Function at 0x1000e830
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002a83e
mov eax, dword fs:[0]
push eax
sub esp, 0x2ac
mov eax, dword [0x100357ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x224]
push eax
push 0x1002f85c
push 1
push esi
push 0x1002fa6c
mov dword [ebp - 0x224], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
jl 0x1000ee60
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x2a0]
push ecx
call ebx
mov dword [ebp - 4], esi
mov edx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x294]
mov esi, dword [ebp - 0x2a0]
mov edi, dword [ebp - 0x29c]
lea ecx, [ebp - 0x280]
push ecx
mov dword [ebp - 0x2b0], edx
mov dword [ebp - 0x2ac], eax
call ebx
mov eax, dword [ebp - 0x27c]
mov edx, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x258], edx
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x290]
push eax
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0x24c], edx
call ebx
mov edx, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x290]
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x240], ecx
mov ecx, dword [ebp - 0x284]
lea edx, [ebp - 0x270]
push edx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], ecx
call ebx
mov byte [ebp - 4], 3
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x2b0]
mov dword [eax + 4], edi
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x2ac]
mov dword [eax + 0xc], esi
mov esi, dword [ebp - 0x258]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x254]
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x250]
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x24c]
mov dword [eax + 0xc], esi
mov esi, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x224]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x23c]
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x238]
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x234]
mov dword [eax + 0xc], esi
mov esi, dword [ebp - 0x270]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x26c]
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x268]
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x264]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x270]
push ecx
mov edi, eax
call esi
lea edx, [ebp - 0x290]
push edx
call esi
lea eax, [ebp - 0x280]
push eax
call esi
lea ecx, [ebp - 0x2a0]
push ecx
mov dword [ebp - 4], 0xffffffff
call esi
test edi, edi
js 0x1000ee5a
lea edx, [ebp - 0x21c]
push edx
mov edi, 0x100311d0
mov dword [ebp - 0x230], 0
call fcn.1000de50
mov dword [ebp - 4], 4
mov eax, dword [eax]
test eax, eax
je 0x1000ea4d
mov ecx, dword [eax]
jmp 0x1000ea4f
xor ecx, ecx
mov eax, dword [ebp - 0x224]
mov edx, dword [eax]
lea edi, [ebp - 0x230]
push edi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea edi, [ebp - 0x21c]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100052e0
xor edi, edi
cmp dword [ebp - 0x22c], edi
jl 0x1000ee4c
mov eax, dword [ebp - 0x224]
lea edx, [ebp - 0x220]
push edx
mov dword [ebp - 0x220], edi
mov ecx, dword [eax]
push edi
push eax
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x1000ee3e
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x22c], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x1000eadc
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 0x228]
mov dword [ebp - 0x228], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
test eax, eax
js 0x1000eb29
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x38]
push 3
push eax
call edx
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 1
push eax
call edx
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 0x260]
mov dword [ebp - 0x260], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x1000eb85
mov eax, dword [ebp - 0x260]
lea edx, [ebp - 0x21c]
push edx
mov dword [ebp - 0x21c], edi
mov ecx, dword [eax]
push 9
push eax
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x1000eb77
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x260]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 0x25c]
mov dword [ebp - 0x25c], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
cmp eax, edi
jl 0x1000ec74
mov eax, dword [ebp - 0x25c]
lea edx, [ebp - 0x21c]
push edx
mov dword [ebp - 0x21c], edi
mov ecx, dword [eax]
push edi
push eax
mov eax, dword [ecx + 0x30]
call eax
cmp eax, edi
jl 0x1000ec66
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x244]
push edx
mov dword [ebp - 0x244], edi
mov ecx, dword [eax]
push str.MbLk
push eax
mov eax, dword [ecx]
call eax
cmp eax, edi
jl 0x1000ec58
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x2a4]
push edx
lea edi, [ebp - 0x218]
call fcn.1000de50
mov dword [ebp - 4], 5
mov eax, dword [eax]
test eax, eax
je 0x1000ec25
mov ecx, dword [eax]
jmp 0x1000ec27
xor ecx, ecx
mov eax, dword [ebp - 0x244]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x2c]
call eax
lea edi, [ebp - 0x2a4]
mov dword [ebp - 4], 0xffffffff
call fcn.100052e0
mov eax, dword [ebp - 0x244]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor edi, edi
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 8
push 0x100302e0
mov word [ebp - 0x270], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x268], eax
cmp eax, edi
jne 0x1000ec9f
push 0x8007000e
call fcn.1002a280
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x270]
mov edx, dword [ebp - 0x26c]
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x264]
lea ecx, [ebp - 0x290]
push ecx
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x234], eax
call ebx
mov eax, dword [ebp - 0x28c]
mov edx, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x258], edx
mov edx, dword [ebp - 0x284]
lea eax, [ebp - 0x280]
push eax
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0x24c], edx
call ebx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x274]
mov ebx, dword [ebp - 0x280]
mov dword [ebp - 0x29c], ecx
lea ecx, [ebp - 0x2a8]
push ecx
mov edi, 0x100311d4
mov dword [ebp - 0x298], edx
mov dword [ebp - 0x294], eax
call fcn.1000de50
mov byte [ebp - 4], 9
mov eax, dword [eax]
test eax, eax
je 0x1000ed65
mov edx, dword [eax]
mov dword [ebp - 0x21c], edx
jmp 0x1000ed6f
mov dword [ebp - 0x21c], 0
mov edi, dword [ebp - 0x240]
push 0
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0x23c]
mov dword [eax + 4], edi
mov edi, dword [ebp - 0x238]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x234]
mov dword [eax + 0xc], edi
mov edi, dword [ebp - 0x258]
push 3
mov ecx, dword [ebp - 0x230]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0x254]
mov dword [eax + 4], edi
mov edi, dword [ebp - 0x250]
mov edx, dword [ecx]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x24c]
mov dword [eax + 0xc], edi
mov edi, dword [ebp - 0x29c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], edi
mov edi, dword [ebp - 0x298]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x294]
mov dword [eax + 0xc], edi
mov eax, dword [ebp - 0x220]
push 6
push eax
mov eax, dword [ebp - 0x21c]
push eax
push ecx
mov ecx, dword [edx + 0x44]
call ecx
lea edi, [ebp - 0x2a8]
call fcn.100052e0
lea edx, [ebp - 0x280]
push edx
call esi
lea eax, [ebp - 0x290]
push eax
call esi
lea ecx, [ebp - 0x270]
push ecx
mov dword [ebp - 4], 0xffffffff
call esi
mov eax, dword [ebp - 0x220]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10012a2e
mov esp, ebp
pop ebp
ret