Function at 0x414350
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x740
mov eax, dword [0x554760]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
push str.Global74CD674D_FBFA_462B_B4CD_8762469B19ECAdbkTray
push 1
push 0
mov dword [ebp - 0x688], eax
mov dword [ebp - 8], ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
mov dword [ebp - 0x68c], esi
test esi, esi
je 0x4146b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4146b0
mov ecx, ebx
mov dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4143c0
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x40]
call fcn.0040abe0
cmp dword [ebp - 0x2c], 8
lea edi, [ebp - 0x40]
lea eax, [ebp - 0x728]
cmovae edi, dword [ebp - 0x40]
mov dword [ebp - 0x72c], eax
test edi, edi
jne 0x414401
xor edx, edx
mov dword [ebp - 0x72c], edx
jmp 0x4144d3
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x414406
sub ecx, edx
lea eax, [ebp - 0x728]
sar ecx, 1
push 0x80
push eax
lea eax, [ebp - 0x72c]
lea ebx, [ecx + 1]
lea esi, [ebx*4]
mov dword [ebp - 0x688], ebx
push esi
push eax
call fcn.00411330
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x72c]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ebx
push edi
push 0
push 3
call esi
xor ebx, ebx
test eax, eax
sete bl
test eax, eax
jne 0x4144c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4144c2
mov ebx, dword [ebp - 0x688]
push 0
push 0
push 0
push 0
push ebx
push edi
push 0
push 3
call esi
mov esi, eax
lea eax, [ebp - 0x728]
push 0x80
push eax
lea eax, [ebp - 0x72c]
push esi
push eax
call fcn.00411330
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x72c]
push ebx
push edi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
test ebx, ebx
jne 0x415453
mov edx, dword [ebp - 0x72c]
mov ebx, dword [ebp - 8]
mov ecx, edx
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4144f3
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0040aae0
mov eax, dword [ebp - 0x72c]
lea ecx, [ebp - 0x728]
cmp eax, ecx
je 0x414522
push eax
call fcn.004e56b1
add esp, 4
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x6a8]
push str.downloadWeb:
push eax
call fcn.00411160
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0xa8]
cmp eax, esi
je 0x414578
mov ecx, eax
call fcn.00406f00
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x6a8]
call fcn.00406f00
call fcn.004121d0
push ebx
mov ecx, eax
call fcn.0040ccb0
mov ecx, ebx
mov dword [ebp - 0x48], 0
xor eax, eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4145b0
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x58]
call fcn.0040abe0
mov eax, dword [ebp - 0x48]
add eax, eax
mov dword [ebp - 0x1c], 0x2716
cmp dword [ebp - 0x44], 8
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push 0
push 0x5170b0
mov dword [ebp - 0x14], eax
call dword [sym.imp.USER32.dll_FindWindowW]
push 0
push 0x1388
push 1
lea ecx, [ebp - 0x1c]
push ecx
push 0
push 0x4a
push eax
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
call fcn.004121d0
mov esi, eax
mov dword [ebp - 0x698], 0
push 7
xor eax, eax
mov dword [ebp - 0x694], 7
push str.autorun
lea ecx, [ebp - 0x6a8]
mov word [ebp - 0x6a8], ax
call fcn.0040abe0
push 0
lea eax, [ebp - 0x6a8]
mov ecx, esi
push eax
call fcn.0040c850
lea ecx, [ebp - 0x6a8]
mov esi, eax
call fcn.00406f50
test esi, esi
jne 0x414671
lea eax, [ebp - 0xa8]
push eax
call fcn.0040f4c0
add esp, 4
push dword [ebp - 0x68c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x58]
call fcn.00406f50
lea ecx, [ebp - 0xa8]
call fcn.00406f00
lea ecx, [ebp - 0x40]
call fcn.00406f50
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a02a0
mov esp, ebp
pop ebp
ret 0x10
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x41478b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 4
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov esi, dword [ebp - 8]
or edi, 0xffffffff
mov byte [ebp - 0x681], al
test esi, esi
je 0x41470f
mov ecx, edi
lock xadd dword [esi + 4], ecx
jne 0x41470f
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x414709
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov al, byte [ebp - 0x681]
test al, al
je 0x41477d
push 1
push 2
lea ecx, [ebp - 0x740]
call fcn.004062f0
lea eax, [ebp - 0x740]
push str.will_adjust_privilege
push eax
call fcn.00405940
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 0xc
lea edx, [ebp - 0x740]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax + 8]
mov esi, dword [ebp - 8]
test esi, esi
je 0x414772
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x414772
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x414772
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea ecx, [ebp - 0x740]
call fcn.00407790
push ebx
call fcn.00424660
add esp, 4
jmp 0x41543e
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 4
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov esi, dword [ebp - 8]
or edi, 0xffffffff
mov byte [ebp - 0x681], al
test esi, esi
je 0x4147d5
mov ecx, edi
lock xadd dword [esi + 4], ecx
jne 0x4147d5
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x4147cf
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov al, byte [ebp - 0x681]
test al, al
je 0x414844
push 1
push 2
lea ecx, [ebp - 0x740]
call fcn.004062f0
lea eax, [ebp - 0x740]
push str.run_in_admin
push eax
call fcn.00405940
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 0xc
lea edx, [ebp - 0x740]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax + 8]
mov esi, dword [ebp - 8]
test esi, esi
je 0x414839
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x414839
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x414839
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea ecx, [ebp - 0x740]
call fcn.00407790
push 0
push str.adbktray
lea ecx, [ebp - 0xd]
call fcn.0040e130
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 8
push eax
mov dword [ebp - 8], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0
push dword [ebp - 0x688]
mov ecx, 0x55a900
push 0
call fcn.00412460
call fcn.004121d0
push ebx
mov ecx, eax
call fcn.0040ccb0
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 4
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov esi, dword [ebp - 8]
mov byte [ebp - 0x681], al
test esi, esi
je 0x4148e9
mov ecx, edi
lock xadd dword [esi + 4], ecx
jne 0x4148e9
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x4148e3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov al, byte [ebp - 0x681]
test al, al
je 0x414973
push 1
push 2
lea ecx, [ebp - 0x740]
call fcn.004062f0
lea eax, [ebp - 0x740]
push str.cmd:
push eax
call fcn.00405940
test ebx, ebx
mov eax, 0x515c14
cmovne eax, ebx
push eax
lea eax, [ebp - 0x740]
push eax
call fcn.00405940
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 0x14
lea edx, [ebp - 0x740]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax + 8]
mov esi, dword [ebp - 8]
test esi, esi
je 0x414968
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x414968
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x414968
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea ecx, [ebp - 0x740]
call fcn.00407790
mov ecx, dword [0x55a940]
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ecx, ecx
jne 0x4149d9
push 0x5540fc
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x55a940], 0
jne 0x4149cc
push 0x34
call fcn.004a02d4
mov esi, eax
add esp, 4
test esi, esi
je 0x4149bd
push 0x34
push 0
push esi
call fcn.004e1ca0
add esp, 0xc
mov ecx, esi
call fcn.00428e10
jmp 0x4149bf
xor eax, eax
xor edx, edx
lea ecx, [ebp - 8]
lock or dword [ecx], edx
mov dword [0x55a940], eax
push 0x5540fc
call edi
mov ecx, dword [0x55a940]
push reloc.OLEAUT32.dll_SysReAllocString
push str.SOFTWAREADBlockMaster
push str.ADBlockMaster.exe
call fcn.00429f90
push 0
push 0
push 0
push str.adbk
lea eax, [ebp - 0x6a8]
mov dword [ebp - 0x690], 0
push str.http:__s.91toolbox.com_adbk_pidpidtypetypeactionactionappappappverappvermidmidmid2mid2modvermodver
push eax
call fcn.0042a030
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x414a1e
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x690]
call fcn.0040da30
lea ecx, [ebp - 0x6a8]
call fcn.00406f50
call fcn.00412330
push dword [ebp - 0x690]
mov ecx, eax
push str.operate
call fcn.004282f0
push dword [ebp - 0x688]
call fcn.00435510
push 0x84
lea eax, [ebp - 0x12c]
push 0
push eax
call fcn.004e1ca0
lea eax, [ebp - 0x12c]
push eax
call fcn.00430dd0
add esp, 0x14
lea ecx, [ebp - 0x12c]
push str.skin
call fcn.0042d660
lea ecx, [ebp - 0x12c]
call fcn.00416210
push eax
call fcn.00435790
push 1
push str.adblocktray.zip
call fcn.00435850
mov esi, dword [0x55a944]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
test esi, esi
jne 0x414b1c
push 0x554118
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x55a944], esi
jne 0x414b0f
push 0x34
call fcn.004a02d4
mov esi, eax
add esp, 4
test esi, esi
je 0x414b00
push 0x34
push 0
push esi
call fcn.004e1ca0
add esp, 0xc
mov ecx, esi
call fcn.0040c4c0
jmp 0x414b02
xor eax, eax
xor edx, edx
lea ecx, [ebp - 8]
lock or dword [ecx], edx
mov dword [0x55a944], eax
push 0x554118
call edi
mov esi, dword [0x55a944]
push 4
xor eax, eax
mov dword [ebp - 0x30], 0
push 0x517358
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.0040abe0
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0040c840
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x414b88
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414b7e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415472
push edx
push ecx
call fcn.0049ffea
add esp, 8
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
cmp eax, 8
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 4
jne 0x414bd1
movzx ecx, word [edi]
mov esi, 0x74
mov edx, 4
mov eax, str.task
cmp ecx, esi
jb 0x414bce
sub edi, eax
cmp cx, si
ja 0x414bce
cmp edx, 1
je 0x414c2d
movzx ecx, word [eax + edi + 2]
add eax, 2
dec edx
movzx esi, word [eax]
cmp cx, si
jae 0x414bb6
mov eax, dword [ebp - 0x14]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 3
jne 0x414c14
movzx ecx, word [edi]
mov esi, 0x73
mov edx, 3
mov eax, 0x517370
cmp ecx, esi
jb 0x414c14
sub edi, eax
cmp cx, si
ja 0x414c14
cmp edx, 1
je 0x414c2d
movzx ecx, word [eax + edi + 2]
add eax, 2
dec edx
movzx esi, word [eax]
cmp cx, si
jae 0x414bfc
lea eax, [ebp - 0x28]
push 0x517378
push eax
call fcn.004110f0
add esp, 8
test al, al
je 0x414d40
mov ecx, dword [0x55a948]
test ecx, ecx
jne 0x414c88
push 0x554134
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x55a948], 0
jne 0x414c77
push 4
call fcn.004a02d4
add esp, 4
test eax, eax
je 0x414c68
mov ecx, eax
mov dword [eax], 0
call fcn.0040d060
jmp 0x414c6a
xor eax, eax
xor edx, edx
lea ecx, [ebp - 8]
lock or dword [ecx], edx
mov dword [0x55a948], eax
push 0x554134
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x55a948]
call fcn.0040d210
test eax, eax
jne 0x414d40
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 4
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
lea ecx, [ebp - 0xc]
mov bl, al
call fcn.004070d0
test bl, bl
je 0x414d05
push 1
push 2
lea ecx, [ebp - 0x740]
call fcn.004062f0
lea eax, [ebp - 0x740]
push str.user_do_not_autorun__exit
push eax
call fcn.00405940
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 0xc
lea edx, [ebp - 0x740]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax + 8]
lea ecx, [ebp - 0xc]
call fcn.004070d0
lea ecx, [ebp - 0x740]
call fcn.00407790
call fcn.00412330
sub esp, 0x28
mov ecx, esp
push 0
push str.autoitem
push 1
push 0
mov dword [ecx + 0x24], 0
mov ecx, eax
push str.autooff
call fcn.004285a0
lea ecx, [ebp - 0x28]
call fcn.00406f50
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4153ca
push ebx
call fcn.00424900
add esp, 4
test eax, eax
jne 0x414dfc
call fcn.00412330
sub esp, 0x28
mov ecx, esp
push 0
push str.operate
push 0
push 0
mov dword [ecx + 0x24], 0
mov ecx, eax
push str.no_active
call fcn.004285a0
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 4
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
lea ecx, [ebp - 0xc]
mov bl, al
call fcn.004070d0
test bl, bl
je 0x414de9
push 1
push 2
lea ecx, [ebp - 0x740]
call fcn.004062f0
lea eax, [ebp - 0x740]
push str.CheckEnableAutoRun_False__exit
push eax
call fcn.00405940
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 0xc
lea edx, [ebp - 0x740]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax + 8]
lea ecx, [ebp - 0xc]
call fcn.004070d0
lea ecx, [ebp - 0x740]
call fcn.00407790
lea ecx, [ebp - 0x28]
call fcn.00406f50
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4153ca
call fcn.00412280
mov ecx, eax
call fcn.00423ac0
test eax, eax
je 0x41508b
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.004121d0
mov esi, eax
mov dword [ebp - 0x48], 0
push 4
xor eax, eax
mov dword [ebp - 0x44], 7
push 0x517358
lea ecx, [ebp - 0x58]
mov word [ebp - 0x58], ax
call fcn.0040abe0
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040c840
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x414e97
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414e8d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415477
push edx
push ecx
call fcn.0049ffea
add esp, 8
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.004121d0
lea ecx, [ebp - 0x6a8]
push ecx
mov ecx, eax
call fcn.0040c820
mov esi, eax
cmp dword [esi + 0x14], 8
jb 0x414ec8
mov esi, dword [esi]
call fcn.004051b0
mov ecx, eax
test ecx, ecx
je 0x41547c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x688]
push esi
mov dword [ebp - 0x688], eax
call fcn.00404d80
test al, al
jne 0x414f01
push esi
lea ecx, [ebp - 0x688]
call fcn.004048b0
mov edx, dword [ebp - 0x694]
cmp edx, 8
jb 0x414f41
mov ecx, dword [ebp - 0x6a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414f37
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415486
push edx
push ecx
call fcn.0049ffea
add esp, 8
xor eax, eax
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x694], 7
mov word [ebp - 0x6a8], ax
call fcn.00412280
mov esi, dword [ebp - 0x688]
mov edi, eax
cmp dword [esi - 4], 1
jle 0x414f85
push dword [esi - 0xc]
lea ecx, [ebp - 0x688]
call fcn.00405030
mov esi, dword [ebp - 0x688]
push esi
mov ecx, edi
call fcn.00423f30
call fcn.00412280
mov ecx, eax
call fcn.00423cd0
test eax, eax
setne bl
or edi, 0xffffffff
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x414fb8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x414ff2
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414fe8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415486
push edx
push ecx
call fcn.0049ffea
add esp, 8
test bl, bl
je 0x41508b
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 4
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
lea ecx, [ebp - 0xc]
mov bl, al
call fcn.004070d0
test bl, bl
je 0x41506a
push 1
push 2
lea ecx, [ebp - 0x740]
call fcn.004062f0
lea eax, [ebp - 0x740]
push str.update__exit
push eax
call fcn.00405940
lea eax, [ebp - 0xc]
push eax
call fcn.004104f0
add esp, 0xc
lea edx, [ebp - 0x740]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax + 8]
lea ecx, [ebp - 0xc]
call fcn.004070d0
lea ecx, [ebp - 0x740]
call fcn.00407790
push dword [ebp - 0x68c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
lea ecx, [ebp - 0x28]
call fcn.00406f50
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4153d3
mov ebx, dword [0x55a20c]
xorps xmm0, xmm0
add ebx, 0x10
movlpd qword [ebp - 0x74], xmm0
push ebx
movlpd qword [ebp - 0x6c], xmm0
movlpd qword [ebp - 0x64], xmm0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x90], 0x5170a0
movups xmmword [ebp - 0x8c], xmm0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x55a934]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [esi + 8]
xor edx, edx
add ecx, 1
mov edi, eax
push 4
setb dl
neg edx
or edx, ecx
push edx
push dword [esi]
call fcn.004ea61f
add esp, 0xc
test eax, eax
je 0x41514b
mov dword [esi], eax
xor ecx, ecx
mov eax, dword [esi + 8]
add eax, 1
push 4
setb cl
neg ecx
or ecx, eax
push ecx
push dword [esi + 4]
call fcn.004ea61f
add esp, 0xc
test eax, eax
je 0x41514b
mov ecx, dword [esi + 8]
mov dword [esi + 4], eax
lea edx, [ecx*4]
mov ecx, dword [esi]
add ecx, edx
je 0x41513c
mov dword [ecx], edi
mov eax, dword [esi + 4]
add eax, edx
je 0x415148
lea ecx, [ebp - 0x90]
mov dword [eax], ecx
inc dword [esi + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x554
lea eax, [ebp - 0x680]
push 0
push eax
call fcn.004e1ca0
add esp, 0xc
lea ecx, [ebp - 0x680]
call fcn.0041c110
lea ecx, [ebp - 0x680]
call fcn.0041cc70
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
nop dword [eax + eax]
test ebx, ebx
je 0x4151bf
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x74]
push eax
call edi
test eax, eax
jne 0x4151bf
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x90]
push esi
inc esi
mov edx, dword [eax + 4]
call edx
test eax, eax
jne 0x415194
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x415190
test eax, eax
je 0x415246
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x90]
call dword [eax]
test eax, eax
jne 0x415202
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x70]
cmp eax, 0x118
ja 0x41521a
je 0x415236
cmp eax, 0xf
je 0x415236
cmp eax, 0xa0
jmp 0x41521f
cmp eax, 0x200
je 0x415236
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x415190
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x415190
mov eax, dword [0x55a20c]
add eax, 0x10
push eax
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [0x55a934]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edx, dword [edi + 8]
xor esi, esi
test edx, edx
jle 0x415324
mov ebx, dword [edi]
mov ecx, ebx
cmp dword [ecx], eax
je 0x415286
inc esi
add ecx, 4
cmp esi, edx
jl 0x415275
jmp 0x415324
cmp esi, 0xffffffff
je 0x415324
test esi, esi
js 0x415324
cmp esi, edx
jge 0x415324
lea eax, [edx - 1]
cmp esi, eax
je 0x4152e0
sub edx, esi
lea ecx, [ebx + esi*4]
shl edx, 2
lea eax, [edx - 4]
push eax
lea eax, [ecx + 4]
push eax
push edx
push ecx
call fcn.004142d0
mov edx, dword [edi + 8]
mov eax, dword [edi + 4]
sub edx, esi
shl edx, 2
lea ecx, [eax + esi*4]
lea eax, [edx - 4]
push eax
lea eax, [ecx + 4]
push eax
push edx
push ecx
call fcn.004142d0
mov edx, dword [edi + 8]
add esp, 0x20
push 4
lea eax, [edx - 1]
push eax
push dword [edi]
call fcn.004ea61f
mov ecx, eax
add esp, 0xc
mov eax, dword [edi + 8]
test ecx, ecx
jne 0x4152fe
cmp eax, 1
jne 0x415300
mov dword [edi], ecx
push 4
dec eax
push eax
push dword [edi + 4]
call fcn.004ea61f
mov ecx, eax
add esp, 0xc
mov eax, dword [edi + 8]
test ecx, ecx
jne 0x41531d
cmp eax, 1
jne 0x415320
mov dword [edi + 4], ecx
dec eax
mov dword [edi + 8], eax
push dword [ebp - 8]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call ebx
lea ecx, [ebp - 0x680]
call fcn.0041c4c0
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x415351
push eax
call fcn.004e56b1
add esp, 4
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
test eax, eax
je 0x41537c
push eax
call fcn.004e56b1
add esp, 4
mov dword [ebp - 0x8c], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
cmp edx, 8
jb 0x4153ca
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4153c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41548b
push edx
push ecx
call fcn.0049ffea
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
or edi, 0xffffffff
cmp dword [0x55a944], 0
je 0x415408
push 0x554118
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x55a944]
test ecx, ecx
je 0x415401
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x55a944], 0
push 0x554118
call ebx
push dword [ebp - 0x68c]
call esi
lea ecx, [ebp - 0x12c]
call fcn.00424640
mov edx, dword [ebp - 0x690]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x415436
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xd]
call fcn.00405880
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a02a0
mov esp, ebp
pop ebp
ret 0x10
push 0x80
lea eax, [ebp - 0x728]
push eax
push dword [ebp - 0x72c]
call fcn.004113b0
add esp, 0xc
call fcn.00411df0
call fcn.004e5039
call fcn.004e5039
push 0x80004005
call fcn.00404d60
call fcn.004e5039
call fcn.004e5039
int3