Function at 0x436e60
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x90
mov rax, qword [0x004fb010]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rdi, rcx
xor bl, bl
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x43707e
xor ebp, ebp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], bp
xor r8d, r8d
lea rdx, [0x004b993c]
lea rcx, [rsp + 0x60]
call sym.AsusSoftwareManager.exe_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::assign_wchar_t_const__const___ptr64__unsigned_long_long_unsigned___int64_____ptr64
nop
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.00436c70
movzx ebx, al
mov rsi, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x60]
cmp al, 1
jne 0x437039
lea r8, [rsp + 0x60]
cmp rsi, 8
cmovae r8, rdi
cmp qword [rsp + 0x70], 4
jne 0x436fbd
lea edx, [rbp + 4]
lea rcx, str.true
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x436fbd
add rcx, 2
sub rdx, 1
jne 0x436f20
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x40], rbp
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 0x20106
mov dword [rsp + 0x20], ebp
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSoftwareManager
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
jne 0x436fb6
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.OOBEMcAfee
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov bl, 1
jmp 0x437039
mov dword [rsp + 0x58], ebp
mov qword [rsp + 0x40], rbp
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 0x20106
mov dword [rsp + 0x20], ebp
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSoftwareManager
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
jne 0x437037
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.OOBEMcAfee
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
xor bl, bl
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop
cmp rsi, 8
jb 0x43707e
lea rdx, [rsi*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x437076
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x437076
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.00479330
movzx eax, bl
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.00479310
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret