Function at 0x405b00
Capabilities:
Check if file exists
Get http document via iwebbrowser2
Schedule task via itaskservice

Disassembly:
push 0xffffffffffffffff
push 0x429396
mov eax, dword fs:[0]
push eax
mov eax, 0x1318
call fcn.00415fe0
mov eax, dword [0x434c44]
xor eax, esp
mov dword [esp + 0x1310], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x434c44]
xor eax, esp
push eax
lea eax, [esp + 0x132c]
mov dword fs:[0], eax
push 0x206
mov edi, ecx
xor ebx, ebx
lea ecx, [esp + 0x122]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x128], ax
call fcn.00414210
add esp, 0xc
push ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov esi, eax
cmp esi, ebx
jge 0x405b9a
push esi
push str.CoInitializeEx_failed:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea edx, [esp + 0x11c]
push edx
call fcn.00406a90
mov al, 1
jmp 0x406a5e
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x405bd4
push esi
push str.File_Not_Exists_to_Add_Task___s
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea eax, [esp + 0x11c]
push eax
call fcn.00406a90
call dword [sym.imp.ole32.dll_CoUninitialize]
mov al, 1
jmp 0x406a5e
mov ebp, 7
xor ecx, ecx
mov eax, edi
mov dword [esp + 0xfc], ebp
mov dword [esp + 0xf8], ebx
mov word [esp + 0xe8], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x405bf6
sub eax, edx
sar eax, 1
push eax
mov eax, edi
lea esi, [esp + 0xe8]
call fcn.00406c50
mov dword [esp + 0x1334], ebx
xor edx, edx
push ebx
mov eax, 0x42ec9c
lea esi, [esp + 0xcc]
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xe0], ebx
mov word [esp + 0xd0], dx
call fcn.00406c50
push 0x7fe
lea ecx, [esp + 0xb2a]
xor eax, eax
push ebx
push ecx
mov word [esp + 0xb30], ax
call fcn.00414210
add esp, 0xc
push edi
push str.__ls_
lea edx, [esp + 0xb2c]
call fcn.00407090
add esp, 8
lea edx, [esp + 0x30]
push edx
push 0x42d8a0
push 1
push ebx
push 0x42da90
mov dword [esp + 0x44], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jge 0x405d2e
push eax
push str.Failed_to_create_an_instance_of_ITaskService:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea eax, [esp + 0x11c]
push eax
call fcn.00406a90
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, 8
mov byte [esp + 0x1334], bl
cmp dword [esp + 0xe0], esi
jb 0x405ceb
mov ecx, dword [esp + 0xcc]
push ecx
call fcn.0040710f
add esp, 4
xor edx, edx
mov dword [esp + 0x1334], 0xffffffff
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xdc], ebx
mov word [esp + 0xcc], dx
cmp dword [esp + 0xfc], esi
jb 0x405d27
mov eax, dword [esp + 0xe8]
push eax
call fcn.0040710f
add esp, 4
mov al, 1
jmp 0x406a5e
lea ecx, [esp + 0x94]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edx, dword [esp + 0xa0]
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x98]
mov ebp, dword [esp + 0x9c]
lea eax, [esp + 0x7c]
push eax
mov dword [esp + 0xc4], edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x48], edx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x88]
lea edx, [esp + 0xa4]
push edx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0xb0]
lea ecx, [esp + 0x6c]
push ecx
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0x1334], 5
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xd0]
mov dword [eax + 4], edi
mov dword [eax + 8], ebp
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x54]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x68]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x6c]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x70]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x7c]
mov ecx, dword [esp + 0x50]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x90]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x94]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x98]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x9c]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xb0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xb4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xb8]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov esi, eax
mov ebp, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x6c]
push ecx
call ebp
lea edx, [esp + 0xa4]
push edx
call ebp
lea eax, [esp + 0x7c]
push eax
call ebp
lea ecx, [esp + 0x94]
push ecx
mov byte [esp + 0x1338], 1
call ebp
cmp esi, ebx
jge 0x405f13
push esi
push str.ITaskService::Connect_failed:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea edx, [esp + 0x11c]
push edx
call fcn.00406a90
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
lea esi, [esp + 0xc8]
mov byte [esp + 0x1334], bl
call fcn.00406c20
lea esi, [esp + 0xe4]
mov dword [esp + 0x1334], 0xffffffff
call fcn.00406c20
mov al, 1
jmp 0x406a5e
lea eax, [esp + 0x1c]
push eax
mov edi, 0x42ea14
mov dword [esp + 0x1c], ebx
call fcn.004011e0
mov byte [esp + 0x1334], 6
mov eax, dword [eax]
cmp eax, ebx
je 0x405f38
mov ecx, dword [eax]
jmp 0x405f3a
xor ecx, ecx
mov eax, dword [esp + 0x30]
mov edx, dword [eax]
lea esi, [esp + 0x18]
push esi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea edi, [esp + 0x1c]
mov esi, eax
mov byte [esp + 0x1334], 1
call fcn.00401280
cmp esi, ebx
jge 0x405f96
push esi
push str.Cannot_get_Root_Folder_pointer:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea ecx, [esp + 0x11c]
push ecx
call fcn.00406a90
mov eax, dword [esp + 0x30]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x405edc
lea ecx, [esp + 0x1c]
push ecx
mov edi, str.Np2FactAuth_ALLNPAV
call fcn.004011e0
mov byte [esp + 0x1334], 7
mov eax, dword [eax]
cmp eax, ebx
je 0x405fb7
mov ecx, dword [eax]
jmp 0x405fb9
xor ecx, ecx
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push ebx
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x1c]
mov byte [esp + 0x1334], 1
call fcn.00401280
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x18], ebx
mov ecx, dword [eax]
push ebx
push eax
mov eax, dword [ecx + 0x24]
call eax
mov esi, eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x40602b
push esi
push str.Failed_to_create_a_task_definition:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea eax, [esp + 0x11c]
push eax
call fcn.00406a90
mov eax, dword [esp + 0x18]
jmp 0x405ed4
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x40]
mov dword [esp + 0x40], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
cmp eax, ebx
jge 0x40607b
push eax
push str.Cannot_get_identification_pointer:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea ecx, [esp + 0x11c]
push ecx
call fcn.00406a90
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x14]
jmp 0x405ed4
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push str.SYSTEM
push eax
call edx
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x4060d5
push esi
push str.Cannot_put_identification_info:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
lea eax, [esp + 0x11c]
push eax
call fcn.00406a90
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
jmp 0x405ed4
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x34]
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
cmp eax, ebx
jge 0x4060fe
push eax
push str._nCannot_get_principal_pointer:__x
call fcn.00413229
jmp 0x406056
mov eax, str.SYSTEM
lea ecx, [esp + 0x100]
call fcn.00406be0
mov byte [esp + 0x1334], 8
cmp dword [esp + 0x118], 8
mov edi, dword [esp + 0x104]
jae 0x40612f
lea edi, [esp + 0x104]
lea eax, [esp + 0x1c]
push eax
call fcn.004011e0
mov byte [esp + 0x1334], 9
mov eax, dword [eax]
cmp eax, ebx
je 0x40614b
mov eax, dword [eax]
jmp 0x40614d
xor eax, eax
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x30]
push ecx
call eax
lea edi, [esp + 0x1c]
mov esi, eax
mov byte [esp + 0x1334], 8
call fcn.00401280
cmp esi, ebx
jge 0x406193
push esi
push str._nCannot_principal_put_UserId:__x
lea edx, [esp + 0x124]
call fcn.004070b0
add esp, 8
lea ecx, [esp + 0x11c]
push ecx
call fcn.00406a90
mov eax, dword [esp + 0x34]
mov edx, dword [eax]
push 5
push eax
mov eax, dword [edx + 0x38]
call eax
cmp eax, ebx
jge 0x4061c7
push eax
push str._nCannot_put_principal_logon_type:__x
lea edx, [esp + 0x124]
call fcn.004070b0
add esp, 8
lea ecx, [esp + 0x11c]
push ecx
call fcn.00406a90
mov eax, dword [esp + 0x34]
mov edx, dword [eax]
mov esi, 1
push esi
push eax
mov eax, dword [edx + 0x48]
call eax
mov edi, eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x406244
push edi
push str._nCannot_put_principal_run_level:__x
lea edx, [esp + 0x124]
call fcn.004070b0
add esp, 8
lea eax, [esp + 0x11c]
push eax
call fcn.00406a90
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
lea esi, [esp + 0x100]
mov byte [esp + 0x1334], 1
call fcn.00406c20
jmp 0x405ee2
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x2c]
mov dword [esp + 0x2c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, ebx
jge 0x40628d
push eax
push str._nCannot_get_settings_pointer:__x
lea edx, [esp + 0x124]
call fcn.004070b0
add esp, 8
lea ecx, [esp + 0x11c]
push ecx
call fcn.00406a90
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x406219
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push ebx
push eax
call edx
cmp eax, ebx
jge 0x4062a9
push eax
push str._nCannot_put_setting_info:__x
jmp 0x4061f1
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
push ebx
push eax
call edx
cmp eax, ebx
jl 0x40629e
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x38]
push ebx
push eax
call edx
cmp eax, ebx
jge 0x4062d6
push eax
push str._nCannot_put_MultipleInstances_error_:__x
jmp 0x4061f1
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x88]
push ebx
push eax
call edx
cmp eax, ebx
jge 0x4062f5
push eax
push str._nCannot_put_priority_error_:__x
jmp 0x4061f1
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x58]
push esi
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x40631f
push edi
push str._nCannot_put_setting_info:__x
jmp 0x4061f1
cmp dword [esp + 0x133c], esi
jne 0x40647d
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x24]
mov dword [esp + 0x24], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, ebx
jge 0x406378
push eax
push 0x42f0e0
lea edx, [esp + 0x124]
call fcn.004070b0
add esp, 8
lea ecx, [esp + 0x11c]
push ecx
call fcn.00406a90
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x406219
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x1c]
push edx
mov dword [esp + 0x20], ebx
mov ecx, dword [eax]
push ebx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov edi, eax
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x4063ab
push edi
push 0x42f128
jmp 0x4061f1
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], ebx
mov ecx, dword [eax]
push 0x42d970
push eax
mov eax, dword [ecx]
call eax
mov edi, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x4063e1
push edi
push str._nQueryInterface_call_on_IEventTrigger_failed:__x
jmp 0x4061f1
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x24]
push 0x42ec9c
push eax
call edx
cmp eax, ebx
jge 0x406418
push eax
push 0x42f1cc
lea edx, [esp + 0x124]
call fcn.004070b0
add esp, 8
lea eax, [esp + 0x11c]
push eax
call fcn.00406a90
push 0x7fe
lea edx, [esp + 0x32a]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0x330], cx
call fcn.00414210
add esp, 0xc
push str._QueryList____Query_Id_0__Path_Microsoft_Windows_TerminalServices_RemoteConnectionManager_Operational_______Select_Path_Microsoft_Windows_TerminalServices_RemoteConnectionManager_Operational____System__EventID__1149_____Select_____Query___QueryList_
lea edx, [esp + 0x328]
call fcn.00407090
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
add esp, 4
lea edx, [esp + 0x324]
push edx
push eax
mov eax, dword [ecx + 0x54]
call eax
mov edi, eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x40647d
push edi
push str._nCannot_put_the_event_query:__x
jmp 0x4061f1
cmp dword [esp + 0x1340], esi
jne 0x406585
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, ebx
jge 0x4064b6
push eax
push str._nCannot_get_trigger_collection:__x
call fcn.00413229
add esp, 8
jmp 0x40620d
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], ebx
mov ecx, dword [eax]
push 9
push eax
mov eax, dword [ecx + 0x28]
call eax
mov edi, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x4064f2
push edi
push str._nCannot_create_the_trigger:__x
call fcn.00413229
add esp, 8
jmp 0x40620d
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], ebx
mov ecx, dword [eax]
push 0x42d950
push eax
mov eax, dword [ecx]
call eax
mov edi, eax
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x406530
push edi
push str._nQueryInterface_call_failed_for_ILogonTrigger:__x
call fcn.00413229
add esp, 8
jmp 0x40620d
lea eax, [esp + 0x28]
push eax
mov edi, str.Trigger1
call fcn.004011e0
mov byte [esp + 0x1334], 0xa
mov eax, dword [eax]
cmp eax, ebx
je 0x406551
mov ecx, dword [eax]
jmp 0x406553
xor ecx, ecx
mov eax, dword [esp + 0x20]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x24]
call eax
lea edi, [esp + 0x28]
mov esi, eax
mov byte [esp + 0x1334], 8
call fcn.00401280
cmp esi, ebx
jge 0x406585
push esi
push str._nCannot_put_the_trigger_ID:__x
call fcn.00413229
add esp, 8
cmp dword [esp + 0x1344], 1
jne 0x4066a4
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, ebx
jl 0x4064a3
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], ebx
mov ecx, dword [eax]
push 0xb
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x4065ec
push esi
push str._nCannot_create_the_trigger:__x
call fcn.00413229
add esp, 8
jmp 0x40620d
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], ebx
mov ecx, dword [eax]
push 0x42d960
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x40662a
push esi
push str._nQueryInterface_call_failed_for_IStateChangeTrigger:__x
call fcn.00413229
add esp, 8
jmp 0x40620d
lea eax, [esp + 0x28]
push eax
mov edi, str.Trigger2
call fcn.004011e0
mov byte [esp + 0x1334], 0xb
mov eax, dword [eax]
cmp eax, ebx
je 0x40664b
mov ecx, dword [eax]
jmp 0x40664d
xor ecx, ecx
mov eax, dword [esp + 0x20]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x24]
call eax
lea edi, [esp + 0x28]
mov esi, eax
mov byte [esp + 0x1334], 8
call fcn.00401280
cmp esi, ebx
jge 0x40667f
push esi
push str._nCannot_put_the_trigger_ID:__x
call fcn.00413229
add esp, 8
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x64]
push 8
push eax
call edx
cmp eax, ebx
jge 0x4066a4
push eax
push str._nCannot_add_user_ID_to_logon_trigger:__x
call fcn.00413229
add esp, 8
jmp 0x40620d
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
cmp eax, ebx
jge 0x4066d7
push eax
push str.Cannot_get_Task_collection_pointer:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
jmp 0x40620d
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x5c], ebx
mov ecx, dword [eax]
push ebx
push eax
mov eax, dword [ecx + 0x30]
call eax
mov esi, eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x406719
push esi
push str.Cannot_create_the_action:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
jmp 0x40620d
mov eax, dword [esp + 0x58]
lea edx, [esp + 0x38]
push edx
mov dword [esp + 0x3c], ebx
mov ecx, dword [eax]
push str.MbLk
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x40675e
push esi
push str.QueryInterface_call_failed_for_IExecAction:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
jmp 0x40620d
lea eax, [esp + 0x28]
push eax
lea edi, [esp + 0xb28]
call fcn.004011e0
mov byte [esp + 0x1334], 0xc
mov eax, dword [eax]
cmp eax, ebx
je 0x406781
mov ecx, dword [eax]
jmp 0x406783
xor ecx, ecx
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x2c]
call eax
lea edi, [esp + 0x28]
mov esi, eax
mov byte [esp + 0x1334], 8
call fcn.00401280
cmp esi, ebx
jge 0x4067c1
push esi
push str.Cannot_set_path_of_executable:__x
lea edx, [esp + 0x124]
call fcn.004049f0
add esp, 8
jmp 0x40620d
lea eax, [esp + 0x28]
push eax
mov edi, 0x42ec9c
call fcn.004011e0
mov byte [esp + 0x1334], 0xd
mov eax, dword [eax]
cmp eax, ebx
je 0x4067e2
mov ecx, dword [eax]
jmp 0x4067e4
xor ecx, ecx
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x34]
call eax
lea edi, [esp + 0x28]
mov esi, eax
mov byte [esp + 0x1334], 8
call fcn.00401280
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jl 0x4067a7
mov eax, 8
push 0x42ec9c
mov dword [esp + 0x94], ebx
mov word [esp + 0x70], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x74], eax
cmp eax, ebx
jne 0x406842
push 0x8007000e
call fcn.00428810
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x78]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0xa4]
push eax
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa4], edx
call edi
mov edx, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0xac]
mov dword [esp + 0x60], edx
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0xb0]
lea edx, [esp + 0x7c]
push edx
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
call edi
mov byte [esp + 0x1334], 0x10
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x84]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x88]
lea ecx, [esp + 0x28]
push ecx
mov edi, str.Np2FactAuth_ALLNPAV
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
call fcn.004011e0
mov byte [esp + 0x1334], 0x11
mov eax, dword [eax]
cmp eax, ebx
je 0x4068f8
mov edx, dword [eax]
jmp 0x4068fa
xor edx, edx
lea eax, [esp + 0x90]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xac]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xb0]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xb4]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x70]
push 2
mov ecx, dword [esp + 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x88]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x8c]
mov edi, dword [ecx]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x90]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x6c]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x80]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x84]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x88]
push 6
mov dword [eax + 0xc], esi
mov eax, dword [esp + 0x50]
push eax
push edx
push ecx
mov ecx, dword [edi + 0x44]
call ecx
lea edi, [esp + 0x28]
mov esi, eax
call fcn.00401280
lea edx, [esp + 0x7c]
push edx
call ebp
lea eax, [esp + 0xa4]
push eax
call ebp
lea ecx, [esp + 0x6c]
push ecx
mov byte [esp + 0x1338], 8
call ebp
cmp esi, ebx
jge 0x4069e4
push esi
push str.Error_saving_the_Task_:__x
lea edx, [esp + 0x124]
call fcn.004049f0
mov eax, dword [esp + 0x20]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x406219
push str._nSuccessfully_created_the_task._n
call fcn.00413229
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
lea esi, [esp + 0x100]
mov byte [esp + 0x1334], 1
call fcn.00406c20
lea esi, [esp + 0xc8]
mov byte [esp + 0x1334], bl
call fcn.00406c20
lea esi, [esp + 0xe4]
mov dword [esp + 0x1334], 0xffffffff
call fcn.00406c20
xor al, al
mov ecx, dword [esp + 0x132c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1310]
xor ecx, esp
call fcn.00411cc8
add esp, 0x1324
ret 0xc