Function at 0x418550
Capabilities:
Check mutex on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2b4
mov eax, dword [0x66a9c4]
xor eax, esp
mov dword [esp + 0x2b0], eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
lea ecx, [esp + 0x14]
push edi
push esi
call fcn.00406540
call fcn.00417c40
or ebx, 0xffffffff
test al, al
je 0x418676
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
jl 0x4185b4
push str._downgrade_system
push eax
call fcn.005a5ffe
add esp, 8
test eax, eax
je 0x4185b4
sub eax, dword [esp + 0x18]
sar eax, 1
cmp eax, ebx
jne 0x418676
push 0x208
lea eax, [esp + 0xb4]
push 0
push eax
call fcn.005a7400
add esp, 0xc
lea eax, [esp + 0xb0]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.00402c20
mov ecx, eax
test ecx, ecx
je 0x418b33
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
push str._downgrade_system
mov dword [esp + 0x14], eax
lea eax, [esp + 0xb4]
push esi
push eax
lea eax, [esp + 0x1c]
push str._s__s__s
push eax
call fcn.004083c0
mov esi, dword [esp + 0x24]
add esp, 0x14
mov ecx, esi
call fcn.00417e00
test eax, eax
je 0x41865f
push str.data0
push str.cancel
push 0x6361d8
call fcn.0046dca0
or ebx, 0xffffffff
add esp, 0xc
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x418aff
mov ecx, dword [esi]
push esi
jmp 0x418afa
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x418676
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str.04462CC7_8D6D_4A5E_8249_94EAF0272490
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x674740], eax
test eax, eax
je 0x4186a6
call edi
cmp eax, 0xb7
jne 0x418876
mov eax, dword [0x674740]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x63afd8
lea ecx, [esp + 0x14]
mov dword [0x674740], 0
call fcn.00406540
cmp dword [0x685bf0], 0
jne 0x4186e3
push 4
call fcn.0058e5f1
add esp, 4
mov dword [0x685bf0], eax
mov dword [eax], vtable.CAutoRunManager.0
push 0
push ecx
mov ecx, dword [esp + 0x18]
mov esi, esp
add ecx, 0xfffffff0
call fcn.004073a0
add eax, 0x10
mov dword [esi], eax
call fcn.0048a7b0
test eax, eax
je 0x41872e
push str.Speedup
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
mov ecx, dword [esp + 0x14]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
mov dword [esi], eax
call fcn.0048a860
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00402c20
mov ecx, eax
test ecx, ecx
je 0x418b3d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push ecx
mov ecx, esp
push str.PDFEngine
call fcn.00406540
call fcn.0048a7b0
mov esi, dword [esp + 0x14]
test eax, eax
je 0x41881b
xor edx, edx
lea ecx, [esp + 0xc]
call fcn.0047de50
mov eax, dword [esp + 0xc]
test eax, eax
je 0x41879c
cmp dword [esi - 0xc], 0
jl 0x41879c
push eax
push esi
call fcn.005a5ffe
add esp, 8
test eax, eax
je 0x41879c
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x418800
push ecx
mov ecx, dword [esp + 0x14]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
mov dword [edi], eax
call fcn.0048a860
mov edx, 0x63b0ac
lea ecx, [esp + 0x14]
call fcn.0047de50
push ecx
mov ecx, dword [esp + 0x18]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
mov dword [edi], eax
call fcn.00475c80
mov edx, dword [esp + 0x18]
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4187fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0xc]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41881b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.04462CC7_8D6D_4A5E_8249_94EAF0272490
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x674740], eax
test eax, eax
je 0x418aa5
call edi
cmp eax, 0xb7
je 0x418aa0
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41885b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x418876
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00418230
call fcn.00418460
test eax, eax
jne 0x4188d2
push str._checkActive
lea ecx, [esp + 0x10]
call fcn.00406540
lea ecx, [esp + 0xc]
call fcn.00418190
mov edx, dword [esp + 0xc]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4188b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.data2
push str.cancel
push 0x6361d8
call fcn.0046dca0
add esp, 0xc
jmp 0x418aff
sub esp, 0xc
call fcn.00417960
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x418938
call fcn.00402c20
mov ecx, eax
test ecx, ecx
je 0x418b47
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0xc], eax
call edi
push eax
lea eax, [esp + 0x10]
push str._______XD999_pdfEngine_start:_d
push eax
call fcn.004083c0
mov esi, dword [esp + 0x18]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x418938
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 8
push eax
mov dword [esp + 0x24], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
lea eax, [esp + 0x38]
mov dword [esp + 0x24], 0
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x2c], 1
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x34], 0
push eax
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push str.riched20.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, dword [0x6857ec]
lea eax, [esp + 0x40]
xorps xmm0, xmm0
mov dword [esp + 0x40], vtable.WTL::CMessageLoop.0
add esi, 0x10
mov dword [esp + 0x54], 0
push esi
movups xmmword [esp + 0x48], xmm0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [0x6855c4]
mov dword [esp + 0x14], eax
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00418bb0
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [0x685c3c]
test esi, esi
jne 0x418a2a
push 0x6c
call fcn.0058e5f1
add esp, 4
mov ecx, eax
call fcn.00437de0
mov esi, eax
mov dword [0x685c3c], esi
sub esp, 0xc
mov ecx, esp
call fcn.004184c0
mov ecx, esi
call fcn.00437e80
lea ecx, [esp + 0x78]
call fcn.0041b920
push ecx
mov ecx, dword [esp + 0x1c]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004073a0
add eax, 0x10
lea ecx, [esp + 0x7c]
mov dword [esi], eax
call fcn.0041c400
lea ecx, [esp + 0x40]
call fcn.004177e0
mov esi, eax
call fcn.00417a90
call fcn.00417a30
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [0x674740]
test eax, eax
je 0x418a8c
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea ecx, [esp + 0x78]
call fcn.0041ba50
lea ecx, [esp + 0x40]
call fcn.00418b60
jmp 0x418b01
mov eax, dword [0x674740]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.data1
push str.cancel
push 0x6361d8
mov dword [0x674740], 0
call fcn.0046dca0
add esp, 0xc
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x418ae4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x418aff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor esi, esi
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x418b1a
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [esp + 0x2bc]
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0058e39a
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.004024f0
push 0x80004005
call fcn.004024f0
push 0x80004005
call fcn.004024f0
int3