Function at 0x468404
Capabilities:
Persist via run registry key

Disassembly:
push ebx
push esi
push edi
test dl, dl
je 0x468413
add esp, 0xfffffff0
call fcn.00403db4
mov ebx, edx
mov esi, eax
mov dl, 1
mov eax, dword [0x429b98]
call fcn.00429cd0
mov dword [esi + 4], eax
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
lea eax, [edi + 8]
mov edx, 0x468e68
call fcn.00404868
mov byte [edi + 4], 1
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468e68
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x468ec4
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468ec4
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x468ed8
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468ef0
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468ed8
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x468f24
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468ef0
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468f24
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x468f3c
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468f54
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x468f70
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468f88
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x468fa0
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468fb8
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x468fd0
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x468fe8
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469000
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469018
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469034
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469058
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46907c
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469094
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4690ac
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4690c4
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4690e0
call fcn.00404868
mov dword [edi + 0x14], 0x80000002
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4690e0
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4690f4
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4690f4
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469104
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469104
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469114
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469114
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469124
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469124
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469138
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469138
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4690e0
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4690e0
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469148
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469148
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46915c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x46915c
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46916c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x46916c
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46917c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469190
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4691a4
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4691a4
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4691b8
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4691b8
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4691cc
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4691cc
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4691dc
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4691f4
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46920c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469224
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46923c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x46923c
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46924c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x46924c
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46925c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x46925c
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x46926c
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x469280
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x469294
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4692a4
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4692b8
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4692c8
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov dl, 1
mov eax, dword [0x468290]
call fcn.00469480
mov edi, eax
mov byte [edi + 4], 1
lea eax, [edi + 8]
mov edx, 0x4692dc
call fcn.00404868
mov dword [edi + 0x14], 0x80000001
lea eax, [edi + 0x18]
mov edx, 0x468e78
call fcn.00404868
lea eax, [edi + 0x1c]
mov edx, 0x4692f8
call fcn.00404868
mov eax, dword [esi + 4]
mov edx, edi
call fcn.00429cc8
mov eax, esi
test bl, bl
je 0x468e59
call fcn.00403e0c
pop dword fs:[0]
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
ret