Function at 0x41f470
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x70
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x4231b0
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov edi, dword [0x43499c]
test edi, edi
je 0x41f63d
push 0
push 0xffffffffffffffff
push edi
call dword [sym.imp.kernel32.dll_WaitForSingleObjectEx]
mov eax, dword [0x4349b4]
test eax, eax
jne 0x41f4d7
push 0x4073e8
call dword [sym.imp.kernel32.dll_LoadLibraryA]
test eax, eax
mov dword [0x4349b4], eax
je 0x41f6f8
xor ebx, ebx
cmp byte [0x4349a0], 0
jne 0x41f827
mov ecx, dword [0x4349b8]
test ecx, ecx
jne 0x41f50b
push 0x4073f4
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x41f820
mov ecx, eax
mov dword [0x4349b8], eax
call ecx
mov ecx, eax
mov eax, dword [0x4349bc]
test eax, eax
jne 0x41f53a
mov esi, ecx
push 0x407402
push dword [0x4349b4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x41f820
mov ecx, esi
mov dword [0x4349bc], eax
or ecx, 4
push ecx
call eax
mov esi, dword [0x4349c0]
test esi, esi
jne 0x41f571
push 0x407410
push dword [0x4349b4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x41f820
mov esi, eax
mov dword [0x4349c0], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x30], edi
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
push 1
push 0
push eax
call esi
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x1d], 0
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x2c]
xor edx, edx
push 2
push 2
push 0x400
call fcn.00432710
add esp, 0xc
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
lea eax, [esi + ebx*2]
push 0x7fe
push 0
push eax
call fcn.004248d0
add esp, 0xc
mov word [esi + ebx*2 + 0x7fe], 0
add ebx, 0x400
mov edi, dword [0x4349c4]
mov dword [ebp - 0x24], ebx
test edi, edi
jne 0x41f60d
push 0x40741f
push dword [0x4349b4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x41f83c
mov edi, eax
mov dword [0x4349c4], eax
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
push ebx
push esi
push eax
call edi
cmp eax, 1
jne 0x41f709
push esi
call dword [sym.imp.kernel32.dll_lstrlenW]
test eax, eax
js 0x41f87e
cmp ebx, eax
jae 0x41f754
jmp 0x41f757
lea eax, [ebp - 0x58]
push 0x21
push 0x406b50
push eax
call fcn.00424350
add esp, 0xc
call dword [sym.imp.kernel32.dll_GetCurrentProcessId]
test eax, eax
je 0x41f695
mov ecx, 0x1f
nop
cmp ecx, 0x20
ja 0x41f863
mov edx, eax
mov esi, eax
and dl, 0xf
mov dh, dl
mov ebx, edx
add bl, 0x37
or dh, 0x30
cmp dl, 0xa
movzx edx, dh
movzx ebx, bl
cmovb ebx, edx
shr esi, 4
mov byte [ebp + ecx - 0x58], bl
dec ecx
cmp eax, 0x10
mov eax, esi
jae 0x41f660
movsd xmm1, qword [ebp - 0x48]
movzx eax, byte [ebp - 0x38]
movsd xmm0, qword [ebp - 0x40]
movsd xmm2, qword [ebp - 0x58]
movsd qword [ebp - 0x6c], xmm1
movsd xmm1, qword [ebp - 0x50]
mov byte [ebp - 0x5c], al
lea eax, [ebp - 0x7c]
movsd qword [ebp - 0x64], xmm0
movsd qword [ebp - 0x7c], xmm2
movsd qword [ebp - 0x74], xmm1
push eax
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x41f6ff
mov edi, eax
xor eax, eax
lock cmpxchg dword [0x43499c], edi
je 0x41f4ab
mov esi, eax
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov edi, esi
jmp 0x41f4ab
push edi
call dword [sym.imp.kernel32.dll_ReleaseMutex]
mov ebx, 1
jmp 0x41f827
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x41f729
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1d], 0
call fcn.0041f900
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
cmp eax, 1
mov word [esi], 0x2e
mov dword [ebp - 0x24], 1
jne 0x41f749
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1d], 0
call fcn.0041f900
mov esi, dword [ebp - 0x28]
mov eax, 2
mov word [esi + 2], 0x3b
mov dword [ebp - 0x24], eax
mov esi, dword [0x4349cc]
mov eax, dword [ebp - 0x24]
movsd xmm0, qword [ebp - 0x2c]
test esi, esi
mov dword [ebp - 0x74], eax
movsd qword [ebp - 0x7c], xmm0
jne 0x41f791
push 0x407443
push dword [0x4349b4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x41f858
mov esi, eax
mov dword [0x4349cc], eax
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
lea ecx, [ebp - 0x7c]
push ecx
push 0x41f9a0
push eax
call esi
movsd xmm0, qword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
movsd qword [ebp - 0x58], xmm0
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x58]
cmp eax, ebx
jne 0x41f7d2
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 1
call fcn.0041f900
mov ebx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x54]
mov word [esi + eax*2], 0
mov edi, dword [0x4349c8]
test edi, edi
jne 0x41f801
push 0x407431
push dword [0x4349b4]
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x41f80b
mov edi, eax
mov dword [0x4349c8], eax
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
push esi
push eax
call edi
test ebx, ebx
je 0x41f81b
mov ecx, esi
mov edx, 2
call fcn.00414080
mov edi, dword [ebp - 0x30]
xor ebx, ebx
mov byte [0x4349a0], 1
mov eax, dword [ebp - 0x18]
mov edx, edi
mov dword fs:[0], eax
mov eax, ebx
add esp, 0x70
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [ebp - 0x2c], 0
mov edi, dword [ebp - 0x30]
mov ebx, 0
je 0x41f820
mov ecx, esi
mov edx, 2
call fcn.00414080
jmp 0x41f820
cmp dword [ebp - 0x7c], 0
je 0x41f81b
mov esi, dword [ebp - 0x78]
jmp 0x41f80f
mov dword [ebp - 0x10], 0xffffffff
mov ecx, 0xffffffff
mov edx, 0x21
push 0x406b98
call fcn.00431ec5
mov byte [ebp - 0x1d], 0
mov ecx, 0x406ba8
mov edx, 0x1a
push 0x406bc4
call fcn.00431fb0
add esp, 4
ud2