Function at 0x48640c
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
xor eax, eax
mov dword [ebp - 8], eax
lea ebx, [ebp - 4]
xor eax, eax
push ebp
push 0x48687c
push dword fs:[eax]
mov dword fs:[eax], esp
push ebx
push 0x48688c
push 0x80000002
call sub.advapi32.dll_RegCreateKeyA
test eax, eax
jne 0x4865d5
lea eax, [ebp - 8]
mov edx, 0x4868ec
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4868f4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486908
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486930
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486940
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486968
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486980
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486984
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov ecx, 0x48699c
mov edx, dword [0x48ada0]
call fcn.0040472c
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869b4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov ecx, 0x4869c4
mov edx, dword [0x48ada0]
call fcn.0040472c
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869dc
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x4868ec
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869e4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x4868ec
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869f4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
push ebx
push 0x486a00
push 0x80000002
call sub.advapi32.dll_RegCreateKeyA
test eax, eax
jne 0x486781
lea eax, [ebp - 8]
mov edx, 0x486a60
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4868f4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486908
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486930
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486a70
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486968
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486980
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486984
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov ecx, 0x486aa0
mov edx, dword [0x48ada0]
call fcn.0040472c
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869b4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov ecx, 0x486ac4
mov edx, dword [0x48ada0]
call fcn.0040472c
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869dc
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486a60
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869e4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486a60
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869f4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
push ebx
push 0x486ae0
push 0x80000002
call sub.advapi32.dll_RegCreateKeyA
test eax, eax
jne 0x48685d
lea eax, [ebp - 8]
mov edx, 0x486b40
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869f4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486b40
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x4869e4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486908
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486930
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 8]
mov edx, 0x486b54
call fcn.004044c0
mov eax, dword [ebp - 8]
call fcn.004046e0
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.004048d8
push eax
push 1
push 0
push 0x486968
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
mov bl, 1
mov byte [0x48ad9e], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486883
lea eax, [ebp - 8]
call fcn.00404428
ret