Function at 0x406a5b
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x46b4
call fcn.00408990
mov dword [ebp - 0x46b4], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x46ac], 0
mov dword [ebp - 0x46b0], 0
mov eax, dword [ebp + 0xc]
push eax
push 2
call fcn.00403f89
add esp, 8
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x46a8]
push edx
call fcn.004043ef
add esp, 8
mov dword [ebp - 0x46b4], eax
cmp dword [ebp - 0x46b4], 0
je 0x406add
mov eax, dword [ebp - 0x46b4]
jmp 0x406cad
lea eax, [ebp - 0x46a8]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00403a82
add esp, 8
mov dword [ebp - 0x5c], 0xe
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x5c]
push eax
push 0x40c220
mov ecx, dword [ebp + 0xc]
add ecx, 0x410
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x18]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jge 0x406b28
jmp 0x406ca8
lea edx, [ebp - 0x60]
push edx
push 0x4091e0
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x58]
push edx
call dword [ecx]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jge 0x406b4a
jmp 0x406ca3
push 0
push 1
mov eax, dword [ebp + 0x10]
push eax
push 0
push 0
push 0
push 0
push 0x40030
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.004051a3
add esp, 0x24
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x406b79
jmp 0x406c9e
lea edx, [ebp - 0x46ac]
push edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x60]
push edx
call dword [ecx + 0x24]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x406b9a
jmp 0x406c99
cmp dword [ebp - 0x46ac], 0
je 0x406bb6
mov eax, dword [ebp - 0x46ac]
push eax
lea ecx, [ebp - 0x54]
push ecx
call sub.MSVCRT.dll_wcscpy
add esp, 8
cmp dword [ebp - 0x46ac], 0
je 0x406bcc
mov edx, dword [ebp - 0x46ac]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x60], 0
je 0x406bde
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x60]
push edx
call dword [ecx + 8]
cmp dword [ebp - 0x58], 0
je 0x406bf0
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x58]
push edx
call dword [ecx + 8]
cmp dword [ebp - 0x64], 0
je 0x406bfe
mov eax, dword [ebp - 0x64]
jmp 0x406cad
mov eax, dword [ebp + 0xc]
push eax
push 2
call fcn.00402f0d
add esp, 8
lea ecx, [ebp - 0x46b0]
push ecx
push 2
push 0
mov edx, dword [ebp + 0xc]
add edx, 0x618
push edx
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x46b4], eax
cmp dword [ebp - 0x46b4], 0
je 0x406c3d
jmp 0x406c97
lea eax, [ebp - 0x54]
push eax
call sub.MSVCRT.dll_wcslen
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x54]
push ecx
push 1
push 0
push 0x40d54c
mov edx, dword [ebp - 0x46b0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x46b4], eax
cmp dword [ebp - 0x46b4], 0
je 0x406c77
jmp 0x406c95
cmp dword [ebp - 0x46b0], 0
je 0x406c8d
mov eax, dword [ebp - 0x46b0]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x46b4]
jmp 0x406cad
jmp 0x406c77
jmp 0x406c77
jmp 0x406bb6
jmp 0x406bb6
jmp 0x406bb6
jmp 0x406bb6
mov esp, ebp
pop ebp
ret