Function at 0x4696c0
Capabilities:
Set registry value

Disassembly:
mov eax, 0x1000c
call fcn.0048b740
mov eax, dword [esp + 0x10018]
push ebx
push ebp
mov ebp, dword [esp + 0x1001c]
push esi
push edi
mov esi, ecx
test eax, eax
je 0x469906
test ebp, ebp
je 0x469906
cmp ebp, 0xfffffffe
je 0x469906
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [0x49f440]
lea edx, [esp + 0x14]
push edx
mov edx, dword [ecx + 0xac]
mov ecx, dword [esp + 0x10034]
push 0
or edx, 0x20006
push edx
push 0
push 0x49281e
push 0
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov edi, eax
test edi, edi
jne 0x469949
lea eax, [ebp - 1]
cmp eax, 6
ja case.0x469744.5
jmp dword [eax*4 + 0x469958]
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469750
sub eax, edx
inc eax
push eax
push esi
push 1
mov edx, dword [esp + 0x1003c]
mov eax, dword [esp + 0x1c]
push 0
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edi, eax
jmp 0x46993e
mov eax, esi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469780
mov ecx, dword [esp + 0x10030]
sub eax, edx
mov edx, dword [esp + 0x10]
inc eax
push eax
push esi
push 2
push 0
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edi, eax
jmp 0x46993e
push 0xfffd
lea eax, [esp + 0x20]
push esi
push eax
call fcn.00481f40
lea eax, [esp + 0x28]
add esp, 0xc
mov byte [esp + 0x10019], 0
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4697d0
sub eax, edx
mov byte [esp + eax + 0x1d], cl
je 0x4697eb
cmp byte [esp + eax + 0x1b], 0xa
jne 0x4697eb
dec eax
mov byte [esp + eax + 0x1c], cl
cmp byte [esp + 0x1c], 0
lea ecx, [esp + 0x1c]
je 0x469804
cmp byte [ecx], 0xa
jne 0x4697fe
mov byte [ecx], 0
inc ecx
cmp byte [ecx], 0
jne 0x4697f6
test eax, eax
je 0x469818
add eax, 2
push eax
lea ecx, [esp + 0x20]
push ecx
push 7
jmp 0x46975e
xor eax, eax
push eax
lea ecx, [esp + 0x20]
push ecx
push 7
jmp 0x46975e
cmp byte [esi], 0
je 0x469843
call fcn.004124c0
push 4
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], eax
push 4
jmp 0x46975e
push 4
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], 0
push 4
jmp 0x46975e
mov eax, esi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469860
sub eax, edx
mov ebx, eax
mov ecx, ebx
and ecx, 0x80000001
jns 0x46987a
dec ecx
or ecx, 0xfffffffe
inc ecx
jne case.0x469744.5
xor ebp, ebp
xor edi, edi
test ebx, ebx
jle 0x4698da
cmp ebp, 0xffff
jae 0x4698da
xor edx, edx
lea ecx, [edx + 0x10]
mov al, byte [edi + esi]
cmp al, 0x30
jl 0x4698a8
cmp al, 0x39
jg 0x4698a8
movsx eax, al
sub eax, 0x30
jmp 0x4698c6
cmp al, 0x41
jl 0x4698b8
cmp al, 0x46
jg 0x4698b8
movsx eax, al
sub eax, 0x37
jmp 0x4698c6
cmp al, 0x61
jl 0x4698fb
cmp al, 0x66
jg 0x4698fb
movsx eax, al
sub eax, 0x57
imul eax, ecx
add edx, eax
inc edi
sub ecx, 0xf
jns 0x469895
mov byte [esp + ebp + 0x1c], dl
inc ebp
cmp edi, ebx
jl 0x469888
mov eax, dword [esp + 0x10030]
mov ecx, dword [esp + 0x10]
push ebp
lea edx, [esp + 0x20]
push edx
push 3
push 0
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edi, eax
jmp 0x46993e
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, 0x57
mov eax, edi
mov ecx, dword [0x49f440]
test edi, edi
mov dword [ecx + 0x30], eax
mov ecx, dword [esp + 0x10020]
setne dl
movzx eax, dl
push eax
push ecx
call fcn.0042cb00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1000c
ret 0x14
mov edi, 0x57
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp edi, 0xffffffff
jne 0x46990b
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x46990d