Function at 0x43d750
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x004fb010]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rdi, rcx
mov dword [rbp - 0x20], 4
xor r14d, r14d
lea rax, [rbp - 0x30]
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x28], r14
mov r9d, 0x20119
mov dword [rbp - 0x18], r14d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSoftwareManager
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
test eax, eax
jne 0x43d82f
mov rcx, qword [rbp - 0x30]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
lea rdx, str.LaunchHelloTimeStamp
lea rax, [rbp - 0x18]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov rcx, qword [rbp - 0x30]
test eax, eax
jne 0x43d829
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
lea edx, [r14 + 0x79]
lea rcx, [0x004c3690]
call fcn.004036d0
lea rsi, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCUploadUnit.cpp
mov r8d, 0x17e
lea r9, str.CreateHelloTimer:_Get_LaunchHelloTimeStamp_succeed__d_
lea ecx, [r14 + 4]
lea rdx, [rsi + rax*2]
mov eax, dword [rbp - 0x18]
mov dword [rsp + 0x20], eax
call fcn.0044a600
jmp 0x43d956
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
lea rcx, str.wintypes.dll
mov dword [rbp - 0x20], r14d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
je 0x43d87a
lea rdx, str.RoIsApiContractPresent
mov rcx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x43d871
xor r8d, r8d
lea r9, [rbp - 0x20]
lea rcx, str.Windows.Foundation.UniversalApiContract
lea edx, [r8 + 0xd]
call rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
mov edx, 0x79
lea rcx, [0x004c3690]
call fcn.004036d0
lea rsi, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCUploadUnit.cpp
mov ecx, 1
lea rdx, [rsi + rax*2]
cmp dword [rbp - 0x20], r14d
je 0x43d8c3
lea r9, str.OOBE:_CreateHelloTimer:_win11__set_timestamp_1_hour
mov r8d, 0x184
call fcn.0044a600
mov dword [rbp - 0x18], 0x36ee80
mov dword [rbp - 0x20], 0x36ee80
jmp 0x43d8e3
lea r9, str.OOBE:_CreateHelloTimer:_win10__set_timestamp_10_min
mov r8d, 0x18a
call fcn.0044a600
mov dword [rbp - 0x18], 0x927c0
mov dword [rbp - 0x20], 0x927c0
mov qword [rsp + 0x40], r14
lea rax, [rbp - 0x30]
mov qword [rsp + 0x38], rax
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSoftwareManager
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov dword [rsp + 0x28], 0x20106
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x20], r14d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
jne 0x43d956
mov rcx, qword [rbp - 0x30]
lea rax, [rbp - 0x20]
mov dword [rsp + 0x28], 4
lea rdx, str.LaunchHelloTimeStamp
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov qword [0x005031e0], rax
test rax, rax
jne 0x43d982
mov ebx, 0x194
lea rdi, str.CreateHelloTimer:_CreateEvent_failed
jmp 0x43d9d6
call qword [sym.imp.api_ms_win_core_threadpool_legacy_l1_1_0.dll_CreateTimerQueue]
mov rbx, rax
test rax, rax
jne 0x43d99e
mov ebx, 0x19b
lea rdi, str.CreateHelloTimer:_CreateTimerQueue_failed
jmp 0x43d9d6
mov eax, dword [rbp - 0x18]
lea r8, [0x0043d170]
mov dword [rsp + 0x30], r14d
lea rcx, [rbp - 0x28]
mov dword [rsp + 0x28], r14d
mov r9, rdi
mov rdx, rbx
mov dword [rsp + 0x20], eax
call qword [sym.imp.api_ms_win_core_threadpool_legacy_l1_1_0.dll_CreateTimerQueueTimer]
test eax, eax
jne 0x43da05
mov ebx, 0x1a1
lea rdi, str.CreateHelloTimer:_CreateTimerQueueTimer_failed
mov edx, 0x79
lea rcx, [0x004c3690]
call fcn.004036d0
mov r9, rdi
mov r8d, ebx
mov ecx, 4
lea rdx, [rsi + rax*2]
call fcn.0044a600
mov eax, 1
jmp 0x43da8e
mov rcx, qword [0x005031e0]
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x43da47
mov edx, 0x79
lea rcx, [0x004c3690]
call fcn.004036d0
lea r9, str.CreateHelloTimer:_WaitForSingleObject_failed
mov ecx, 4
mov r8d, 0x1a7
lea rdx, [rsi + rax*2]
call fcn.0044a600
mov rcx, qword [0x005031e0]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteTimerQueue]
test eax, eax
jne 0x43da8b
lea edx, [rax + 0x79]
lea rcx, [0x004c3690]
call fcn.004036d0
lea r9, str.CreateHelloTimer:_DeleteTimerQueue_failed
mov ecx, 4
mov r8d, 0x1ae
lea rdx, [rsi + rax*2]
call fcn.0044a600
mov eax, r14d
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.00479310
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret