Function at 0x47b35c
Capabilities:
Persist via run registry key
Set console window title

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404c38
mov eax, dword [ebp - 8]
call fcn.00404c38
mov esi, dword [0x482274]
mov edi, dword [0x482468]
xor eax, eax
push ebp
push 0x47b5c9
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_AllocConsole
push 0x47b5d8
call sub.kernel32.dll_SetConsoleTitleA
push 0
push 0xf060
push 0
call sub.kernel32.dll_GetConsoleWindow
push eax
call sub.user32.dll_GetSystemMenu
push eax
call sub.user32.dll_DeleteMenu
push 0xfffffffffffffff0
call sub.kernel32.dll_GetConsoleWindow
push eax
call sub.user32.dll_GetWindowLongA
and eax, 0xfffdffff
and eax, 0xfffeffff
push eax
push 0xfffffffffffffff0
call sub.kernel32.dll_GetConsoleWindow
push eax
call sub.user32.dll_SetWindowLongA
push 0
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x47aad0
xor edx, edx
xor eax, eax
call fcn.00404720
mov eax, esi
mov edx, 0x47b5ec
call fcn.00404e38
mov edx, dword [ebp - 4]
call fcn.00404e38
call fcn.00403328
call fcn.004028e4
mov eax, esi
mov edx, 0x47b600
call fcn.00404e38
mov edx, dword [ebp - 8]
call fcn.00404e38
mov edx, 0x47b614
call fcn.00404e38
call fcn.00403328
call fcn.004028e4
lea eax, [ebp - 0x10]
mov edx, 0x47b620
call fcn.00404804
mov eax, esi
mov edx, dword [ebp - 0x10]
call fcn.00404e38
call fcn.00403328
call fcn.004028e4
jmp 0x47b49c
mov eax, esi
mov edx, 0x47b8bc
call fcn.00404e38
call fcn.00402d84
call fcn.004028e4
lea edx, [ebp - 0x14]
mov eax, edi
call fcn.004030a4
mov eax, edi
call fcn.00403110
call fcn.004028e4
lea ecx, [ebp - 0x18]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
call fcn.00422a00
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.00404b94
jne 0x47b470
mov ecx, 0x47b8dc
mov edx, 0x47b8f0
mov eax, 0x80000001
call fcn.0047a208
mov ecx, 0x47b928
mov edx, 0x47b934
mov eax, 0x80000001
call fcn.0047a208
mov ecx, 0x47b950
mov edx, 0x47b934
mov eax, 0x80000001
call fcn.0047a208
mov eax, esi
mov edx, 0x47b614
call fcn.00404e38
mov edx, 0x47b95c
call fcn.00404e38
call fcn.00403328
call fcn.004028e4
xor ebx, ebx
lea eax, [ebp - 0x20]
mov edx, ebx
add dl, 0x41
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x24]
call fcn.00402e18
mov edx, 0x47b96c
lea eax, [ebp - 0x24]
mov cl, 2
call fcn.00402de8
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x1c]
call fcn.0040500c
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
call fcn.0047b144
inc ebx
cmp ebx, 0x1a
jne 0x47b515
mov eax, esi
mov edx, 0x47b978
call fcn.00404e38
mov edx, 0x47b614
call fcn.00404e38
mov edx, 0x47b988
call fcn.00404e38
call fcn.00403328
call fcn.004028e4
mov eax, edi
call fcn.00403110
call fcn.004028e4
call sub.kernel32.dll_FreeConsole
call fcn.00479fb8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47b5d0
lea eax, [ebp - 0x1c]
call fcn.00404e90
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00404790
lea eax, [ebp - 8]
mov edx, 2
call fcn.00404790
ret