Function at 0x1401a69f0
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x3b0
mov rax, qword [0x14035cb78]
xor rax, rsp
mov qword [rsp + 0x3a8], rax
lea rcx, [rsp + 0x2a8]
call fcn.1401ac120
nop
mov r8, 0xffffffffffffffff
lea rdx, [0x140278dd0]
lea rcx, [rsp + 0x2a8]
call fcn.1401b5ac0
mov r8, rax
xor r14d, r14d
mov qword [rsp + 0x228], r14
mov qword [rsp + 0x238], r14
mov qword [rsp + 0x240], 7
mov word [rsp + 0x228], r14w
cmp qword [rsp + 0x2b8], rax
cmovb r8, qword [rsp + 0x2b8]
lea rdx, [rsp + 0x2a8]
cmp qword [rsp + 0x2c0], 8
cmovae rdx, qword [rsp + 0x2a8]
lea rcx, [rsp + 0x228]
call fcn.1400d07a0
nop
movabs r13, 0x7ffffffffffffffe
mov rax, r13
mov rcx, qword [rsp + 0x238]
sub rax, rcx
cmp rax, 0x2c
jb 0x1401a7f5d
lea r15, [rsp + 0x228]
cmp qword [rsp + 0x240], 8
cmovae r15, qword [rsp + 0x228]
mov qword [rsp + 0x1a8], r14
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x1c0], r14
lea rsi, [rcx + 0x2c]
mov ebx, 7
lea rdi, [rsp + 0x1a8]
cmp rsi, rbx
jbe 0x1401a6b55
mov rbx, rsi
or rbx, 7
cmp rbx, r13
jbe 0x1401a6c59
mov rbx, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400b9950
mov rdi, rax
mov qword [rsp + 0x1a8], rax
mov rcx, qword [rsp + 0x238]
mov qword [rsp + 0x1b8], rsi
mov qword [rsp + 0x1c0], rbx
lea rbx, [rcx + rcx]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.1401ff6b0
movaps xmm0, xmmword [str.ASUSSoftwareManagerAsusSoftwareManager.exe]
movups xmmword [rdi + rbx], xmm0
movaps xmm1, xmmword [0x14028e290]
movups xmmword [rdi + rbx + 0x10], xmm1
movaps xmm0, xmmword [0x14028e2a0]
movups xmmword [rdi + rbx + 0x20], xmm0
movaps xmm1, xmmword [0x14028e2b0]
movups xmmword [rdi + rbx + 0x30], xmm1
movaps xmm0, xmmword [0x14028e2c0]
movups xmmword [rdi + rbx + 0x40], xmm0
movsd xmm1, qword [0x14028e2d0]
movsd qword [rdi + rbx + 0x50], xmm1
mov word [rdi + rsi*2], r14w
lea rcx, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 8
cmovae rcx, qword [rsp + 0x1a8]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401a7d52
mov qword [rsp + 0x1e8], r14
mov qword [rsp + 0x1f8], r14
mov qword [rsp + 0x200], 7
mov word [rsp + 0x1e8], r14w
mov r8d, 0x35
lea rdx, str.C:ProgramDataASUSASUS_System_Control_Interfacelog
lea rcx, [rsp + 0x1e8]
call fcn.1400d07a0
nop
lea rcx, [rsp + 0x368]
call fcn.1401ada50
mov qword [rsp + 0x50], rax
mov rax, r13
mov rdi, qword [rsp + 0x1f8]
sub rax, rdi
cmp rax, 0x15
jb 0x1401a7f63
jmp 0x1401a6c81
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs r12, 0x7fffffffffffffff
cmp rcx, r12
ja 0x1401a7f69
jmp 0x1401a6b37
lea r12, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 8
cmovae r12, qword [rsp + 0x1e8]
mov qword [rsp + 0x2c8], r14
mov qword [rsp + 0x2d8], r14
mov qword [rsp + 0x2e0], r14
lea r15, [rdi + 0x15]
mov ebx, 7
lea rsi, [rsp + 0x2c8]
cmp r15, rbx
jbe 0x1401a6d04
mov rbx, r15
or rbx, 7
cmp rbx, r13
jbe 0x1401a6dde
mov rbx, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400b9950
mov rsi, rax
mov qword [rsp + 0x2c8], rax
mov rdi, qword [rsp + 0x1f8]
mov qword [rsp + 0x2d8], r15
mov qword [rsp + 0x2e0], rbx
lea rbx, [rdi + rdi]
mov qword [rsp + 0xb0], rbx
mov r8, rbx
mov rdx, r12
mov rcx, rsi
call fcn.1401ff6b0
movups xmm0, xmmword [str.AsusSoftwareManager_]
movups xmmword [rsi + rbx], xmm0
movups xmm1, xmmword [0x14028e370]
movups xmmword [rsi + rbx + 0x10], xmm1
movsd xmm0, qword [0x14028e380]
movsd qword [rsi + rbx + 0x20], xmm0
movzx eax, word [0x14028e388]
mov word [rsi + rbx + 0x28], ax
mov word [rsi + r15*2], r14w
mov r9, qword [rsp + 0x50]
lea r8, [rsp + 0x2c8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x288]
call fcn.140118f60
nop
mov rdx, qword [rsp + 0x298]
mov r8, qword [rsp + 0x2a0]
mov rax, r8
sub rax, rdx
cmp rax, 4
jb 0x1401a6e07
lea rcx, [rdx + 4]
mov qword [rsp + 0x298], rcx
lea rax, [rsp + 0x288]
cmp r8, 8
cmovae rax, qword [rsp + 0x288]
movabs r8, 0x6500780065002e
mov qword [rax + rdx*2], r8
mov word [rax + rcx*2], r14w
lea rax, [rsp + 0x288]
jmp 0x1401a6e36
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401a7f6f
jmp 0x1401a6ce6
lfence
mov qword [rsp + 0x20], 4
lea r9, str..exe
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [rsp + 0x288]
call fcn.140103ec0
mov rdi, qword [rsp + 0x1f8]
mov qword [rsp + 0x1c8], r14
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1d8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x2a0]
cmp rdx, 8
jb 0x1401a6ebd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a6eb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7f75
call fcn.1401c72f8
mov qword [rsp + 0x298], r14
mov qword [rsp + 0x2a0], 7
mov word [rsp + 0x288], r14w
mov rdx, qword [rsp + 0x2e0]
cmp rdx, 8
jb 0x1401a6f23
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a6f1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7f7b
call fcn.1401c72f8
nop
mov rdx, qword [rsp + 0x380]
cmp rdx, 8
jb 0x1401a6f6b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a6f66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7f81
call fcn.1401c72f8
mov qword [rsp + 0x378], r14
mov qword [rsp + 0x380], 7
mov word [rsp + 0x368], r14w
mov qword [rsp + 0x268], r14
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x280], 7
mov word [rsp + 0x268], r14w
mov r8d, 0x1a
lea rdx, str.AsusSoftwareManager_.exe
lea rcx, [rsp + 0x268]
call fcn.1400d07a0
nop
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x88], r14
lea r15, [rsp + 0x268]
cmp qword [rsp + 0x280], 8
cmovae r15, qword [rsp + 0x268]
mov rsi, qword [rsp + 0x278]
movabs r12, 0x7fffffffffffffff
cmp rsi, 8
jae 0x1401a7029
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x70], xmm0
mov ebx, 7
jmp 0x1401a7077
mov rbx, rsi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rcx, [rbx + 1]
cmp rcx, r12
ja 0x1401a7f87
lfence
add rcx, rcx
call fcn.1400b9950
mov qword [rsp + 0x70], rax
mov rsi, qword [rsp + 0x278]
lea r8, [rsi*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1401ff6b0
mov rdi, qword [rsp + 0x1f8]
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x90], r14
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], r14
lea rsi, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 8
cmovae rsi, qword [rsp + 0x1e8]
cmp rdi, 8
jae 0x1401a70d1
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x90], xmm0
mov ebx, 7
jmp 0x1401a711e
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rcx, [rbx + 1]
cmp rcx, r12
ja 0x1401a7f8d
lfence
add rcx, rcx
call fcn.1400b9950
mov qword [rsp + 0x90], rax
mov r8, qword [rsp + 0xb0]
add r8, 2
mov rdx, rsi
mov rcx, rax
call fcn.1401ff6b0
mov rdi, qword [rsp + 0x1f8]
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], rbx
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x58]
call fcn.1401ac3a0
nop
mov r12b, 1
mov ecx, r14d
movzx ebx, byte [rsp + 0x40]
mov dword [rsp + 0x50], ecx
mov rsi, qword [rsp + 0x60]
mov rax, rsi
mov rdi, qword [rsp + 0x58]
sub rax, rdi
sar rax, 5
movsxd r15, ecx
cmp r15, rax
jae 0x1401a74f9
shl r15, 5
lea r9, [r15 + rdi]
mov rax, r9
mov rdi, qword [r9 + 0x18]
cmp rdi, 8
jb 0x1401a718d
mov rax, qword [r9]
lea r10, [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae r10, rsi
mov r11, qword [r9 + 0x10]
mov r13, qword [rsp + 0x1d8]
mov rcx, r13
cmp r11, r13
cmovb rcx, r11
test rcx, rcx
je 0x1401a71e4
sub r10, rax
nop dword [rax + rax]
movzx edx, word [r10 + rax]
cmp dx, word [rax]
jne 0x1401a71f0
add rax, 2
sub rcx, 1
jne 0x1401a71d0
cmp r13, r11
jae 0x1401a7201
mov eax, 0xffffffff
jmp 0x1401a7207
mov eax, 1
mov rcx, 0xffffffffffffffff
cmovb eax, ecx
jmp 0x1401a7207
mov eax, r14d
seta al
test eax, eax
jne 0x1401a746f
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r13
cmp rax, 0x2a
jb 0x1401a7f93
lea r12, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae r12, rsi
mov qword [rsp + 0x208], r14
mov qword [rsp + 0x218], r14
mov qword [rsp + 0x220], r14
lea r15, [r13 + 0x2a]
mov edi, 7
lea rsi, [rsp + 0x208]
cmp r15, rdi
jbe 0x1401a729f
mov rdi, r15
or rdi, 7
cmp rdi, rcx
jbe 0x1401a7369
mov rdi, rcx
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400b9950
mov rsi, rax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x218], r15
mov qword [rsp + 0x220], rdi
movaps xmm0, xmmword [str._Utility__CopySoftwareManagerBinary__File]
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x14028e400]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x14028e410]
movups xmmword [rsi + 0x20], xmm0
movaps xmm1, xmmword [0x14028e420]
movups xmmword [rsi + 0x30], xmm1
movaps xmm0, xmmword [0x14028e430]
movups xmmword [rsi + 0x40], xmm0
mov eax, dword [0x14028e440]
mov dword [rsi + 0x50], eax
lea rcx, [rsi + 0x54]
lea r8, [r13*2]
mov rdx, r12
call fcn.1401ff6b0
mov word [rsi + r15*2], r14w
mov rcx, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x220]
mov rax, rdx
sub rax, rcx
cmp rax, 0xf
jb 0x1401a7392
lea rsi, [rcx + 0xf]
mov qword [rsp + 0x218], rsi
lea rdi, [rsp + 0x208]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x208]
lea rcx, [rdi + rcx*2]
mov r8d, 0x1e
lea rdx, str._already_exist.
call fcn.1401ff6b0
mov word [rdi + rsi*2], r14w
lea rax, [rsp + 0x208]
jmp 0x1401a73b9
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rcx, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401a7f98
jmp 0x1401a7289
lfence
mov qword [rsp + 0x20], SafeArrayGetLBound
lea r9, str._already_exist.
xor r8d, r8d
lea edx, [r8 + 0xf]
lea rcx, [rsp + 0x208]
call fcn.140103ec0
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rcx, [rsp + 0xb8]
call fcn.140163440
nop
mov rdx, qword [rsp + 0x220]
cmp rdx, 8
jb 0x1401a744e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7449
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7f9d
call fcn.1401c72f8
mov word [rsp + 0x208], r14w
xor r12b, r12b
movabs r13, 0x7ffffffffffffffe
mov ecx, dword [rsp + 0x50]
inc ecx
jmp 0x1401a7151
cmp rdi, 8
jb 0x1401a7478
mov r9, qword [r9]
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8, qword [rsp + 0x58]
add r8, r15
mov rcx, qword [r8 + 0x10]
movabs r13, 0x7ffffffffffffffe
mov rax, r13
sub rax, rcx
cmp rax, 0x2c
jb 0x1401a7fa3
lfence
mov rax, r8
cmp qword [r8 + 0x18], 8
jb 0x1401a74b7
mov rax, qword [r8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2c
lea r9, str._Utility__CopySoftwareManagerBinary__Delete
movzx edx, bl
lea rcx, [rsp + 0x128]
call fcn.14010add0
lea rcx, [rsp + 0x128]
call fcn.140163440
mov ecx, dword [rsp + 0x50]
inc ecx
jmp 0x1401a7151
test r12b, r12b
jne 0x1401a7798
test rdi, rdi
je 0x1401a756d
cmp rdi, rsi
je 0x1401a7526
nop dword [rax]
mov rcx, rdi
call fcn.1400ec0a0
add rdi, 0x20
cmp rdi, rsi
jne 0x1401a7510
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x1401a7557
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fd8
mov rcx, rdi
call fcn.1401c72f8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r14
mov rax, qword [rsp + 0x280]
cmp rax, 8
jb 0x1401a75b6
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a75b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fde
call fcn.1401c72f8
nop
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 8
jb 0x1401a75fe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a75f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fe4
call fcn.1401c72f8
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e0], 7
mov word [rsp + 0x1c8], r14w
mov rax, qword [rsp + 0x200]
cmp rax, 8
jb 0x1401a7664
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a765e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fea
call fcn.1401c72f8
nop
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 8
jb 0x1401a76ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a76a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fa9
call fcn.1401c72f8
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x1c0], 7
mov word [rsp + 0x1a8], r14w
mov rax, qword [rsp + 0x240]
cmp rax, 8
jb 0x1401a7711
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a770c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7faf
call fcn.1401c72f8
mov qword [rsp + 0x238], r14
mov qword [rsp + 0x240], 7
mov word [rsp + 0x228], r14w
mov rdx, qword [rsp + 0x2c0]
cmp rdx, 8
jb 0x1401a7776
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7771
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fb5
call fcn.1401c72f8
mov qword [rsp + 0x2b8], r14
mov qword [rsp + 0x2c0], 7
mov word [rsp + 0x2a8], r14w
jmp 0x1401a7f2b
lea rdx, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae rdx, qword [rsp + 0x1c8]
lea rcx, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 8
cmovae rcx, qword [rsp + 0x1a8]
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, str.success
lea rdx, str.fail
test eax, eax
cmovne rdx, rcx
mov qword [rsp + 0x308], r14
mov qword [rsp + 0x318], r14
mov qword [rsp + 0x320], 7
mov word [rsp + 0x308], r14w
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1401a7820
mov r8, rax
lea rcx, [rsp + 0x308]
call fcn.1400d07a0
nop
mov r15, qword [rsp + 0x1d8]
mov rax, r13
sub rax, r15
cmp rax, 0x2a
jb 0x1401a7fbb
lea r12, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae r12, qword [rsp + 0x1c8]
mov qword [rsp + 0x248], r14
mov qword [rsp + 0x258], r14
mov qword [rsp + 0x260], r14
lea rsi, [r15 + 0x2a]
mov ebx, 7
lea rdi, [rsp + 0x248]
cmp rsi, rbx
jbe 0x1401a78ce
mov rbx, rsi
or rbx, 7
cmp rbx, r13
jbe 0x1401a7994
mov rbx, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400b9950
mov rdi, rax
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], rbx
movaps xmm0, xmmword [str._Utility__CopySoftwareManagerBinary__Copy]
movups xmmword [rdi], xmm0
movaps xmm1, xmmword [0x14028e500]
movups xmmword [rdi + 0x10], xmm1
movaps xmm0, xmmword [0x14028e510]
movups xmmword [rdi + 0x20], xmm0
movaps xmm1, xmmword [0x14028e520]
movups xmmword [rdi + 0x30], xmm1
movaps xmm0, xmmword [0x14028e530]
movups xmmword [rdi + 0x40], xmm0
mov eax, dword [0x14028e540]
mov dword [rdi + 0x50], eax
lea rcx, [rdi + 0x54]
lea r8, [r15 + r15]
mov rdx, r12
call fcn.1401ff6b0
mov word [rdi + rsi*2], r14w
mov rcx, qword [rsp + 0x258]
mov rdx, qword [rsp + 0x260]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x1401a79bd
lea rdi, [rcx + 0xa]
mov qword [rsp + 0x258], rdi
lea rbx, [rsp + 0x248]
cmp rdx, 8
cmovae rbx, qword [rsp + 0x248]
lea rcx, [rbx + rcx*2]
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
lea rdx, str._result_:
call fcn.1401ff6b0
mov word [rbx + rdi*2], r14w
lea rax, [rsp + 0x248]
jmp 0x1401a79e3
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401a7fc0
jmp 0x1401a78b8
lfence
mov eax, 0xa
mov qword [rsp + 0x20], rax
lea r9, str._result_:
xor r8d, r8d
mov edx, eax
lea rcx, [rsp + 0x248]
call fcn.140103ec0
mov qword [rsp + 0x2e8], r14
mov qword [rsp + 0x2f8], r14
mov qword [rsp + 0x300], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2e8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2f8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rdx, [rsp + 0x308]
cmp qword [rsp + 0x320], 8
cmovae rdx, qword [rsp + 0x308]
mov r8, qword [rsp + 0x318]
lea rcx, [rsp + 0x2e8]
call fcn.140197ad0
mov qword [rsp + 0xd8], r14
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rcx, [rsp + 0xd8]
call fcn.140163440
nop
mov rdx, qword [rsp + 0x300]
cmp rdx, 8
jb 0x1401a7ae6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7ae1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fc6
call fcn.1401c72f8
mov qword [rsp + 0x2f8], r14
mov qword [rsp + 0x300], 7
mov word [rsp + 0x2e8], r14w
mov rdx, qword [rsp + 0x260]
cmp rdx, 8
jb 0x1401a7b4c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7b46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fcc
call fcn.1401c72f8
nop
mov rdx, qword [rsp + 0x320]
cmp rdx, 8
jb 0x1401a7b95
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7b8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fd2
call fcn.1401c72f8
nop
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x1401a7c54
mov rdi, qword [rsp + 0x60]
cmp rbx, rdi
je 0x1401a7c0d
nop dword [rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1401a7bef
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1401a7bea
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401a7fd8
mov rcx, r8
call fcn.1401c72f8
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
add rbx, 0x20
cmp rbx, rdi
jne 0x1401a7bb0
mov rbx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x1401a7c3e
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fd8
mov rcx, rbx
call fcn.1401c72f8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r14
mov rax, qword [rsp + 0x280]
cmp rax, 8
jb 0x1401a7c9d
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7c97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fde
call fcn.1401c72f8
nop
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 8
jb 0x1401a7ce5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7ce0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fe4
call fcn.1401c72f8
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e0], 7
mov word [rsp + 0x1c8], r14w
mov rax, qword [rsp + 0x200]
cmp rax, 8
jb 0x1401a7e2c
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7e26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7fea
jmp 0x1401a7e26
sub r13, qword [rsp + 0x1b8]
cmp r13, 0x2a
jb 0x1401a7ff0
lfence
lea rcx, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 8
cmovae rcx, qword [rsp + 0x1a8]
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 0x2a
lea r9, str._Utility__CopySoftwareManagerBinary__File
lea r8, [rsp + 0x1a8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x388]
call fcn.14010add0
nop
lea r8, str._not_exist.
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x148]
call fcn.140118890
mov rcx, rax
call fcn.1401639e0
nop
mov rdx, qword [rsp + 0x3a0]
cmp rdx, 8
jb 0x1401a7e2c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7e26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7ff5
call fcn.1401c72f8
nop
jmp 0x1401a7e31
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 8
jb 0x1401a7e7d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7e78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7ffb
jmp 0x1401a7e78
call fcn.1401c72f8
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x1c0], 7
mov word [rsp + 0x1a8], r14w
mov rax, qword [rsp + 0x240]
cmp rax, 8
jb 0x1401a7ee3
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7edd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a8001
call fcn.1401c72f8
nop
mov rdx, qword [rsp + 0x2c0]
cmp rdx, 8
jb 0x1401a7f2b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7f26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a8007
call fcn.1401c72f8
mov rcx, qword [rsp + 0x3a8]
xor rcx, rsp
call fcn.1401c7850
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.1400d0220
nop
call fcn.1400d0220
nop
call fcn.1400d0090
nop
call fcn.1400d0090
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call fcn.1400d0090
nop
call fcn.1400d0090
nop
call fcn.1400d0220
call fcn.1400d0090
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call fcn.1400d0220
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call fcn.1400d0220
call fcn.1400d0090
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call fcn.1400d0220
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3