Function at 0x140024dd0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x14010a010]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov rdi, rcx
movaps xmm0, xmmword [str.SOFTWAREASUSBIConfigAsusSurvey]
movaps xmmword [rbp + 0x40], xmm0
movaps xmm1, xmmword [0x1400dc910]
movaps xmmword [rbp + 0x50], xmm1
movaps xmm0, xmmword [0x1400dc920]
movaps xmmword [rbp + 0x60], xmm0
movaps xmm1, xmmword [0x1400dc930]
movaps xmmword [rbp + 0x70], xmm1
mov eax, dword [0x1400dc940]
mov dword [rbp + 0x80], eax
xor edx, edx
mov r8d, 0x1c4
lea rcx, [rbp + 0x84]
call fcn.14008d590
xor r13d, r13d
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
lea r8d, [r13 + 6]
lea rdx, str.folder
lea rcx, [rbp - 0x20]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp + 0x40]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140024eb0
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
mov rcx, rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
mov r8, 0xffffffff80000002
lea rdx, [rbp + 0x20]
call fcn.14005ba00
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140024f33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024f2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025722
call fcn.140061000
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140024f87
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024f82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025728
call fcn.140061000
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov r8d, 7
lea rdx, str.trackid
lea rcx, [rsp + 0x78]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r13w
lea rax, [rbp + 0x40]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140024fe3
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x68]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
mov rcx, rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
mov r8, 0xffffffff80000002
lea rdx, [rbp - 0x20]
call fcn.14005ba00
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140025063
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002505e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002572e
call fcn.140061000
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400250b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400250b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025734
call fcn.140061000
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
lea r8, [rdi + 0x50]
mov rcx, qword [r8 + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 3
jb 0x14002573a
mov r9, r8
cmp qword [r8 + 0x18], 8
jb 0x1400250f3
mov r9, qword [r8]
mov qword [rsp + 0x30], 3
lea rax, [0x1400dc968]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
movzx edx, byte [rsp + 0x70]
lea rcx, [rbp]
call sym.AsusAppService.exe_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_struct_std::_String_constructor_concat_tag__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64__wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64___wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov r8d, 0x2e
lea rdx, str.E3nS4cB3uuHmtgbLM_NGXipJiAgEQnTXCOyz_9Z_VhqfY
lea rcx, [rbp - 0x40]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
lea r8, [rbp + 0x20]
mov r15, qword [rbp + 0x20]
mov r12, qword [rbp + 0x38]
cmp r12, 8
cmovae r8, r15
lea rsi, str.C:Userspaul1_leeDesktopAsusAppServiceAsusAppServiceAsusAppServiceUtility.cpp
mov rdx, qword [rbp + 0x30]
cmp rdx, qword [rbp + 0x10]
jne 0x1400251a9
test rdx, rdx
je 0x140025396
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400251a9
add rcx, 2
sub rdx, 1
jne 0x140025190
jmp 0x140025396
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov r8d, 6
lea rdx, str.folder
lea rcx, [rsp + 0x78]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140025200
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov qword [rsp + 0x40], r13
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400252ad
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov eax, dword [rbp + 0x10]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x1400252ef
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d088
test rax, rax
je 0x1400252d1
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d088
inc rax
jmp 0x1400252d4
mov rax, rsi
lea r9, str.Set_FAIL
lea r8, str.RegWriteString
mov edx, 0x1a1
mov rcx, rax
call fcn.140015a30
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400252ff
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140025341
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002533c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025740
call fcn.140061000
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x140025396
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025391
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025746
call fcn.140061000
lea rcx, [rbp - 0x40]
mov r8, qword [rbp - 0x40]
mov r10, qword [rbp - 0x28]
cmp r10, 8
cmovae rcx, r8
lea r9, [rbp - 0x20]
mov rdi, qword [rbp - 0x20]
mov r14, qword [rbp - 8]
cmp r14, 8
cmovae r9, rdi
mov rdx, qword [rbp - 0x10]
cmp rdx, qword [rbp - 0x30]
jne 0x1400253ed
test rdx, rdx
je 0x1400255dc
sub r9, rcx
movzx eax, word [rcx]
cmp word [r9 + rcx], ax
jne 0x1400253ed
add rcx, 2
sub rdx, 1
jne 0x1400253d4
jmp 0x1400255dc
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov r8d, 7
lea rdx, str.trackid
lea rcx, [rsp + 0x78]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp + 0x40]
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140025440
mov r8, rbx
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov qword [rsp + 0x40], r13
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400254ef
lea rcx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rcx, qword [rbp - 0x40]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov eax, dword [rbp - 0x30]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x14002552d
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d088
test rax, rax
je 0x140025512
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d088
lea rsi, [rax + 1]
lea r9, str.Set_FAIL
lea r8, str.RegWriteString
mov edx, 0x1a1
mov rcx, rsi
call fcn.140015a30
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14002553d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14002557f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002557a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002574c
call fcn.140061000
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400255d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400255cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025752
call fcn.140061000
mov r8, qword [rbp - 0x40]
mov r10, qword [rbp - 0x28]
cmp r10, 8
jb 0x140025617
lea rdx, [r10*2 + 2]
mov rax, r8
cmp rdx, 0x1000
jb 0x14002560f
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025758
mov rcx, r8
call fcn.140061000
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140025668
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025663
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002575e
call fcn.140061000
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 7
mov word [rbp], r13w
cmp r14, 8
jb 0x1400256b5
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400256ac
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025764
mov rcx, rdi
call fcn.140061000
nop
cmp r12, 8
jb 0x1400256ec
lea rdx, [r12*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400256e4
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002571c
mov rcx, r15
call fcn.140061000
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140060fe0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
int3
call fcn.140001710
nop
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
nop
call fcn.140091a84
int3