Function at 0x1401e61e0
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x540
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1403debe8]
xor rax, rsp
mov qword [rsp + 0x510], rax
mov r12, rcx
lea rcx, [rsp + 0x2e8]
call fcn.1401ebe20
nop
mov r8, 0xffffffffffffffff
lea rdx, [0x1402d1f10]
lea rcx, [rsp + 0x2e8]
call fcn.1401f9b70
mov r8, rax
xor r14d, r14d
mov qword [rsp + 0x268], r14
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x280], 7
mov word [rsp + 0x268], r14w
cmp qword [rsp + 0x2f8], rax
cmovb r8, qword [rsp + 0x2f8]
lea rdx, [rsp + 0x2e8]
cmp qword [rsp + 0x300], 8
cmovae rdx, qword [rsp + 0x2e8]
lea rcx, [rsp + 0x268]
call fcn.1400f8950
nop
movabs r13, 0x7ffffffffffffffe
mov rax, r13
mov rcx, qword [rsp + 0x278]
sub rax, rcx
cmp rax, 0x2c
jb 0x1401e7c21
lea r15, [rsp + 0x268]
cmp qword [rsp + 0x280], 8
cmovae r15, qword [rsp + 0x268]
mov qword [rsp + 0x1e8], r14
mov qword [rsp + 0x1f8], r14
mov qword [rsp + 0x200], r14
lea rsi, [rcx + 0x2c]
mov ebx, 7
lea rdi, [rsp + 0x1e8]
cmp rsi, rbx
jbe 0x1401e634a
mov rbx, rsi
or rbx, 7
cmp rbx, r13
jbe 0x1401e6481
mov rbx, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400e1b00
mov rdi, rax
mov qword [rsp + 0x1e8], rax
mov rcx, qword [rsp + 0x278]
mov qword [rsp + 0x1f8], rsi
mov qword [rsp + 0x200], rbx
lea rbx, [rcx + rcx]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.140244220
movaps xmm0, xmmword [str.ASUSSoftwareManagerAsusSoftwareManager.exe]
movups xmmword [rbx + rdi], xmm0
movaps xmm1, xmmword [0x1402e93c0]
movups xmmword [rbx + rdi + 0x10], xmm1
movaps xmm0, xmmword [0x1402e93d0]
movups xmmword [rbx + rdi + 0x20], xmm0
movaps xmm1, xmmword [0x1402e93e0]
movups xmmword [rbx + rdi + 0x30], xmm1
movaps xmm0, xmmword [0x1402e93f0]
movups xmmword [rbx + rdi + 0x40], xmm0
movsd xmm1, qword [0x1402e9400]
movsd qword [rbx + rdi + 0x50], xmm1
mov word [rdi + rsi*2], r14w
lea rax, [rsp + 0x1e8]
cmp r12, rax
je 0x1401e63f2
lea rdx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 8
cmovae rdx, qword [rsp + 0x1e8]
mov r8, qword [rsp + 0x1f8]
mov rcx, r12
call fcn.1400f8950
nop
lea rcx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 8
cmovae rcx, qword [rsp + 0x1e8]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401e7a4c
mov qword [rsp + 0x208], r14
mov qword [rsp + 0x218], r14
mov qword [rsp + 0x220], 7
mov word [rsp + 0x208], r14w
mov r8d, 0x35
lea rdx, str.C:ProgramDataASUSASUS_System_Control_Interfacelog
lea rcx, [rsp + 0x208]
call fcn.1400f8950
nop
lea rcx, [rsp + 0x408]
call fcn.1401eedd0
mov r12, rax
mov rax, r13
sub rax, qword [rsp + 0x218]
cmp rax, 0x15
jb 0x1401e7c27
jmp 0x1401e64a9
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401e7c2d
jmp 0x1401e632c
lea r15, [rsp + 0x208]
cmp qword [rsp + 0x220], 8
cmovae r15, qword [rsp + 0x208]
mov qword [rsp + 0x308], r14
mov qword [rsp + 0x318], r14
mov qword [rsp + 0x320], r14
mov rsi, qword [rsp + 0x218]
add rsi, 0x15
mov ebx, 7
lea rdi, [rsp + 0x308]
cmp rsi, rbx
jbe 0x1401e652c
mov rbx, rsi
or rbx, 7
cmp rbx, r13
jbe 0x1401e6609
mov rbx, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400e1b00
mov rdi, rax
mov qword [rsp + 0x308], rax
mov qword [rsp + 0x318], rsi
mov qword [rsp + 0x320], rbx
mov rcx, qword [rsp + 0x218]
lea rbx, [rcx + rcx]
mov qword [rsp + 0x50], rbx
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.140244220
movups xmm0, xmmword [str.AsusSoftwareManager_]
movups xmmword [rbx + rdi], xmm0
movups xmm1, xmmword [0x1402e94a0]
movups xmmword [rbx + rdi + 0x10], xmm1
movsd xmm0, qword [0x1402e94b0]
movsd qword [rbx + rdi + 0x20], xmm0
movzx eax, word [0x1402e94b8]
mov word [rbx + rdi + 0x28], ax
mov word [rdi + rsi*2], r14w
mov r9, r12
lea r8, [rsp + 0x308]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x2c8]
call fcn.140122aa0
nop
mov rdx, qword [rsp + 0x2d8]
mov r8, qword [rsp + 0x2e0]
mov rax, r8
sub rax, rdx
cmp rax, 4
jb 0x1401e6632
lea rcx, [rdx + 4]
mov qword [rsp + 0x2d8], rcx
lea rax, [rsp + 0x2c8]
cmp r8, 8
cmovae rax, qword [rsp + 0x2c8]
movabs r8, 0x6500780065002e
mov qword [rax + rdx*2], r8
mov word [rax + rcx*2], r14w
lea rax, [rsp + 0x2c8]
jmp 0x1401e6659
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401e7c33
jmp 0x1401e6516
lfence
mov qword [rsp + 0x20], 4
lea r9, str..exe
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [rsp + 0x2c8]
call fcn.140122920
mov qword [rsp + 0x1c8], r14
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1d8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x2e0]
cmp rdx, 8
jb 0x1401e66e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e66db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c39
call fcn.14020be84
mov qword [rsp + 0x2d8], r14
mov qword [rsp + 0x2e0], 7
mov word [rsp + 0x2c8], r14w
mov rdx, qword [rsp + 0x320]
cmp rdx, 8
jb 0x1401e6746
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6740
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c3f
call fcn.14020be84
nop
mov rdx, qword [rsp + 0x420]
cmp rdx, 8
jb 0x1401e678e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x408]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6789
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c45
call fcn.14020be84
mov qword [rsp + 0x418], r14
mov qword [rsp + 0x420], 7
mov word [rsp + 0x408], r14w
mov qword [rsp + 0x2a8], r14
mov qword [rsp + 0x2b8], r14
mov qword [rsp + 0x2c0], 7
mov word [rsp + 0x2a8], r14w
mov r8d, 0x1a
lea rdx, str.AsusSoftwareManager_.exe
lea rcx, [rsp + 0x2a8]
call fcn.1400f8950
nop
lea rax, [rsp + 0x98]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x98], r14
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], r14
lea rsi, [rsp + 0x2a8]
cmp qword [rsp + 0x2c0], 8
cmovae rsi, qword [rsp + 0x2a8]
mov rdi, qword [rsp + 0x2b8]
movabs r15, 0x7fffffffffffffff
cmp rdi, 8
jae 0x1401e6854
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x98], xmm0
mov ebx, 7
jmp 0x1401e689d
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rcx, [rbx + 1]
cmp rcx, r15
ja 0x1401e7c4b
lfence
add rcx, rcx
call fcn.1400e1b00
mov qword [rsp + 0x98], rax
mov rdi, qword [rsp + 0x2b8]
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140244220
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], r14
lea rdi, [rsp + 0x208]
cmp qword [rsp + 0x220], 8
cmovae rdi, qword [rsp + 0x208]
cmp qword [rsp + 0x218], 8
jae 0x1401e68f6
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x78], xmm0
mov ebx, 7
jmp 0x1401e693a
mov rbx, qword [rsp + 0x218]
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rcx, [rbx + 1]
cmp rcx, r15
ja 0x1401e7c51
lfence
add rcx, rcx
call fcn.1400e1b00
mov qword [rsp + 0x78], rax
mov r8, qword [rsp + 0x50]
add r8, 2
mov rdx, rdi
mov rcx, rax
call fcn.140244220
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x58]
call fcn.1401ed720
nop
mov byte [rsp + 0x40], 1
mov ecx, r14d
movzx ebx, byte [rsp + 0x40]
mov dword [rsp + 0x50], ecx
mov rsi, qword [rsp + 0x60]
mov rax, rsi
mov rdi, qword [rsp + 0x58]
sub rax, rdi
sar rax, 5
movsxd r15, ecx
cmp r15, rax
jae 0x1401e6d17
shl r15, 5
lea r10, [rdi + r15]
mov rax, r10
mov rdi, qword [r10 + 0x18]
cmp rdi, 8
jb 0x1401e69b3
mov rax, qword [r10]
lea r9, [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae r9, rsi
mov r11, qword [r10 + 0x10]
mov r12, qword [rsp + 0x1d8]
mov rcx, r12
cmp r11, r12
cmovb rcx, r11
test rcx, rcx
je 0x1401e6a04
sub r9, rax
nop
movzx edx, word [rax + r9]
cmp dx, word [rax]
jne 0x1401e6a10
add rax, 2
sub rcx, 1
jne 0x1401e69f0
cmp r12, r11
jae 0x1401e6a21
mov eax, 0xffffffff
jmp 0x1401e6a27
mov eax, 1
mov rcx, 0xffffffffffffffff
cmovb eax, ecx
jmp 0x1401e6a27
mov eax, r14d
seta al
test eax, eax
jne 0x1401e6c97
mov rax, r13
sub rax, r12
cmp rax, 0x33
jb 0x1401e7c57
lea rax, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae rax, rsi
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x228], r14
mov qword [rsp + 0x238], r14
mov qword [rsp + 0x240], r14
lea r15, [r12 + 0x33]
mov edi, 7
lea rsi, [rsp + 0x228]
cmp r15, rdi
jbe 0x1401e6abb
mov rdi, r15
or rdi, 7
cmp rdi, r13
jbe 0x1401e6b99
mov rdi, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400e1b00
mov rsi, rax
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x238], r15
mov qword [rsp + 0x240], rdi
movaps xmm0, xmmword [str._Utility__CopySoftwareManagerBinaryAndEtlLog__File]
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x1402e9530]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x1402e9540]
movups xmmword [rsi + 0x20], xmm0
movaps xmm1, xmmword [0x1402e9550]
movups xmmword [rsi + 0x30], xmm1
movaps xmm0, xmmword [0x1402e9560]
movups xmmword [rsi + 0x40], xmm0
movaps xmm1, xmmword [0x1402e9570]
movups xmmword [rsi + 0x50], xmm1
mov eax, dword [0x1402e9580]
mov dword [rsi + 0x60], eax
movzx eax, word [0x1402e9584]
mov word [rsi + 0x64], ax
lea rcx, [rsi + 0x66]
lea r8, [r12 + r12]
mov rdx, qword [rsp + 0x70]
call fcn.140244220
mov word [rsi + r15*2], r14w
mov rcx, qword [rsp + 0x238]
mov rdx, qword [rsp + 0x240]
mov rax, rdx
sub rax, rcx
cmp rax, 0xf
jb 0x1401e6bc2
lea rsi, [rcx + 0xf]
mov qword [rsp + 0x238], rsi
lea rdi, [rsp + 0x228]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x228]
lea rcx, [rdi + rcx*2]
mov r8d, 0x1e
lea rdx, str._already_exist.
call fcn.140244220
mov word [rdi + rsi*2], r14w
lea rax, [rsp + 0x228]
jmp 0x1401e6be9
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rcx, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401e7c5c
jmp 0x1401e6aa5
lfence
mov qword [rsp + 0x20], SafeArrayLock
lea r9, str._already_exist.
xor r8d, r8d
lea edx, [r8 + 0xf]
lea rcx, [rsp + 0x228]
call fcn.140122920
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rcx, [rsp + 0xb8]
call fcn.1401953a0
nop
mov rdx, qword [rsp + 0x240]
cmp rdx, 8
jb 0x1401e6c7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6c79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c61
call fcn.14020be84
mov word [rsp + 0x228], r14w
mov byte [rsp + 0x40], 0
mov ecx, dword [rsp + 0x50]
inc ecx
jmp 0x1401e6977
cmp rdi, 8
jb 0x1401e6ca0
mov r10, qword [r10]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8, qword [rsp + 0x58]
add r8, r15
mov rcx, qword [r8 + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0x35
jb 0x1401e7c67
lfence
mov rax, r8
cmp qword [r8 + 0x18], 8
jb 0x1401e6cd5
mov rax, qword [r8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x35
lea r9, str._Utility__CopySoftwareManagerBinaryAndEtlLog__Delete
movzx edx, bl
lea rcx, [rsp + 0x128]
call fcn.140139be0
lea rcx, [rsp + 0x128]
call fcn.1401953a0
mov ecx, dword [rsp + 0x50]
inc ecx
jmp 0x1401e6977
cmp byte [rsp + 0x40], 0
jne 0x1401e6fb8
test rdi, rdi
je 0x1401e6d8d
cmp rdi, rsi
je 0x1401e6d46
nop dword [rax]
mov rcx, rdi
call fcn.1401156c0
add rdi, 0x20
cmp rdi, rsi
jne 0x1401e6d30
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x1401e6d77
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cd2
mov rcx, rdi
call fcn.14020be84
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r14
mov rdx, qword [rsp + 0x2c0]
cmp rdx, 8
jb 0x1401e6dd6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6dd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cd8
call fcn.14020be84
nop
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 8
jb 0x1401e6e1e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6e19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cde
call fcn.14020be84
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e0], 7
mov word [rsp + 0x1c8], r14w
mov rdx, qword [rsp + 0x220]
cmp rdx, 8
jb 0x1401e6e84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6e7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7ce4
call fcn.14020be84
nop
mov rdx, qword [rsp + 0x200]
cmp rdx, 8
jb 0x1401e6ecc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6ec7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c6d
call fcn.14020be84
mov qword [rsp + 0x1f8], r14
mov qword [rsp + 0x200], 7
mov word [rsp + 0x1e8], r14w
mov rdx, qword [rsp + 0x280]
cmp rdx, 8
jb 0x1401e6f31
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6f2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c73
call fcn.14020be84
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x280], 7
mov word [rsp + 0x268], r14w
mov rdx, qword [rsp + 0x300]
cmp rdx, 8
jb 0x1401e6f96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e6f91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c79
call fcn.14020be84
mov qword [rsp + 0x2f8], r14
mov qword [rsp + 0x300], 7
mov word [rsp + 0x2e8], r14w
jmp 0x1401e7bea
lea rdx, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae rdx, qword [rsp + 0x1c8]
lea rcx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 8
cmovae rcx, qword [rsp + 0x1e8]
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, str.success
lea rdx, str.fail
test eax, eax
cmovne rdx, rcx
mov qword [rsp + 0x348], r14
mov qword [rsp + 0x358], r14
mov qword [rsp + 0x360], 7
mov word [rsp + 0x348], r14w
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1401e7040
mov r8, rax
lea rcx, [rsp + 0x348]
call fcn.1400f8950
nop
mov r15, qword [rsp + 0x1d8]
mov rax, r13
sub rax, r15
cmp rax, 0x33
jb 0x1401e7c7f
lea r12, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae r12, qword [rsp + 0x1c8]
mov qword [rsp + 0x248], r14
mov qword [rsp + 0x258], r14
mov qword [rsp + 0x260], r14
lea rsi, [r15 + 0x33]
mov ebx, 7
lea rdi, [rsp + 0x248]
cmp rsi, rbx
jbe 0x1401e70ee
mov rbx, rsi
or rbx, 7
cmp rbx, r13
jbe 0x1401e71d0
mov rbx, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400e1b00
mov rdi, rax
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], rbx
movaps xmm0, xmmword [str._Utility__CopySoftwareManagerBinaryAndEtlLog__Copy]
movups xmmword [rdi], xmm0
movaps xmm1, xmmword [0x1402e9630]
movups xmmword [rdi + 0x10], xmm1
movaps xmm0, xmmword [0x1402e9640]
movups xmmword [rdi + 0x20], xmm0
movaps xmm1, xmmword [0x1402e9650]
movups xmmword [rdi + 0x30], xmm1
movaps xmm0, xmmword [0x1402e9660]
movups xmmword [rdi + 0x40], xmm0
movaps xmm1, xmmword [0x1402e9670]
movups xmmword [rdi + 0x50], xmm1
mov eax, dword [0x1402e9680]
mov dword [rdi + 0x60], eax
movzx eax, word [0x1402e9684]
mov word [rdi + 0x64], ax
lea rcx, [rdi + 0x66]
lea r8, [r15 + r15]
mov rdx, r12
call fcn.140244220
mov word [rdi + rsi*2], r14w
mov rcx, qword [rsp + 0x258]
mov rdx, qword [rsp + 0x260]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x1401e71f9
lea rdi, [rcx + 0xa]
mov qword [rsp + 0x258], rdi
lea rbx, [rsp + 0x248]
cmp rdx, 8
cmovae rbx, qword [rsp + 0x248]
lea rcx, [rbx + rcx*2]
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
lea rdx, str._result_:
call fcn.140244220
mov word [rbx + rdi*2], r14w
lea rax, [rsp + 0x248]
mov r12d, 0xa
jmp 0x1401e7221
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401e7c84
jmp 0x1401e70d8
lfence
mov r12d, 0xa
mov qword [rsp + 0x20], r12
lea r9, str._result_:
xor r8d, r8d
mov edx, r12d
lea rcx, [rsp + 0x248]
call fcn.140122920
mov qword [rsp + 0x328], r14
mov qword [rsp + 0x338], r14
mov qword [rsp + 0x340], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x328], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x338], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rdx, [rsp + 0x348]
cmp qword [rsp + 0x360], 8
cmovae rdx, qword [rsp + 0x348]
mov r8, qword [rsp + 0x358]
lea rcx, [rsp + 0x328]
call fcn.1401d4d20
mov qword [rsp + 0xd8], r14
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rcx, [rsp + 0xd8]
call fcn.1401953a0
nop
mov rdx, qword [rsp + 0x340]
cmp rdx, 8
jb 0x1401e7324
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x328]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e731f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c8a
call fcn.14020be84
mov qword [rsp + 0x338], r14
mov qword [rsp + 0x340], 7
mov word [rsp + 0x328], r14w
mov rdx, qword [rsp + 0x260]
cmp rdx, 8
jb 0x1401e7389
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7384
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c90
call fcn.14020be84
mov rax, r13
sub rax, qword [rsp + 0x218]
cmp rax, 0x22
jb 0x1401e7c96
lea r15, [rsp + 0x208]
cmp qword [rsp + 0x220], 8
cmovae r15, qword [rsp + 0x208]
mov qword [rsp + 0x288], r14
mov qword [rsp + 0x298], r14
mov qword [rsp + 0x2a0], r14
mov rsi, qword [rsp + 0x218]
add rsi, 0x22
mov ebx, 7
lea rdi, [rsp + 0x288]
cmp rsi, rbx
jbe 0x1401e7421
mov rbx, rsi
or rbx, 7
cmp rbx, r13
jbe 0x1401e751a
mov rbx, r13
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400e1b00
mov rdi, rax
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x298], rsi
mov qword [rsp + 0x2a0], rbx
mov rcx, qword [rsp + 0x218]
lea rbx, [rcx + rcx]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.140244220
movaps xmm0, xmmword [str.ASUS_System_Control_Interface.etl]
movups xmmword [rdi + rbx], xmm0
movaps xmm1, xmmword [0x1402e96a0]
movups xmmword [rdi + rbx + 0x10], xmm1
movaps xmm0, xmmword [0x1402e96b0]
movups xmmword [rdi + rbx + 0x20], xmm0
movaps xmm1, xmmword [0x1402e96c0]
movups xmmword [rdi + rbx + 0x30], xmm1
mov eax, dword [0x1402e96d0]
mov dword [rdi + rbx + 0x40], eax
mov word [rdi + rsi*2], r14w
lea rcx, [rsp + 0x490]
call fcn.1401e18f0
nop
xor ecx, ecx
call sub.api_ms_win_crt_time_l1_1_0.dll__time64
mov rdx, rax
lea rcx, [rsp + 0x3e8]
call fcn.140154130
nop
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0x148]
call fcn.1400eabe0
mov rdx, rax
lea rcx, [rsp + 0x3c8]
call fcn.140202d30
nop
mov rdx, qword [rsp + 0x400]
cmp rdx, 8
jb 0x1401e7543
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e753e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7c9c
jmp 0x1401e753e
cmp rbx, 0xa
cmovb rbx, r12
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401e7ca2
jmp 0x1401e740b
call fcn.14020be84
mov qword [rsp + 0x3f8], r14
mov qword [rsp + 0x400], 7
mov word [rsp + 0x3e8], r14w
lea r8, [rsp + 0x3c8]
cmp qword [rsp + 0x3e0], 0x10
cmovae r8, qword [rsp + 0x3c8]
mov r9, qword [rsp + 0x3d8]
add r9, r8
lea rdx, [rsp + 0x428]
lea rcx, [rsp + 0x490]
call fcn.1401f9cf0
nop
lfence
lea r9, [rsp + 0x208]
cmp qword [rsp + 0x220], 8
cmovae r9, qword [rsp + 0x208]
mov qword [rsp + 0x30], reloc.OLEAUT32.dll_SafeArrayLock
lea rax, str.SoftwareManagerLog_
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x208]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x448]
call fcn.140139be0
nop
lea r9, [rsp + 0x428]
lea r8, [rsp + 0x448]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x3a8]
call fcn.140122aa0
nop
mov r8d, 4
lea rdx, str..etl
lea rcx, [rsp + 0x3a8]
call fcn.1401d4d20
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 8
jb 0x1401e7691
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e768c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7ca8
call fcn.14020be84
movups xmmword [rsp + 0x1c8], xmm6
movups xmmword [rsp + 0x1d8], xmm7
mov rdx, qword [rsp + 0x3c0]
cmp rdx, 8
jb 0x1401e76e9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e76e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cae
call fcn.14020be84
mov qword [rsp + 0x3b8], r14
mov qword [rsp + 0x3c0], 7
mov word [rsp + 0x3a8], r14w
mov rdx, qword [rsp + 0x460]
cmp rdx, 8
jb 0x1401e774f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x448]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7749
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cb4
call fcn.14020be84
nop
mov rdx, qword [rsp + 0x440]
cmp rdx, 8
jb 0x1401e7798
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x428]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7792
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cba
call fcn.14020be84
nop
mov rdx, qword [rsp + 0x3e0]
cmp rdx, 0x10
jb 0x1401e77db
inc rdx
mov rcx, qword [rsp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e77d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cc0
call fcn.14020be84
lea rdx, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 8
cmovae rdx, qword [rsp + 0x1c8]
lea rcx, [rsp + 0x288]
cmp qword [rsp + 0x2a0], 8
cmovae rcx, qword [rsp + 0x288]
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CopyFileW]
nop
lea rcx, [rsp + 0x490]
call fcn.1401e1fc0
nop
mov rdx, qword [rsp + 0x2a0]
cmp rdx, 8
jb 0x1401e7872
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e786d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cc6
call fcn.14020be84
mov qword [rsp + 0x298], r14
mov qword [rsp + 0x2a0], 7
mov word [rsp + 0x288], r14w
mov rdx, qword [rsp + 0x360]
cmp rdx, 8
jb 0x1401e78d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e78d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7ccc
call fcn.14020be84
nop
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x1401e794d
mov rdi, qword [rsp + 0x60]
cmp rbx, rdi
je 0x1401e7906
nop dword [rax]
mov rcx, rbx
call fcn.1401156c0
add rbx, 0x20
cmp rbx, rdi
jne 0x1401e78f0
mov rbx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x1401e7937
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cd2
mov rcx, rbx
call fcn.14020be84
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r14
mov rdx, qword [rsp + 0x2c0]
cmp rdx, 8
jb 0x1401e7996
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7990
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cd8
call fcn.14020be84
nop
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 8
jb 0x1401e79de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e79d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cde
call fcn.14020be84
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e0], 7
mov word [rsp + 0x1c8], r14w
mov rdx, qword [rsp + 0x220]
cmp rdx, 8
jb 0x1401e7aeb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7a42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7ce4
call fcn.14020be84
jmp 0x1401e7aeb
sub r13, qword [rsp + 0x1f8]
cmp r13, 0x33
jb 0x1401e7cea
lfence
lea rcx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 8
cmovae rcx, qword [rsp + 0x1e8]
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 0x33
lea r9, str._Utility__CopySoftwareManagerBinaryAndEtlLog__File
lea r8, [rsp + 0x1e8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x468]
call fcn.140139be0
nop
lea r8, str._not_exist.
lea rdx, [rsp + 0x468]
lea rcx, [rsp + 0x168]
call fcn.140122840
mov rcx, rax
call fcn.140195940
nop
lea rcx, [rsp + 0x468]
call fcn.1401156c0
nop
jmp 0x1401e7af0
mov rdx, qword [rsp + 0x200]
cmp rdx, 8
jb 0x1401e7b3c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7b37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cf0
jmp 0x1401e7b37
call fcn.14020be84
mov qword [rsp + 0x1f8], r14
mov qword [rsp + 0x200], 7
mov word [rsp + 0x1e8], r14w
mov rdx, qword [rsp + 0x280]
cmp rdx, 8
jb 0x1401e7ba2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7b9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cf6
call fcn.14020be84
nop
mov rdx, qword [rsp + 0x300]
cmp rdx, 8
jb 0x1401e7bea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7be5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e7cfc
call fcn.14020be84
mov rcx, qword [rsp + 0x510]
xor rcx, rsp
call fcn.14020c3e0
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1400f83d0
nop
call fcn.1400f83d0
nop
call fcn.1400f8240
nop
call fcn.1400f8240
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call fcn.1400f8240
nop
call fcn.1400f8240
nop
call fcn.1400f83d0
call fcn.1400f8240
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call fcn.1400f83d0
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call fcn.1400f83d0
call fcn.1400f8240
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call fcn.1400f83d0
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call fcn.1400f8240
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call fcn.1400f83d0
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3