Function at 0x4765b8
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x4765c0
push ecx
push ebx
push esi
mov eax, 0x476340
call fcn.00405e14
mov esi, dword [0x478204]
xor eax, eax
push ebp
push 0x47697a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [esi]
call fcn.004557d4
mov dl, 1
mov eax, dword [0x42a4ac]
call fcn.0042a5ac
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.0042a64c
mov edx, 0x476990
mov eax, ebx
call fcn.0042ab04
test al, al
je 0x476811
mov cl, 1
mov edx, 0x476990
mov eax, ebx
call fcn.0042a6b0
mov edx, 0x4769b0
mov eax, ebx
call fcn.0042aa5c
test al, al
je 0x4768da
mov edx, 0x4769c4
mov eax, ebx
call fcn.0042aa5c
test al, al
je 0x4768da
lea ecx, [ebp - 0x14]
mov edx, 0x4769b0
mov eax, ebx
call fcn.0042a898
mov edx, dword [ebp - 0x14]
mov eax, 0x479cc4
call fcn.00404080
lea ecx, [ebp - 0x18]
mov edx, 0x4769c4
mov eax, ebx
call fcn.0042a898
mov edx, dword [ebp - 0x18]
mov eax, 0x479cc8
call fcn.00404080
lea edx, [ebp - 0x1c]
mov eax, dword [0x479cc8]
call fcn.00460eac
mov eax, dword [ebp - 0x1c]
mov edx, 0x4769d4
call fcn.00404438
jne 0x4766d2
mov eax, dword [esi]
mov edx, 0x476a00
call fcn.004553e4
mov ecx, dword [0x478124]
mov eax, dword [esi]
mov edx, dword [0x4709c0]
call fcn.004557ec
mov eax, dword [esi]
call fcn.0045586c
jmp 0x47695f
cmp dword [0x479cc4], 0
je 0x4768da
cmp dword [0x479cc8], 0
je 0x4768da
lea eax, [ebp - 0x24]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [0x479cc8]
call fcn.0040454c
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.00460eac
mov eax, dword [ebp - 0x20]
mov edx, 0x476a28
call fcn.00404438
jne 0x4768da
lea edx, [ebp - 0x28]
mov eax, dword [0x479cc4]
call fcn.00460eac
mov edx, dword [ebp - 0x28]
mov eax, 0x479ccc
call fcn.00404080
lea eax, [ebp - 0x2c]
push eax
mov ecx, 2
mov edx, 0xd
mov eax, dword [0x479ccc]
call fcn.0040454c
mov eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
mov ecx, 2
mov edx, 8
mov eax, dword [0x479cc8]
call fcn.0040454c
mov edx, dword [ebp - 0x30]
pop eax
call fcn.00404438
jne 0x4768da
lea eax, [ebp - 0x38]
push eax
mov ecx, 0xb
mov edx, 0x11
mov eax, dword [0x479ccc]
call fcn.0040454c
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x34]
call fcn.00460eac
mov edx, dword [ebp - 0x34]
mov eax, 0x479ccc
call fcn.00404080
lea eax, [ebp - 0x3c]
push eax
mov ecx, 3
mov edx, 0xa
mov eax, dword [0x479cc8]
call fcn.0040454c
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
push eax
mov ecx, 3
mov edx, 0x14
mov eax, dword [0x479ccc]
call fcn.0040454c
mov edx, dword [ebp - 0x40]
pop eax
call fcn.00404438
jne 0x4768da
mov ecx, dword [0x478124]
mov eax, dword [esi]
mov edx, dword [0x4709c0]
call fcn.004557ec
mov eax, dword [esi]
call fcn.0045586c
jmp 0x47695f
mov cl, 1
mov edx, 0x476990
mov eax, ebx
call fcn.0042a6b0
call fcn.0040991c
fstp qword [0x479cd0]
wait
push dword [0x479cd4]
push dword [0x479cd0]
mov edx, 0x476a54
mov eax, ebx
call fcn.0042a958
mov ecx, 0x476a60
mov edx, 0x476a74
mov eax, ebx
call fcn.0042a86c
mov ecx, 0x476a88
mov edx, 0x476a94
mov eax, ebx
call fcn.0042a86c
mov ecx, 0x476a88
mov edx, 0x476aa8
mov eax, ebx
call fcn.0042a86c
mov ecx, 0x476a88
mov edx, 0x476ab8
mov eax, ebx
call fcn.0042a86c
mov ecx, 0x476ac8
mov edx, 0x476ad8
mov eax, ebx
call fcn.0042a86c
push 0x53
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [esi]
mov eax, dword [eax + 0x30]
push eax
call sub.user32.dll_SetWindowPos
mov cl, 1
mov edx, 0x476aec
mov eax, ebx
call fcn.0042a6b0
test al, al
je 0x4768da
lea edx, [ebp - 0x44]
mov eax, dword [esi]
call fcn.00455e7c
mov ecx, dword [ebp - 0x44]
mov edx, 0x476b24
mov eax, ebx
call fcn.0042a86c
mov cl, 1
mov edx, 0x476990
mov eax, ebx
call fcn.0042a6b0
xor ecx, ecx
mov edx, 0x4769b0
mov eax, ebx
call fcn.0042a86c
xor ecx, ecx
mov edx, 0x4769c4
mov eax, ebx
call fcn.0042a86c
mov ecx, dword [0x478124]
mov eax, dword [esi]
mov edx, dword [0x4709c0]
call fcn.004557ec
mov eax, dword [0x478124]
mov eax, dword [eax]
call fcn.004522b8
mov ecx, dword [0x477fe8]
mov eax, dword [esi]
mov edx, dword [0x460f4c]
call fcn.004557ec
mov ecx, dword [0x4781e4]
mov eax, dword [esi]
mov edx, dword [0x475b58]
call fcn.004557ec
mov eax, dword [0x4781e4]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, dword [esi]
call fcn.0045586c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x476981
lea eax, [ebp - 0x44]
mov edx, 0xd
call fcn.00404050
ret