Function at 0x4758a0
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
mov edi, ecx
mov dword [ebp - 4], edx
mov esi, eax
mov eax, dword [ebp - 4]
call fcn.0040461c
xor eax, eax
push ebp
push 0x476372
push dword fs:[eax]
mov dword fs:[eax], esp
cmp esi, 0x65
jne 0x475a4b
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x476388
mov eax, ebx
call fcn.00433434
mov ecx, 4
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov ecx, 0x10
mov edx, 0x4763c8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4763d8
mov eax, ebx
call fcn.00433434
mov ecx, 4
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov ecx, 0x10
mov edx, 0x4763c8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476408
mov eax, ebx
call fcn.00433434
mov ecx, 4
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov ecx, 0x10
mov edx, 0x4763c8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476438
mov eax, ebx
call fcn.00433434
mov ecx, 4
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov ecx, 0x10
mov edx, 0x4763c8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x47646c
mov eax, ebx
call fcn.00433434
mov ecx, 4
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov ecx, 0x10
mov edx, 0x4763c8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4764a0
mov eax, ebx
call fcn.00433434
mov ecx, 4
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov ecx, 0x10
mov edx, 0x4763c8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0xa
jne 0x475ae1
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x4764e0
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x47650c
mov eax, ebx
call fcn.004337fc
mov edx, 0x476520
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476530
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x47650c
mov eax, ebx
call fcn.004337fc
mov edx, 0x476520
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 1
jne 0x475b77
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x476560
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x47650c
mov eax, ebx
call fcn.004337fc
mov edx, 0x476520
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x47658c
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x47650c
mov eax, ebx
call fcn.004337fc
mov edx, 0x476520
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
test esi, esi
jne 0x475bea
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x4765bc
mov eax, ebx
call fcn.00433434
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4765f0
mov eax, ebx
call fcn.00433434
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 2
jne 0x475c40
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x476654
mov eax, ebx
call fcn.004337d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 3
jne 0x475c93
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov edx, 0x476654
mov eax, ebx
call fcn.004336d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0xc9
jne 0x475cec
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x476664
mov eax, ebx
call fcn.004337d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0x12d
jne 0x475d42
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov edx, 0x476664
mov eax, ebx
call fcn.004336d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0x47
jne 0x475d98
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x476674
mov eax, ebx
call fcn.004337d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0x48
jne 0x475e16
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x476560
mov eax, ebx
call fcn.00433434
mov ecx, 2
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x47658c
mov eax, ebx
call fcn.00433434
mov ecx, 2
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0x49
jne 0x475eba
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x476560
mov eax, ebx
call fcn.00433434
mov ecx, 0x476684
mov edx, 0x47650c
mov eax, ebx
call fcn.004337d0
mov ecx, 2
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x47658c
mov eax, ebx
call fcn.00433434
mov ecx, 0x476684
mov edx, 0x47650c
mov eax, ebx
call fcn.004337d0
mov ecx, 2
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0x4a
jne 0x475f5e
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x476560
mov eax, ebx
call fcn.00433434
mov ecx, 0x4766ac
mov edx, 0x47650c
mov eax, ebx
call fcn.004337d0
mov ecx, 2
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x47658c
mov eax, ebx
call fcn.00433434
mov ecx, 0x4766ac
mov edx, 0x47650c
mov eax, ebx
call fcn.004337d0
mov ecx, 2
mov edx, 0x4763b8
mov eax, ebx
call fcn.004338a0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0x51
jne 0x475fb1
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov edx, 0x476674
mov eax, ebx
call fcn.004336d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 7
jne 0x476007
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov ecx, dword [ebp - 4]
mov edx, 0x4766d4
mov eax, ebx
call fcn.004337d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 8
jne 0x47605a
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x47661c
mov eax, ebx
call fcn.00433434
mov edx, 0x4766d4
mov eax, ebx
call fcn.004336d0
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 4
jne 0x476246
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x4765f0
mov eax, ebx
call fcn.00433434
mov edx, 0x4766e8
mov eax, ebx
call fcn.00433558
mov edx, 0x4766f8
mov eax, ebx
call fcn.00433558
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov edx, 0x476708
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476718
mov eax, ebx
call fcn.00433434
mov edx, 0x4766e8
mov eax, ebx
call fcn.00433558
mov edx, 0x4766f8
mov eax, ebx
call fcn.00433558
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov edx, 0x476708
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4765bc
mov eax, ebx
call fcn.00433434
mov edx, 0x4766e8
mov eax, ebx
call fcn.00433558
mov edx, 0x4766f8
mov eax, ebx
call fcn.00433558
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov edx, 0x476708
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4765f0
mov eax, ebx
call fcn.00433434
mov edx, 0x476740
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476718
mov eax, ebx
call fcn.00433434
mov edx, 0x476740
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4765bc
mov eax, ebx
call fcn.00433434
mov edx, 0x476740
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4765f0
mov eax, ebx
call fcn.00433434
mov edx, 0x476750
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476718
mov eax, ebx
call fcn.00433434
mov edx, 0x476750
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4765bc
mov eax, ebx
call fcn.00433434
mov edx, 0x476750
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476760
mov eax, ebx
call fcn.00433434
mov edx, 0x47679c
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 0x29
jne 0x476303
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x4765f0
mov eax, ebx
call fcn.00433434
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov edx, 0x476708
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x476718
mov eax, ebx
call fcn.00433434
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov edx, 0x476708
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov cl, 1
mov edx, 0x4765bc
mov eax, ebx
call fcn.00433434
mov edx, 0x4765e4
mov eax, ebx
call fcn.00433558
mov edx, 0x476708
mov eax, ebx
call fcn.00433558
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, 0x4764d4
call fcn.004041c0
cmp esi, 5
jne 0x476357
mov dl, 1
mov eax, dword [0x43322c]
call fcn.0043332c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.004333cc
mov cl, 1
mov edx, 0x4767cc
mov eax, ebx
call fcn.00433434
lea ecx, [ebp - 8]
mov edx, 0x4767e8
mov eax, ebx
call fcn.00433828
mov eax, ebx
call fcn.0043339c
mov eax, ebx
call fcn.00403398
mov eax, edi
mov edx, dword [ebp - 8]
call fcn.004041c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x476379
lea eax, [ebp - 8]
mov edx, 2
call fcn.00404190
ret