Function at 0x14008eb70
Capabilities:
Print debug messages
Set registry value

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xd0
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [rsp + 0x100], rbx
mov rdi, rcx
call fcn.14013d07c
mov rcx, rax
xor ebp, ebp
mov edx, ebp
test rax, rax
setne dl
test edx, edx
jne 0x14008ebb7
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x118], rax
mov rax, qword [rdi + 0x20]
mov rdi, qword [rax + 0x118]
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rdi - 8], 0
jl 0x14008ebf8
cmp rax, qword [rdi - 0x18]
jne 0x14008ebf8
lea rbx, [rdi - 0x18]
lock add dword [rdi - 8], 1
jmp 0x14008ec36
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rdi - 0x10]
call qword [rax]
mov rbx, rax
test rax, rax
jne 0x14008ec14
call fcn.1400c5210
int3
mov eax, dword [rdi - 0x10]
mov dword [rbx + 8], eax
mov eax, dword [rdi - 0x10]
add eax, 1
movsxd rdx, eax
lea r9, [rdx + rdx]
mov r8, rdi
add rdx, rdx
lea rcx, [rbx + 0x18]
call fcn.14015cd30
lea rdi, [rbx + 0x18]
mov qword [rsp + 0x110], rdi
mov esi, 0x11
mov ebx, dword [rdi - 0x10]
cmp ebx, esi
jge 0x14008ec58
mov esi, ebx
test ebx, ebx
jle 0x14008ecdb
sub ebx, esi
lea r12d, [rbx + 1]
cmp dword [rdi - 8], 1
jle 0x14008ec7c
mov edx, dword [rdi - 0x10]
lea rcx, [rsp + 0x110]
call fcn.140001e50
mov rdi, qword [rsp + 0x110]
movsxd rdx, r12d
add rdx, rdx
movsxd rax, esi
lea r8, [rdi + rax*2]
mov r9, rdx
mov rcx, rdi
call fcn.14015cf60
test eax, eax
je 0x14008ecbe
cmp eax, 0xc
je 0x14008ecb8
cmp eax, 0x16
je 0x14008ecb2
cmp eax, 0x22
je 0x14008ecb2
cmp eax, 0x50
je 0x14008ecbe
call fcn.14013d908
int3
call fcn.14013d908
int3
call fcn.14013d8c0
int3
test ebx, ebx
js 0x14008f547
cmp ebx, dword [rdi - 0xc]
jg 0x14008f547
mov dword [rdi - 0x10], ebx
movsxd rax, ebx
mov word [rdi + rax*2], 0
mov r9, rdi
lea r8, str.SOFTWARESRS_LabsAPO
lea rdx, [0x14019c370]
lea rcx, [rsp + 0x118]
call fcn.140001f50
call fcn.14013d07c
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x14008ed18
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [0x1401abb10]
lea rcx, [rsp + 0xa0]
call fcn.1400ed630
nop
mov r9, qword [rax]
mov r8, qword [rsp + 0x118]
lea rdx, [0x14019c370]
lea rcx, [rsp + 0x38]
call fcn.140001f50
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14008ed82
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, rbp
mov qword [rsp + 0x80], rbp
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rbx, qword [rsp + 0x38]
mov rdx, rbx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14008edc6
mov eax, ebp
mov rdi, qword [rsp + 0x80]
mov r12d, ebp
test eax, eax
sete r12b
test rdi, rdi
je 0x14008eddd
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r12d, r12d
je 0x14008ee4c
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008edfe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x110]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008ee22
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x118]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
add esi, 0xffffffff
test esi, esi
jg 0x14008f552
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14008f552
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x108], rbp
lea rax, [rsp + 0x108]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdi, qword [rsp + 0x118]
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
jne 0x14008f473
mov rbx, qword [rsp + 0x108]
mov qword [rsp + 0x70], rbx
lea r12, [rdi - 0x18]
mov rcx, qword [r12]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [r12 + 0x10], 0
jl 0x14008eed1
cmp rax, qword [r12]
jne 0x14008eed1
mov rdi, r12
lock add dword [r12 + 0x10], 1
mov rbx, qword [rsp + 0x108]
jmp 0x14008ef17
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [r12 + 8]
call qword [rax]
mov rdi, rax
test rax, rax
jne 0x14008eeef
call fcn.1400c5210
int3
mov eax, dword [r12 + 8]
mov dword [rdi + 8], eax
mov eax, dword [r12 + 8]
add eax, 1
movsxd rdx, eax
lea r9, [rdx + rdx]
lea r8, [r12 + 0x18]
add rdx, rdx
lea rcx, [rdi + 0x18]
call fcn.14015cd30
lea rax, [rdi + 0x18]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x68], rbp
test rbx, rbx
jne 0x14008ef5b
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008efe6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14008efe6
lea rdx, [rsp + 0x68]
lea rcx, [0x1401abb10]
call fcn.1400ec620
test eax, eax
js 0x14008efc6
mov rdi, qword [rsp + 0x40]
mov eax, ebp
test rdi, rdi
setne al
test eax, eax
jne 0x14008ef8c
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [rax + rax + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
mov rdi, qword [rsp + 0x68]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008efe6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.14013d07c
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x14008f005
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x88], rax
lea rcx, [rsp + 0xb8]
call fcn.140075cb0
nop
mov r8, qword [rax]
lea rdx, str._sSRS_LabsAPO
lea rcx, [rsp + 0x88]
call fcn.140001f50
nop
mov rdx, qword [rsp + 0xb8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f063
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x88]
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx - 8], 0
jl 0x14008f08f
cmp rax, qword [rbx - 0x18]
jne 0x14008f08f
lea rdi, [rbx - 0x18]
lock add dword [rbx - 8], 1
jmp 0x14008f0cd
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rbx - 0x10]
call qword [rax]
mov rdi, rax
test rax, rax
jne 0x14008f0ab
call fcn.1400c5210
int3
mov eax, dword [rbx - 0x10]
mov dword [rdi + 8], eax
mov eax, dword [rbx - 0x10]
add eax, 1
movsxd rdx, eax
lea r9, [rdx + rdx]
mov r8, rbx
add rdx, rdx
lea rcx, [rdi + 0x18]
call fcn.14015cd30
lea rax, [rdi + 0x18]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rbp
mov r13, qword [rsp + 0x108]
test r13, r13
jne 0x14008f11c
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f1ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14008f1ad
lea rdx, [rsp + 0x98]
lea rcx, [0x1401abb28]
call fcn.1400ec620
test eax, eax
js 0x14008f18d
mov rdi, qword [rsp + 0x48]
mov eax, ebp
test rdi, rdi
setne al
test eax, eax
jne 0x14008f150
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [rax + rax + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
mov rdi, qword [rsp + 0x98]
mov rdx, rdi
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f1ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0xb0], rax
lea rdx, [0x1401abb40]
lea rcx, [rsp + 0xa8]
call fcn.1400ed630
mov r13, rax
call fcn.14013d07c
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x14008f200
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, str.SoftwareDTSDTSApoGuiAsus
test rdx, 0xffffffffffff0000
jne 0x14008f243
movzx edi, dx
mov ecx, edi
call fcn.14013d654
test rax, rax
je 0x14008f260
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400020e0
jmp 0x14008f260
xor eax, eax
mov rcx, rsi
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x30]
call fcn.140002390
nop
mov r9, r13
lea r8, [rsp + 0x30]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x78]
call fcn.1400edcd0
nop
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rdi - 8], 0
jl 0x14008f2a3
cmp rax, qword [rdi - 0x18]
jne 0x14008f2a3
lea r13, [rdi - 0x18]
lock add dword [rdi - 8], 1
jmp 0x14008f2e2
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rdi - 0x10]
call qword [rax]
mov r13, rax
test rax, rax
jne 0x14008f2bf
call fcn.1400c5210
int3
mov eax, dword [rdi - 0x10]
mov dword [r13 + 8], eax
mov eax, dword [rdi - 0x10]
add eax, 1
movsxd rdx, eax
lea r9, [rdx + rdx]
mov r8, rdi
add rdx, rdx
lea rcx, [r13 + 0x18]
call fcn.14015cd30
lea rax, [r13 + 0x18]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0x58], rbp
mov r13, qword [rsp + 0x108]
test r13, r13
jne 0x14008f32e
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f3cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14008f3cc
lea rdx, [rsp + 0x58]
lea rcx, [0x1401abb40]
call fcn.1400ec620
test eax, eax
js 0x14008f399
mov rdi, qword [rsp + 0x50]
mov eax, ebp
test rdi, rdi
setne al
test eax, eax
jne 0x14008f35f
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [rax + rax + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
mov rdi, qword [rsp + 0x58]
mov rdx, rdi
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f3b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x70], rbp
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f3ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, esi
lock xadd dword [rbx - 8], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f40a
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f42b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x110]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f44f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lock xadd dword [r12 + 0x10], esi
add esi, 0xffffffff
test esi, esi
jg 0x14008f552
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14008f552
call fcn.14013d07c
mov rcx, rax
test rax, rax
setne bpl
test ebp, ebp
jne 0x14008f491
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov r8d, ebx
lea rdx, str._RTK__CDtsHPSetting::InitPKEYforASUSDTSAPO3_reg.Open___:__d_r_n
lea rcx, [rsp + 0x60]
call fcn.140001f50
mov rdi, qword [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f4df
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f500
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x110]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14008f524
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x118]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
add esi, 0xffffffff
test esi, esi
jg 0x14008f552
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14008f552
mov ecx, 0x80070057
call fcn.140001c00
nop
mov rbx, qword [rsp + 0x100]
add rsp, 0xd0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret