Function at 0x5e1fc0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x654580
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
test eax, eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 4], 0
je 0x5e2493
mov ecx, dword [esi + 0x43c]
test ecx, ecx
jne 0x5e200f
push eax
mov ecx, esi
call fcn.005e6030
test al, al
je 0x5e2493
mov edx, dword [esi + 0x108]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e2047
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push ecx
push edx
push 1
push eax
mov eax, dword [esi + 0x43c]
push str.FRCType
push eax
call ebx
jmp 0x5e204d
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esi + 0x10c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e207d
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
mov ecx, dword [esi + 0x43c]
push edx
push 1
push eax
push str.owWPage
push ecx
call ebx
mov edx, dword [esi + 0x110]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e20ad
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
mov edx, dword [esi + 0x43c]
push 1
push eax
push str.owWPCookies
push edx
call ebx
mov edx, dword [esi + 0x114]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e20dd
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push 1
push eax
mov eax, dword [esi + 0x43c]
push str.owWPUser
push eax
call ebx
mov edx, dword [esi + 0x118]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e2106
mov ecx, dword [esi + 0x43c]
push edx
push str.owWPEncPwd
push ecx
call fcn.005d0db0
add esp, 0xc
mov edx, dword [esi + 0xc8]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e2136
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
mov edx, dword [esi + 0x43c]
push 1
push eax
push str.Url0
push edx
call ebx
mov edx, dword [esi + 0x138]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e2166
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push 1
push eax
mov eax, dword [esi + 0x43c]
push str.U0_PD
push eax
call ebx
mov edx, dword [esi + 0x13c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e2196
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
mov ecx, dword [esi + 0x43c]
push edx
push 1
push eax
push str.U0_c
push ecx
call ebx
mov edx, dword [esi + 0x140]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e21c6
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
mov edx, dword [esi + 0x43c]
push 1
push eax
push str.U0_u
push edx
call ebx
mov edx, dword [esi + 0x144]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e21ef
mov eax, dword [esi + 0x43c]
push edx
push str.U0_EncP
push eax
call fcn.005d0db0
add esp, 0xc
mov edx, dword [esi + 0x148]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e221f
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
mov ecx, dword [esi + 0x43c]
push edx
push 1
push eax
push str.U0_PDMT
push ecx
call ebx
mov edx, dword [esi + 0x120]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e224f
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
mov edx, dword [esi + 0x43c]
push 1
push eax
push str.FR_FNCD
push edx
call ebx
mov ecx, dword [esi + 0x12c]
lea eax, [esi + 0x128]
test ecx, ecx
jl 0x5e227b
jg 0x5e2266
cmp dword [eax], 0
jbe 0x5e227b
push 8
push eax
mov eax, dword [esi + 0x43c]
push 0
push 0
push str.FRFileSize
push eax
call ebx
mov edx, dword [esi + 0x340]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e22ab
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
mov ecx, dword [esi + 0x43c]
push edx
push 1
push eax
push str.AccLngH
push ecx
call ebx
mov edx, dword [esi + 0x344]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e22db
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
mov edx, dword [esi + 0x43c]
push 1
push eax
push str.OriginH
push edx
call ebx
mov edx, dword [esi + 0x348]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e230b
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push 1
push eax
mov eax, dword [esi + 0x43c]
push str.AccH
push eax
call ebx
mov edx, dword [esi + 0x34c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e233b
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
mov ecx, dword [esi + 0x43c]
push edx
push 1
push eax
push str.AccChrsH
push ecx
call ebx
mov edx, dword [esi + 0x350]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e236b
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
mov edx, dword [esi + 0x43c]
push 1
push eax
push str.CstmHdrs
push edx
call ebx
mov edx, dword [esi + 0x354]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e239b
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push 1
push eax
mov eax, dword [esi + 0x43c]
push str.uBrProxy
push eax
call ebx
mov edx, dword [esi + 0x358]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e23cb
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
mov ecx, dword [esi + 0x43c]
push edx
push 1
push eax
push str.ou_uBrProxy
push ecx
call ebx
mov edx, dword [esi + 0x360]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5e23fb
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
mov edx, dword [esi + 0x43c]
push 1
push eax
push str.uBrPrBAuth
push edx
call ebx
mov al, byte [esi + 0x18d]
test al, al
je 0x5e2424
mov ecx, dword [esi + 0x43c]
lea eax, [ebp + 8]
push 4
push eax
push 4
push 0
push str.bBrSntRB0
push ecx
mov dword [ebp + 8], 1
call ebx
mov al, byte [esi + 0x168]
test al, al
je 0x5e244d
mov eax, dword [esi + 0x43c]
lea edx, [ebp + 8]
push 4
push edx
push 4
push 0
push str.bOUD_Ch
push eax
mov dword [ebp + 8], 1
call ebx
mov eax, dword [esi + 0x43c]
mov ecx, dword [esi + 0x35c]
lea edx, [ebp - 0x14]
push 4
push edx
push 4
push 0
push str.nUrlT_fp
push eax
mov dword [ebp - 0x14], ecx
call ebx
mov eax, dword [esi + 0x130]
test eax, eax
jle 0x5e2493
mov edx, dword [esi + 0x43c]
lea ecx, [ebp + 8]
push 4
push ecx
push 4
push 0
push str.st_time
push edx
mov dword [ebp + 8], eax
call ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4