Function at 0x48ba70
Capabilities:
Resolve function by parsing pe exports
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x5d0216
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x694114]
xor eax, esp
mov dword [esp + 0x184], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x694114]
xor eax, esp
push eax
lea eax, [esp + 0x19c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x1ac]
mov ebp, dword [esp + 0x1b0]
mov esi, ecx
xor ebx, ebx
push 1
mov dword [esp + 0x20], esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], ebx
call fcn.00488800
test al, al
je 0x48bb0e
cmp dword [edi + 0x10], ebx
jne 0x48badd
xor edx, edx
jmp 0x48bae9
cmp dword [edi + 0x14], 8
jb 0x48bae7
mov edx, dword [edi]
jmp 0x48bae9
mov edx, edi
mov eax, dword [ebp]
mov ecx, dword [eax + 8]
mov eax, dword [eax]
push ecx
push eax
mov eax, dword [esi]
push 3
push ebx
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [esi + 0x34], eax
cmp eax, ebx
jne 0x48bb0e
mov al, 1
jmp 0x48c0c9
xor al, al
cmp al, bl
jne 0x48bb6f
lea ecx, [esp + 0x174]
push 0x5fcf00
push ecx
call fcn.00423280
add esp, 8
mov esi, eax
or dword [esp + 0x18], 1
mov dword [esp + 0x1a4], ebx
cmp dword [0x695aa8], ebx
je 0x48bb53
call sub.KERNEL32.dll_GetCurrentThreadId
cmp eax, dword [0x695aa8]
je 0x48bb53
call fcn.004443b0
jmp 0x48bb58
mov al, byte [0x68a580]
cmp al, bl
je 0x48bb6f
push esi
call fcn.00445fa0
add esp, 4
mov byte [esp + 0x17], 1
cmp eax, 1
jae 0x48bb73
mov byte [esp + 0x17], bl
test byte [esp + 0x18], 1
mov dword [esp + 0x1a4], 0xffffffff
je 0x48bbb4
mov edx, dword [esp + 0x190]
and dword [esp + 0x18], 0xfffffffe
push edx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x188], 8
jb 0x48bbb4
mov eax, dword [esp + 0x174]
push eax
call fcn.00584768
add esp, 4
cmp byte [esp + 0x17], bl
je 0x48c0c7
push str.Cant_set_value_of__s
lea ecx, [esp + 0x130]
call fcn.00402bb0
mov ebp, 7
xor ecx, ecx
mov dword [esp + 0x1a4], 1
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], cx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
xor edx, edx
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], dx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x1a4], 3
call fcn.00425e70
cmp eax, ebx
je 0x48bc3e
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x40]
push edx
lea ecx, [esp + 0x134]
push ecx
mov ecx, eax
call fcn.00429320
cmp eax, ebx
jne 0x48bc4e
lea edx, [esp + 0x12c]
push edx
call fcn.004292f0
add esp, 4
mov esi, eax
call fcn.00420510
mov dword [esp + 0x28], eax
mov byte [esp + 0x1a4], 4
call fcn.00420510
mov dword [esp + 0x2c], eax
mov byte [esp + 0x1a4], 5
call fcn.00420510
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], ebx
push str.wx.sys_error
lea ecx, [esp + 0x154]
mov byte [esp + 0x1a8], 6
call fcn.00402bb0
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x88]
push eax
mov byte [esp + 0x1a8], 7
call fcn.00486fd0
add esp, 4
mov byte [esp + 0x1a4], 8
mov dword [esp + 0xd4], 1
mov dword [esp + 0xdc], str....._srcmsw_registry.cpp
mov dword [esp + 0xe4], str.wxRegKey::SetValue
mov dword [esp + 0xe0], 0x3d1
mov dword [esp + 0xe8], 0x5fcf00
mov dword [esp + 0xec], ebx
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ebx
call sub.KERNEL32.dll_GetCurrentThreadId
xor ecx, ecx
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], ebx
mov dword [esp + 0x118], ebp
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], cx
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
mov byte [esp + 0x1a4], 9
call sub.KERNEL32.dll_GetLastError
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x158]
push edx
lea ecx, [esp + 0x110]
mov edi, eax
call fcn.00402610
mov eax, dword [esp + 0x100]
cmp eax, ebx
jne 0x48bde8
push 0x20
call fcn.00584773
mov esi, eax
add esp, 4
mov dword [esp + 0x20], esi
mov byte [esp + 0x1a4], 0xa
cmp esi, ebx
je 0x48bdd7
push 0x64
call fcn.00447710
push 4
push eax
mov dword [esi + 4], eax
mov dword [esi + 8], ebx
call fcn.00585c5e
mov dword [esi], eax
push 0x64
mov byte [esp + 0x1b4], 0xb
call fcn.00447710
push 4
push eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], ebx
call fcn.00585c5e
mov dword [esi + 0x10], eax
add esp, 0x18
mov eax, esi
jmp 0x48bdd9
xor eax, eax
mov byte [esp + 0x1a4], 9
mov dword [esp + 0x100], eax
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x158]
mov esi, eax
xor eax, eax
push ecx
lea ecx, [esp + 0xb8]
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xc8], ebx
mov word [esp + 0xb8], ax
call fcn.00402610
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], ebx
lea edx, [esp + 0x17]
push edx
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
mov byte [esp + 0x1ac], 0xc
call fcn.004b1eb0
mov ecx, dword [esp + 0xc8]
push ecx
mov esi, eax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0xc0], 8
jb 0x48be76
mov edx, dword [esp + 0xac]
push edx
call fcn.00584768
add esp, 4
mov ecx, dword [esp + 0x1c]
xor eax, eax
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xbc], ebx
mov word [esp + 0xac], ax
mov dword [esi + 0x28], edi
mov esi, dword [ecx + 0x34]
lea edx, [esp + 0x88]
lea ecx, [esp + 0x28]
mov byte [esp + 0x1a4], 0xe
mov dword [esp + 0x20], edx
call fcn.0041de00
lea ecx, [esp + 0x20]
mov edi, eax
call fcn.0041d2a0
push eax
push edi
lea eax, [esp + 0xdc]
push esi
push eax
call fcn.004650b0
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.005844d1
mov edi, 8
add esp, 0x14
cmp dword [esp + 0x9c], edi
jb 0x48befd
mov edx, dword [esp + 0x88]
push edx
call fcn.00584768
add esp, 4
mov ecx, dword [esp + 0x120]
xor eax, eax
push ecx
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], ebx
mov word [esp + 0x8c], ax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x118], edi
jb 0x48bf3e
mov edx, dword [esp + 0x104]
push edx
call fcn.00584768
add esp, 4
mov esi, dword [esp + 0x100]
xor eax, eax
mov dword [esp + 0x118], ebp
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], ax
mov dword [esp + 0x84], esi
cmp esi, ebx
je 0x48bfc0
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
push 0x40b5f0
push ecx
push edx
mov byte [esp + 0x1b0], 0xf
call fcn.00447740
mov edi, dword [esi + 0x10]
push edi
mov dword [esi + 0x18], ebx
call fcn.005844d1
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push 0x475ea0
push eax
push ecx
mov byte [esp + 0x1c0], 7
call fcn.00447740
mov eax, dword [esi]
push eax
mov dword [esi + 8], ebx
call fcn.005844d1
push esi
call fcn.00584768
add esp, 0x24
mov edi, 8
mov edx, dword [esp + 0x16c]
push edx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x164], edi
jb 0x48bfe9
mov eax, dword [esp + 0x150]
push eax
call fcn.00584768
add esp, 4
xor ecx, ecx
mov word [esp + 0x150], cx
lea ecx, [esp + 0x28]
mov dword [esp + 0x164], ebp
mov dword [esp + 0x160], ebx
mov byte [esp + 0x1a4], 3
call fcn.004020c0
mov edx, dword [esp + 0x58]
push edx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x50], edi
jb 0x48c032
mov eax, dword [esp + 0x3c]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x7c]
xor ecx, ecx
push edx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], cx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x74], edi
jb 0x48c061
mov eax, dword [esp + 0x60]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x148]
xor ecx, ecx
push edx
mov dword [esp + 0x78], ebp
mov dword [esp + 0x74], ebx
mov word [esp + 0x64], cx
mov dword [esp + 0x1a8], 0xffffffff
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x140], edi
jb 0x48c0a4
mov eax, dword [esp + 0x12c]
push eax
call fcn.00584768
add esp, 4
mov edi, dword [esp + 0x24]
xor ecx, ecx
mov dword [esp + 0x140], ebp
mov dword [esp + 0x13c], ebx
mov word [esp + 0x12c], cx
mov al, 1
jmp 0x48bb10
xor al, al
mov ecx, dword [esp + 0x19c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.00585b7b
add esp, 0x194
ret 8