Function at 0xf5a8c
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 6
push 0
push 0
dec ecx
jne 0xf5a94
push ecx
push ebx
push esi
push edi
mov esi, edx
mov edi, eax
xor eax, eax
push ebp
push 0xf5d46
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xf5d60
lea eax, [ebp - 0x1c]
call fcn.00025ad4
push dword [ebp - 0x1c]
push 0xf5d70
mov eax, edi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x20]
call fcn.00027444
push dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00014068
mov eax, dword [ebp - 0x18]
mov edx, esi
call fcn.000f5800
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xf5d19
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.kernel32.dll_SetLastError
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x28]
call fcn.00025ad4
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
mov edx, 0xf5d88
call fcn.00013ff4
mov eax, dword [ebp - 0x24]
call fcn.0001416c
push eax
push 0x80000002
call sub.advapi32.dll_RegCreateKeyExA
mov ebx, eax
cmp dword [ebp - 0x14], 0
je 0xf5cc2
lea eax, [ebp - 8]
call fcn.00013d18
mov eax, dword [ebp - 8]
call fcn.00013fa8
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.0001416c
push eax
push 1
push 0
push 0xf5dd4
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0xf5de0
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0xf5dec
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dword [ebp - 0xc], edi
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0xf5df8
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0xf5e04
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0xf5e14
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0xf5e24
call fcn.00013db0
mov eax, dword [ebp - 8]
call fcn.00013fa8
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.0001416c
push eax
push 1
push 0
push 0xf5e30
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0xf5e24
call fcn.00013db0
mov eax, dword [ebp - 8]
call fcn.00013fa8
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.0001416c
push eax
push 1
push 0
push 0xf5e3c
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0xf5e50
call fcn.00013db0
mov eax, dword [ebp - 8]
call fcn.00013fa8
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.0001416c
push eax
push 1
push 0
push 0xf5e58
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
jmp 0xf5cf8
lea eax, [ebp - 0x30]
call fcn.00025ad4
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0xf5e70
call fcn.00013ff4
mov eax, dword [ebp - 0x2c]
mov edx, esi
call fcn.000f58bc
lea edx, [ebp - 0x34]
mov eax, ebx
call fcn.00027478
mov eax, dword [ebp - 0x34]
mov edx, esi
call fcn.000f58bc
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x14], 0
je 0xf5d0a
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xf5d23
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf5d4d
lea eax, [ebp - 0x34]
mov edx, 8
call fcn.00013d3c
lea eax, [ebp - 8]
call fcn.00013d18
ret