Function at 0x5bea00
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x648
mov eax, dword [0x6eb874]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x648], ecx
push 0x208
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.0063a460
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x20c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x208
push 0
lea eax, [ebp - 0x414]
push eax
call fcn.0063a460
add esp, 0xc
push 0x6ab00c
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x414]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x63c]
call fcn.004131e0
xor ecx, ecx
mov byte [ebp - 0x61d], cl
lea ecx, [ebp - 0x63c]
call fcn.0040dcd0
shl eax, 1
push eax
lea ecx, [ebp - 0x63c]
call fcn.0040d3c0
push eax
push 1
push 0x6ab024
lea ecx, [ebp - 0x61d]
call fcn.005c8be0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
xor edx, edx
mov byte [ebp - 0x61e], dl
lea ecx, [ebp - 0x61e]
call fcn.005c4630
push eax
lea ecx, [ebp - 0x638]
call fcn.004131e0
xor eax, eax
mov byte [ebp - 0x61f], al
lea ecx, [ebp - 0x638]
call fcn.0040dcd0
shl eax, 1
push eax
lea ecx, [ebp - 0x638]
call fcn.0040d3c0
push eax
push 1
push 0x6ab03c
lea ecx, [ebp - 0x61f]
call fcn.005c4ca0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push ecx
mov ecx, esp
lea edx, [ebp - 0x414]
push edx
call fcn.004131e0
lea eax, [ebp - 0x634]
push eax
call fcn.004bdc60
add esp, 8
xor ecx, ecx
mov byte [ebp - 0x620], cl
lea ecx, [ebp - 0x634]
call fcn.0040dcd0
shl eax, 1
push eax
lea ecx, [ebp - 0x634]
call fcn.0040d3c0
push eax
push 1
push 0x6ab054
lea ecx, [ebp - 0x620]
call fcn.005c88e0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
lea edx, [ebp - 0x20c]
push edx
lea ecx, [ebp - 0x644]
call fcn.004131e0
xor eax, eax
mov byte [ebp - 0x621], al
lea ecx, [ebp - 0x644]
call fcn.0040dcd0
shl eax, 1
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 1
push 0x6ab074
lea ecx, [ebp - 0x621]
call fcn.005c5c10
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
xor edx, edx
mov byte [ebp - 0x622], dl
lea ecx, [ebp - 0x622]
call fcn.005c8e90
push eax
lea ecx, [ebp - 0x630]
call fcn.004131e0
xor eax, eax
mov byte [ebp - 0x623], al
lea ecx, [ebp - 0x630]
call fcn.0040dcd0
shl eax, 1
push eax
lea ecx, [ebp - 0x630]
call fcn.0040d3c0
push eax
push 1
push 0x6ab094
lea ecx, [ebp - 0x623]
call fcn.005c49a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 0x208
push 0
lea ecx, [ebp - 0x61c]
push ecx
call fcn.0063a460
add esp, 0xc
push 0x6ab0a8
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x61c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [ebp - 0x61c]
push ecx
lea ecx, [ebp - 0x640]
call fcn.004131e0
xor edx, edx
mov byte [ebp - 0x624], dl
lea ecx, [ebp - 0x640]
call fcn.0040dcd0
shl eax, 1
push eax
lea eax, [ebp - 0x61c]
push eax
push 1
push 0x6ab0c4
lea ecx, [ebp - 0x624]
call fcn.005c5710
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
xor ecx, ecx
mov byte [ebp - 0x625], cl
lea ecx, [ebp - 0x625]
call fcn.005c5d00
push eax
lea ecx, [ebp - 0x62c]
call fcn.004131e0
xor edx, edx
mov byte [ebp - 0x626], dl
lea ecx, [ebp - 0x62c]
call fcn.0040dcd0
shl eax, 1
push eax
lea ecx, [ebp - 0x62c]
call fcn.0040d3c0
push eax
push 1
push 0x6ab0e4
lea ecx, [ebp - 0x626]
call fcn.005c7890
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
lea ecx, [ebp - 0x62c]
call fcn.00413870
lea ecx, [ebp - 0x640]
call fcn.00413870
lea ecx, [ebp - 0x630]
call fcn.00413870
lea ecx, [ebp - 0x644]
call fcn.00413870
lea ecx, [ebp - 0x634]
call fcn.00413870
lea ecx, [ebp - 0x638]
call fcn.00413870
lea ecx, [ebp - 0x63c]
call fcn.00413870
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006135ac
mov esp, ebp
pop ebp
ret