Function at 0x1400250d0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x14010b010]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov rdi, rcx
movaps xmm0, xmmword [str.SOFTWAREASUSBIConfigAsusSurvey]
movaps xmmword [rbp + 0x40], xmm0
movaps xmm1, xmmword [0x1400dd950]
movaps xmmword [rbp + 0x50], xmm1
movaps xmm0, xmmword [0x1400dd960]
movaps xmmword [rbp + 0x60], xmm0
movaps xmm1, xmmword [0x1400dd970]
movaps xmmword [rbp + 0x70], xmm1
mov eax, dword [0x1400dd980]
mov dword [rbp + 0x80], eax
xor edx, edx
mov r8d, 0x1c4
lea rcx, [rbp + 0x84]
call fcn.14008d8a0
xor r13d, r13d
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
lea r8d, [r13 + 6]
lea rdx, str.folder
lea rcx, [rbp - 0x20]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp + 0x40]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400251b0
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
mov rcx, rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
mov r8, 0xffffffff80000002
lea rdx, [rbp + 0x20]
call fcn.14005bd20
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140025233
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002522e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a22
call fcn.140061310
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140025287
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025282
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a28
call fcn.140061310
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov r8d, 7
lea rdx, str.trackid
lea rcx, [rsp + 0x78]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r13w
lea rax, [rbp + 0x40]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x1400252e3
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x68]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
mov rcx, rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
mov r8, 0xffffffff80000002
lea rdx, [rbp - 0x20]
call fcn.14005bd20
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140025363
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002535e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a2e
call fcn.140061310
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400253b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400253b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a34
call fcn.140061310
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
lea r8, [rdi + 0x50]
mov rcx, qword [r8 + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 3
jb 0x140025a3a
mov r9, r8
cmp qword [r8 + 0x18], 8
jb 0x1400253f3
mov r9, qword [r8]
mov qword [rsp + 0x30], 3
lea rax, [0x1400dd9a8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
movzx edx, byte [rsp + 0x70]
lea rcx, [rbp]
call sym.AsusAppService.exe_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_struct_std::_String_constructor_concat_tag__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64__wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64___wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov r8d, 0x2e
lea rdx, str.E3nS4cB3uuHmtgbLM_NGXipJiAgEQnTXCOyz_9Z_VhqfY
lea rcx, [rbp - 0x40]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
lea r8, [rbp + 0x20]
mov r15, qword [rbp + 0x20]
mov r12, qword [rbp + 0x38]
cmp r12, 8
cmovae r8, r15
lea rsi, str.C:Userspaul1_leeDesktopAsusAppServiceAsusAppServiceAsusAppServiceUtility.cpp
mov rdx, qword [rbp + 0x30]
cmp rdx, qword [rbp + 0x10]
jne 0x1400254a9
test rdx, rdx
je 0x140025696
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400254a9
add rcx, 2
sub rdx, 1
jne 0x140025490
jmp 0x140025696
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov r8d, 6
lea rdx, str.folder
lea rcx, [rsp + 0x78]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140025500
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov qword [rsp + 0x40], r13
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400255ad
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov eax, dword [rbp + 0x10]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x1400255ef
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d398
test rax, rax
je 0x1400255d1
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d398
inc rax
jmp 0x1400255d4
mov rax, rsi
lea r9, str.Set_FAIL
lea r8, str.RegWriteString
mov edx, 0x1a1
mov rcx, rax
call fcn.140015b90
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400255ff
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140025641
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002563c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a40
call fcn.140061310
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x140025696
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025691
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a46
call fcn.140061310
lea rcx, [rbp - 0x40]
mov r8, qword [rbp - 0x40]
mov r10, qword [rbp - 0x28]
cmp r10, 8
cmovae rcx, r8
lea r9, [rbp - 0x20]
mov rdi, qword [rbp - 0x20]
mov r14, qword [rbp - 8]
cmp r14, 8
cmovae r9, rdi
mov rdx, qword [rbp - 0x10]
cmp rdx, qword [rbp - 0x30]
jne 0x1400256ed
test rdx, rdx
je 0x1400258dc
sub r9, rcx
movzx eax, word [rcx]
cmp word [r9 + rcx], ax
jne 0x1400256ed
add rcx, 2
sub rdx, 1
jne 0x1400256d4
jmp 0x1400258dc
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov r8d, 7
lea rdx, str.trackid
lea rcx, [rsp + 0x78]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp + 0x40]
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140025740
mov r8, rbx
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call sym.AsusAppService.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
call fcn.140001760
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov qword [rsp + 0x40], r13
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400257ef
lea rcx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rcx, qword [rbp - 0x40]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov eax, dword [rbp - 0x30]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x14002582d
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d398
test rax, rax
je 0x140025812
mov edx, 0x5c
mov rcx, rsi
call fcn.14008d398
lea rsi, [rax + 1]
lea r9, str.Set_FAIL
lea r8, str.RegWriteString
mov edx, 0x1a1
mov rcx, rsi
call fcn.140015b90
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14002583d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14002587f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002587a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a4c
call fcn.140061310
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400258d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400258cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a52
call fcn.140061310
mov r8, qword [rbp - 0x40]
mov r10, qword [rbp - 0x28]
cmp r10, 8
jb 0x140025917
lea rdx, [r10*2 + 2]
mov rax, r8
cmp rdx, 0x1000
jb 0x14002590f
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a58
mov rcx, r8
call fcn.140061310
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140025968
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025963
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a5e
call fcn.140061310
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 7
mov word [rbp], r13w
cmp r14, 8
jb 0x1400259b5
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400259ac
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a64
mov rcx, rdi
call fcn.140061310
nop
cmp r12, 8
jb 0x1400259ec
lea rdx, [r12*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400259e4
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025a1c
mov rcx, r15
call fcn.140061310
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1400612f0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
int3
call fcn.140001710
nop
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
nop
call fcn.140091d94
int3