Function at 0x418510
Capabilities:
Check mutex on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2b4
mov eax, dword [0x66a9c4]
xor eax, esp
mov dword [esp + 0x2b0], eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
lea ecx, [esp + 0x14]
push edi
push esi
call fcn.00406540
call fcn.00417c00
or ebx, 0xffffffff
test al, al
je 0x418636
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
jl 0x418574
push str._downgrade_system
push eax
call fcn.005a5f1e
add esp, 8
test eax, eax
je 0x418574
sub eax, dword [esp + 0x18]
sar eax, 1
cmp eax, ebx
jne 0x418636
push 0x208
lea eax, [esp + 0xb4]
push 0
push eax
call fcn.005a7320
add esp, 0xc
lea eax, [esp + 0xb0]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.00402c20
mov ecx, eax
test ecx, ecx
je 0x418af3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
push str._downgrade_system
mov dword [esp + 0x14], eax
lea eax, [esp + 0xb4]
push esi
push eax
lea eax, [esp + 0x1c]
push str._s__s__s
push eax
call fcn.004083c0
mov esi, dword [esp + 0x24]
add esp, 0x14
mov ecx, esi
call fcn.00417dc0
test eax, eax
je 0x41861f
push str.data0
push str.cancel
push 0x6361d8
call fcn.0046dc50
or ebx, 0xffffffff
add esp, 0xc
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x418abf
mov ecx, dword [esi]
push esi
jmp 0x418aba
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x418636
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str.04462CC7_8D6D_4A5E_8249_94EAF0272490
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x674740], eax
test eax, eax
je 0x418666
call edi
cmp eax, 0xb7
jne 0x418836
mov eax, dword [0x674740]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x63afd8
lea ecx, [esp + 0x14]
mov dword [0x674740], 0
call fcn.00406540
cmp dword [0x685be8], 0
jne 0x4186a3
push 4
call fcn.0058e551
add esp, 4
mov dword [0x685be8], eax
mov dword [eax], vtable.CAutoRunManager.0
push 0
push ecx
mov ecx, dword [esp + 0x18]
mov esi, esp
add ecx, 0xfffffff0
call fcn.004073a0
add eax, 0x10
mov dword [esi], eax
call fcn.0048a730
test eax, eax
je 0x4186ee
push str.Speedup
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
mov ecx, dword [esp + 0x14]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
mov dword [esi], eax
call fcn.0048a7e0
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00402c20
mov ecx, eax
test ecx, ecx
je 0x418afd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push ecx
mov ecx, esp
push str.PDFEngine
call fcn.00406540
call fcn.0048a730
mov esi, dword [esp + 0x14]
test eax, eax
je 0x4187db
xor edx, edx
lea ecx, [esp + 0xc]
call fcn.0047dde0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x41875c
cmp dword [esi - 0xc], 0
jl 0x41875c
push eax
push esi
call fcn.005a5f1e
add esp, 8
test eax, eax
je 0x41875c
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x4187c0
push ecx
mov ecx, dword [esp + 0x14]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
mov dword [edi], eax
call fcn.0048a7e0
mov edx, 0x63b0ac
lea ecx, [esp + 0x14]
call fcn.0047dde0
push ecx
mov ecx, dword [esp + 0x18]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
mov dword [edi], eax
call fcn.00475c20
mov edx, dword [esp + 0x18]
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4187ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0xc]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4187db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.04462CC7_8D6D_4A5E_8249_94EAF0272490
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x674740], eax
test eax, eax
je 0x418a65
call edi
cmp eax, 0xb7
je 0x418a60
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41881b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x418836
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004181f0
call fcn.00418420
test eax, eax
jne 0x418892
push str._checkActive
lea ecx, [esp + 0x10]
call fcn.00406540
lea ecx, [esp + 0xc]
call fcn.00418150
mov edx, dword [esp + 0xc]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x418876
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.data2
push str.cancel
push 0x6361d8
call fcn.0046dc50
add esp, 0xc
jmp 0x418abf
sub esp, 0xc
call fcn.00417920
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x4188f8
call fcn.00402c20
mov ecx, eax
test ecx, ecx
je 0x418b07
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0xc], eax
call edi
push eax
lea eax, [esp + 0x10]
push str._______XD999_pdfEngine_start:_d
push eax
call fcn.004083c0
mov esi, dword [esp + 0x18]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4188f8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 8
push eax
mov dword [esp + 0x24], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
lea eax, [esp + 0x38]
mov dword [esp + 0x24], 0
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x2c], 1
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x34], 0
push eax
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push str.riched20.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, dword [0x6857ec]
lea eax, [esp + 0x40]
xorps xmm0, xmm0
mov dword [esp + 0x40], vtable.WTL::CMessageLoop.0
add esi, 0x10
mov dword [esp + 0x54], 0
push esi
movups xmmword [esp + 0x48], xmm0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [0x6855c4]
mov dword [esp + 0x14], eax
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00418b70
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [0x685c34]
test esi, esi
jne 0x4189ea
push 0x6c
call fcn.0058e551
add esp, 4
mov ecx, eax
call fcn.00437dc0
mov esi, eax
mov dword [0x685c34], esi
sub esp, 0xc
mov ecx, esp
call fcn.00418480
mov ecx, esi
call fcn.00437e60
lea ecx, [esp + 0x78]
call fcn.0041b8e0
push ecx
mov ecx, dword [esp + 0x1c]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
lea ecx, [esp + 0x7c]
mov dword [esi], eax
call fcn.0041c3c0
lea ecx, [esp + 0x40]
call fcn.004177a0
mov esi, eax
call fcn.00417a50
call fcn.004179f0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [0x674740]
test eax, eax
je 0x418a4c
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea ecx, [esp + 0x78]
call fcn.0041ba10
lea ecx, [esp + 0x40]
call fcn.00418b20
jmp 0x418ac1
mov eax, dword [0x674740]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.data1
push str.cancel
push 0x6361d8
mov dword [0x674740], 0
call fcn.0046dc50
add esp, 0xc
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x418aa4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x418abf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor esi, esi
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x418ada
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [esp + 0x2bc]
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0058e2fa
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.004024f0
push 0x80004005
call fcn.004024f0
push 0x80004005
call fcn.004024f0
int3