Function at 0x140043690
Capabilities:
Schedule task via itaskscheduler

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x230
mov rax, qword [0x1400a3758]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov r12, rcx
cmp qword [0x1400a65b8], 0
jne 0x140044197
call fcn.14001afb0
test al, al
je 0x1400436ef
mov rcx, r12
call fcn.140044200
jmp 0x140044197
mov ecx, 2
call fcn.140059d40
mov qword [rbp - 0x58], rax
xor r13d, r13d
mov word [rax], r13w
lea ecx, [r13 + 2]
call fcn.140059d40
mov qword [rbp + 0x70], rax
mov word [rax], r13w
lea ecx, [r13 + 2]
call fcn.140059d40
mov qword [rbp + 0x68], rax
mov word [rax], r13w
mov qword [rbp + 8], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 8], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp - 8], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp - 8], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp - 0x10], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp - 0x10], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp - 0x18], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp - 0x18], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp - 0x20], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp - 0x20], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp - 0x28], r13
mov rax, qword [str.Task_Scheduler]
lea rcx, [0x14007a7c4]
test rax, rax
cmovne rcx, rax
call fcn.140059d48
mov qword [rbp - 0x28], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp - 0x30], r13
mov rax, qword [str.Task_Scheduler]
lea rcx, [0x14007a7c4]
test rax, rax
cmovne rcx, rax
call fcn.140059d48
mov qword [rbp - 0x30], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov dword [rsp + 0x80], 0xffffffff
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x70], r13
lea rax, [rbp + 8]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 1
mov qword [rsp + 0x58], r13
lea rax, [rbp]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea edx, [r13 + 2]
lea r8d, [r13 - 1]
mov rcx, r12
call fcn.140014980
mov r15d, eax
mov rcx, qword [rbp - 0x30]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x28]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x20]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x18]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x10]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 8]
call fcn.140059d2c
nop
mov rcx, qword [rbp]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 8]
call fcn.140059d2c
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14004417a
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [0x14008a510]
xor edx, edx
lea r8d, [r13 + 1]
lea rcx, [0x14008a520]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14004417a
mov qword [rbp - 0x60], r13
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
lea rdx, [rbp - 0x60]
call qword [rax + 0x28]
test eax, eax
js 0x14004417a
mov dword [rbp - 0x7c], r13d
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
lea r9, [rbp - 0x7c]
lea r8, [rbp - 0x68]
lea edx, [r13 + 2]
call qword [rax + 0x18]
test eax, eax
js 0x140044165
lea ebx, [r13 + 0x30]
nop
mov eax, dword [rbp - 0x7c]
test eax, eax
je 0x140044165
mov esi, r13d
nop
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov eax, esi
lea r14, [rax*8]
lea r9, [rbp - 0x78]
lea r8, [0x14008a500]
mov rdx, qword [rbp - 0x68]
mov rdx, qword [r14 + rdx]
call r10
test eax, eax
js 0x14004411f
mov word [rbp - 0x80], r13w
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
lea rdx, [rbp - 0x80]
call qword [rax + 0x28]
cmp r13w, word [rbp - 0x80]
jae 0x14004411f
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
xor edx, edx
lea r8, [rbp + 0xb8]
call qword [rax + 0x30]
test eax, eax
js 0x14004411f
mov dword [rbp + 0xe0], 0x30
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xe4], xmm0
movups xmmword [rbp + 0xf4], xmm0
mov qword [rbp + 0x104], rax
mov dword [rbp + 0x10c], eax
mov rcx, qword [rbp + 0xb8]
mov rax, qword [rcx]
lea rdx, [rbp + 0xe0]
call qword [rax + 0x20]
test eax, eax
js 0x14004411f
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
lea rdx, [rbp + 0x88]
call qword [rax + 0x108]
test eax, eax
js 0x14004411f
mov rdi, qword [rbp + 0x88]
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140043a95
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140043a98
test rdi, rdi
jne 0x1400441d2
jmp 0x140043a98
mov rbx, r13
test rbx, rbx
je 0x1400441e8
mov rax, qword [rbx]
mov qword [rbp - 0x70], r13
lea rcx, [0x14007a7c4]
test rax, rax
cmovne rcx, rax
call fcn.140059d48
mov qword [rbp - 0x70], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140043b06
mov rcx, qword [rbx]
test rcx, rcx
je 0x140043ae7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140043af9
call fcn.14004bd8c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov rax, qword [rbp - 0x68]
mov rdi, qword [r14 + rax]
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x140043b4e
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140043b51
test rdi, rdi
jne 0x1400441dd
jmp 0x140043b51
mov rbx, r13
test rbx, rbx
je 0x1400441c7
mov rax, qword [rbx]
mov qword [rbp - 0x40], r13
lea rcx, [0x14007a7c4]
test rax, rax
cmovne rcx, rax
call fcn.140059d48
mov qword [rbp - 0x40], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140043bbf
mov rcx, qword [rbx]
test rcx, rcx
je 0x140043ba0
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140043bb2
call fcn.14004bd8c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
lea rdx, [rbp + 0x90]
call qword [rax + 0x118]
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
lea rdx, [rbp - 0x38]
call qword [rax + 0xe8]
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
lea rdx, [rbp + 0xc8]
call qword [rax + 0x128]
mov ecx, 2
call fcn.140059d40
mov qword [rbp - 0x48], rax
mov word [rax], r13w
mov rdi, qword [rbp + 0x90]
lea rcx, [0x14007a83c]
call fcn.140059d48
mov rbx, rax
xor ecx, ecx
call fcn.140059d2c
mov rax, qword [rbp - 0x70]
lea rcx, [0x14007a7c4]
test rax, rax
cmovne rcx, rax
call fcn.140059d48
mov qword [rbp + 0x78], rax
xor ecx, ecx
call fcn.140059d2c
mov rdx, rbx
lea rcx, [rbp + 0x78]
call fcn.140014250
mov rcx, rbx
call fcn.140059d2c
lea rcx, [0x14007a7c4]
test rdi, rdi
cmovne rcx, rdi
call fcn.140059d48
mov rbx, rax
xor ecx, ecx
call fcn.140059d2c
mov rdi, qword [rbp + 0x78]
lea rcx, [0x14007a7c4]
test rdi, rdi
cmovne rcx, rdi
call fcn.140059d48
mov qword [rbp + 0x80], rax
xor ecx, ecx
call fcn.140059d2c
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.140014250
mov rcx, rbx
call fcn.140059d2c
mov rdx, qword [rbp + 0x80]
lea rcx, [rbp - 0x48]
call fcn.140014250
mov rcx, qword [rbp + 0x80]
call fcn.140059d2c
mov rcx, rdi
call fcn.140059d2c
mov ecx, 2
call fcn.140059d40
mov qword [rbp + 0x98], rax
mov word [rax], r13w
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
lea rdx, [rbp + 0x98]
mov rcx, qword [rbp - 0x48]
call fcn.14001e010
xor r9d, r9d
lea r8, [rbp + 0x98]
mov rdx, r12
lea rcx, [rbp - 0x50]
call fcn.140018960
nop
lea r9, [rbp + 0x70]
lea r8, [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rcx, r12
call fcn.1400185f0
mov edi, eax
mov qword [rbp + 0x10], r13
mov rdx, qword [str.Task_Scheduler]
lea rcx, [0x14007a7c4]
test rdx, rdx
cmovne rcx, rdx
call fcn.140059d48
mov qword [rbp + 0x10], rax
xor ecx, ecx
call fcn.140059d2c
nop
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x70]
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x40]
mov rcx, r12
call fcn.140014330
movzx ebx, al
mov rcx, qword [rbp + 0x10]
call fcn.140059d2c
test bl, bl
je 0x140044039
cmp r15d, 0xffffffff
jne 0x140043f88
mov qword [rbp + 0x50], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 0x50], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp + 0x48], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 0x48], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp + 0x40], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 0x40], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp + 0x38], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 0x38], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp + 0x30], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 0x30], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp + 0x28], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 0x28], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp + 0x20], r13
mov rax, qword [str.Task_Scheduler]
lea rcx, [0x14007a7c4]
test rax, rax
cmovne rcx, rax
call fcn.140059d48
mov qword [rbp + 0x20], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov qword [rbp + 0x18], r13
mov rax, qword [str.Task_Scheduler]
lea rcx, [0x14007a7c4]
test rax, rax
cmovne rcx, rax
call fcn.140059d48
mov qword [rbp + 0x18], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov dword [rsp + 0x80], r15d
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x70], r13
lea rax, [rbp + 0x50]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 1
mov qword [rsp + 0x58], r13
lea rax, [rbp + 0x48]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x28]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea edx, [r15 + 3]
mov r8d, r15d
mov rcx, r12
call fcn.140014980
mov r15d, eax
mov rcx, qword [rbp + 0x18]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x20]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x28]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x30]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x38]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x40]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x48]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x50]
call fcn.140059d2c
mov qword [rbp + 0x58], r13
lea rcx, [0x14007a7c4]
call fcn.140059d48
mov qword [rbp + 0x58], rax
xor ecx, ecx
call fcn.140059d2c
nop
mov eax, dword [rbp - 0x38]
shr eax, 2
not eax
and eax, 1
mov dword [rsp + 0x80], 0xffffffff
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x70], r13
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x60], eax
mov rax, qword [rbp + 0xc0]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x68]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 9
mov r8d, r15d
mov edx, edi
mov rcx, r12
call fcn.140014980
nop
mov rcx, qword [rbp + 0x58]
call fcn.140059d2c
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rbp - 0x50]
call fcn.140059d2c
nop
mov rbx, qword [rbp + 0xa0]
test rbx, rbx
je 0x1400440f0
mov rdi, qword [rbp + 0xa8]
cmp rbx, rdi
je 0x14004409b
mov rcx, qword [rbx]
call fcn.140059d2c
add rbx, 8
cmp rbx, rdi
jne 0x140044083
mov rbx, qword [rbp + 0xa0]
mov rax, qword [rbp + 0xb0]
sub rax, rbx
sar rax, 3
lea rdx, [rax*8]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400440d6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400441f3
mov rcx, rbx
call fcn.14004bd8c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov rcx, qword [rbp + 0x98]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x48]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x40]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x70]
call fcn.140059d2c
mov ebx, 0x30
mov rcx, qword [rbp - 0x68]
mov rcx, qword [r14 + rcx]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
inc esi
cmp esi, dword [rbp - 0x7c]
jb 0x140043980
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [rbp - 0x7c], r13d
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
lea r9, [rbp - 0x7c]
lea r8, [rbp - 0x68]
mov edx, 2
call qword [rax + 0x18]
test eax, eax
jns 0x140043970
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp + 0x68]
call fcn.140059d2c
nop
mov rcx, qword [rbp + 0x70]
call fcn.140059d2c
nop
mov rcx, qword [rbp - 0x58]
call fcn.140059d2c
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.14004bd30
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
call fcn.14005a178
int3