Function at 0x406d50
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x1a8
call fcn.004047d0
mov dword [esp], str._qfbwfNvwfB
call fcn.004014c0
mov dword [esp], str.lfsofm43_emm
mov ebx, eax
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [0x40c030], eax
mov dword [ebp - 0x190], 0x6f43794d
mov dword [esp], str._n_start
mov dword [ebp - 0x18c], 0x6e61706d
mov dword [ebp - 0x188], 0x70706179
mov dword [ebp - 0x184], 0x64705573
mov dword [ebp - 0x180], 0x657461
call sub.msvcrt.dll_printf
lea eax, [ebp - 0x190]
mov dword [esp + 4], 1
mov dword [esp], 0
mov dword [esp + 8], eax
call sub.KERNEL32.dll_CreateMutexA
sub esp, 0xc
call sub.KERNEL32.dll_GetLastError
cmp eax, 0xb7
je 0x407091
mov ecx, 0xd2348bce
mov ebx, 0x3693
mov esi, 2
xor edi, edi
jmp 0x406e2c
add esi, 1
adc edi, 0
mov eax, ebx
or eax, ecx
je 0x406e6f
mov dword [esp], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 4], ebx
mov dword [ebp - 0x19c], ecx
call fcn.00404f90
or edx, eax
mov ecx, dword [ebp - 0x19c]
jne 0x406e20
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
call fcn.00404e50
mov ecx, eax
xor eax, 1
mov ebx, edx
or eax, edx
jne 0x406e26
mov dword [esp], str._n_check_proc_1
mov dword [ebp - 0x174], str.psdfdafeervgwe4
call sub.msvcrt.dll_printf
call fcn.00401d50
mov dword [0x40c068], eax
and eax, 0xfffffffd
cmp eax, 1
je 0x406ea0
cmp eax, 0x10
jne 0x406fd8
mov dword [esp], str._n_check_proc_1_done
mov esi, 2
xor edi, edi
call sub.msvcrt.dll_printf
mov ebx, 0x3693
mov ecx, 0xd2348bce
jmp 0x406ecc
add esi, 1
adc edi, 0
mov eax, ebx
or eax, ecx
je 0x406f0f
mov dword [esp], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 4], ebx
mov dword [ebp - 0x19c], ecx
call fcn.00404f90
or edx, eax
mov ecx, dword [ebp - 0x19c]
jne 0x406ec0
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
call fcn.00404e50
mov ecx, eax
xor eax, 1
mov ebx, edx
or eax, edx
jne 0x406ec6
lea ebx, [ebp - 0x17c]
mov dword [esp], str._n_first
call sub.msvcrt.dll_printf
mov dword [esp], ebx
call fcn.004034b0
mov dword [esp], str._n_first_done
call sub.msvcrt.dll_printf
mov dword [0x40c068], 0
call fcn.00401d50
mov dword [esp], str._n_check_proc_2
mov dword [0x40c068], eax
call sub.msvcrt.dll_printf
mov eax, dword [0x40c068]
cmp eax, 0x13
jbe 0x406fc0
mov dword [esp], str._n_rsit
call sub.msvcrt.dll_printf
call fcn.00403230
mov dword [esp], str._n_rsit_done
call sub.msvcrt.dll_printf
mov dword [esp], str._n_dec
call sub.msvcrt.dll_printf
mov dword [esp], ebx
call fcn.00403670
mov dword [esp], str._n_dec_done
call sub.msvcrt.dll_printf
mov dword [esp], str._n_rupee
call sub.msvcrt.dll_printf
mov dword [esp], ebx
call fcn.00403820
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov edx, 0xf3b88
bt edx, eax
jae 0x406f5f
mov dword [esp], str._n__________
call sub.msvcrt.dll_printf
jmp 0x406f7c
mov dword [esp], str.yox98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.gyix_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.XZIX__nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.mnc98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.yoix98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.dnff_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.aoxdof98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.knkzc98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.yboff98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
jmp 0x406ea0
mov dword [esp], 0
call sub.msvcrt.dll_exit
lea esi, [esi]
sub esp, 0x1c
mov dword [esp], str.kernel32.dll
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [0x40c02c], eax
mov dword [esp], str.User32.dll
call sub.KERNEL32.dll_LoadLibraryA
sub esp, 4
mov dword [0x40c028], eax
add esp, 0x1c
ret