Function at 0x5d0770
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x667960
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
test eax, eax
je 0x5d0eba
cmp dword [esi + 0x48c], 0
jne 0x5d07c6
push eax
call fcn.005cf670
test al, al
je 0x5d0eba
mov edx, dword [esi + 0x114]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d07d1
sub eax, edi
je 0x5d0807
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d07e1
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.FRCType
mov eax, dword [esi + 0x48c]
push eax
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
call ebx
jmp 0x5d080d
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esi + 0x118]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0818
sub eax, edi
je 0x5d0846
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0828
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.owWPage
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
mov edx, dword [esi + 0x11c]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0851
sub eax, edi
je 0x5d087f
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0861
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.owWPCookies
mov edx, dword [esi + 0x48c]
push edx
call ebx
mov edx, dword [esi + 0x120]
mov eax, edx
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0890
sub eax, edi
je 0x5d08be
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d08a0
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.owWPUser
mov eax, dword [esi + 0x48c]
push eax
call ebx
mov edx, dword [esi + 0x124]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d08d0
sub eax, edi
je 0x5d08f0
push edx
push str.owWPEncPwd
mov ecx, dword [esi + 0x48c]
push ecx
call fcn.005ba800
add esp, 0xc
mov eax, dword [esi + 0xc8]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0900
sub eax, edx
je 0x5d096e
mov eax, dword [esi]
push str.googlevideo.com
push eax
call fcn.00622230
add esp, 8
test eax, eax
je 0x5d0940
mov eax, dword [esi + 0xc8]
push str.Url0
push str.eu02
push eax
mov edx, dword [esi + 0x48c]
push edx
mov ecx, esi
call fcn.005ce550
jmp 0x5d096e
mov ecx, dword [esi + 0xc8]
mov eax, ecx
lea edi, [eax + 1]
jmp 0x5d0950
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x5d0950
sub eax, edi
inc eax
push eax
push ecx
push 1
push 0
push str.Url0
mov eax, dword [esi + 0x48c]
push eax
call ebx
mov edx, dword [esi + 0x148]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0980
sub eax, edi
je 0x5d09ae
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0990
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.U0_PD
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
mov edx, dword [esi + 0x14c]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d09c0
sub eax, edi
je 0x5d09ee
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d09d0
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.U0_c
mov edx, dword [esi + 0x48c]
push edx
call ebx
mov edx, dword [esi + 0x150]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0a00
sub eax, edi
je 0x5d0a2e
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0a10
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.U0_u
mov eax, dword [esi + 0x48c]
push eax
call ebx
mov edx, dword [esi + 0x154]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0a40
sub eax, edi
je 0x5d0a60
push edx
push str.U0_EncP
mov ecx, dword [esi + 0x48c]
push ecx
call fcn.005ba800
add esp, 0xc
mov edx, dword [esi + 0x158]
mov eax, edx
lea edi, [eax + 1]
jmp 0x5d0a70
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0a70
sub eax, edi
je 0x5d0a9e
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0a80
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.U0_PDMT
mov edx, dword [esi + 0x48c]
push edx
call ebx
mov edx, dword [esi + 0x130]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0ab0
sub eax, edi
je 0x5d0ade
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0ac0
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.FR_FNCD
mov eax, dword [esi + 0x48c]
push eax
call ebx
lea eax, [esi + 0x138]
cmp dword [eax + 4], 0
jl 0x5d0b06
jg 0x5d0af1
cmp dword [eax], 0
jbe 0x5d0b06
push 8
push eax
push 0
push 0
push str.FRFileSize
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
lea eax, [esi + 0x308]
cmp dword [eax + 4], 0
jl 0x5d0b2e
jg 0x5d0b19
cmp dword [eax], 0
jbe 0x5d0b2e
push 8
push eax
push 0
push 0
push str.uInitREP
mov edx, dword [esi + 0x48c]
push edx
call ebx
mov edx, dword [esi + 0x37c]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0b40
sub eax, edi
je 0x5d0b6e
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0b50
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.AccLngH
mov eax, dword [esi + 0x48c]
push eax
call ebx
mov edx, dword [esi + 0x380]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0b80
sub eax, edi
je 0x5d0bae
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0b90
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.OriginH
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
mov edx, dword [esi + 0x384]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0bc0
sub eax, edi
je 0x5d0bee
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0bd0
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.AccH
mov edx, dword [esi + 0x48c]
push edx
call ebx
mov edx, dword [esi + 0x408]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0c00
sub eax, edi
je 0x5d0c2e
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0c10
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.OrgAccEncH
mov eax, dword [esi + 0x48c]
push eax
call ebx
mov edx, dword [esi + 0x388]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0c40
sub eax, edi
je 0x5d0c6e
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0c50
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.AccChrsH
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
mov edx, dword [esi + 0x38c]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0c80
sub eax, edi
je 0x5d0cae
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0c90
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.CstmHdrs
mov edx, dword [esi + 0x48c]
push edx
call ebx
mov edx, dword [esi + 0x390]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0cc0
sub eax, edi
je 0x5d0cee
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0cd0
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.BearerAuth
mov eax, dword [esi + 0x48c]
push eax
call ebx
mov edx, dword [esi + 0x394]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0d00
sub eax, edi
je 0x5d0d2e
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0d10
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.uBrProxy
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
mov edx, dword [esi + 0x398]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0d40
sub eax, edi
je 0x5d0d6e
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0d50
sub eax, edi
inc eax
push eax
push edx
push 1
push 0
push str.ou_uBrProxy
mov edx, dword [esi + 0x48c]
push edx
call ebx
mov edx, dword [esi + 0x3a0]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0d80
sub eax, edi
je 0x5d0db4
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5d0d90
sub eax, edi
inc eax
push eax
push edx
mov edi, 1
push edi
push 0
push str.uBrPrBAuth
mov eax, dword [esi + 0x48c]
push eax
call ebx
jmp 0x5d0db9
mov edi, 1
cmp byte [esi + 0x1b1], 0
je 0x5d0ddd
mov dword [ebp + 8], edi
push 4
lea ecx, [ebp + 8]
push ecx
push 4
push 0
push str.bBrSntRB0
mov edx, dword [esi + 0x48c]
push edx
call ebx
cmp byte [esi + 0x1b2], 0
je 0x5d0e01
mov dword [ebp - 0x14], edi
push 4
lea eax, [ebp - 0x14]
push eax
push 4
push 0
push str.bBrSntRB1
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
cmp byte [esi + 0x188], 0
je 0x5d0e25
mov dword [ebp - 0x18], edi
push 4
lea edx, [ebp - 0x18]
push edx
push 4
push 0
push str.bOUD_Ch
mov eax, dword [esi + 0x48c]
push eax
call ebx
cmp byte [esi + 0x35d], 0
je 0x5d0e49
mov dword [ebp - 0x1c], edi
push 4
lea ecx, [ebp - 0x1c]
push ecx
push 4
push 0
push str.bNoOriginH
mov edx, dword [esi + 0x48c]
push edx
call ebx
cmp byte [esi + 0x35e], 0
je 0x5d0e6d
mov dword [ebp - 0x20], edi
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
push str.bNoAcceptCharsetH
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
mov edx, dword [esi + 0x39c]
mov dword [ebp - 0x24], edx
push 4
lea eax, [ebp - 0x24]
push eax
push 4
push 0
push str.nUrlT_fp
mov ecx, dword [esi + 0x48c]
push ecx
call ebx
mov eax, dword [esi + 0x140]
test eax, eax
jle 0x5d0eb3
mov dword [ebp - 0x28], eax
push 4
lea edx, [ebp - 0x28]
push edx
push 4
push 0
push str.st_time
mov eax, dword [esi + 0x48c]
push eax
call ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4