Function at 0x4693d0
Capabilities:
Set registry value

Disassembly:
mov eax, 0x10010
call fcn.0048af20
mov eax, dword [esp + 0x1001c]
push ebx
push ebp
mov ebp, dword [esp + 0x10020]
push esi
push edi
mov esi, ecx
test eax, eax
je 0x46961c
test ebp, ebp
je 0x46961c
cmp ebp, 0xfffffffe
je 0x46961c
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x10034]
lea edx, [esp + 0x18]
push edx
push 0
push 0x20006
push 0
push 0x4927e9
push 0
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov edi, eax
test edi, edi
jne 0x469621
lea eax, [ebp - 1]
cmp eax, 6
ja case.0x469446.5
jmp dword [eax*4 + 0x469658]
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469452
sub eax, edx
inc eax
push eax
push esi
push 1
mov edx, dword [esp + 0x10040]
mov eax, dword [esp + 0x20]
push 0
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esp + 0x14]
push edx
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x469621
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469490
mov ecx, dword [esp + 0x10034]
sub eax, edx
mov edx, dword [esp + 0x14]
inc eax
push eax
push esi
push 2
push 0
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esp + 0x14]
push edx
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x469621
push 0xfffd
lea eax, [esp + 0x24]
push esi
push eax
call fcn.00481870
lea eax, [esp + 0x2c]
add esp, 0xc
mov byte [esp + 0x1001d], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4694e7
sub eax, edx
mov byte [esp + eax + 0x21], cl
je 0x469502
cmp byte [esp + eax + 0x1f], 0xa
jne 0x469502
dec eax
mov byte [esp + eax + 0x20], cl
cmp byte [esp + 0x20], 0
lea ecx, [esp + 0x20]
je 0x46951e
lea ecx, [ecx]
cmp byte [ecx], 0xa
jne 0x469518
mov byte [ecx], 0
inc ecx
cmp byte [ecx], 0
jne 0x469510
test eax, eax
je 0x469532
add eax, 2
push eax
lea ecx, [esp + 0x24]
push ecx
push 7
jmp 0x469460
xor eax, eax
push eax
lea ecx, [esp + 0x24]
push ecx
push 7
jmp 0x469460
cmp byte [esi], 0
je 0x46955d
call fcn.004122f0
push 4
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x20], eax
push 4
jmp 0x469460
push 4
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x20], 0
push 4
jmp 0x469460
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x469578
sub eax, edx
mov ebx, eax
mov ecx, ebx
and ecx, 0x80000001
jns 0x469592
dec ecx
or ecx, 0xfffffffe
inc ecx
jne case.0x469446.5
xor ebp, ebp
xor edi, edi
test ebx, ebx
jle 0x4695f5
cmp ebp, 0xffff
jae 0x4695f5
xor edx, edx
lea ecx, [edx + 0x10]
lea ecx, [ecx]
mov al, byte [edi + esi]
cmp al, 0x30
jl 0x4695c3
cmp al, 0x39
jg 0x4695c3
movsx eax, al
sub eax, 0x30
jmp 0x4695e1
cmp al, 0x41
jl 0x4695d3
cmp al, 0x46
jg 0x4695d3
movsx eax, al
sub eax, 0x37
jmp 0x4695e1
cmp al, 0x61
jl 0x469611
cmp al, 0x66
jg 0x469611
movsx eax, al
sub eax, 0x57
imul eax, ecx
add edx, eax
inc edi
sub ecx, 0xf
jns 0x4695b0
mov byte [esp + ebp + 0x20], dl
inc ebp
cmp edi, ebx
jl 0x4695a0
mov eax, dword [esp + 0x10034]
mov ecx, dword [esp + 0x14]
push ebp
lea edx, [esp + 0x24]
push edx
push 3
push 0
push eax
push ecx
jmp 0x46946f
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, 0x57
mov edx, dword [esp + 0x10024]
test edi, edi
setne al
movzx ecx, al
push edi
push ecx
push edx
call fcn.0042cc90
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10010
ret 0x14
mov edx, dword [esp + 0x14]
push edx
mov edi, 0x57
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x469621