Function at 0x48f220
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f1cc7
mov eax, dword fs:[0]
push eax
sub esp, 0x354
mov eax, dword [0x66d4f4]
xor eax, ebp
mov dword [ebp - 0x98], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 1
push 2
lea ecx, [ebp - 0x94]
call fcn.0040a750
mov dword [ebp - 4], 0
lea eax, [ebp - 0x94]
push eax
call fcn.0048a070
add esp, 4
push str._SetDllCallBack_begin......
mov ecx, dword [ebp + 0xc]
add ecx, 4
call fcn.0040b520
push eax
lea ecx, [ebp - 0x94]
push ecx
call fcn.00409270
add esp, 8
push eax
call fcn.00409270
add esp, 8
lea edx, [ebp - 0x330]
push edx
lea ecx, [ebp - 0x94]
call fcn.00408c00
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x358], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x358]
call fcn.0040b520
push eax
call fcn.004040c0
mov ecx, eax
call fcn.004124b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x330]
call fcn.0040b640
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [ecx], edx
push str.SetCallBack
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x10], eax
push 0x627bcc
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x20], eax
push str.GetPolicyBase
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x24], eax
push 0x627bec
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x28], eax
push 0x627bf8
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x2c], eax
mov edx, dword [ebp + 0xc]
cmp dword [edx + 0x20], 0
je 0x48f3ab
lea ecx, [ebp - 0xb4]
call fcn.0040b5f0
mov byte [ebp - 4], 2
lea eax, [ebp - 0xb4]
push eax
call fcn.0052ca90
add esp, 4
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.0040b520
push eax
push 4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x20]
call edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.0040b640
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x10], 0
je 0x48f3f1
push 0x23c
push 0
lea eax, [ebp - 0x2f4]
push eax
call fcn.005c0cf0
add esp, 0xc
mov ecx, 0x4f
mov esi, 0x66f418
lea edi, [ebp - 0x2f4]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x2f4]
push ecx
call dword [ebp - 0x10]
mov dword [ebp - 0x14], 1
mov edx, dword [ebp + 0xc]
cmp dword [edx + 0x20], 0
je 0x48f454
call fcn.004040c0
mov dword [ebp - 0x314], eax
lea ecx, [ebp - 0x310]
call fcn.0040b5f0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x310]
push eax
push 0x627c08
mov ecx, dword [ebp - 0x314]
call fcn.0040c6f0
push 0
push 0
lea ecx, [ebp - 0x310]
call fcn.0040b520
push eax
push 2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x20]
call edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x310]
call fcn.0040b640
lea eax, [ebp - 0x94]
push eax
call fcn.0048a070
add esp, 4
push str._SetDllCallBack_end......
mov ecx, dword [ebp + 0xc]
add ecx, 4
call fcn.0040b520
push eax
lea ecx, [ebp - 0x94]
push ecx
call fcn.00409270
add esp, 8
push eax
call fcn.00409270
add esp, 8
lea edx, [ebp - 0x34c]
push edx
lea ecx, [ebp - 0x94]
call fcn.00408c00
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x360], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x360]
call fcn.0040b520
push eax
call fcn.004040c0
mov ecx, eax
call fcn.004124b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34c]
call fcn.0040b640
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x350], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.004094e0
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x98]
xor ecx, ebp
call fcn.005bd2d7
mov esp, ebp
pop ebp
ret