Function at 0x424030
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x70
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x428460
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov edi, dword [0x43a9bc]
test edi, edi
je 0x4241fd
push 0
push 0xffffffffffffffff
push edi
call dword [sym.imp.kernel32.dll_WaitForSingleObjectEx]
mov eax, dword [0x43a9d4]
test eax, eax
jne 0x424097
push 0x407d00
call dword [sym.imp.kernel32.dll_LoadLibraryA]
test eax, eax
mov dword [0x43a9d4], eax
je 0x4242b8
xor ebx, ebx
cmp byte [0x43a9c0], 0
jne 0x4243e7
mov ecx, dword [0x43a9d8]
test ecx, ecx
jne 0x4240cb
push 0x407d0c
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x4243e0
mov ecx, eax
mov dword [0x43a9d8], eax
call ecx
mov ecx, eax
mov eax, dword [0x43a9dc]
test eax, eax
jne 0x4240fa
mov esi, ecx
push 0x407d1a
push dword [0x43a9d4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x4243e0
mov ecx, esi
mov dword [0x43a9dc], eax
or ecx, 4
push ecx
call eax
mov esi, dword [0x43a9e0]
test esi, esi
jne 0x424131
push 0x407d28
push dword [0x43a9d4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x4243e0
mov esi, eax
mov dword [0x43a9e0], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x30], edi
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
push 1
push 0
push eax
call esi
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x1d], 0
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x2c]
xor edx, edx
push 2
push 2
push 0x400
call fcn.004379e0
add esp, 0xc
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
lea eax, [esi + ebx*2]
push 0x7fe
push 0
push eax
call fcn.00429ba0
add esp, 0xc
mov word [esi + ebx*2 + 0x7fe], 0
add ebx, 0x400
mov edi, dword [0x43a9e4]
mov dword [ebp - 0x24], ebx
test edi, edi
jne 0x4241cd
push 0x407d37
push dword [0x43a9d4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x4243fc
mov edi, eax
mov dword [0x43a9e4], eax
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
push ebx
push esi
push eax
call edi
cmp eax, 1
jne 0x4242c9
push esi
call dword [sym.imp.kernel32.dll_lstrlenW]
test eax, eax
js 0x42443e
cmp ebx, eax
jae 0x424314
jmp 0x424317
lea eax, [ebp - 0x58]
push 0x21
push 0x407410
push eax
call fcn.00429620
add esp, 0xc
call dword [sym.imp.kernel32.dll_GetCurrentProcessId]
test eax, eax
je 0x424255
mov ecx, 0x1f
nop
cmp ecx, 0x20
ja 0x424423
mov edx, eax
mov esi, eax
and dl, 0xf
mov dh, dl
mov ebx, edx
add bl, 0x37
or dh, 0x30
cmp dl, 0xa
movzx edx, dh
movzx ebx, bl
cmovb ebx, edx
shr esi, 4
mov byte [ebp + ecx - 0x58], bl
dec ecx
cmp eax, 0x10
mov eax, esi
jae 0x424220
movsd xmm1, qword [ebp - 0x48]
movzx eax, byte [ebp - 0x38]
movsd xmm0, qword [ebp - 0x40]
movsd xmm2, qword [ebp - 0x58]
movsd qword [ebp - 0x6c], xmm1
movsd xmm1, qword [ebp - 0x50]
mov byte [ebp - 0x5c], al
lea eax, [ebp - 0x7c]
movsd qword [ebp - 0x64], xmm0
movsd qword [ebp - 0x7c], xmm2
movsd qword [ebp - 0x74], xmm1
push eax
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x4242bf
mov edi, eax
xor eax, eax
lock cmpxchg dword [0x43a9bc], edi
je 0x42406b
mov esi, eax
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov edi, esi
jmp 0x42406b
push edi
call dword [sym.imp.kernel32.dll_ReleaseMutex]
mov ebx, 1
jmp 0x4243e7
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4242e9
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1d], 0
call fcn.004244c0
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
cmp eax, 1
mov word [esi], 0x2e
mov dword [ebp - 0x24], 1
jne 0x424309
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1d], 0
call fcn.004244c0
mov esi, dword [ebp - 0x28]
mov eax, 2
mov word [esi + 2], 0x3b
mov dword [ebp - 0x24], eax
mov esi, dword [0x43a9ec]
mov eax, dword [ebp - 0x24]
movsd xmm0, qword [ebp - 0x2c]
test esi, esi
mov dword [ebp - 0x74], eax
movsd qword [ebp - 0x7c], xmm0
jne 0x424351
push 0x407d5b
push dword [0x43a9d4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x424418
mov esi, eax
mov dword [0x43a9ec], eax
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
lea ecx, [ebp - 0x7c]
push ecx
push 0x424560
push eax
call esi
movsd xmm0, qword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
movsd qword [ebp - 0x58], xmm0
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x58]
cmp eax, ebx
jne 0x424392
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 1
call fcn.004244c0
mov ebx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x54]
mov word [esi + eax*2], 0
mov edi, dword [0x43a9e8]
test edi, edi
jne 0x4243c1
push 0x407d49
push dword [0x43a9d4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x4243cb
mov edi, eax
mov dword [0x43a9e8], eax
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
push esi
push eax
call edi
test ebx, ebx
je 0x4243db
mov ecx, esi
mov edx, 2
call fcn.00414c90
mov edi, dword [ebp - 0x30]
xor ebx, ebx
mov byte [0x43a9c0], 1
mov eax, dword [ebp - 0x18]
mov edx, edi
mov dword fs:[0], eax
mov eax, ebx
add esp, 0x70
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [ebp - 0x2c], 0
mov edi, dword [ebp - 0x30]
mov ebx, 0
je 0x4243e0
mov ecx, esi
mov edx, 2
call fcn.00414c90
jmp 0x4243e0
cmp dword [ebp - 0x7c], 0
je 0x4243db
mov esi, dword [ebp - 0x78]
jmp 0x4243cf
mov dword [ebp - 0x10], 0xffffffff
mov ecx, 0xffffffff
mov edx, 0x21
push 0x407458
call fcn.00437195
mov byte [ebp - 0x1d], 0
mov ecx, 0x407468
mov edx, 0x1a
push 0x407484
call fcn.00437280
add esp, 4
ud2