Function at 0x10020cc0
Capabilities:
Set registry value

Disassembly:
sub esp, 0x8c
mov eax, dword [0x100638a4]
xor eax, esp
mov dword [esp + 0x88], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x9c]
push edi
mov edi, dword [esp + 0xa4]
mov ebp, ecx
call fcn.1000f420
mov ebx, eax
test ebx, ebx
jne 0x10020cfa
xor al, al
jmp 0x10020fa6
mov eax, dword [esp + 0xa8]
test eax, eax
jle 0x10020f9d
mov dword [esp + 0x10], esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [esp + 0x14], eax
jmp 0x10020d20
mov eax, dword [esp + 0x10]
push 0x80
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.10038770
add esp, 0xc
mov ecx, str.Valid
lea eax, [esp + 0x18]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020d66
test dx, dx
je 0x10020d62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020d66
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020d40
xor eax, eax
jmp 0x10020d6b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea eax, [esp + 0x18]
jne 0x10020d85
mov edx, dword [edi]
push 4
push edi
push 4
push 0
mov dword [ebp + 4], edx
push eax
jmp 0x10020f87
mov ecx, str.LogLevel
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020db6
test dx, dx
je 0x10020db2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020db6
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020d90
xor eax, eax
jmp 0x10020dbb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10020dc9
mov ecx, dword [edi]
mov dword [ebp + 8], ecx
jmp 0x10020f7b
mov ecx, str.TrafLastDate
lea eax, [esp + 0x18]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020df8
test dx, dx
je 0x10020df4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020df8
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020dd2
xor eax, eax
jmp 0x10020dfd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10020e17
mov eax, dword [edi]
push 4
push edi
push 4
push 0
lea ecx, [esp + 0x28]
mov dword [ebp + 0xc], eax
push ecx
jmp 0x10020f87
mov ecx, str.TrafReport
lea eax, [esp + 0x18]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020e46
test dx, dx
je 0x10020e42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020e46
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020e20
xor eax, eax
jmp 0x10020e4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea eax, [esp + 0x18]
jne 0x10020e65
mov edx, dword [edi]
push 4
push edi
push 4
push 0
mov dword [ebp + 0x10], edx
push eax
jmp 0x10020f87
mov ecx, str.DnsProxy
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020e96
test dx, dx
je 0x10020e92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020e96
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020e70
xor eax, eax
jmp 0x10020e9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10020ea9
mov ecx, dword [edi]
mov dword [ebp + 0x14], ecx
jmp 0x10020f7b
mov ecx, str.FWBlock
lea eax, [esp + 0x18]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020ed8
test dx, dx
je 0x10020ed4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020ed8
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020eb2
xor eax, eax
jmp 0x10020edd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10020ef7
mov eax, dword [edi]
push 4
push edi
push 4
push 0
lea ecx, [esp + 0x28]
mov dword [ebp + 0x18], eax
push ecx
jmp 0x10020f87
mov ecx, str.FWTime
lea eax, [esp + 0x18]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020f26
test dx, dx
je 0x10020f22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020f26
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020f00
xor eax, eax
jmp 0x10020f2b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea eax, [esp + 0x18]
jne 0x10020f42
mov edx, dword [edi]
push 4
push edi
push 4
push 0
mov dword [ebp + 0x1c], edx
push eax
jmp 0x10020f87
mov ecx, str.Intranet
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10020f6d
test dx, dx
je 0x10020f69
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10020f6d
add eax, 4
add ecx, 4
test dx, dx
jne 0x10020f47
xor eax, eax
jmp 0x10020f72
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10020f8a
mov ecx, dword [edi]
mov dword [ebp + 0x20], ecx
push 4
push edi
push 4
push 0
lea edx, [esp + 0x28]
push edx
push ebx
call esi
sub dword [esp + 0x10], 0xffffff80
add edi, 4
sub dword [esp + 0x14], 1
jne 0x10020d20
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov ecx, dword [esp + 0x98]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10038723
add esp, 0x8c
ret 0xc