Function at 0x43af70
Capabilities:
Read file on windows
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x004fb010]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r13, rcx
mov qword [rbp - 0x49], rcx
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rsi, [0x004c1550]
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__In
mov ecx, 4
mov r8d, 0x367
call fcn.0044a600
xor r12d, r12d
mov dword [rbp - 0x19], r12d
xorps xmm0, xmm0
mov qword [rsp + 0x20], r12
movups xmmword [rbp + 0x1f], xmm0
lea r9, [rbp - 0x19]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, [rbp + 0x1f]
mov rcx, qword [r13 + 0x48]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_ReadFile]
test eax, eax
je 0x43b7f6
cmp byte [rbp + 0x1f], 0x1c
jne 0x43b7d6
mov r15d, dword [rbp + 0x23]
mov dword [rbp - 0x1d], r15d
mov r14d, r12d
mov rdi, r12
mov qword [rbp - 0x11], r12
movzx ecx, byte [rbp + 0x20]
cmp cl, 0xe3
je 0x43b0b0
mov r14d, dword [rbp + 0x27]
test r14d, r14d
jle 0x43b0a9
lfence
movsxd rbx, dword [rbp + 0x27]
mov rcx, rbx
call fcn.00479588
mov rdi, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.004a2370
mov qword [rbp - 0x11], rdi
test rdi, rdi
je 0x43b757
lfence
mov dword [rbp - 0x21], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x21]
mov r8d, r14d
mov rdx, rdi
mov rcx, qword [r13 + 0x48]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_ReadFile]
test eax, eax
je 0x43b71d
cmp dword [rbp - 0x21], r14d
jne 0x43b6e3
movzx ecx, byte [rbp + 0x20]
mov r15d, dword [rbp - 0x1d]
mov rdi, qword [rbp - 0x11]
jmp 0x43b0b0
mov rdi, r12
mov qword [rbp - 0x11], r12
lea eax, [rcx + 0x1e]
cmp al, 2
jbe 0x43b456
mov edx, 0x7c
cmp cl, 0xe7
jne 0x43b0f1
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Receive_UpdateToService_deprecated_
mov ecx, 4
mov r8d, 0x3df
call fcn.0044a600
jmp 0x43b6d0
cmp cl, 0xe8
jne 0x43b122
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Receive_Uninstall_BI_Event
mov ecx, 4
mov r8d, 0x3e3
call fcn.0044a600
jmp 0x43b6d0
cmp cl, 0xe9
jne 0x43b245
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Receive_BI_EventUpdated
mov ecx, 4
mov r8d, 0x3e7
call fcn.0044a600
cmp r14d, 8
jl 0x43b6d0
mov esi, r12d
mov ebx, r12d
test rdi, rdi
je 0x43b175
mov esi, dword [rdi]
mov ebx, dword [rdi + 4]
lea r14, [0x004c1550]
jmp 0x43b1a8
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea r14, [0x004c1550]
lea rdx, [r14 + rax*2]
lea r9, str._StartReceiveInternal__BI_EventUpdated:_Bad_data_
mov ecx, 4
mov r8d, 0x3f7
call fcn.0044a600
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [r14 + rax*2]
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], esi
lea r9, str._StartReceiveInternal__retVal_d__fCount_d
mov ecx, 4
mov r8d, 0x3f9
call fcn.0044a600
test ebx, ebx
je 0x43b6c9
mov rax, qword [0x005022e8]
test rax, rax
je 0x43b6c9
cmp qword [rax + 8], 0
je 0x43b20d
mov rcx, qword [0x005031e8]
test rcx, rcx
je 0x43b20d
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rsi, [0x004c1550]
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Call_SetEventEnable__
mov ecx, 4
mov r8d, 0x402
call fcn.0044a600
jmp 0x43b6d0
cmp cl, 0xea
jne 0x43b276
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Receive_GiftBoxServiceUpdate_deprecated_
mov ecx, 4
mov r8d, 0x40a
call fcn.0044a600
jmp 0x43b6d0
cmp cl, 0xed
jne 0x43b3a3
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Receive_ChromeInstalled
mov ecx, 4
mov r8d, 0x40e
call fcn.0044a600
mov dword [rbp - 9], 1
mov qword [rsp + 0x40], r12
lea rax, [rbp - 0x39]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20106
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSoftwareManager
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
jne 0x43b320
mov dword [rsp + 0x28], 4
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.isChromeInstalled
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov dword [rbp - 1], 1
mov qword [rsp + 0x40], r12
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20106
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSoftwareManager
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
jne 0x43b6d0
mov dword [rsp + 0x28], 4
lea rax, [rbp - 1]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.isFinishedChrome
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x43b6d0
cmp cl, 0xec
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
jne 0x43b79e
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Receive_DropboxInstalled_
mov ecx, 4
mov r8d, 0x416
call fcn.0044a600
mov dword [rbp + 7], 1
mov qword [rsp + 0x40], r12
lea rax, [rbp - 0x29]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20106
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSoftwareManager
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
jne 0x43b6d0
mov dword [rsp + 0x28], 4
lea rax, [rbp + 7]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.isDropboxInstalled
mov rcx, qword [rbp - 0x29]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, qword [rbp - 0x29]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x43b6d0
mov r12d, dword [rbp + 0x2b]
mov dword [rbp + 0xf], r12d
lea r13d, [r14 + 0xc]
movsxd rsi, r13d
mov rcx, rsi
call fcn.00479588
mov rbx, rax
mov qword [rbp - 0x41], rax
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.004a2370
mov qword [rbp + 0x17], rbx
mov r8, rsi
xor edx, edx
mov rsi, rbx
mov rcx, rbx
call fcn.004a2370
test rbx, rbx
je 0x43b6b5
movsd xmm0, qword [rbp + 0x1f]
movsd qword [rbx], xmm0
mov eax, dword [rbp + 0x27]
mov dword [rbx + 8], eax
cmp r13d, 0xc
jle 0x43b4d4
lfence
movsxd rdx, r14d
lea rcx, [rbx + 0xc]
mov r9, rdx
mov rdi, qword [rbp - 0x11]
mov r8, rdi
call fcn.004268d0
mov r15d, dword [rbp - 0x1d]
mov r12d, dword [rbp + 0xf]
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
movzx ecx, byte [rbp + 0x20]
lea r14, [0x004c1550]
lea rdx, [r14 + rax*2]
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], ecx
lea r9, str._StartReceiveInternal__Push_request__02X__ticket_d__to_queue_cpid_d_
mov ecx, 4
mov r8d, 0x3bd
call fcn.0044a600
mov rax, qword [rbp - 0x49]
mov edx, dword [rax + 0x14]
mov r8d, r15d
mov rcx, qword [0x00503168]
test r12d, r12d
jne 0x43b56c
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], r13d
call fcn.0046cbd0
lea edx, [r12 + 0x7c]
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [r14 + rax*2]
lea r9, str._StartReceiveInternal__Call_PushUpdateToAll
lea ecx, [r12 + 4]
mov r8d, 0x3c2
call fcn.0044a600
jmp 0x43b5b8
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], r13d
call fcn.0046cd40
movzx ebx, al
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [r14 + rax*2]
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r12d
lea r9, str._StartReceiveInternal__Call_PushReplyToCpidQueue__d__d
mov ecx, 4
mov r8d, 0x3c8
call fcn.0044a600
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [r14 + rax*2]
mov dword [rsp + 0x20], r15d
lea r9, str._StartReceiveInternal__Remove_RpcTicketRecord_ticket_d_
mov ecx, 4
mov r8d, 0x3cc
call fcn.0044a600
mov r13, qword [rbp - 0x49]
lea rbx, [r13 + 0x100]
test rbx, rbx
je 0x43b608
cmp dword [rbx + 0x28], 0
je 0x43b608
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
mov rcx, qword [r13 + 0x130]
mov rax, qword [rcx + 8]
mov rsi, rcx
cmp byte [rax + 0x19], 0
jne 0x43b638
nop dword [rax]
cmp dword [rax + 0x20], r15d
jae 0x43b62c
mov rax, qword [rax + 0x10]
jmp 0x43b632
mov rsi, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x43b620
cmp byte [rsi + 0x19], 0
jne 0x43b648
cmp r15d, dword [rsi + 0x20]
jb 0x43b648
mov al, 1
jmp 0x43b64a
xor al, al
test al, al
cmove rsi, rcx
cmp rsi, rcx
je 0x43b68d
mov rcx, qword [rsi + 0x28]
test rcx, rcx
je 0x43b68d
mov edx, 0x18
call fcn.00479330
xor r12d, r12d
mov qword [rsi + 0x28], r12
mov rdx, rsi
lea rcx, [r13 + 0x130]
call fcn.0043bcf0
lea edx, [r12 + 0x30]
mov rcx, rax
call fcn.00479330
jmp 0x43b690
xor r12d, r12d
test rbx, rbx
je 0x43b6a4
cmp dword [rbx + 0x28], 0
je 0x43b6a4
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov rbx, r12
mov rcx, qword [rbp - 0x41]
call fcn.00479330
mov rsi, r12
jmp 0x43b6bc
mov r13, qword [rbp - 0x49]
xor r12d, r12d
test rsi, rsi
je 0x43b6c9
mov rcx, rbx
call fcn.00479330
lea rsi, [0x004c1550]
test rdi, rdi
je 0x43b6de
mov rcx, rdi
call fcn.00479330
nop
jmp 0x43afe3
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Bad_data_buffer_dwBytesRead___length_
mov ecx, 4
mov r8d, 0x39b
call fcn.0044a600
nop
mov rcx, rdi
call fcn.00479330
jmp 0x43b822
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Cant_data_buffer_from_pipe
mov ecx, 4
mov r8d, 0x395
call fcn.0044a600
nop
mov rcx, rdi
call fcn.00479330
jmp 0x43b822
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
mov dword [rsp + 0x28], 0x3a2
mov qword [rsp + 0x20], rsi
lea r9, str._StartReceiveInternal__Cant_allocate_memory_____s:_d
mov ecx, 4
mov r8d, 0x3a2
call fcn.0044a600
nop
mov rcx, rdi
call fcn.00479330
jmp 0x43b822
call fcn.004036d0
movzx ecx, byte [rbp + 0x20]
lea rdx, [rsi + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str._StartReceiveInternal__Receive_bad_header_1_0x_02x_
mov ecx, 4
mov r8d, 0x41e
call fcn.0044a600
test rdi, rdi
je 0x43b7d4
mov rcx, rdi
call fcn.00479330
nop
jmp 0x43b822
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea r9, str._StartReceiveInternal__Invalid_header_from_agent
mov r8d, 0x379
jmp 0x43b814
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea r9, str._StartReceiveInternal__Cant_read_data_from_pipe
mov r8d, 0x372
lea rdx, [rsi + rax*2]
mov ecx, 4
call fcn.0044a600
mov edx, 0x7c
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceCommandHandler.cpp
call fcn.004036d0
lea rdx, [rsi + rax*2]
lea r9, str._StartReceiveInternal__Out
mov ecx, 4
mov r8d, 0x427
call fcn.0044a600
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.00479310
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret