Function at 0x4696f0
Capabilities:
Set registry value

Disassembly:
mov eax, 0x10010
call fcn.0048b400
mov eax, dword [esp + 0x1001c]
push ebx
push ebp
mov ebp, dword [esp + 0x10020]
push esi
push edi
mov esi, ecx
test eax, eax
je 0x46994c
test ebp, ebp
je 0x46994c
cmp ebp, 0xfffffffe
je 0x46994c
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x49f440]
lea edx, [esp + 0x18]
push edx
mov edx, dword [ecx + 0xac]
mov ecx, dword [esp + 0x10038]
push 0
or edx, 0x20006
push edx
push 0
push 0x4927f1
push 0
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov edi, eax
test edi, edi
jne 0x469951
lea eax, [ebp - 1]
cmp eax, 6
ja case.0x469774.5
jmp dword [eax*4 + 0x469988]
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469780
sub eax, edx
inc eax
push eax
push esi
push 1
mov edx, dword [esp + 0x10040]
mov eax, dword [esp + 0x20]
push 0
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esp + 0x14]
push edx
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x469951
mov eax, esi
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4697c0
mov ecx, dword [esp + 0x10034]
sub eax, edx
mov edx, dword [esp + 0x14]
inc eax
push eax
push esi
push 2
push 0
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esp + 0x14]
push edx
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x469951
push 0xfffd
lea eax, [esp + 0x24]
push esi
push eax
call fcn.00481c00
lea eax, [esp + 0x2c]
add esp, 0xc
mov byte [esp + 0x1001d], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469817
sub eax, edx
mov byte [esp + eax + 0x21], cl
je 0x469832
cmp byte [esp + eax + 0x1f], 0xa
jne 0x469832
dec eax
mov byte [esp + eax + 0x20], cl
cmp byte [esp + 0x20], 0
lea ecx, [esp + 0x20]
je 0x46984e
lea ecx, [ecx]
cmp byte [ecx], 0xa
jne 0x469848
mov byte [ecx], 0
inc ecx
cmp byte [ecx], 0
jne 0x469840
test eax, eax
je 0x469862
add eax, 2
push eax
lea ecx, [esp + 0x24]
push ecx
push 7
jmp 0x46978e
xor eax, eax
push eax
lea ecx, [esp + 0x24]
push ecx
push 7
jmp 0x46978e
cmp byte [esi], 0
je 0x46988d
call fcn.00412310
push 4
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x20], eax
push 4
jmp 0x46978e
push 4
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x20], 0
push 4
jmp 0x46978e
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4698a8
sub eax, edx
mov ebx, eax
mov ecx, ebx
and ecx, 0x80000001
jns 0x4698c2
dec ecx
or ecx, 0xfffffffe
inc ecx
jne case.0x469774.5
xor ebp, ebp
xor edi, edi
test ebx, ebx
jle 0x469925
cmp ebp, 0xffff
jae 0x469925
xor edx, edx
lea ecx, [edx + 0x10]
lea ecx, [ecx]
mov al, byte [edi + esi]
cmp al, 0x30
jl 0x4698f3
cmp al, 0x39
jg 0x4698f3
movsx eax, al
sub eax, 0x30
jmp 0x469911
cmp al, 0x41
jl 0x469903
cmp al, 0x46
jg 0x469903
movsx eax, al
sub eax, 0x37
jmp 0x469911
cmp al, 0x61
jl 0x469941
cmp al, 0x66
jg 0x469941
movsx eax, al
sub eax, 0x57
imul eax, ecx
add edx, eax
inc edi
sub ecx, 0xf
jns 0x4698e0
mov byte [esp + ebp + 0x20], dl
inc ebp
cmp edi, ebx
jl 0x4698d0
mov eax, dword [esp + 0x10034]
mov ecx, dword [esp + 0x14]
push ebp
lea edx, [esp + 0x24]
push edx
push 3
push 0
push eax
push ecx
jmp 0x46979d
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, 0x57
mov edx, dword [esp + 0x10024]
test edi, edi
setne al
movzx ecx, al
push edi
push ecx
push edx
call fcn.0042ce20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10010
ret 0x14
mov edx, dword [esp + 0x14]
push edx
mov edi, 0x57
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x469951