Function at 0x10002961
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
push ebx
push esi
push edi
xor esi, esi
push esi
push esi
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x10002983
xor eax, eax
inc eax
jmp 0x10002ca0
push esi
push esi
push esi
push 3
push 6
push esi
push esi
push 0xffffffffffffffff
push esi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
js 0x1000297b
lea eax, [ebp - 0x10]
push eax
push 0x100055c8
push 1
push esi
push 0x100057d8
mov dword [ebp - 0x10], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1000297b
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x44]
push eax
call ebx
lea esi, [ebp - 0x44]
lea edi, [ebp - 0x64]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x54]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x74]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x94]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x94]
lea edi, [ebp - 0x84]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x34]
push eax
movsd dword es:[edi], dword [esi]
call ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x64]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x74]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
mov eax, dword [ebp - 0x10]
lea esi, [ebp - 0x84]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x34]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, eax
lea eax, [ebp - 0x34]
push eax
call ebx
lea eax, [ebp - 0x94]
push eax
call ebx
lea eax, [ebp - 0x54]
push eax
call ebx
lea eax, [ebp - 0x44]
push eax
call ebx
xor esi, esi
cmp edi, esi
jl 0x1000297b
push 0x100061b8
lea edi, [ebp - 8]
call fcn.100028ec
mov eax, dword [eax]
cmp eax, esi
je 0x10002a7c
mov eax, dword [eax]
jmp 0x10002a7e
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
push 0x10037674
push eax
push ecx
call dword [edx + 0x1c]
lea edi, [ebp - 8]
mov dword [ebp - 0x18], eax
call fcn.10002921
cmp dword [ebp - 0x18], esi
jge 0x10002aab
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000297b
push dword [ebp + 8]
lea edi, [ebp - 8]
call fcn.100028ec
mov eax, dword [eax]
cmp eax, esi
je 0x10002ac0
mov ecx, dword [eax]
jmp 0x10002ac2
xor ecx, ecx
mov eax, dword [0x10037674]
mov edx, dword [eax]
push esi
push ecx
push eax
call dword [edx + 0x3c]
lea edi, [ebp - 8]
call fcn.10002921
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0xc]
push edx
push esi
mov dword [ebp - 0xc], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov edi, eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, esi
jge 0x10002afe
mov eax, dword [0x10037674]
jmp 0x10002aa0
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x20]
push edx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x20], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
test eax, eax
jns 0x10002b28
mov eax, dword [0x10037674]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
jmp 0x10002aa0
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
push edx
push esi
mov dword [ebp - 0x1c], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov edi, eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, esi
jl 0x10002b15
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push str.MbLk
push eax
call dword [ecx]
mov edi, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, esi
jl 0x10002b15
push 0x100061bc
lea edi, [ebp - 8]
call fcn.100028ec
mov eax, dword [eax]
cmp eax, esi
je 0x10002b7f
mov eax, dword [eax]
jmp 0x10002b81
xor eax, eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x2c]
lea edi, [ebp - 8]
mov dword [ebp - 0x18], eax
call fcn.10002921
cmp dword [ebp - 0x18], esi
jge 0x10002ba9
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10002b15
mov esi, 0x100061cc
push esi
lea edi, [ebp - 8]
call fcn.100028ec
mov eax, dword [eax]
test eax, eax
je 0x10002bc1
mov eax, dword [eax]
jmp 0x10002bc3
xor eax, eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x34]
lea edi, [ebp - 8]
mov dword [ebp - 0x18], eax
call fcn.10002921
cmp dword [ebp - 0x18], 0
jl 0x10002b9b
push 8
pop eax
push esi
mov word [ebp - 0x34], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x2c], eax
lea esi, [ebp - 0x34]
lea edi, [ebp - 0x84]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x54]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x74]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x44]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push dword [ebp + 8]
lea esi, [ebp - 0x44]
lea edi, [ebp - 0x64]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edi, [ebp - 8]
call fcn.100028ec
mov eax, dword [eax]
test eax, eax
je 0x10002c39
mov ecx, dword [eax]
jmp 0x10002c3b
xor ecx, ecx
push 0x10033bc4
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x84]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 3
sub esp, 0x10
mov edi, esp
mov eax, dword [0x10037674]
lea esi, [ebp - 0x74]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [eax]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x64]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 6
push dword [ebp - 0xc]
movsd dword es:[edi], dword [esi]
push ecx
push eax
movsd dword es:[edi], dword [esi]
call dword [edx + 0x44]
lea edi, [ebp - 8]
mov esi, eax
call fcn.10002921
lea eax, [ebp - 0x44]
push eax
call ebx
lea eax, [ebp - 0x54]
push eax
call ebx
lea eax, [ebp - 0x34]
push eax
call ebx
test esi, esi
js 0x10002b15
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4