Function at 0x140206510
Capabilities:
Query service status
Start service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x600]
sub rsp, 0x700
mov rax, qword [0x1404779b8]
xor rax, rsp
mov qword [rbp + 0x5f0], rax
mov r13, rcx
mov qword [rbp + 0x200], rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4c8], xmm0
mov qword [rbp + 0x4d8], rax
mov dword [rbp + 0x4e0], eax
xor edx, edx
xor ecx, ecx
lea r8d, [rax + 1]
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x1402065c3
xor esi, esi
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x58], rsi
mov r14d, 7
mov qword [rbp + 0x60], r14
lea r8d, [rax + 0x45]
lea rdx, str._Utility__RestartSoftwareManager__OpenSCManager_failed_w_err_0x_08lx_n
lea rcx, [rbp + 0x48]
call fcn.140101ff0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x48]
call fcn.1401a8890
jmp 0x140207ea9
mov rdx, r13
cmp qword [r13 + 0x18], 8
jb 0x1402065d1
mov rdx, qword [r13]
mov r8d, 0xf01ff
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x14020662b
xor esi, esi
mov qword [rbp + 8], rsi
mov qword [rbp + 0x18], rsi
mov r14d, 7
mov qword [rbp + 0x20], r14
lea r8d, [rax + 0x43]
lea rdx, str._Utility__RestartSoftwareManager__OpenService_failed_w_err_0x_08lx_n
lea rcx, [rbp + 8]
call fcn.140101ff0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 8]
call fcn.1401a8890
mov rcx, rbx
jmp 0x140207ea2
lea rdx, [rbp + 0x4c8]
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov rcx, qword [r13 + 0x10]
movabs r15, 0x7ffffffffffffffe
mov rax, r15
sub rax, rcx
cmp dword [rbp + 0x4cc], 4
jne 0x1402067df
mov qword [rsp + 0x78], rcx
cmp rax, 0x2a
jb 0x140207f1d
mov qword [rsp + 0x48], r13
cmp qword [r13 + 0x18], 8
jb 0x140206680
mov rax, qword [r13]
mov qword [rsp + 0x48], rax
xor esi, esi
mov qword [rbp + 0x3c8], rsi
mov qword [rbp + 0x3d8], rsi
mov qword [rbp + 0x3e0], rsi
lea rdi, [rcx + 0x2a]
mov r14d, 7
lea rbx, [rbp + 0x3c8]
cmp rdi, r14
jbe 0x1402066df
mov r14, rdi
or r14, 7
cmp r14, r15
jbe 0x1402067b7
mov r14, r15
movabs rcx, 0x7fffffffffffffff
lfence
add rcx, rcx
call fcn.1400eb1a0
mov rbx, rax
mov qword [rbp + 0x3c8], rax
mov qword [rbp + 0x3d8], rdi
mov qword [rbp + 0x3e0], r14
movaps xmm0, xmmword [str._Utility__RestartSoftwareManager__Service]
movups xmmword [rbx], xmm0
movaps xmm1, xmmword [0x140366200]
movups xmmword [rbx + 0x10], xmm1
movaps xmm0, xmmword [0x140366210]
movups xmmword [rbx + 0x20], xmm0
movaps xmm1, xmmword [0x140366220]
movups xmmword [rbx + 0x30], xmm1
movaps xmm0, xmmword [0x140366230]
movups xmmword [rbx + 0x40], xmm0
mov eax, dword [0x140366240]
mov dword [rbx + 0x50], eax
lea rcx, [rbx + 0x54]
mov r8, qword [rsp + 0x78]
add r8, r8
mov rdx, qword [rsp + 0x48]
call fcn.140253310
mov word [rbx + rdi*2], si
lea r8, str._is_running
lea rdx, [rbp + 0x3c8]
lea rcx, [rbp + 0xa8]
call fcn.14012c260
mov rcx, rax
call fcn.1401a82f0
nop
mov rdx, qword [rbp + 0x3e0]
cmp rdx, 8
jb 0x140207e4f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207e4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207ee7
jmp 0x140207e4a
mov eax, 0xa
cmp r14, rax
cmovb r14, rax
lea rcx, [r14 + 1]
movabs r12, 0x7fffffffffffffff
cmp rcx, r12
ja 0x140207eed
jmp 0x1402066ca
mov qword [rsp + 0x40], rcx
cmp rax, 0x2a
jb 0x140207f23
mov qword [rsp + 0x48], r13
cmp qword [r13 + 0x18], 8
jb 0x140206803
mov rax, qword [r13]
mov qword [rsp + 0x48], rax
xor esi, esi
mov qword [rbp + 0x3a8], rsi
mov qword [rbp + 0x3b8], rsi
mov qword [rbp + 0x3c0], rsi
add rcx, 0x2a
mov qword [rsp + 0x78], rcx
mov r14d, 7
mov ebx, r14d
lea rdi, [rbp + 0x3a8]
lea eax, [rsi + 0xa]
movabs r12, 0x7fffffffffffffff
cmp rcx, r14
jbe 0x140206874
mov rbx, rcx
or rbx, r14
cmp rbx, r15
jbe 0x140206acc
mov rbx, r15
mov rcx, r12
lfence
add rcx, rcx
call fcn.1400eb1a0
mov rdi, rax
mov qword [rbp + 0x3a8], rax
mov rcx, qword [rsp + 0x78]
mov qword [rbp + 0x3b8], rcx
mov qword [rbp + 0x3c0], rbx
movaps xmm0, xmmword [str._Utility__RestartSoftwareManager__Service]
movups xmmword [rdi], xmm0
movaps xmm1, xmmword [0x140366200]
movups xmmword [rdi + 0x10], xmm1
movaps xmm0, xmmword [0x140366210]
movups xmmword [rdi + 0x20], xmm0
movaps xmm1, xmmword [0x140366220]
movups xmmword [rdi + 0x30], xmm1
movaps xmm0, xmmword [0x140366230]
movups xmmword [rdi + 0x40], xmm0
mov eax, dword [0x140366240]
mov dword [rdi + 0x50], eax
lea rcx, [rdi + 0x54]
mov rbx, qword [rsp + 0x40]
lea r8, [rbx + rbx]
mov rdx, qword [rsp + 0x48]
call fcn.140253310
mov word [rdi + rbx*2 + 0x54], si
lea r8, str._is_not_running__restart_now.
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0x88]
call fcn.14012c260
mov rcx, rax
call fcn.1401a8890
nop
mov rdx, qword [rbp + 0x3c0]
cmp rdx, 8
jb 0x140206946
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140206941
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f29
call fcn.14021ecec
xor r8d, r8d
xor edx, edx
mov rdi, qword [rsp + 0x70]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
cmp eax, 1
je 0x140207e56
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x420
jne 0x140206b04
mov rcx, qword [r13 + 0x10]
mov qword [rsp + 0x40], rcx
mov rax, r15
sub rax, rcx
cmp rax, 0x2a
jb 0x140207f2f
mov qword [rsp + 0x48], r13
cmp qword [r13 + 0x18], 8
jb 0x1402069a3
mov rax, qword [r13]
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x3e8], rsi
mov qword [rbp + 0x3f8], rsi
mov qword [rbp + 0x400], rsi
lea rdi, [rcx + 0x2a]
lea rbx, [rbp + 0x3e8]
cmp rdi, 7
jbe 0x1402069f4
mov r14, rdi
or r14, 7
cmp r14, r15
jbe 0x140206ae5
mov r14, r15
mov rcx, r12
lfence
add rcx, rcx
call fcn.1400eb1a0
mov rbx, rax
mov qword [rbp + 0x3e8], rax
mov qword [rbp + 0x3f8], rdi
mov qword [rbp + 0x400], r14
movaps xmm0, xmmword [str._Utility__RestartSoftwareManager__Service]
movups xmmword [rbx], xmm0
movaps xmm1, xmmword [0x140366200]
movups xmmword [rbx + 0x10], xmm1
movaps xmm0, xmmword [0x140366210]
movups xmmword [rbx + 0x20], xmm0
movaps xmm1, xmmword [0x140366220]
movups xmmword [rbx + 0x30], xmm1
movaps xmm0, xmmword [0x140366230]
movups xmmword [rbx + 0x40], xmm0
mov eax, dword [0x140366240]
mov dword [rbx + 0x50], eax
lea rcx, [rbx + 0x54]
mov r8, qword [rsp + 0x40]
add r8, r8
mov rdx, qword [rsp + 0x48]
call fcn.140253310
mov word [rbx + rdi*2], si
lea r8, str._is_already_running.
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp + 0xc8]
call fcn.14012c260
mov rcx, rax
call fcn.1401a82f0
nop
mov rdx, qword [rbp + 0x400]
cmp rdx, 8
jb 0x140207e4f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207e4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207ef3
jmp 0x140207e4a
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r12
ja 0x140207ef9
jmp 0x14020685a
cmp r14, 0xa
mov eax, 0xa
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, r12
ja 0x140207eff
jmp 0x1402069df
mov qword [rbp - 0x18], rsi
mov qword [rbp - 8], rsi
mov qword [rbp], r14
mov r8d, 0x63
lea rdx, str._Utility__RestartSoftwareManager__ERROR:_Failed_to_send_start_control_to_service._Error_code0x_08x
lea rcx, [rbp - 0x18]
call fcn.140101ff0
mov edx, ebx
lea rcx, [rbp - 0x18]
call fcn.1401a8890
cmp ebx, 0xc1
jne 0x140207e95
mov qword [rbp + 0x208], rsi
mov qword [rbp + 0x218], rsi
mov qword [rbp + 0x220], r14
mov word [rbp + 0x208], si
xor r8d, r8d
lea rdx, [0x14034c7a8]
lea rcx, [rbp + 0x208]
call fcn.140101ff0
nop
mov qword [rbp + 0x288], rsi
mov qword [rbp + 0x298], rsi
mov qword [rbp + 0x2a0], r14
mov word [rbp + 0x288], si
xor r8d, r8d
lea rdx, [0x14034c7a8]
lea rcx, [rbp + 0x288]
call fcn.140101ff0
nop
mov qword [rbp + 0x268], rsi
mov qword [rbp + 0x278], rsi
mov qword [rbp + 0x280], r14
mov word [rbp + 0x268], si
xor r8d, r8d
lea rdx, [0x14034c7a8]
lea rcx, [rbp + 0x268]
call fcn.140101ff0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov edx, 1
lea rcx, [rbp + 0xf0]
call fcn.1401b3420
nop
mov qword [rbp + 0x308], rsi
mov qword [rbp + 0x318], rsi
mov qword [rbp + 0x320], SafeArrayLock
mov byte [rbp + 0x308], 0
lea ecx, [rbx - 0x61]
call fcn.1400eb1a0
mov rcx, rax
mov qword [rbp + 0x318], 0x52
mov qword [rbp + 0x320], 0x5f
movaps xmm0, xmmword [str.C:ProgramDataASUSASUS_System_Control_InterfacelogAsusSoftwareManager_List.log]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1403663d0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1403663e0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1403663f0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140366400]
movups xmmword [rax + 0x40], xmm0
movzx eax, word [0x140366410]
mov word [rcx + 0x50], ax
mov byte [rcx + 0x52], 0
mov qword [rbp + 0x308], rcx
lea rcx, [rbp + 0x570]
call fcn.1401f4c40
nop
mov qword [rbp + 0x228], rsi
mov qword [rbp + 0x240], SafeArrayLock
mov qword [rbp + 0x238], rsi
mov byte [rbp + 0x228], 0
lea rcx, [rbp + 0x208]
call fcn.1401f9510
mov rax, r15
mov rcx, qword [rbp + 0x218]
sub rax, rcx
cmp rax, 0x3d
jb 0x140207f35
lea rax, [rbp + 0x208]
cmp qword [rbp + 0x220], 8
cmovae rax, qword [rbp + 0x208]
mov qword [rsp + 0x40], rax
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rsi
lea rax, [rcx + 0x3d]
mov qword [rsp + 0x48], rax
mov rbx, r14
lea rdi, [rbp - 0x78]
cmp rax, r14
jbe 0x140206d3d
mov rbx, rax
or rbx, 7
cmp rbx, r15
jbe 0x140206fc3
mov rbx, r15
mov rcx, r12
lfence
add rcx, rcx
call fcn.1400eb1a0
mov rdi, rax
mov qword [rbp - 0x78], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rbx
movaps xmm0, xmmword [str._Utility__RestartSoftwareManager__Inf_SoftwareManager_Path_]
movups xmmword [rdi], xmm0
movaps xmm1, xmmword [0x140366430]
movups xmmword [rdi + 0x10], xmm1
movaps xmm0, xmmword [0x140366440]
movups xmmword [rdi + 0x20], xmm0
movaps xmm1, xmmword [0x140366450]
movups xmmword [rdi + 0x30], xmm1
movaps xmm0, xmmword [0x140366460]
movups xmmword [rdi + 0x40], xmm0
movaps xmm1, xmmword [0x140366470]
movups xmmword [rdi + 0x50], xmm1
movaps xmm0, xmmword [0x140366480]
movups xmmword [rdi + 0x60], xmm0
movsd xmm1, qword [0x140366490]
movsd qword [rdi + 0x70], xmm1
movzx eax, word [0x140366498]
mov word [rdi + 0x78], ax
lea rcx, [rdi + 0x7a]
mov rbx, qword [rbp + 0x218]
lea rax, [rbx + rbx]
mov qword [rsp + 0x78], rax
mov r8, rax
mov rdx, qword [rsp + 0x40]
call fcn.140253310
mov rax, qword [rsp + 0x48]
mov word [rdi + rax*2], si
lea rcx, [rbp - 0x78]
call fcn.1401a8890
lea rax, [rbp + 0x208]
cmp qword [rbp + 0x220], 8
cmovae rax, qword [rbp + 0x208]
mov qword [rsp + 0x40], rax
mov qword [rbp + 0x2e8], rsi
mov qword [rbp + 0x2f8], rsi
mov qword [rbp + 0x300], rsi
lea rax, [rbx + 0x1b]
mov qword [rsp + 0x48], rax
mov rbx, r14
lea rdi, [rbp + 0x2e8]
cmp rax, r14
jbe 0x140206e55
mov rbx, rax
or rbx, 7
cmp rbx, r15
jbe 0x140206fe2
mov rbx, r15
mov rcx, r12
lfence
add rcx, rcx
call fcn.1400eb1a0
mov rdi, rax
mov qword [rbp + 0x2e8], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x300], rbx
movups xmm0, xmmword [str.Inf_SoftwareManager_Path_]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x1403664b0]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x1403664c0]
movups xmmword [rdi + 0x20], xmm0
mov ecx, dword [0x1403664d0]
mov dword [rdi + 0x30], ecx
movzx eax, word [0x1403664d4]
mov word [rdi + 0x34], ax
lea rcx, [rdi + 0x36]
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x40]
call fcn.140253310
mov rax, qword [rsp + 0x48]
mov word [rdi + rax*2], si
lea r8, [rbp + 0x2e8]
cmp qword [rbp + 0x300], 8
cmovae r8, qword [rbp + 0x2e8]
mov rax, qword [rbp + 0x2f8]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x448]
lea rcx, [rbp + 0x570]
call fcn.140214fd0
movups xmm0, xmmword [rbp + 0x448]
movups xmmword [rbp + 0x228], xmm0
movups xmm1, xmmword [rbp + 0x458]
movups xmmword [rbp + 0x238], xmm1
mov qword [rbp + 0x460], SafeArrayLock
mov byte [rbp + 0x448], 0
mov rdx, qword [rbp + 0x300]
cmp rdx, 8
jb 0x140206f5c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140206f57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f3b
call fcn.14021ecec
mov rbx, qword [rsp + 0x60]
cmp rbx, qword [rsp + 0x68]
je 0x140207045
mov qword [rbx], rsi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rsi
lea rax, [rbp + 0x228]
cmp qword [rbp + 0x240], 0x10
cmovae rax, qword [rbp + 0x228]
mov qword [rsp + 0x40], rax
mov rcx, qword [rbp + 0x238]
mov qword [rsp + 0x48], rcx
cmp rcx, 0x10
jae 0x140207001
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
mov edi, SafeArrayGetLBound
mov qword [rbx + 0x10], rcx
mov qword [rbx + 0x18], rdi
add qword [rsp + 0x60], 0x20
jmp 0x140207059
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r12
ja 0x140207f05
jmp 0x140206d26
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r12
ja 0x140207f0b
jmp 0x140206e3b
mov rdi, rcx
or rdi, 0xf
cmp rdi, r12
cmova rdi, r12
lea rcx, [rdi + 1]
call fcn.1400eb1a0
mov qword [rbx], rax
mov r8, qword [rsp + 0x48]
inc r8
mov rdx, qword [rsp + 0x40]
mov rcx, rax
call fcn.140253310
mov rcx, qword [rsp + 0x48]
mov qword [rbx + 0x10], rcx
mov qword [rbx + 0x18], rdi
add qword [rsp + 0x60], 0x20
jmp 0x140207059
lea r8, [rbp + 0x228]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.1401b2fd0
lea rcx, [rbp + 0x268]
call fcn.140203870
lea rcx, str.success
lea rdx, str.fail
test al, al
cmovne rdx, rcx
mov qword [rbp + 0x2a8], rsi
mov qword [rbp + 0x2b8], rsi
mov qword [rbp + 0x2c0], r14
mov word [rbp + 0x2a8], si
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1402070a0
lea rcx, [rbp + 0x2a8]
call fcn.140101ff0
nop
mov rax, r15
mov rcx, qword [rbp + 0x278]
sub rax, rcx
cmp rax, 0x40
jb 0x140207f41
lea rax, [rbp + 0x268]
cmp qword [rbp + 0x280], 8
cmovae rax, qword [rbp + 0x268]
mov qword [rsp + 0x40], rax
mov qword [rbp + 0x248], rsi
mov qword [rbp + 0x258], rsi
mov qword [rbp + 0x260], rsi
lea rax, [rcx + 0x40]
mov qword [rsp + 0x48], rax
mov rbx, r14
lea rdi, [rbp + 0x248]
cmp rax, r14
jbe 0x140207148
mov rbx, rax
or rbx, 7
cmp rbx, r15
jbe 0x140207234
mov rbx, r15
mov rcx, r12
lfence
add rcx, rcx
call fcn.1400eb1a0
mov rdi, rax
mov qword [rbp + 0x248], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x258], rax
mov qword [rbp + 0x260], rbx
movaps xmm0, xmmword [str._Utility__RestartSoftwareManager__Task_scheluder_execute_Path_]
movups xmmword [rdi], xmm0
movaps xmm1, xmmword [0x140366540]
movups xmmword [rdi + 0x10], xmm1
movaps xmm0, xmmword [0x140366550]
movups xmmword [rdi + 0x20], xmm0
movaps xmm1, xmmword [0x140366560]
movups xmmword [rdi + 0x30], xmm1
movaps xmm0, xmmword [0x140366570]
movups xmmword [rdi + 0x40], xmm0
movaps xmm1, xmmword [0x140366580]
movups xmmword [rdi + 0x50], xmm1
movaps xmm0, xmmword [0x140366590]
movups xmmword [rdi + 0x60], xmm0
movaps xmm1, xmmword [0x1403665a0]
movups xmmword [rdi + 0x70], xmm1
lea rcx, [rdi + 0x80]
mov rax, qword [rbp + 0x278]
add rax, rax
mov qword [rsp + 0x78], rax
mov r8, rax
mov rdx, qword [rsp + 0x40]
call fcn.140253310
mov rax, qword [rsp + 0x48]
mov word [rdi + rax*2], si
mov rcx, qword [rbp + 0x258]
mov rdx, qword [rbp + 0x260]
mov rax, rdx
sub rax, rcx
cmp rax, 0x15
jb 0x140207253
lea rdi, [rcx + 0x15]
mov qword [rbp + 0x258], rdi
lea rbx, [rbp + 0x248]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x248]
lea rcx, [rbx + rcx*2]
mov r8d, 0x2a
lea rdx, str.___Get_Task_Result_
call fcn.140253310
mov word [rbx + rdi*2], si
lea rax, [rbp + 0x248]
jmp 0x140207279
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r12
ja 0x140207f11
jmp 0x14020712e
lfence
mov qword [rsp + 0x20], SafeArrayPutElement
lea r9, str.___Get_Task_Result_
xor r8d, r8d
lea edx, [r8 + 0x15]
lea rcx, [rbp + 0x248]
call fcn.14012c340
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x398], rsi
mov qword [rbp + 0x3a0], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x388], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x398], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov word [rax], si
lea rdx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 8
cmovae rdx, qword [rbp + 0x2a8]
mov r8, qword [rbp + 0x2b8]
lea rcx, [rbp + 0x388]
call fcn.140167730
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov word [rax], si
lea rcx, [rbp - 0x38]
call fcn.1401a8890
nop
mov rdx, qword [rbp + 0x3a0]
cmp rdx, 8
jb 0x14020734e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207349
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f47
call fcn.14021ecec
mov qword [rbp + 0x398], rsi
mov qword [rbp + 0x3a0], r14
mov word [rbp + 0x388], si
mov rdx, qword [rbp + 0x260]
cmp rdx, 8
jb 0x1402073a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1402073a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f4d
call fcn.14021ecec
lea rax, [rbp + 0x268]
cmp qword [rbp + 0x280], 8
cmovae rax, qword [rbp + 0x268]
mov qword [rsp + 0x40], rax
mov qword [rbp + 0x368], rsi
mov qword [rbp + 0x378], rsi
mov qword [rbp + 0x380], rsi
mov rax, qword [rbp + 0x278]
add rax, 0x1e
mov qword [rsp + 0x48], rax
mov rbx, r14
lea rdi, [rbp + 0x368]
cmp rax, r14
jbe 0x140207429
mov rbx, rax
or rbx, 7
cmp rbx, r15
jbe 0x1402076b1
mov rbx, r15
mov rcx, r12
lfence
add rcx, rcx
call fcn.1400eb1a0
mov rdi, rax
mov qword [rbp + 0x368], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x378], rax
mov qword [rbp + 0x380], rbx
movups xmm0, xmmword [str.Task_scheluder_execute_Path_]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x1403665c8]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x1403665d8]
movups xmmword [rdi + 0x20], xmm0
movsd xmm1, qword [0x1403665e8]
movsd qword [rdi + 0x30], xmm1
mov eax, dword [0x1403665f0]
mov dword [rdi + 0x38], eax
lea rcx, [rdi + 0x3c]
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x40]
call fcn.140253310
mov rax, qword [rsp + 0x48]
mov word [rdi + rax*2], si
lea r8, str.___Get_Task_Result_
lea rdx, [rbp + 0x368]
lea rcx, [rbp + 0x408]
call fcn.14012c260
nop
lea rdx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 8
cmovae rdx, qword [rbp + 0x2a8]
mov r8, qword [rbp + 0x2b8]
mov rcx, rax
call fcn.140167730
mov qword [rbp + 0x2c8], rsi
mov qword [rbp + 0x2d8], rsi
mov qword [rbp + 0x2e0], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2d8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov word [rax], si
lea r8, [rbp + 0x2c8]
cmp qword [rbp + 0x2e0], 8
cmovae r8, qword [rbp + 0x2c8]
mov rax, qword [rbp + 0x2d8]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x468]
lea rcx, [rbp + 0x570]
call fcn.140214fd0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x140207575
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207570
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f53
call fcn.14021ecec
movups xmm0, xmmword [rbp + 0x468]
movups xmmword [rbp + 0x228], xmm0
movups xmm1, xmmword [rbp + 0x478]
movups xmmword [rbp + 0x238], xmm1
movdqa xmm0, xmmword [0x14034a0c0]
movdqu xmmword [rbp + 0x478], xmm0
mov byte [rbp + 0x468], 0
lea rcx, [rbp + 0x468]
call fcn.1400f5450
nop
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 8
jb 0x1402075fb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1402075f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f59
call fcn.14021ecec
mov qword [rbp + 0x2d8], rsi
mov qword [rbp + 0x2e0], r14
mov word [rbp + 0x2c8], si
mov r8, qword [rbp + 0x420]
cmp r8, 8
jb 0x140207633
inc r8
mov rdx, qword [rbp + 0x408]
lea rcx, [rbp + 0x408]
call fcn.140103630
mov qword [rbp + 0x418], rsi
mov qword [rbp + 0x420], r14
mov word [rbp + 0x408], si
mov rdx, qword [rbp + 0x380]
cmp rdx, 8
jb 0x14020768e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207689
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f5f
call fcn.14021ecec
mov rax, qword [rsp + 0x60]
cmp rax, qword [rsp + 0x68]
je 0x1402076d0
lea rdx, [rbp + 0x228]
mov rcx, rax
call fcn.1400f3e50
add qword [rsp + 0x60], 0x20
jmp 0x1402076e4
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r12
ja 0x140207f17
jmp 0x14020740f
lea r8, [rbp + 0x228]
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1401b2fd0
lea rdx, [rbp + 0x288]
lea rcx, [rbp + 0x208]
call fcn.1402034d0
mov rax, r15
sub rax, qword [rbp + 0x218]
cmp rax, 0x3f
jb 0x140207f65
lfence
lea rcx, [rbp + 0x208]
cmp qword [rbp + 0x220], 8
cmovae rcx, qword [rbp + 0x208]
mov rax, qword [rbp + 0x218]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 0x3f
lea r9, str._Utility__RestartSoftwareManager__SoftwareManagerStartUpPath_
lea r8, [rbp + 0x208]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x4a8]
call fcn.140144e00
nop
lea r8, str.___StartType_
lea rdx, [rbp + 0x4a8]
lea rcx, [rbp + 0x428]
call fcn.14012c260
nop
lea rdx, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 8
cmovae rdx, qword [rbp + 0x288]
mov r8, qword [rbp + 0x298]
mov rcx, rax
call fcn.140167730
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov word [rax], si
lea rcx, [rbp - 0x58]
call fcn.1401a8890
nop
mov r8, qword [rbp + 0x440]
cmp r8, 8
jb 0x1402077f3
inc r8
mov rdx, qword [rbp + 0x428]
lea rcx, [rbp + 0x428]
call fcn.140103630
mov qword [rbp + 0x438], rsi
mov qword [rbp + 0x440], r14
mov word [rbp + 0x428], si
mov r8, qword [rbp + 0x4c0]
cmp r8, 8
jb 0x14020782b
inc r8
mov rdx, qword [rbp + 0x4a8]
lea rcx, [rbp + 0x4a8]
call fcn.140103630
sub r15, qword [rbp + 0x218]
cmp r15, 0x1f
jb 0x140207f6b
lfence
lea rcx, [rbp + 0x208]
cmp qword [rbp + 0x220], 8
cmovae rcx, qword [rbp + 0x208]
mov rax, qword [rbp + 0x218]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 0x1f
lea r9, str.SoftwareManager_StartUp_Path_
lea r8, [rbp + 0x208]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x4e8]
call fcn.140144e00
nop
lea r8, str.___StartType_
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp + 0x528]
call fcn.14012c260
nop
lea rdx, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 8
cmovae rdx, qword [rbp + 0x288]
mov r8, qword [rbp + 0x298]
mov rcx, rax
call fcn.140167730
mov qword [rbp + 0x348], rsi
mov qword [rbp + 0x358], rsi
mov qword [rbp + 0x360], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x348], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x358], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov word [rax], si
lea r8, [0x14035ad9c]
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x508]
call fcn.14012c260
nop
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x14020792e
mov r8, qword [rax]
mov rax, qword [rax + 0x10]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x488]
lea rcx, [rbp + 0x570]
call fcn.140214fd0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x14020798a
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207985
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f71
call fcn.14021ecec
movups xmm0, xmmword [rbp + 0x488]
movups xmmword [rbp + 0x228], xmm0
movups xmm1, xmmword [rbp + 0x498]
movups xmmword [rbp + 0x238], xmm1
movdqa xmm0, xmmword [0x14034a0c0]
movdqu xmmword [rbp + 0x498], xmm0
mov byte [rbp + 0x488], 0
lea rcx, [rbp + 0x488]
call fcn.1400f5450
nop
lea rcx, [rbp + 0x508]
call fcn.14011ed90
nop
mov rdx, qword [rbp + 0x360]
cmp rdx, 8
jb 0x140207a1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f77
call fcn.14021ecec
mov qword [rbp + 0x358], rsi
mov qword [rbp + 0x360], r14
mov word [rbp + 0x348], si
lea rcx, [rbp + 0x528]
call fcn.14011ed90
nop
lea rcx, [rbp + 0x4e8]
call fcn.14011ed90
mov rax, qword [rsp + 0x60]
cmp rax, qword [rsp + 0x68]
je 0x140207a6e
lea rdx, [rbp + 0x228]
mov rcx, rax
call fcn.1400f3e50
add qword [rsp + 0x60], 0x20
jmp 0x140207a82
lea r8, [rbp + 0x228]
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1401b2fd0
mov qword [rbp + 0x328], rsi
mov qword [rbp + 0x338], rsi
mov qword [rbp + 0x340], SafeArrayLock
mov byte [rbp + 0x328], 0
mov r8d, 0x1f
lea rdx, str.FileRepository_SWMgr_File_List:
lea rcx, [rbp + 0x328]
call fcn.140101ee0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, qword [rsp + 0x68]
je 0x140207af1
movups xmm0, xmmword [rbp + 0x328]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x338]
movups xmmword [rdx + 0x10], xmm1
mov edx, SafeArrayGetLBound
mov byte [rbp + 0x328], 0
add qword [rsp + 0x60], 0x20
jmp 0x140207b09
lea r8, [rbp + 0x328]
lea rcx, [rsp + 0x58]
call fcn.1401795f0
mov rdx, qword [rbp + 0x340]
cmp rdx, 0x10
jb 0x140207b43
inc rdx
mov rcx, qword [rbp + 0x328]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207b3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f7d
call fcn.14021ecec
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x38], rsi
mov qword [rbp + 0x40], SafeArrayLock
mov r8d, 0x2e
lea rdx, str.C:WindowsSystem32DriverStoreFileRepository
lea rcx, [rbp + 0x28]
call fcn.140101ee0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x28]
call fcn.140202330
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0xf0]
call fcn.1402146c0
cmp qword [rbp + 0x178], 0
je 0x140207c1c
mov edi, esi
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140207c0f
mov rbx, rsi
nop dword [rax]
lea r8, [rbx + rdx]
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140207bd1
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0xf0]
call fcn.140137d20
mov rcx, rax
lea rdx, [0x14035b180]
call fcn.1401693c0
inc edi
add rbx, 0x20
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
sub rcx, rdx
sar rcx, 5
movsxd rax, edi
cmp rax, rcx
jb 0x140207bc0
lea rcx, [rbp + 0xf0]
call fcn.1401c1390
nop
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 8
jb 0x140207c63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207c5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f83
call fcn.14021ecec
nop
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x140207ca5
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207c9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f89
call fcn.14021ecec
nop
lea rcx, [rbp + 0x570]
call fcn.1401f5310
nop
mov rdx, qword [rbp + 0x320]
cmp rdx, 0x10
jb 0x140207cf3
inc rdx
mov rcx, qword [rbp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207cee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f8f
call fcn.14021ecec
mov qword [rbp + 0x318], rsi
mov qword [rbp + 0x320], SafeArrayLock
mov byte [rbp + 0x308], 0
lea rcx, [rbp + 0xf0]
call fcn.1401389f0
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140207d7b
lea r8, [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
call fcn.140114380
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207d68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f95
call fcn.14021ecec
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov rdx, qword [rbp + 0x280]
cmp rdx, 8
jb 0x140207dc2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207dbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207f9b
call fcn.14021ecec
nop
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 8
jb 0x140207e09
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207e03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207fa1
call fcn.14021ecec
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 8
jb 0x140207e4f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140207e4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140207ee1
call fcn.14021ecec
mov rdi, qword [rsp + 0x70]
jmp 0x140207e95
mov r8, r13
lea rdx, str._Utility__RestartSoftwareManager__Service
lea rcx, [rbp + 0x548]
call fcn.140152630
nop
lea r8, str._StartService_successfully.
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.14012c260
mov rcx, rax
call fcn.1401a82f0
nop
lea rcx, [rbp + 0x548]
call fcn.14011ed90
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
nop
mov rcx, r13
call fcn.14011ed90
mov rcx, qword [rbp + 0x5f0]
xor rcx, rsp
call fcn.14021f250
lea r11, [rsp + 0x700]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140260f54
nop
call fcn.140260f54
int3
call fcn.1401018e0
int3
call fcn.140260f54
int3
call fcn.1401018e0
int3
call fcn.1401018e0
nop
call fcn.1401018e0
int3
call fcn.1401018e0
nop
call fcn.1401018e0
int3
call fcn.1401018e0
nop
call fcn.140101a70
int3
call fcn.140101a70
int3
call fcn.140260f54
int3
call fcn.140101a70
nop
call fcn.140101a70
int3
call fcn.140260f54
nop
call fcn.140101a70
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
int3
call fcn.140101a70
int3
call fcn.140101a70
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
int3