Function at 0x140003340
Capabilities:
Copy file
Set registry value

Disassembly:
sub rsp, 0x1c8
mov rax, qword [0x140040020]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
lea rcx, str.chcp_437
call fcn.14000f47c
lea rcx, [0x14003ad94]
call fcn.14000f47c
lea rcx, str.C:Program_Files__x86_3ShapeDongle_Server_Service_
call qword [sym.imp.imagehlp.dll_MakeSureDirectoryPathExists]
call fcn.140001d80
call fcn.140001dd0
movups xmm0, xmmword [str.C:Program_Files__x86_3Shape3ShapePatch.exe]
mov eax, dword [0x14003adc0]
lea rdx, [rsp + 0xa0]
movups xmm1, xmmword [0x14003ada8]
mov dword [rsp + 0x80], eax
mov r8d, 0x104
movzx eax, word [0x14003adc4]
xor ecx, ecx
movups xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x84], ax
movsd xmm0, qword [0x14003adb8]
movsd qword [rsp + 0x78], xmm0
movups xmmword [rsp + 0x68], xmm1
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rcx, [rsp + 0x58]
call fcn.1400019a0
mov r8d, 1
lea rdx, str.C:Program_Files__x86_3ShapeLicense.lic
lea rcx, str.License.Lic
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rcx, str.del__s__q__C:Program_Files__x86_3ShapeDongle_Server_Service.dll_
call fcn.14000f47c
lea rcx, str.del__s__q__C:Program_Files__x86_3ShapeDongle_Server_Service.dat_
call fcn.14000f47c
lea rcx, str.del__s__q__C:Program_Files__x86_3ShapeDongle_Server_Service.exe_
call fcn.14000f47c
lea rcx, str.del__s__q__C:Program_Files__x86_3ShapeDongle_Server_Service.bat_
call fcn.14000f47c
lea rcx, str.del__s__q__C:Program_Files__x86_3ShapeDongle_Server_Service.drv_
call fcn.14000f47c
lea rcx, str.C:Program_Files__x86_3ShapeDongle_Server_Service_
call qword [sym.imp.imagehlp.dll_MakeSureDirectoryPathExists]
xor r8d, r8d
lea rdx, str.C:Program_Files__x86_3ShapeDongle_Server_ServiceLicense.lic
lea rcx, str.License.Lic
call qword [sym.imp.KERNEL32.dll_CopyFileA]
xor r8d, r8d
lea rdx, str.C:Program_Files__x86_3ShapeDongle_Server_ServiceLicense.lic
lea rcx, str.C:Program_Files__x86_3ShapeLicense.Lic
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rcx, str.icacls__C:Program_Files__x86_3Shape___grant_everyone:_OI__CI_F__T
call fcn.14000f47c
lea rcx, [0x14003ad94]
call fcn.14000f47c
call fcn.140001d80
call fcn.140001e20
call fcn.140001f90
call fcn.140003080
call fcn.140002190
call fcn.140002460
call fcn.1400028a0
call fcn.1400029a0
call fcn.140002aa0
call fcn.140002d30
lea rcx, str.sc_config_ThreeShapeDentalManagerService_startauto
call fcn.14000f47c
lea rcx, str.sc_config_DongleServerService__startauto
call fcn.14000f47c
lea rcx, str.sc_config_DentalDesktopServer__startauto
call fcn.14000f47c
lea rcx, str.sc_config_MSSQL_ORTHOSYSTEM__startauto
call fcn.14000f47c
lea rcx, str.sc_config_MSSQL_THREESHAPEDENTAL__startauto
call fcn.14000f47c
lea rcx, str.sc_config_svcDS3SCom__startauto
call fcn.14000f47c
lea rcx, str.sc_config_OrthoSystemService__startauto
call fcn.14000f47c
lea rcx, str.sc_config_ThreeShape.DentalSystem.TokensService__startauto
call fcn.14000f47c
lea rcx, str.sc_config_DentalUpdater__startdisabled
call fcn.14000f47c
lea rcx, [0x14003ad94]
call fcn.14000f47c
call fcn.140001d80
lea rcx, str.net_start_MSSQL_ORTHOSYSTEM
call fcn.14000f47c
lea rcx, str.net_start_MSSQL_THREESHAPEDENTAL
call fcn.14000f47c
lea rcx, str.net_start_ThreeShapeDentalManagerService
call fcn.14000f47c
lea rcx, str.net_start_OrthoSystemService
call fcn.14000f47c
lea rcx, str.net_start_ThreeShape.DentalSystem.TokensService
call fcn.14000f47c
lea rcx, [0x14003ad94]
call fcn.14000f47c
call fcn.140001d80
lea rcx, str.net_start_Dongleserverservice
call fcn.14000f47c
lea rcx, str.net_start_svcDS3SCom
call fcn.14000f47c
lea rcx, str.net_start_DentalDesktopServer
call fcn.14000f47c
call fcn.1400031a0
movzx eax, word [0x14003b328]
lea rcx, [rsp + 0x30]
movups xmm0, xmmword [str.C:Program_Files__x86_3Shape]
mov word [rsp + 0x30], ax
movzx eax, byte [0x14003b32a]
movsd xmm1, qword [0x14003b340]
mov byte [rsp + 0x32], al
mov eax, dword [0x14003b348]
mov dword [rsp + 0x50], eax
movzx eax, word [0x14003b34c]
movups xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x54], ax
mov rax, 0xffffffffffffffff
movups xmm0, xmmword [str.C:Program_Files3Shape]
movsd qword [rsp + 0x48], xmm1
movsd xmm1, qword [0x14003b360]
movups xmmword [rsp + 0x88], xmm0
movsd qword [rsp + 0x98], xmm1
inc rax
cmp byte [rcx + rax], 0
jne 0x140003641
inc eax
lea r8, [rsp + 0x38]
mov dword [rsp + 0x28], eax
lea rdx, str.SOFTWAREPoliciesMicrosoftWindows_DefenderExclusionsPaths
lea rax, [rsp + 0x30]
mov r9d, 1
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea r8, [rsp + 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r8 + rax], 0
jne 0x140003685
inc eax
lea r8, [rsp + 0x88]
mov dword [rsp + 0x28], eax
lea rdx, str.SOFTWAREPoliciesMicrosoftWindows_DefenderExclusionsPaths
lea rax, [rsp + 0x30]
mov r9d, 1
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov ecx, 0xffffffff
call fcn.14000d164
int3