Function at 0x10006a80
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000d952
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0xb8
mov eax, dword [0x10015040]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x64], ecx
push 0
push 0
mov dword [ebp - 4], 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
je 0x10006ae6
cmp eax, 1
jne 0x1000704f
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push 0x1000e4ac
push 1
push 0
push 0x1000e4cc
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x10007049
mov edx, dword [ebp - 0x34]
sub esp, 0x10
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm2, xmm2
xorps xmm3, xmm3
mov eax, dword [edx]
mov ecx, dword [eax + 0x28]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm1
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm2
mov eax, esp
push edx
movups xmmword [eax], xmm3
call ecx
test eax, eax
mov eax, dword [ebp - 0x34]
js 0x10007043
mov dword [ebp - 0x24], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
mov dword [ebp - 0x20], edi
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x58], esi
mov byte [ebp - 4], 1
test esi, esi
je 0x10006ba8
mov dword [esi], 0
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x1000e710
mov dword [esi + 4], 0
mov dword [esi + 8], 1
mov dword [ebp - 0x60], edi
call edi
mov dword [esi], eax
test eax, eax
je 0x1000750f
mov edi, dword [ebp - 0x20]
jmp 0x10006bb2
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
xor esi, esi
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0
mov dword [ebp - 0x58], esi
test esi, esi
je 0x10007519
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 2
push eax
push dword [esi]
push dword [ebp - 0x34]
call edi
mov dword [ebp - 0x20], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 0
lock xadd dword [esi + 8], ecx
dec ecx
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
jne 0x10006c1c
mov eax, dword [esi]
test eax, eax
je 0x10006bf7
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10006c0e
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
mov eax, dword [ebp - 0x20]
add esp, 8
test eax, eax
jns 0x10006c28
mov eax, dword [ebp - 0x34]
jmp 0x10007043
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x28]
push edx
mov dword [ebp - 0x28], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x34]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10006c55
mov eax, dword [ebp - 0x24]
jmp 0x10007043
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x1c]
test eax, eax
js 0x10007037
mov eax, dword [ebp - 0x3c]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x20], eax
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x58], esi
mov byte [ebp - 4], 3
test esi, esi
je 0x10006cbb
mov dword [esi], 0
push 0x1000e714
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
je 0x10007523
jmp 0x10006cbd
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x58], esi
test esi, esi
je 0x1000752d
mov byte [ebp - 4], 4
push dword [esi]
push dword [ebp - 0x3c]
call dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 0
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x10006d1b
mov eax, dword [esi]
test eax, eax
je 0x10006cf9
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10006d10
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
add esp, 8
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x20], 0
jl 0x10007037
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x10007037
mov ecx, dword [ebp - 0x44]
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x48], 0
push 2
mov eax, dword [ecx]
push ecx
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x44]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x10007037
mov ecx, dword [ebp - 0x48]
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x30], 0
push 0x1000e49c
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x48]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x10007037
mov eax, dword [ebp - 0x30]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x20], eax
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x58], esi
mov byte [ebp - 4], 5
test esi, esi
je 0x10006de8
mov dword [esi], 0
push str.BCF4BB14_3FF6_427E_AC8A_9E3646D0F2A4
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
je 0x10007537
jmp 0x10006dea
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x58], esi
test esi, esi
je 0x10007541
mov byte [ebp - 4], 6
push dword [esi]
push dword [ebp - 0x30]
call dword [ebp - 0x20]
mov byte [ebp - 4], 0
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x10006e45
mov eax, dword [esi]
test eax, eax
je 0x10006e23
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10006e3a
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
add esp, 8
mov eax, dword [ebp - 0x30]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x20], eax
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x58], esi
mov byte [ebp - 4], 7
test esi, esi
je 0x10006e8f
mov dword [esi], 0
push str.2032_08_05T15:00:00
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
je 0x1000754b
jmp 0x10006e91
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x58], esi
test esi, esi
je 0x10007555
mov byte [ebp - 4], 8
push dword [esi]
push dword [ebp - 0x30]
call dword [ebp - 0x20]
mov byte [ebp - 4], 0
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x10006eec
mov eax, dword [esi]
test eax, eax
je 0x10006eca
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10006ee1
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
add esp, 8
mov ecx, dword [ebp - 0x30]
push 1
push ecx
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
jns 0x10006f0c
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
jmp 0x1000703a
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x40]
mov dword [ebp - 0x40], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x30]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x10007037
mov eax, dword [ebp - 0x40]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x20], eax
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x58], esi
mov byte [ebp - 4], 9
test esi, esi
je 0x10006f7d
mov dword [esi], 0
push str.PT5M
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
je 0x1000755f
jmp 0x10006f7f
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x58], esi
test esi, esi
je 0x10007569
mov byte [ebp - 4], 0xa
push dword [esi]
push dword [ebp - 0x40]
call dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 0
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x10006fdd
mov eax, dword [esi]
test eax, eax
je 0x10006fbb
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10006fd2
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
add esp, 8
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x20], 0
jl 0x10007037
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x2c]
test eax, eax
js 0x1000718d
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x9c]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10007070
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1000bf67
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebp - 0x20]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x58], eax
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov byte [ebp - 4], 0xb
test esi, esi
je 0x100070ba
mov dword [esi], 0
push str.PT24H
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
je 0x10007573
jmp 0x100070bc
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x1000757d
mov byte [ebp - 4], 0xc
push dword [esi]
push dword [ebp - 0x20]
call dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 0
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000711d
mov eax, dword [esi]
test eax, eax
je 0x100070f8
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000710f
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
mov eax, dword [ebp - 0x58]
add esp, 8
test eax, eax
jns 0x1000712f
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
jmp 0x10007168
mov ecx, dword [ebp - 0x20]
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x30]
test eax, eax
js 0x1000715c
mov ecx, dword [ebp - 0x2c]
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x48]
test eax, eax
js 0x1000715c
mov ecx, dword [ebp - 0x2c]
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x40]
test eax, eax
jns 0x1000717f
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
jmp 0x10007043
mov ecx, dword [ebp - 0x2c]
push 4
push ecx
mov eax, dword [ecx]
call dword [eax + 0x88]
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x4c]
mov dword [ebp - 0x4c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x10007037
mov ecx, dword [ebp - 0x4c]
lea edx, [ebp - 0x50]
push edx
mov dword [ebp - 0x50], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x4c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x10007037
mov ecx, dword [ebp - 0x50]
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x38], 0
push str.MbLk
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x50]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10007201
mov eax, dword [ebp - 0x24]
jmp 0x10007031
mov eax, dword [ebp - 0x38]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x58], eax
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov byte [ebp - 4], 0xd
test esi, esi
je 0x1000724b
mov dword [esi], 0
push str.regsvr32
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
je 0x10007587
jmp 0x1000724d
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x10007591
mov byte [ebp - 4], 0xe
push dword [esi]
push dword [ebp - 0x38]
call dword [ebp - 0x58]
mov dword [ebp - 0x20], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 0
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x100072ab
mov eax, dword [esi]
test eax, eax
je 0x10007289
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x100072a0
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
add esp, 8
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x64]
cmp dword [eax + 0x14], 7
jbe 0x100072c4
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
push 0xc
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov byte [ebp - 4], 0xf
test esi, esi
je 0x10007306
push dword [ebp - 0x64]
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
jne 0x10007308
cmp dword [ebp - 0x64], eax
jne 0x1000759b
jmp 0x10007308
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x100075a5
mov byte [ebp - 4], 0x10
push dword [esi]
push dword [ebp - 0x38]
call dword [ebp - 0x58]
mov byte [ebp - 4], 0
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x10007363
mov eax, dword [esi]
test eax, eax
je 0x10007341
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10007358
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
add esp, 8
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x24]
jl 0x10007031
mov dword [ebp - 0x54], 0
mov eax, dword [eax]
push 0x1000e9d8
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x64], eax
mov eax, 8
mov word [ebp - 0x78], ax
call dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
test eax, eax
je 0x100075af
movups xmm0, xmmword [ebp - 0x78]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x98]
push eax
movups xmmword [ebp - 0xa8], xmm0
call esi
movups xmm0, xmmword [ebp - 0x98]
lea eax, [ebp - 0x88]
push eax
movups xmmword [ebp - 0xb8], xmm0
call esi
mov byte [ebp - 4], 0x13
movups xmm0, xmmword [ebp - 0x88]
mov eax, dword [ebp - 0x28]
push 0xc
movups xmmword [ebp - 0xc8], xmm0
mov dword [ebp - 0x58], eax
call fcn.1000bfa6
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov byte [ebp - 4], 0x14
test esi, esi
je 0x1000742c
mov dword [esi], 0
push str.LanVD1
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [ebp - 0x60]
mov dword [esi], eax
test eax, eax
je 0x100075b9
jmp 0x1000742e
xor esi, esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x100075c3
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x54]
movups xmm0, xmmword [ebp - 0xa8]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0xc8]
push 6
push dword [ebp - 0x58]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x24]
call dword [ebp - 0x64]
mov dword [ebp - 0x58], eax
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x100074c0
mov ecx, dword [esi]
test ecx, ecx
je 0x1000749e
push ecx
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x100074b5
push eax
call fcn.1000c2f5
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.1000bf75
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x88]
push eax
call esi
lea eax, [ebp - 0x98]
push eax
call esi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0
push eax
call esi
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x58], 0
jl 0x10007049
mov eax, dword [ebp - 0x54]
jmp 0x10007043
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
push 0x8007000e
call fcn.1000cd10
int3