
mov eax, dword [ebp - 0x8c]
push esi
push eax
push eax
push ebx
push dword [ebp - 0x78]
lea eax, [ebp - 0x84]
push str.csInstallPath___s__csParameters___s__csTaskName___s__csAccount___s__dwInterval___d__bSetLogon___d_
push eax
call fcn.1000b7ae
add esp, 0x20
lea eax, [ebp - 0x6c]
push eax
push 0x1007b10c
xor eax, eax
inc eax
push eax
push 0
push 0x1007b12c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov eax, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x9c]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x68]
mov ecx, dword [eax]
push edx
push 0x1007b0fc
push 0x1007b11c
push edi
push eax
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x90]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
push ebx
call fcn.1005f2a0
mov ebx, dword [ebp - 0x98]
pop ecx
test eax, eax
je 0x1000bd24
mov eax, dword [ebp - 0x68]
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov eax, dword [ebp - 0x68]
push 0
push dword [ebp - 0x94]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x78]
mov eax, dword [ebp - 0x68]
push 0x2000
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov eax, dword [ebp - 0x68]
push 0xfffffffffffffffe
mov ecx, dword [eax]
push eax
call dword [ecx + 0xa8]
call fcn.1000bf45
test al, al
je 0x1000bd6b
mov eax, dword [ebp - 0x68]
push 0x80
mov ecx, dword [eax]
push eax
call dword [ecx + 0x98]
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x88]
mov ecx, dword [eax]
push edx
push 0x100a1c14
push eax
call dword [ecx]
mov eax, dword [ebp - 0x88]
xor edx, edx
mov ecx, dword [eax]
inc edx
push edx
push 0
push eax
call dword [ecx + 0x18]
test esi, esi
je 0x1000be9e
cmp byte [ebp + 0x1c], 0
je 0x1000bdef
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x70]
mov ecx, dword [eax]
push edx
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0xc]
push 0x30
lea eax, [ebp - 0x40]
push 0
push eax
call fcn.1005fb70
add esp, 0xc
lea edx, [ebp - 0x40]
push 0x30
pop eax
mov word [ebp - 0x40], ax
mov eax, 0x7dc
mov word [ebp - 0x3c], ax
xor eax, eax
inc eax
mov word [ebp - 0x3a], ax
mov word [ebp - 0x38], ax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x20], 7
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x70]
mov ecx, dword [eax]
push edx
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0xc]
push 0
call fcn.100633bb
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0xa0], edx
call fcn.10064a13
push 0x30
pop eax
push eax
lea eax, [ebp - 0x40]
push 0
push eax
call fcn.1005fb70
add esp, 0x18
mov ecx, 0x5a0
push 0x30
pop eax
mov word [ebp - 0x40], ax
mov eax, 0x7dc
mov word [ebp - 0x3c], ax
xor eax, eax
inc eax
mov word [ebp - 0x3a], ax
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x5c]
mov word [ebp - 0x30], ax
mov ax, word [ebp - 0x60]
mov word [ebp - 0x2e], ax
mov eax, esi
cdq
idiv ecx
mov ecx, eax
imul ecx, ecx, 0x5a0
cmp ecx, esi
je 0x1000be77
inc eax
mov word [ebp - 0x1c], ax
imul eax, eax, 0x5a0
xor edx, edx
inc edx
mov dword [ebp - 0x20], edx
cmp eax, esi
jbe 0x1000be91
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x70]
lea edx, [ebp - 0x40]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x7c]
mov ecx, dword [eax]
push edx
push 0x100a1c14
push eax
call dword [ecx]
mov eax, dword [ebp - 0x7c]
push 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x18]
test esi, esi
jne 0x1000bec9
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jne 0x1000bf00
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x6c]
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push edi
call fcn.1005f212
push dword [ebp - 0x90]
call fcn.1005f212
push ebx
call fcn.1005f212
push dword [ebp - 0x94]
call fcn.1005f212
mov ecx, dword [ebp - 0x84]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.10001743
xor eax, eax
inc eax
call fcn.1005f51b
ret