Function at 0x40cfe4
Capabilities:
Persist via run registry key

Disassembly:
sub esp, 0x29c
push ebx
push ebp
push esi
push edi
call fcn.0041279e
cmp dword [0x47513c], 0
je 0x40d006
mov ecx, 0x4750f0
call fcn.0040b7fa
xor ebx, ebx
inc ebx
cmp byte [0x472d63], bl
jne 0x40d016
call fcn.004199e6
cmp byte [0x472a85], 0
je 0x40d030
mov ecx, 0x474d64
call fcn.00401f04
mov ecx, eax
call fcn.0041c1e3
mov esi, 0x4752c0
mov edi, 0x466e88
cmp byte [0x472b33], bl
jne 0x40d057
mov ecx, esi
call fcn.00401f04
push eax
mov edx, edi
mov ecx, 0x80000001
call fcn.00413971
pop ecx
mov ebp, 0x80000002
cmp byte [0x472b30], bl
jne 0x40d076
mov ecx, esi
call fcn.00401f04
push eax
mov edx, edi
mov ecx, ebp
call fcn.00413971
pop ecx
cmp byte [0x472b31], bl
jne 0x40d093
mov ecx, esi
call fcn.00401f04
push eax
mov edx, 0x466ee8
mov ecx, ebp
call fcn.00413971
pop ecx
mov ebx, 0x208
lea eax, [esp + 0xa0]
push ebx
xor edi, edi
push edi
push eax
call 0x436de0
add esp, 0xc
mov esi, 0x475338
mov ecx, esi
call fcn.0040247c
push eax
mov ecx, esi
call fcn.00401fab
push eax
push ebx
lea eax, [esp + 0xac]
mov esi, 0x4752f0
push eax
push 0x466f74
mov ecx, esi
call fcn.00401fab
mov edx, eax
call fcn.00413646
add esp, 0x14
test al, al
jne 0x40d0f9
push ebx
lea eax, [esp + 0xa4]
push eax
push edi
call dword [0x4592fc]
mov ecx, esi
call fcn.00401fab
push eax
push 0x80000001
call dword [0x459080]
mov ebp, 0x466468
mov ebx, 0x475308
mov edx, ebp
mov ecx, ebx
call fcn.004077b7
mov esi, dword [0x45928c]
test al, al
je 0x40d138
push 0x80
mov ecx, ebx
call fcn.00401f04
push eax
call esi
push 0x80
lea eax, [esp + 0xa4]
push eax
call esi
mov ebx, eax
lea ecx, [esp + 0x10]
neg ebx
push 0x466f7c
sbb bl, bl
call fcn.0041b8ca
mov edx, eax
lea ecx, [esp + 0x44]
call fcn.0041bbb0
mov edx, eax
lea ecx, [esp + 0x8c]
call fcn.00403014
pop ecx
lea ecx, [esp + 0x40]
call fcn.00401f09
lea ecx, [esp + 0x10]
call fcn.00401fd8
lea eax, [esp + 0x88]
push eax
push 0x466608
push 0x466f88
call 0x43c01f
pop ecx
push eax
lea ecx, [esp + 0x4c]
call fcn.0040417e
mov edx, eax
lea ecx, [esp + 0x18]
call fcn.00403014
pop ecx
mov edx, eax
lea ecx, [esp + 0x74]
call fcn.0040431d
pop ecx
lea ecx, [esp + 0x10]
call fcn.00401f09
lea ecx, [esp + 0x40]
call fcn.00401f09
push 0x466f98
lea ecx, [esp + 0x14]
call fcn.0040417e
push eax
mov edx, 0x467004
lea ecx, [esp + 0x2c]
call fcn.004042fc
pop ecx
lea ecx, [esp + 0x10]
call fcn.00401f09
and bl, 1
je 0x40d256
push 0x467030
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x60]
call fcn.0040417e
push eax
mov edx, 0x467038
lea ecx, [esp + 0x48]
call fcn.004042fc
pop ecx
mov edx, eax
lea ecx, [esp + 0x14]
call fcn.00403014
pop ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.0040325d
lea ecx, [esp + 0x10]
call fcn.00401f09
lea ecx, [esp + 0x40]
call fcn.00401f09
lea ecx, [esp + 0x58]
call fcn.00401f09
push 0x467068
lea eax, [esp + 0xa4]
push eax
push 0x467070
lea ecx, [esp + 0x4c]
call fcn.0040417e
mov edx, eax
lea ecx, [esp + 0x18]
call fcn.00403014
pop ecx
mov edx, eax
lea ecx, [esp + 0x5c]
call fcn.00403014
pop ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.0040325d
lea ecx, [esp + 0x58]
call fcn.00401f09
lea ecx, [esp + 0x10]
call fcn.00401f09
lea ecx, [esp + 0x40]
call fcn.00401f09
test bl, bl
je 0x40d2c0
push 0x467094
lea ecx, [esp + 0x2c]
call fcn.00409052
mov esi, 0x475308
mov edx, ebp
mov ecx, esi
call fcn.004077b7
test al, al
je 0x40d30f
push 0x467068
push esi
mov edx, 0x4670a0
lea ecx, [esp + 0x18]
call fcn.0040b8ca
pop ecx
mov edx, eax
lea ecx, [esp + 0x5c]
call fcn.00403014
pop ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.0040325d
lea ecx, [esp + 0x58]
call fcn.00401f09
lea ecx, [esp + 0x10]
call fcn.00401f09
push 0x4670c8
lea ecx, [esp + 0x2c]
call fcn.00409052
push edi
lea ecx, [esp + 0x74]
call fcn.00401f04
push eax
lea ecx, [esp + 0x30]
call fcn.0040247c
mov esi, eax
lea ecx, [esp + 0x30]
add esi, esi
call fcn.00401f04
mov edx, esi
mov ecx, eax
call fcn.0041c343
pop ecx
pop ecx
test al, al
je 0x40d366
push edi
push ebp
push ebp
lea ecx, [esp + 0x7c]
call fcn.00401f04
push eax
push 0x466108
push edi
call dword [0x459368]
push edi
call dword [0x4592b0]
int3