Function at 0x456b8b
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4f4
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
mov edi, str.Q_Dir___Document
xor ebx, ebx
mov eax, edi
test eax, eax
jne 0x456bae
xor eax, eax
jmp 0x456bb1
push edi
call esi
push edi
push eax
mov ecx, 0x492fd8
call fcn.0040148d
mov edi, str..qdr
mov eax, edi
test eax, eax
je 0x456bcb
push edi
call esi
push edi
push eax
mov ecx, 0x492fd4
call fcn.0040148d
mov eax, dword [0x47e520]
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 0x2c], 0x44
mov byte [ebp - 0x2b], 0x69
mov byte [ebp - 0x2a], 0x72
mov byte [ebp - 0x29], 0x50
mov byte [ebp - 0x28], 0x72
mov byte [ebp - 0x27], 0x69
mov byte [ebp - 0x26], 0x6e
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x4f
mov byte [ebp - 0x23], 0x4b
mov byte [ebp - 0x22], bl
call fcn.00401572
mov eax, dword [0x47e520]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xc]
push eax
mov byte [ebp - 0xc], 0x36
mov byte [ebp - 0xb], 0x2e
mov byte [ebp - 0xa], 0x39
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], bl
call fcn.00401572
lea eax, [ebp - 0x10]
mov ecx, 0x491c1c
push eax
call fcn.00401522
lea eax, [ebp - 0x10]
mov ecx, 0x491c14
push eax
call fcn.00401522
lea eax, [ebp - 0x10]
mov ecx, 0x491d58
push eax
call fcn.00401522
lea eax, [ebp - 0x14]
mov edi, 0x491d50
push eax
mov ecx, edi
call fcn.00401522
push edi
mov ecx, 0x491d4c
call fcn.00401522
push dword [ebp + 8]
call esi
cmp eax, 5
mov edi, 0x492fc8
jle 0x456cc7
push dword [ebp + 8]
call esi
cmp eax, 0x209
jge 0x456cc7
cmp dword [ebp + 8], ebx
jne 0x456ca6
xor eax, eax
jmp 0x456cab
push dword [ebp + 8]
call esi
push dword [ebp + 8]
mov ecx, edi
push eax
call fcn.0040148d
call fcn.004274dc
test eax, eax
je 0x456cc7
push 1
pop ebx
jmp 0x457222
cmp dword [ebp + 8], ebx
je 0x456d98
push dword [ebp + 8]
call esi
push 0x481c20
lea ecx, [ebp - 4]
mov dword [ebp - 0xc], eax
call fcn.0040811c
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [eax - 8]
jne 0x456d0e
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x456d0e
push 1
call fcn.0042e5fc
pop ecx
lea ecx, [ebp - 4]
jmp 0x4570e9
lea ecx, [ebp - 4]
call fcn.0040139c
push dword [ebp + 8]
call esi
push dword [ebp + 8]
mov ecx, edi
push eax
call fcn.0040148d
push str.RegisterAdminKey4_EEETWETRFSD
lea ecx, [ebp - 0x1c]
call fcn.0040811c
push ebx
mov ecx, edi
push dword [ebp - 0x1c]
call fcn.0040179a
test eax, eax
jl 0x456d9f
mov eax, dword [ebp - 0x1c]
push ebx
mov ecx, edi
mov esi, dword [eax - 8]
call fcn.004016d4
lea eax, [eax + esi*2]
lea ecx, [ebp + 8]
push eax
call fcn.0040811c
push 1
push dword [ebp + 8]
call fcn.0046af6b
pop ecx
push eax
call fcn.004090cd
pop ecx
mov esi, eax
pop ecx
lea ecx, [ebp + 8]
call fcn.0040139c
lea ecx, [ebp - 0x1c]
call fcn.0040139c
lea ecx, [ebp - 0x14]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
mov eax, esi
jmp 0x457234
xor eax, eax
jmp 0x456d1b
lea ecx, [ebp - 0x60]
call fcn.0045794d
lea ecx, [ebp - 0x54]
call fcn.0045794d
lea eax, [ebp - 0x64]
mov ecx, 0x492fe0
push eax
mov dword [ebp - 0x64], 0x479b18
call fcn.00456a8f
mov eax, dword [0x492fc8]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push ecx
cmp dword [eax - 0xc], ebx
mov ecx, esp
jl 0x456de1
mov dword [ecx], eax
sub eax, 0xc
push eax
call esi
jmp 0x456df3
mov eax, dword [0x47e520]
mov dword [ecx], eax
push dword [0x492fc8]
call fcn.0040833f
call fcn.00405f14
cmp eax, ebx
pop ecx
je 0x456e1c
push 1
pop ebx
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x54]
call fcn.00457b0b
lea ecx, [ebp - 0x60]
call fcn.00457b0b
jmp 0x45721a
mov ecx, 0x493234
call fcn.0044634b
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [0x48f528]
push 0x48f530
push dword [0x491c1c]
call fcn.00445c97
add esp, 0x14
cmp eax, ebx
mov dword [0x48f528], eax
je 0x456e51
call fcn.00456b59
push ebx
push 0x484b64
mov ecx, edi
call fcn.0040179a
test eax, eax
jne 0x456edf
mov eax, dword [0x47e520]
push 0x23
push 1
mov dword [ebp + 8], eax
push dword [0x492fc8]
lea eax, [ebp + 8]
push eax
call fcn.00460c9e
add esp, 0x10
test eax, eax
je 0x456ebd
push 0x484b60
lea ecx, [ebp - 4]
call fcn.004013c8
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004015b6
push eax
mov ecx, 0x4930d0
call fcn.00401522
lea ecx, [ebp - 0xc]
call fcn.0040139c
lea ecx, [ebp - 4]
call fcn.0040139c
call fcn.00430b17
lea ecx, [ebp + 8]
call fcn.0040139c
lea ecx, [ebp - 0x54]
call fcn.00457b0b
lea ecx, [ebp - 0x60]
call fcn.00457b0b
jmp 0x4570e6
lea ecx, [ebp - 0x4f4]
call fcn.00431b03
push str.GUID__31
lea ecx, [ebp - 4]
call fcn.004013c8
mov eax, dword [0x491c14]
cmp dword [eax - 0xc], ebx
jl 0x456f0c
mov dword [ebp + 8], eax
add eax, 0xfffffff4
push eax
call esi
jmp 0x456f1e
mov ecx, dword [0x47e520]
push eax
mov dword [ebp + 8], ecx
lea ecx, [ebp + 8]
call fcn.0040833f
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004015b6
push dword [eax]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
lea ecx, [ebp - 0xc]
mov dword [0x4930b0], eax
call fcn.0040139c
lea ecx, [ebp + 8]
call fcn.0040139c
lea ecx, [ebp - 4]
call fcn.0040139c
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0xb7
je 0x456f6f
call esi
cmp eax, 5
mov byte [ebp + 0xb], bl
jne 0x456f73
mov byte [ebp + 0xb], 1
push 0x484b50
lea ecx, [ebp - 0xc]
call fcn.004013c8
push eax
lea eax, [ebp - 0x18]
push 0x491c14
push eax
call fcn.004015b6
lea ecx, [ebp - 0xc]
call fcn.0040139c
mov esi, 0x47e854
lea ecx, [ebp - 0x20]
push esi
call fcn.0040811c
push ebx
push 0x481c14
mov ecx, edi
call fcn.0040179a
test eax, eax
jne 0x457024
push edi
lea ecx, [ebp - 4]
call fcn.00401356
lea eax, [ebp - 4]
push eax
call fcn.0042e1d6
pop ecx
test eax, eax
lea ecx, [ebp - 4]
je 0x45701f
call fcn.0040139c
lea ecx, [ebp - 0x20]
call fcn.0040139c
lea ecx, [ebp - 0x18]
call fcn.0040139c
lea ecx, [ebp - 0x4f4]
call fcn.0045724e
lea ecx, [ebp - 0x54]
call fcn.00457b0b
lea ecx, [ebp - 0x60]
call fcn.00457b0b
lea ecx, [ebp - 0x1c]
call fcn.0040139c
lea ecx, [ebp - 0x14]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
xor eax, eax
jmp 0x457234
call fcn.0040139c
cmp byte [ebp + 0xb], bl
je 0x457147
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [0x48f7dc]
push str.default_new_tab
push esi
call fcn.00445c97
add esp, 0x14
cmp eax, ebx
mov dword [0x48f7dc], eax
je 0x457106
push ebx
push 0x481c14
mov ecx, edi
call fcn.0040179a
test eax, eax
jne 0x457106
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push 0x4569b1
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [ebp + 8], ebx
je 0x457106
mov eax, dword [0x492fc8]
mov esi, 0x2774
mov ecx, edi
mov eax, dword [eax - 8]
mov dword [ebp - 0x2c], esi
lea eax, [eax + eax + 2]
push eax
mov dword [ebp - 0x28], eax
call fcn.004016d4
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push 0x4a
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, esi
jne 0x457106
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x20]
call fcn.0040139c
lea ecx, [ebp - 0x18]
call fcn.0040139c
lea ecx, [ebp - 0x4f4]
call fcn.0045724e
lea ecx, [ebp - 0x64]
call fcn.00457239
lea ecx, [ebp - 0x1c]
call fcn.0040139c
lea ecx, [ebp - 0x14]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
push 1
pop eax
jmp 0x457234
cmp dword [0x491c20], ebx
je 0x457128
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [0x4930b4]
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.00445c97
add esp, 0x14
jmp 0x45713f
push ebx
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
push eax
call fcn.00401356
mov ecx, 0x493234
call fcn.00445f28
inc eax
mov dword [0x4930b4], eax
jmp 0x45714c
mov eax, dword [0x4930b4]
cmp dword [0x491c20], ebx
je 0x457166
push ebx
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.00445c56
add esp, 0x10
jmp 0x45717d
push eax
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
push eax
call fcn.00401356
mov ecx, 0x493234
call fcn.00445f9b
call fcn.00406747
test eax, eax
jne 0x457193
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x4571f7
push ebx
push 1
push 0x47f050
push dword [0x491d58]
call fcn.00445c56
add esp, 0x10
push ebx
push ebx
push ebx
push ebx
push ebx
push ecx
mov ecx, esp
push ebx
call fcn.0040ddbf
push ebx
lea ecx, [ebp - 0x4f4]
call fcn.00457a3d
test eax, eax
jne 0x4571d7
push ebx
push ebx
push str.Main_window_creation_failed__n
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4571f7
lea ecx, [ebp - 0x64]
call fcn.004569f4
mov ecx, 0x492fe0
mov ebx, eax
call fcn.00456ace
push dword [0x4930b0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x20]
call fcn.0040139c
lea ecx, [ebp - 0x18]
call fcn.0040139c
lea ecx, [ebp - 0x4f4]
call fcn.0045724e
lea ecx, [ebp - 0x64]
call fcn.00457239
lea ecx, [ebp - 0x1c]
call fcn.0040139c
lea ecx, [ebp - 0x14]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret