Function at 0x409411
Capabilities:
Schedule task via itaskscheduler

Disassembly:
push 0x128
mov eax, 0x42ae4c
call fcn.0041550d
xor edi, edi
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, edi
jl 0x409e1b
lea eax, [ebp - 0x1c]
push eax
push 0x42ea54
xor ebx, ebx
inc ebx
push ebx
push edi
push 0x42ea74
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jge 0x4094c3
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4da
push eax
mov dword [ebp - 4], edi
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], bl
call fcn.00402a83
mov ecx, esp
mov byte [ebp - 4], 2
mov dword [ebp + 8], esp
push esi
push eax
push ecx
call fcn.00402ac9
add esp, 0xc
push 2
call fcn.0040cf44
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0x3c]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x74]
call fcn.004023e7
lea esi, [ebp - 0x58]
jmp 0x409e8d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push 0x42ea44
mov esi, str.Adobe_Flash_Player_Updater
push esi
push eax
call dword [ecx + 0x18]
cmp eax, edi
jge 0x409553
cmp eax, 0x80070002
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
je 0x4098a8
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4dc
push eax
mov dword [ebp - 4], 6
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 7
call fcn.00402a83
mov byte [ebp - 4], 8
mov dword [ebp + 8], esp
mov ecx, esp
push esi
push eax
push ecx
call fcn.00402ac9
add esp, 0xc
push 2
call fcn.0040cf44
jmp 0x409e73
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x7c]
push edx
mov dword [ebp - 0x7c], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
cmp eax, edi
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
jge 0x4095c5
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4dd
push eax
mov dword [ebp - 4], 9
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0xa
call fcn.00402a83
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x18], esp
jmp 0x40953a
cmp word [ebp - 0x7c], bx
jae 0x409615
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4de
push eax
mov dword [ebp - 4], 0xc
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0xd
call fcn.00402a83
mov byte [ebp - 4], 0xe
jmp 0x4095bd
lea edx, [ebp + 8]
push edx
push edi
push eax
call dword [ecx + 0x18]
cmp eax, edi
jge 0x409674
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4df
push eax
mov dword [ebp - 4], 0xf
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402a83
mov byte [ebp - 4], 0x11
jmp 0x4095bd
push 0x30
lea eax, [ebp - 0xe0]
push edi
push eax
call fcn.00418c10
add esp, 0xc
push 0x30
pop eax
mov word [ebp - 0xe0], ax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
lea edx, [ebp - 0xe0]
push edx
push eax
call dword [ecx + 0x10]
cmp eax, edi
mov eax, dword [ebp + 8]
jge 0x4096ff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e0
push eax
mov dword [ebp - 4], 0x12
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x13
call fcn.00402a83
mov byte [ebp - 4], 0x14
jmp 0x4095bd
lea edx, [ebp - 0xe0]
push edx
mov dword [ebp - 0xc8], 0x3c
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov esi, eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, edi
jge 0x4097b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e1
push eax
mov dword [ebp - 4], 0x15
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x16
call fcn.00402a83
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], esp
mov ecx, esp
push esi
push eax
push ecx
call fcn.00402ac9
add esp, 0xc
push 2
call fcn.0040cf44
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0x58]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x74]
call fcn.004023e7
or dword [ebp - 4], 0xffffffff
push edi
push ebx
lea esi, [ebp - 0x3c]
call fcn.004023e7
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x409e94
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
push 0x42c35c
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, edi
jge 0x409820
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e2
push eax
mov dword [ebp - 4], 0x18
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x19
call fcn.00402a83
mov byte [ebp - 4], 0x1a
jmp 0x4095bd
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push ebx
push edi
push eax
call dword [ecx + 0x18]
mov esi, eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, edi
jge 0x409883
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e3
push eax
mov dword [ebp - 4], 0x1b
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00402a83
mov byte [ebp - 4], 0x1d
jmp 0x4095bd
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x658
push eax
call fcn.0040d24d
pop ecx
pop ecx
push edi
call fcn.0040cf44
add esp, 0x20
mov al, bl
jmp 0x409e96
lea edx, [ebp - 0x14]
push edx
push 0x42ea44
push 0x42ea64
push esi
push eax
call dword [ecx + 0x20]
mov esi, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, edi
jge 0x409913
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e4
push eax
mov dword [ebp - 4], 0x1e
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00402a83
mov byte [ebp - 4], 0x20
jmp 0x409537
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push edi
push 0x42ec34
push eax
call dword [ecx + 0x78]
cmp eax, edi
jge 0x40996f
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e5
push eax
mov dword [ebp - 4], 0x21
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x22
call fcn.00402a83
mov byte [ebp - 4], 0x23
jmp 0x409537
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x78]
push edx
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0xc]
cmp eax, edi
jge 0x4099ca
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e6
push eax
mov dword [ebp - 4], 0x24
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x25
call fcn.00402a83
mov byte [ebp - 4], 0x26
mov dword [ebp + 8], esp
jmp 0x40976a
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push 0x42fe94
push eax
call dword [ecx + 0x50]
cmp eax, edi
jge 0x409a55
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x58d
push eax
mov dword [ebp - 4], 0x27
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x28
call fcn.00402a83
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
push eax
push ecx
mov byte [ebp - 4], 0x29
call fcn.00402ac9
add esp, 0xc
push ebx
call fcn.0040cf44
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0x58]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x74]
call fcn.004023e7
or dword [ebp - 4], 0xffffffff
push edi
push ebx
lea esi, [ebp - 0x3c]
call fcn.004023e7
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
push 0x6e
call fcn.00404fd9
pop ecx
push eax
push dword [ebp - 0x14]
call dword [esi + 0x48]
cmp eax, edi
jge 0x409ae6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x58e
push eax
mov dword [ebp - 4], 0x2a
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00402a83
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
push eax
push ecx
mov byte [ebp - 4], 0x2c
call fcn.00402ac9
add esp, 0xc
push ebx
call fcn.0040cf44
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0x58]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x74]
call fcn.004023e7
or dword [ebp - 4], 0xffffffff
push edi
push ebx
lea esi, [ebp - 0x3c]
call fcn.004023e7
mov eax, dword [ebp + 8]
cmp dword [eax + 0x18], 8
jb 0x409af4
mov ecx, dword [eax + 4]
jmp 0x409af7
lea ecx, [eax + 4]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x80]
cmp eax, edi
jge 0x409b81
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x58f
push eax
mov dword [ebp - 4], 0x2d
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x2e
call fcn.00402a83
mov ecx, esp
mov byte [ebp - 4], 0x2f
mov dword [ebp + 8], esp
push esi
push eax
push ecx
call fcn.00402ac9
add esp, 0xc
push ebx
call fcn.0040cf44
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0x58]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x74]
call fcn.004023e7
or dword [ebp - 4], 0xffffffff
push edi
push ebx
lea esi, [ebp - 0x3c]
call fcn.004023e7
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push 0x400
push eax
call dword [ecx + 0x70]
cmp eax, edi
jge 0x409c0c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x590
push eax
mov dword [ebp - 4], 0x30
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x31
call fcn.00402a83
mov ecx, esp
mov byte [ebp - 4], 0x32
mov dword [ebp + 8], esp
push esi
push eax
push ecx
call fcn.00402ac9
add esp, 0xc
push ebx
call fcn.0040cf44
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0x58]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x74]
call fcn.004023e7
or dword [ebp - 4], 0xffffffff
push edi
push ebx
lea esi, [ebp - 0x3c]
call fcn.004023e7
push 0x30
lea eax, [ebp - 0xb0]
push edi
push eax
call fcn.00418c10
mov eax, ebx
mov word [ebp - 0xa8], ax
mov word [ebp - 0xaa], ax
add esp, 0xc
mov eax, 0x7d0
mov word [ebp - 0xac], ax
push 0x30
pop eax
mov word [ebp - 0xb0], ax
xor eax, eax
mov word [ebp - 0xa0], ax
lea eax, [ebp + 8]
push eax
call fcn.00413925
pop ecx
push 0x3c
pop ecx
cmp eax, edi
je 0x409c62
xor eax, eax
jmp 0x409c6e
mov eax, dword [ebp + 8]
xor edx, edx
mov esi, ecx
div esi
movzx eax, dx
mov word [ebp - 0x9e], ax
mov eax, ebx
mov word [ebp - 0x8c], ax
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x9c], 0x5a0
mov dword [ebp - 0x98], ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov esi, eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, edi
jge 0x409cf6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e7
push eax
mov dword [ebp - 4], 0x33
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x34
call fcn.00402a83
mov byte [ebp - 4], 0x35
jmp 0x4099c2
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
push 0x42c35c
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, edi
jge 0x409d5f
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4e8
push eax
mov dword [ebp - 4], 0x36
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x37
call fcn.00402a83
mov byte [ebp - 4], 0x38
jmp 0x409537
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push ebx
push edi
push eax
call dword [ecx + 0x18]
mov esi, eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, edi
jge 0x409e09
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x118]
push 0x4e9
push eax
mov dword [ebp - 4], 0x39
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0xfc]
push eax
mov byte [ebp - 4], 0x3a
call fcn.00402a83
mov ecx, esp
mov byte [ebp - 4], 0x3b
mov dword [ebp + 8], esp
push esi
push eax
push ecx
call fcn.00402ac9
add esp, 0xc
push 2
call fcn.0040cf44
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0xfc]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x118]
call fcn.004023e7
lea esi, [ebp - 0x134]
jmp 0x409e8d
sub esp, 0x1c
mov eax, esp
mov dword [ebp + 8], esp
push 0x659
jmp 0x409890
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040d24d
mov esi, eax
lea eax, [ebp - 0x74]
push 0x4db
push eax
mov dword [ebp - 4], 3
call fcn.0040d24d
push 0x42eacc
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 4
call fcn.00402a83
mov ecx, esp
mov byte [ebp - 4], 5
mov dword [ebp + 8], esp
push esi
push eax
push ecx
call fcn.00402ac9
add esp, 0xc
push 2
call fcn.0040cf44
xor ebx, ebx
inc ebx
add esp, 0x20
push edi
push ebx
lea esi, [ebp - 0x58]
call fcn.004023e7
push edi
push ebx
lea esi, [ebp - 0x74]
call fcn.004023e7
lea esi, [ebp - 0x3c]
push edi
push ebx
call fcn.004023e7
xor al, al
call fcn.004155e5
ret 4