Function at 0x140104ce0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa10]
sub rsp, 0xb10
movaps xmmword [rsp + 0xb00], xmm6
mov rax, qword [0x1403debe8]
xor rax, rsp
mov qword [rbp + 0x9f0], rax
mov r14, r9
mov rsi, r8
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x78], r8
xor ebx, ebx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], SafeArrayLock
lea ecx, [rbx + 0x30]
call fcn.1400e1b00
mov qword [rbp - 0x10], 0x2e
mov qword [rbp - 8], 0x2f
movups xmm0, xmmword [str._APRP2020__ActivateDevice__Start______________]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402cd980]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x1402cd990]
movsd qword [rax + 0x20], xmm0
mov ecx, dword [0x1402cd998]
mov dword [rax + 0x28], ecx
movzx ecx, word [0x1402cd99c]
mov word [rax + 0x2c], cx
mov byte [rax + 0x2e], bl
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x20]
call fcn.140195010
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], SafeArrayLock
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [r14 + r8], bl
jne 0x140104db2
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.1400f8840
lea rcx, [rbp - 0x40]
call fcn.140201dd0
mov r13, rax
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r15, qword [rsi + 0x10]
mov r12, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140104df0
mov r12, qword [rsi]
cmp r15, 0x10
jae 0x140104e06
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x20], xmm0
mov ebx, SafeArrayGetLBound
jmp 0x140104e3a
mov rbx, r15
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
call fcn.1400e1b00
mov qword [rbp - 0x20], rax
lea r8, [r15 + 1]
mov rdx, r12
mov rcx, rax
call fcn.140244220
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], rbx
lea rcx, [rbp - 0x20]
call fcn.140201dd0
mov rdx, r13
mov rcx, rax
call sub.api_ms_win_crt_time_l1_1_0.dll__difftime64
movaps xmm6, xmm0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x4f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xorps xmm1, xmm1
xor eax, eax
movups xmmword [rbp + 0x60], xmm1
mov word [rbp + 0x70], ax
xorps xmm2, xmm2
movups xmmword [rbp + 0x78], xmm2
mov word [rbp + 0x88], ax
movsd xmm2, qword [0x1402ce1b0]
comisd xmm6, xmm1
jb 0x1401050a4
comisd xmm2, xmm6
jb 0x1401050a4
lea rcx, [rbp - 0x80]
call fcn.1401faae0
nop
lea rcx, [rbp - 0x80]
mov r15, qword [rbp - 0x80]
mov r12, qword [rbp - 0x68]
cmp r12, 0x10
cmovae rcx, r15
mov rbx, qword [rbp - 0x70]
mov r8, rbx
mov r13d, reloc.OLEAUT32.dll_SafeArrayLock
cmp rbx, r13
cmova r8, r13
lea rdx, str.SSN12345678901234567
call fcn.140244120
test eax, eax
jne 0x140105045
cmp rbx, r13
jne 0x140105045
xor ebx, ebx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], SafeArrayLock
mov byte [rbp - 0x20], bl
lea ecx, [rax + 0x20]
call fcn.1400e1b00
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0x1f
movups xmm0, xmmword [str.SSN12345678901234567]
movups xmmword [rax], xmm0
mov ecx, dword [0x1402cd9b0]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], bl
mov qword [rbp - 0x20], rax
lea r8, [rbp - 0x20]
lea rdx, str._APRP2020__ActivateDevice__SN_is_test_SN:
lea rcx, [rbp - 0x60]
call fcn.1400e1940
nop
lea r8d, [r13 - 4]
lea rdx, str.__try_to_use_MAC
mov rcx, rax
call fcn.1400f8490
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], SafeArrayLock
mov byte [rax], bl
lea rcx, [rbp - 0x40]
call fcn.140195010
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x140104fcc
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140104fc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105fef
call fcn.14020be84
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], SafeArrayLock
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140105017
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105012
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105ff5
call fcn.14020be84
mov r8d, 6
lea rdx, [rbp + 0x60]
lea ecx, [r8 + 0xc]
call fcn.1401076c0
cmp byte [rbp + 0x60], 0
jne 0x140105063
mov r8d, 0x47
lea rdx, [rbp + 0x78]
lea ecx, [r8 - 0x35]
call fcn.1401076c0
jmp 0x140105063
lea r8, [rbp - 0x80]
cmp r12, 0x10
cmovae r8, r15
mov edx, 0x100
lea rcx, [rbp + 0x4f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140105102
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010509d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105ffb
call fcn.14020be84
jmp 0x140105102
movsd xmm0, qword [0x1402ce1b8]
comisd xmm6, xmm2
jbe 0x1401050d3
comisd xmm0, xmm6
jb 0x1401050d3
mov r8d, 6
lea rdx, [rbp + 0x60]
lea ecx, [r8 + 0xc]
call fcn.1401076c0
cmp byte [rbp + 0x60], 0
jne 0x140105102
jmp 0x1401050ef
comisd xmm6, xmm0
jbe 0x140105f3c
movsd xmm0, qword [0x1402ce1c0]
comisd xmm0, xmm6
jb 0x140105f3c
mov r8d, 0x47
lea rdx, [rbp + 0x78]
lea ecx, [r8 - 0x35]
call fcn.1401076c0
xor edx, edx
mov r8d, 0x12c
lea rcx, [rbp + 0x290]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x5f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor r12d, r12d
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], SafeArrayLock
mov byte [rbp + 0x20], r12b
lea ecx, [r12 + 0x40]
call fcn.1400e1b00
mov qword [rbp + 0x30], 0x39
mov qword [rbp + 0x38], 0x3f
movups xmm0, xmmword [str.https:__vip.asus.com.cn_OnlineRegister_ProductActReg.aspx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402cda10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1402cda20]
movups xmmword [rax + 0x20], xmm0
movsd xmm1, qword [0x1402cda30]
movsd qword [rax + 0x30], xmm1
movzx ecx, byte [0x1402cda38]
mov byte [rax + 0x38], cl
mov byte [rax + 0x39], r12b
mov qword [rbp + 0x20], rax
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], SafeArrayLock
mov byte [rbp], r12b
lea ecx, [r12 + 0x40]
call fcn.1400e1b00
mov qword [rbp + 0x10], 0x36
mov qword [rbp + 0x18], 0x3f
movups xmm0, xmmword [str.https:__vip.asus.com_OnlineRegister_ProductActReg.aspx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402cda50]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1402cda60]
movups xmmword [rax + 0x20], xmm0
mov ecx, dword [0x1402cda70]
mov dword [rax + 0x30], ecx
movzx ecx, word [0x1402cda74]
mov word [rax + 0x34], cx
mov byte [rax + 0x36], r12b
mov qword [rbp], rax
mov dword [rsp + 0x48], r12d
mov byte [rsp + 0x30], r12b
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.1401f1760
test al, al
je 0x1401052f9
cmp byte [rsp + 0x30], r12b
jne 0x1401052f9
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
lea r8d, [r12 + 0x2c]
lea rdx, str._s____Action_refer_to_previous_record__0x_x_
lea rcx, [rbp - 0x60]
call fcn.1400f8950
mov r8d, dword [rsp + 0x48]
lea rdx, str.APRPClass2020::ActivateDevice
lea rcx, [rbp - 0x60]
call fcn.140195940
mov eax, dword [rsp + 0x48]
cmp eax, 9
ja 0x1401052bc
mov ecx, 0x214
bt ecx, eax
jae 0x1401052bc
lea r8, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae r8, qword [rbp + 0x20]
lea r9, [rbp + 0x20]
cmovae r9, qword [rbp + 0x20]
mov rdx, rdi
nop dword [rax + rax]
inc rdx
cmp byte [r9 + rdx], 0
jne 0x1401052b0
jmp 0x1401052ea
cmp eax, 3
jne 0x1401052f9
lea r8, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae r8, qword [rbp]
lea r9, [rbp]
cmovae r9, qword [rbp]
mov rdx, rdi
nop dword [rax + rax]
inc rdx
cmp byte [r9 + rdx], 0
jne 0x1401052e0
inc rdx
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], SafeArrayLock
mov ecx, 0x30
call fcn.1400e1b00
mov qword [rbp - 0x70], 0x20
mov qword [rbp - 0x68], 0x2f
movups xmm0, xmmword [str._APRP2020__ActivateDevice__SN_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402cdac8]
movups xmmword [rax + 0x10], xmm1
mov byte [rax + 0x20], 0
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
call fcn.140195010
lea rdx, str.ap29_re_
lea rcx, [rbp + 0x4f0]
call fcn.1400f4e20
mov rbx, rax
lea r8, str._asn
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], SafeArrayLock
mov ecx, 0x30
call fcn.1400e1b00
mov qword [rbp - 0x70], 0x22
mov qword [rbp - 0x68], 0x2f
movups xmm0, xmmword [str._APRP2020__ActivateDevice__MAC1_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402cdb08]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x1402cdb18]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
call fcn.140195010
lea rdx, str.ap29_re_
lea rcx, [rbp + 0x60]
call fcn.1400f4e20
mov rbx, rax
lea r8, str.ama_1
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], SafeArrayLock
mov ecx, 0x30
call fcn.1400e1b00
mov qword [rbp - 0x70], 0x23
mov qword [rbp - 0x68], 0x2f
movups xmm0, xmmword [str._APRP2020___ActivateDevice__MAC2_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402cdb38]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x1402cdb48]
mov word [rax + 0x20], cx
movzx ecx, byte [0x1402cdb4a]
mov byte [rax + 0x22], cl
mov byte [rax + 0x23], 0
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
call fcn.140195010
lea rdx, str.ap29_re_
lea rcx, [rbp + 0x78]
call fcn.1400f4e20
mov rbx, rax
lea r8, str.ama_2
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], SafeArrayLock
mov ecx, 0x30
call fcn.1400e1b00
mov qword [rbp - 0x70], 0x23
mov qword [rbp - 0x68], 0x2f
movups xmm0, xmmword [str._APRP2020___ActivateDevice__UUID_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402cdb68]
movups xmmword [rax + 0x10], xmm1
movzx edx, word [0x1402cdb78]
mov word [rax + 0x20], dx
movzx edx, byte [0x1402cdb7a]
mov byte [rax + 0x22], dl
mov byte [rax + 0x23], 0
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
call fcn.140195010
lea rdx, str.ap29_re_
mov rcx, qword [rsp + 0x40]
call fcn.1400f4e20
mov rbx, rax
lea r8, str.uid
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x40]
call fcn.140197310
nop
xor edx, edx
mov r8d, 0x12c
lea rcx, [rbp + 0x3c0]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8b, 1
lea rdx, [rbp + 0x3c0]
lea rcx, [rsp + 0x40]
call fcn.140199870
lea rax, [rbp + 0x3c0]
mov rdx, rdi
nop dword [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140105600
inc rdx
lea r8, [rbp + 0x3c0]
lea rcx, [rbp + 0x290]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s
nop
lea rcx, [rsp + 0x40]
call fcn.140197340
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
lea rax, [rbp + 0x290]
mov r8, rdi
inc r8
cmp word [rax + r8*2], 0
jne 0x140105645
lea rdx, [rbp + 0x290]
lea rcx, [rbp - 0x60]
call fcn.1400f8950
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x40]
call fcn.140202d30
nop
mov r8, rax
lea rdx, str._APRP2020___ActivateDevice__ModelName_
lea rcx, [rbp - 0x80]
call fcn.1400e1940
mov rcx, rax
call fcn.140195010
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1401056c5
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401056c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140106001
call fcn.14020be84
mov ecx, SafeArrayPutElement
call fcn.14020be48
mov rbx, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140105702
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [rbp + 0x290]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140105fc8
jmp 0x140105705
mov rbx, r12
mov qword [rsp + 0x40], rbx
test rbx, rbx
je 0x140105fbd
mov rax, qword [rbx + 8]
test rax, rax
jne 0x140105728
mov rcx, qword [rbx]
call fcn.1402415d0
mov qword [rbx + 8], rax
lea rdx, str.ap29_re_
mov rcx, rax
call fcn.1400f4e20
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.14010a810
lea r8, str.mn
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov r8d, SafeArrayLock
lea rdx, str.ASUSSystemAnalysis
lea rcx, [rbp - 0x60]
call fcn.1400f8950
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x40]
call fcn.140202d30
nop
mov r8, rax
lea rdx, str._APRP2020___ActivateDevice__AP_Name_
lea rcx, [rbp - 0x80]
call fcn.1400e1940
mov rcx, rax
call fcn.140195010
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14010580f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010580a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140106007
call fcn.14020be84
mov ecx, SafeArrayPutElement
call fcn.14020be48
mov rbx, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14010584c
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.ASUSSystemAnalysis
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140105fd3
jmp 0x14010584f
mov rbx, r12
mov qword [rsp + 0x40], rbx
test rbx, rbx
je 0x140105fbd
mov rax, qword [rbx + 8]
test rax, rax
jne 0x140105872
mov rcx, qword [rbx]
call fcn.1402415d0
mov qword [rbx + 8], rax
lea rdx, str.ap29_re_
mov rcx, rax
call fcn.1400f4e20
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.14010a810
lea r8, str.apn
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rbp - 0x40]
call fcn.1401eedd0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140202d30
nop
mov r8, rax
lea rdx, str._APRP2020___ActivateDevice__AP_Version_
lea rcx, [rbp - 0x80]
call fcn.1400e1940
mov rcx, rax
call fcn.140195010
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14010593b
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105936
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010600d
call fcn.14020be84
lea rcx, [rbp - 0x40]
call fcn.1401eedd0
mov r15, rax
cmp qword [rax + 0x18], 8
jb 0x140105951
mov r15, qword [rax]
mov ecx, SafeArrayPutElement
call fcn.14020be48
mov rbx, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14010598f
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140105992
test r15, r15
jne 0x140105fde
jmp 0x140105992
mov rbx, r12
mov qword [rsp + 0x40], rbx
test rbx, rbx
je 0x140106013
mov rax, qword [rbx + 8]
test rax, rax
jne 0x1401059b5
mov rcx, qword [rbx]
call fcn.1402415d0
mov qword [rbx + 8], rax
lea rdx, str.ap29_re_
mov rcx, rax
call fcn.1400f4e20
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.14010a810
nop
mov r8, qword [rbp - 0x28]
cmp r8, 8
jb 0x1401059ec
inc r8
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.1400f9f90
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
lea r8, str.apv
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], SafeArrayLock
mov byte [rbp - 0x80], 0
mov r8, rdi
inc r8
cmp byte [r14 + r8], 0
jne 0x140105a54
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.1400f8840
nop
lea r8, [rbp - 0x80]
lea rdx, str._APRP2020___ActivateDevice__Activate_Time_
lea rcx, [rbp - 0x60]
call fcn.1400e1940
mov rcx, rax
call fcn.140195010
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140105ac3
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105abe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010601e
call fcn.14020be84
lea rdx, str.ap29_re_
mov rcx, r14
call fcn.1400f4e20
mov rbx, rax
lea r8, str.lt
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rbp - 0x60]
mov qword [rsp + 0x38], rax
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov r8d, 9
lea rdx, str.FirstBoot
lea rcx, [rbp - 0x60]
call fcn.1400f8950
nop
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov r8d, 0x43
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSystemAnalysisAPRP
lea rcx, [rbp - 0x40]
call fcn.1400f8950
nop
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x40]
call fcn.1401de260
nop
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400eabe0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140202d30
nop
mov r8, rax
lea rdx, str._APRP2020___ActivateDevice__Local_Active_Time_
lea rcx, [rsp + 0x58]
call fcn.1400e1940
mov rcx, rax
call fcn.140195010
nop
mov r8, qword [rbp - 0x68]
cmp r8, 0x10
jb 0x140105bd6
inc r8
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.1400f9f50
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140104b50
nop
mov rbx, qword [rax]
test rbx, rbx
je 0x140105c11
mov rcx, qword [rbx + 8]
test rcx, rcx
jne 0x140105c14
mov rcx, qword [rbx]
call fcn.1402415d0
mov qword [rbx + 8], rax
mov rcx, rax
jmp 0x140105c14
mov rcx, r12
lea rdx, str.ap29_re_
call fcn.1400f4e20
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.14010a810
lea r8, str.lti
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
mov r8, rbx
mov edx, 0x200
lea rcx, [rbp + 0x90]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat_s
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x5f0]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp + 0x90]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], SafeArrayLock
mov byte [rbp - 0x80], 0
lea rax, [rbp + 0x90]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140105cb3
mov r8, rdi
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x80]
call fcn.1400f8840
nop
lea r8, [rbp - 0x80]
lea rdx, str._APRP2020___ActivateDevice__HTTP_URL:
lea rcx, [rsp + 0x58]
call fcn.1400e1940
mov rcx, rax
call fcn.140195010
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140105d29
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105d24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140106024
call fcn.14020be84
mov dword [rsp + 0x50], r12d
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
lea r9, [rbp + 0x5f0]
lea r8, [0x14010a880]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rdx, qword [0x1403e1f80]
test rdx, rdx
jne 0x140105d76
mov ebx, 0x1043e001
jmp 0x140105db9
mov rcx, r12
lea r8, [0x1402cdd08]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140105d9a
cmp rcx, 8
jne 0x140105d80
mov eax, r12d
jmp 0x140105d9f
sbb eax, eax
or eax, 1
neg eax
sbb ebx, ebx
and ebx, 0x1043ffff
mov rcx, rdx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [0x1403e1f80], r12
mov edx, ebx
lea rcx, [rbp - 0xb]
call fcn.1401048a0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], SafeArrayLock
mov byte [rbp - 0x80], 0
lea rcx, [rbp - 0xb]
cmp rax, rcx
je 0x140105df5
lea r8, [rbp - 0xb]
sub r8, rax
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400f8840
nop
lea r8, [rbp - 0x80]
lea rdx, str._APRP2020___ActivateDevice__Response_
lea rcx, [rsp + 0x58]
call fcn.1400e1940
mov rcx, rax
call fcn.140195010
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140105e4f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105e49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010602a
call fcn.14020be84
nop
lea rcx, [rbp + 0x40]
call fcn.1400ebe10
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140105e94
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105e8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140106030
call fcn.14020be84
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], SafeArrayLock
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140105edf
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105eda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140106036
call fcn.14020be84
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], SafeArrayLock
mov byte [rbp + 0x20], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140105f29
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140105f24
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140105fe9
mov rcx, rax
call fcn.14020be84
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], SafeArrayLock
mov byte [rsi], 0
mov eax, ebx
jmp 0x140105f8b
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140105f76
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140105f71
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140105fe9
mov rcx, r8
call fcn.14020be84
xor ebx, ebx
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], SafeArrayLock
mov byte [rsi], bl
mov eax, 0x1043e002
mov rcx, qword [rbp + 0x9f0]
xor rcx, rsp
call fcn.14020c3e0
mov rbx, qword [rsp + 0xb50]
movaps xmm6, xmmword [rsp + 0xb00]
add rsp, 0xb10
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.140241480
nop
mov ecx, 0x8007000e
call fcn.140241480
nop
mov ecx, 0x8007000e
call fcn.140241480
nop
mov ecx, 0x8007000e
call fcn.140241480
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
mov ecx, 0x8007000e
call fcn.140241480
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3