Function at 0x48f79c
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x48f7a4
push ebx
push esi
push edi
mov dword [ebp - 4], edx
xor eax, eax
push ebp
push 0x48fa6d
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x4170a8]
call fcn.004037a0
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x48fa35
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x434708]
call fcn.00434808
mov esi, eax
mov edx, 0x80000002
mov eax, esi
call fcn.004348e4
xor ecx, ecx
mov edx, 0x48fa84
mov eax, esi
call fcn.00434948
test al, al
je 0x48f877
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00434b9c
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48f877
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x48fabc
push 0x48fac8
lea ecx, [ebp - 0x14]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x14]
push 0x48fad8
lea ecx, [ebp - 0x1c]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
mov eax, esi
call fcn.00434d08
push dword [ebp - 0x18]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404980
inc ebx
dec dword [ebp - 0x10]
jne 0x48f825
mov eax, esi
call fcn.004348b4
xor ecx, ecx
mov edx, 0x48fae4
mov eax, esi
call fcn.00434948
test al, al
je 0x48f8ff
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00434b9c
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48f8ff
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x48fabc
push 0x48fb20
lea ecx, [ebp - 0x20]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x20]
push 0x48fad8
lea ecx, [ebp - 0x28]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x24]
mov eax, esi
call fcn.00434d08
push dword [ebp - 0x24]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404980
inc ebx
dec dword [ebp - 0x10]
jne 0x48f8ad
mov eax, esi
call fcn.004348b4
mov edx, 0x80000001
mov eax, esi
call fcn.004348e4
xor ecx, ecx
mov edx, 0x48fa84
mov eax, esi
call fcn.00434948
test al, al
je 0x48f993
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00434b9c
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48f993
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x48fabc
push 0x48fb34
lea ecx, [ebp - 0x2c]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x2c]
push 0x48fad8
lea ecx, [ebp - 0x34]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x30]
mov eax, esi
call fcn.00434d08
push dword [ebp - 0x30]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404980
inc ebx
dec dword [ebp - 0x10]
jne 0x48f941
mov eax, esi
call fcn.004348b4
xor ecx, ecx
mov edx, 0x48fae4
mov eax, esi
call fcn.00434948
test al, al
je 0x48fa1b
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00434ad4
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48fa1b
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x48fabc
push 0x48fb44
lea ecx, [ebp - 0x38]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x38]
push 0x48fad8
lea ecx, [ebp - 0x40]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x3c]
mov eax, esi
call fcn.00434d08
push dword [ebp - 0x3c]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404980
inc ebx
dec dword [ebp - 0x10]
jne 0x48f9c9
mov eax, esi
call fcn.004348b4
mov dl, 1
mov eax, esi
mov ecx, dword [eax]
call dword [ecx - 4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fa3f
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.00404654
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48fa74
lea eax, [ebp - 0x40]
mov edx, 0xc
call fcn.00404624
lea eax, [ebp - 8]
call fcn.00404600
ret