Function at 0x424fe4
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x15
push 0
push 0
dec ecx
jne 0x424fec
push ebx
push esi
push edi
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x401014]
call fcn.004032e8
mov ecx, 0xa
lea eax, [ebp - 0x50]
mov edx, dword [0x401014]
call fcn.004032e8
mov edi, dword [0x42759c]
xor eax, eax
push ebp
push 0x4254e8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x42746c]
cmp byte [eax], 1
jne 0x4250b5
xor esi, esi
lea ebx, [ebp - 0x28]
push ebx
mov edx, dword [edi]
mov eax, 0x425500
call fcn.00402f98
mov ecx, eax
dec ecx
mov eax, dword [edi]
mov edx, 1
call fcn.00402eb4
cmp dword [ebx], 0
jne 0x425072
mov eax, esi
call fcn.00401b5c
mov edx, dword [ebp + eax*4 - 0x28]
mov eax, ebx
call fcn.00402a38
cmp dword [ebx], 0
jne 0x425092
call sub.kernel32.dll_GetTickCount
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x54]
call fcn.00406cac
mov edx, dword [ebp - 0x54]
mov eax, ebx
call fcn.00402a38
mov edx, dword [edi]
mov eax, 0x425500
call fcn.00402f98
mov ecx, eax
mov eax, edi
mov edx, 1
call fcn.00402ef4
inc esi
add ebx, 4
cmp esi, 0xa
jne 0x42503f
mov eax, dword [0x4274d4]
cmp byte [eax], 1
jne 0x425156
xor esi, esi
lea ebx, [ebp - 0x50]
push ebx
mov edx, dword [0x4275cc]
mov edx, dword [edx]
mov eax, 0x425500
call fcn.00402f98
mov ecx, eax
dec ecx
mov eax, dword [0x4275cc]
mov eax, dword [eax]
mov edx, 1
call fcn.00402eb4
cmp dword [ebx], 0
jne 0x425106
mov eax, esi
call fcn.00401b5c
mov edx, dword [ebp + eax*4 - 0x50]
mov eax, ebx
call fcn.00402a38
cmp dword [ebx], 0
jne 0x425126
call sub.kernel32.dll_GetTickCount
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x58]
call fcn.00406cac
mov edx, dword [ebp - 0x58]
mov eax, ebx
call fcn.00402a38
mov edx, dword [0x4275cc]
mov edx, dword [edx]
mov eax, 0x425500
call fcn.00402f98
mov ecx, eax
mov eax, dword [0x4275cc]
mov edx, 1
call fcn.00402ef4
inc esi
add ebx, 4
cmp esi, 0xa
jne 0x4250c8
call fcn.004014ac
mov eax, 0xa
call fcn.00401b5c
mov edx, dword [ebp + eax*4 - 0x28]
mov eax, dword [0x427524]
call fcn.00402a38
mov eax, 0xa
call fcn.00401b5c
mov edx, dword [ebp + eax*4 - 0x50]
mov eax, dword [0x427598]
call fcn.00402a38
mov eax, dword [0x42746c]
cmp byte [eax], 1
jne 0x42521b
push 0
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [0x427524]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x60]
call fcn.00402bd0
mov ecx, dword [ebp - 0x60]
mov edx, 0x42550c
mov eax, 0x80000002
call fcn.004069f0
mov eax, dword [ebp - 0x5c]
mov edx, dword [0x427504]
mov edx, dword [edx]
call fcn.00402da4
je 0x42521b
mov eax, dword [0x427504]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x64]
call fcn.00402bd0
mov eax, dword [ebp - 0x64]
push eax
mov eax, dword [0x427524]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x68]
call fcn.00402bd0
mov ecx, dword [ebp - 0x68]
mov edx, 0x42550c
mov eax, 0x80000002
call fcn.00406508
mov eax, dword [0x4274d4]
cmp byte [eax], 1
jne 0x4252ab
push 0
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x427598]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x70]
call fcn.00402bd0
mov ecx, dword [ebp - 0x70]
mov edx, 0x42550c
mov eax, 0x80000001
call fcn.004069f0
mov eax, dword [ebp - 0x6c]
mov edx, dword [0x427504]
mov edx, dword [edx]
call fcn.00402da4
je 0x4252ab
mov eax, dword [0x427504]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x74]
call fcn.00402bd0
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [0x427598]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x78]
call fcn.00402bd0
mov ecx, dword [ebp - 0x78]
mov edx, 0x42550c
mov eax, 0x80000001
call fcn.00406508
mov eax, dword [0x427540]
cmp byte [eax], 1
jne 0x4253e1
push 0
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [0x4274c4]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x80]
call fcn.00402bd0
mov ecx, dword [ebp - 0x80]
mov edx, 0x425544
mov eax, 0x80000002
call fcn.004069f0
mov eax, dword [ebp - 0x7c]
mov edx, dword [0x427504]
mov edx, dword [edx]
call fcn.00402da4
je 0x425347
mov eax, dword [0x427504]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x84]
call fcn.00402bd0
mov eax, dword [ebp - 0x84]
push eax
mov eax, dword [0x4274c4]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x88]
call fcn.00402bd0
mov ecx, dword [ebp - 0x88]
mov edx, 0x425544
mov eax, 0x80000002
call fcn.00406508
push 0
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [0x4274c4]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x90]
call fcn.00402bd0
mov ecx, dword [ebp - 0x90]
mov edx, 0x425544
mov eax, 0x80000001
call fcn.004069f0
mov eax, dword [ebp - 0x8c]
mov edx, dword [0x427504]
mov edx, dword [edx]
call fcn.00402da4
je 0x4253e1
mov eax, dword [0x427504]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x94]
call fcn.00402bd0
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [0x4274c4]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x98]
call fcn.00402bd0
mov ecx, dword [ebp - 0x98]
mov edx, 0x425544
mov eax, 0x80000001
call fcn.00406508
mov eax, dword [0x427504]
push dword [eax]
push 0x425500
mov eax, dword [0x427524]
push dword [eax]
push 0x425500
mov eax, dword [0x427598]
push dword [eax]
push 0x425500
lea eax, [ebp - 0xa0]
mov edx, 6
call fcn.00402d20
mov eax, dword [ebp - 0xa0]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x9c]
call fcn.00402bd0
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, dword [0x4274f0]
mov ecx, dword [ecx]
lea eax, [ebp - 0xa8]
mov edx, 0x42558c
call fcn.00402cac
mov eax, dword [ebp - 0xa8]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0xa4]
call fcn.00402bd0
mov edx, dword [ebp - 0xa4]
mov ecx, 0x4255a0
mov eax, 0x80000001
call fcn.00406508
mov eax, dword [0x4274e4]
cmp byte [eax], 1
jne 0x4254b7
push 0x4255ac
mov dl, 1
mov eax, dword [0x40e8e8]
call fcn.0040e940
push eax
mov eax, dword [0x427504]
mov eax, dword [eax]
call fcn.00402e58
push eax
mov eax, dword [0x427450]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
pop ecx
pop eax
call fcn.0040ec54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4254ef
lea eax, [ebp - 0xa8]
mov edx, 0x16
call fcn.00402a08
lea eax, [ebp - 0x50]
mov ecx, 0x14
mov edx, dword [0x401014]
call fcn.004033b0
ret