Function at 0x489af0
Capabilities:
Resolve function by parsing pe exports
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x5d0216
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x694114]
xor eax, esp
mov dword [esp + 0x184], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x694114]
xor eax, esp
push eax
lea eax, [esp + 0x19c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x1ac]
mov esi, ecx
mov ebp, 1
xor ebx, ebx
push ebp
mov dword [esp + 0x20], esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], ebx
call fcn.00488800
test al, al
je 0x489b8b
cmp dword [edi + 0x10], ebx
jne 0x489b5a
xor eax, eax
jmp 0x489b66
cmp dword [edi + 0x14], 8
jb 0x489b64
mov eax, dword [edi]
jmp 0x489b66
mov eax, edi
mov edx, dword [esi]
push 4
lea ecx, [esp + 0x1b4]
push ecx
push 4
push ebx
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [esi + 0x34], eax
cmp eax, ebx
jne 0x489b8b
mov al, 1
jmp 0x48a146
xor al, al
lea ecx, [ecx]
cmp al, bl
jne 0x489bed
lea eax, [esp + 0x174]
push 0x5fcf00
push eax
call fcn.00423280
add esp, 8
mov esi, eax
or dword [esp + 0x18], ebp
mov dword [esp + 0x1a4], ebx
cmp dword [0x695aa8], ebx
je 0x489bd2
call sub.KERNEL32.dll_GetCurrentThreadId
cmp eax, dword [0x695aa8]
je 0x489bd2
call fcn.004443b0
jmp 0x489bd7
mov al, byte [0x68a580]
cmp al, bl
je 0x489bed
push esi
call fcn.00445fa0
add esp, 4
mov byte [esp + 0x17], 1
cmp eax, ebp
jae 0x489bf1
mov byte [esp + 0x17], bl
test byte [esp + 0x18], 1
mov dword [esp + 0x1a4], 0xffffffff
je 0x489c32
mov ecx, dword [esp + 0x190]
and dword [esp + 0x18], 0xfffffffe
push ecx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x188], 8
jb 0x489c32
mov edx, dword [esp + 0x174]
push edx
call fcn.00584768
add esp, 4
cmp byte [esp + 0x17], bl
je 0x48a144
push str.Cant_set_value_of__s
lea ecx, [esp + 0x130]
call fcn.00402bb0
mov dword [esp + 0x1a4], ebp
mov ebp, 7
xor eax, eax
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], ax
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
xor ecx, ecx
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], cx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x1a4], 3
call fcn.00425e70
cmp eax, ebx
je 0x489cb8
lea edx, [esp + 0x60]
push edx
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x134]
push edx
mov ecx, eax
call fcn.00429320
cmp eax, ebx
jne 0x489cc8
lea eax, [esp + 0x12c]
push eax
call fcn.004292f0
add esp, 4
mov esi, eax
call fcn.00420510
mov dword [esp + 0x28], eax
mov byte [esp + 0x1a4], 4
call fcn.00420510
mov dword [esp + 0x2c], eax
mov byte [esp + 0x1a4], 5
call fcn.00420510
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], ebx
push str.wx.sys_error
lea ecx, [esp + 0x154]
mov byte [esp + 0x1a8], 6
call fcn.00402bb0
lea ecx, [esp + 0x88]
push ecx
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x1a8], 7
call fcn.00486fd0
add esp, 4
mov byte [esp + 0x1a4], 8
mov dword [esp + 0xd4], 1
mov dword [esp + 0xdc], str....._srcmsw_registry.cpp
mov dword [esp + 0xe4], str.wxRegKey::SetValue
mov dword [esp + 0xe0], 0x377
mov dword [esp + 0xe8], 0x5fcf00
mov dword [esp + 0xec], ebx
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ebx
call sub.KERNEL32.dll_GetCurrentThreadId
xor edx, edx
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], ebx
mov dword [esp + 0x118], ebp
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], dx
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
mov byte [esp + 0x1a4], 9
call sub.KERNEL32.dll_GetLastError
push 0xffffffffffffffff
mov edi, eax
push ebx
lea eax, [esp + 0x158]
push eax
lea ecx, [esp + 0x110]
call fcn.00402610
mov eax, dword [esp + 0x100]
cmp eax, ebx
jne 0x489e62
push 0x20
call fcn.00584773
mov esi, eax
add esp, 4
mov dword [esp + 0x20], esi
mov byte [esp + 0x1a4], 0xa
cmp esi, ebx
je 0x489e51
push 0x64
call fcn.00447710
push 4
push eax
mov dword [esi + 4], eax
mov dword [esi + 8], ebx
call fcn.00585c5e
mov dword [esi], eax
push 0x64
mov byte [esp + 0x1b4], 0xb
call fcn.00447710
push 4
push eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], ebx
call fcn.00585c5e
mov dword [esi + 0x10], eax
add esp, 0x18
mov eax, esi
jmp 0x489e53
xor eax, eax
mov byte [esp + 0x1a4], 9
mov dword [esp + 0x100], eax
push 0xffffffffffffffff
xor ecx, ecx
push ebx
lea edx, [esp + 0x158]
mov word [esp + 0xb4], cx
push edx
lea ecx, [esp + 0xb8]
mov esi, eax
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xc8], ebx
call fcn.00402610
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], ebx
lea eax, [esp + 0x17]
push eax
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
mov byte [esp + 0x1ac], 0xc
call fcn.004b1eb0
mov edx, dword [esp + 0xc8]
push edx
mov esi, eax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0xc0], 8
jb 0x489ef0
mov eax, dword [esp + 0xac]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x1c]
xor ecx, ecx
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xbc], ebx
mov word [esp + 0xac], cx
mov dword [esi + 0x28], edi
mov esi, dword [edx + 0x34]
lea eax, [esp + 0x88]
lea ecx, [esp + 0x28]
mov byte [esp + 0x1a4], 0xe
mov dword [esp + 0x20], eax
call fcn.0041de00
lea ecx, [esp + 0x20]
mov edi, eax
call fcn.0041d2a0
push eax
push edi
lea ecx, [esp + 0xdc]
push esi
push ecx
call fcn.004650b0
mov edx, dword [esp + 0xb4]
push edx
call fcn.005844d1
mov edi, 8
add esp, 0x14
cmp dword [esp + 0x9c], edi
jb 0x489f77
mov eax, dword [esp + 0x88]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x120]
xor ecx, ecx
push edx
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], ebx
mov word [esp + 0x8c], cx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x118], edi
jb 0x489fb8
mov eax, dword [esp + 0x104]
push eax
call fcn.00584768
add esp, 4
mov esi, dword [esp + 0x100]
xor ecx, ecx
mov dword [esp + 0x118], ebp
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], cx
mov dword [esp + 0x84], esi
cmp esi, ebx
je 0x48a03a
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
push 0x40b5f0
push edx
push eax
mov byte [esp + 0x1b0], 0xf
call fcn.00447740
mov edi, dword [esi + 0x10]
push edi
mov dword [esi + 0x18], ebx
call fcn.005844d1
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push 0x475ea0
push ecx
push edx
mov byte [esp + 0x1c0], 7
call fcn.00447740
mov eax, dword [esi]
push eax
mov dword [esi + 8], ebx
call fcn.005844d1
push esi
call fcn.00584768
add esp, 0x24
mov edi, 8
mov eax, dword [esp + 0x16c]
push eax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x164], edi
jb 0x48a063
mov ecx, dword [esp + 0x150]
push ecx
call fcn.00584768
add esp, 4
xor edx, edx
lea ecx, [esp + 0x28]
mov dword [esp + 0x164], ebp
mov dword [esp + 0x160], ebx
mov word [esp + 0x150], dx
mov byte [esp + 0x1a4], 3
call fcn.004020c0
mov eax, dword [esp + 0x58]
push eax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x50], edi
jb 0x48a0ac
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00584768
add esp, 4
mov eax, dword [esp + 0x7c]
xor edx, edx
push eax
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], dx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x74], edi
jb 0x48a0db
mov ecx, dword [esp + 0x60]
push ecx
call fcn.00584768
add esp, 4
mov eax, dword [esp + 0x148]
xor edx, edx
push eax
mov dword [esp + 0x78], ebp
mov dword [esp + 0x74], ebx
mov word [esp + 0x64], dx
mov dword [esp + 0x1a8], 0xffffffff
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x140], edi
jb 0x48a11e
mov ecx, dword [esp + 0x12c]
push ecx
call fcn.00584768
add esp, 4
mov edi, dword [esp + 0x24]
xor edx, edx
mov dword [esp + 0x140], ebp
mov dword [esp + 0x13c], ebx
mov word [esp + 0x12c], dx
mov al, 1
lea ebp, [edx + 1]
jmp 0x489b90
xor al, al
mov ecx, dword [esp + 0x19c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.00585b7b
add esp, 0x194
ret 8