Function at 0x401390
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x13c
mov eax, dword [0x431060]
xor eax, esp
mov dword [esp + 0x138], eax
mov al, 0x36
push ebx
push esi
mov byte [esp + 0x81], al
mov byte [esp + 0x87], al
mov byte [esp + 0x8d], al
mov byte [esp + 0x97], al
mov byte [esp + 0x9e], al
mov byte [esp + 0x9f], al
xor eax, eax
push edi
mov bl, 0x33
mov cl, 0x34
mov dword [esp + 0xa5], eax
mov dword [esp + 0xa9], eax
mov dword [esp + 0xad], eax
mov dword [esp + 0xb1], eax
mov dword [esp + 0xb5], eax
mov dword [esp + 0xb9], eax
mov word [esp + 0xbd], ax
mov byte [esp + 0xbf], al
lea eax, [esp + 0x80]
push eax
mov dl, 0x2d
mov byte [esp + 0x84], bl
mov byte [esp + 0x8a], bl
mov byte [esp + 0x8d], bl
mov byte [esp + 0x85], cl
mov byte [esp + 0x86], cl
mov byte [esp + 0x92], cl
mov cl, 0x41
xor ebx, ebx
push 1
push ebx
mov byte [esp + 0x8f], 0x37
mov byte [esp + 0x90], 0x44
mov byte [esp + 0x93], 0x35
mov byte [esp + 0x94], dl
mov byte [esp + 0x96], 0x43
mov byte [esp + 0x98], 0x39
mov byte [esp + 0x99], dl
mov byte [esp + 0x9b], 0x37
mov byte [esp + 0x9c], 0x64
mov byte [esp + 0x9e], dl
mov byte [esp + 0x9f], cl
mov byte [esp + 0xa0], cl
mov byte [esp + 0xa1], 0x31
mov byte [esp + 0xa2], 0x32
mov byte [esp + 0xa3], dl
mov byte [esp + 0xa4], 0x42
mov byte [esp + 0xa5], cl
mov byte [esp + 0xa6], cl
mov byte [esp + 0xa8], 0x30
mov byte [esp + 0xa9], 0x30
mov byte [esp + 0xaa], 0x38
mov byte [esp + 0xab], 0x35
mov byte [esp + 0xac], 0x30
mov byte [esp + 0xad], 0x31
mov byte [esp + 0xb0], bl
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
mov dword [esp + 0x14], esi
cmp esi, ebx
je 0x4015c1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4015c1
push 0x3f
lea ecx, [esp + 0xc5]
push ebx
push ecx
mov byte [esp + 0xcc], bl
call fcn.00417ce0
add esp, 0xc
lea ecx, [esp + 0xc0]
call fcn.00401280
push 0x3f
lea edx, [esp + 0x105]
push ebx
push edx
mov byte [esp + 0x10c], bl
call fcn.00417ce0
lea eax, [esp + 0x10c]
add esp, 0xc
push eax
call fcn.00401200
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40
lea ecx, [esp + 0x104]
push ecx
lea edx, [esp + 0xc8]
push edx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x138]
xor ecx, esp
call fcn.00415dd3
mov esp, ebp
pop ebp
ret 0x10
lea eax, [esp + 0x18]
push eax
call fcn.00411680
cmp dword [0x42e388], 0x90909090
je 0x401854
call dword [sym.imp.KERNEL32.dll_GetTickCount]
test eax, eax
jne 0x4015eb
mov dword [0x42e388], ebx
xor eax, eax
mov dword [esp + 0x71], eax
mov dword [esp + 0x75], eax
mov dword [esp + 0x79], eax
mov word [esp + 0x7d], ax
mov byte [esp + 0x7f], al
mov al, 0x6e
mov byte [esp + 0x102], al
mov byte [esp + 0x105], al
xor eax, eax
mov dword [esp + 0x10b], eax
mov dword [esp + 0x10f], eax
mov dword [esp + 0x113], eax
mov dword [esp + 0x117], eax
mov dword [esp + 0x11b], eax
mov byte [esp + 0x11f], al
mov cl, 0x6c
mov al, 0xc3
mov byte [esp + 0xc3], al
mov byte [esp + 0xc6], al
xor eax, eax
mov byte [esp + 0x64], cl
mov byte [esp + 0x65], cl
mov byte [esp + 0x6e], cl
mov byte [esp + 0x6f], cl
mov byte [esp + 0x108], cl
mov byte [esp + 0x109], cl
mov dl, 0x74
mov dword [esp + 0xcd], eax
mov dword [esp + 0xd1], eax
mov dword [esp + 0xd5], eax
mov dword [esp + 0xd9], eax
mov word [esp + 0xdd], ax
mov byte [esp + 0xdf], al
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x7c], 0x69
mov byte [esp + 0x7d], 0x6d
mov byte [esp + 0x7e], 0x65
mov byte [esp + 0x7f], 0x64
mov byte [esp + 0x82], 0x68
mov byte [esp + 0x83], 0x6f
mov byte [esp + 0x84], 0x73
mov byte [esp + 0x85], dl
mov byte [esp + 0x86], 0x31
mov byte [esp + 0x87], 0x30
mov byte [esp + 0x88], 0x2e
mov byte [esp + 0x89], 0x64
mov byte [esp + 0x8c], bl
mov byte [esp + 0x11c], 0x70
mov byte [esp + 0x11d], 0x69
mov byte [esp + 0x11f], 0x79
mov byte [esp + 0x120], 0x69
mov byte [esp + 0x122], 0x2e
mov byte [esp + 0x123], 0x64
mov byte [esp + 0x126], bl
mov byte [esp + 0xdc], 0xca
mov byte [esp + 0xdd], 0xb9
mov byte [esp + 0xde], 0xd3
mov byte [esp + 0xe0], 0xcb
mov byte [esp + 0xe1], 0xb5
mov byte [esp + 0xe3], 0xf7
mov byte [esp + 0xe4], 0x2e
mov byte [esp + 0xe5], dl
mov byte [esp + 0xe6], 0x78
mov byte [esp + 0xe7], dl
mov byte [esp + 0xe8], bl
mov edi, 0xf
lea eax, [esp + 0x7c]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
mov dword [esp + 0x2c], esp
mov byte [ecx + 4], bl
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x4017a1
sub eax, esi
push eax
lea edx, [esp + 0x80]
push edx
call fcn.004019e0
lea esi, [esp + 0x34]
call fcn.00411780
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], edi
lea eax, [esp + 0x11c]
mov dword [esi + 0x14], ebx
mov dword [esp + 0x2c], esp
mov byte [esi + 4], bl
lea edi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4017e0
sub eax, edi
push eax
lea eax, [esp + 0x120]
push eax
mov ecx, esi
call fcn.004019e0
lea esi, [esp + 0x34]
call fcn.00411780
sub esp, 0x1c
mov esi, esp
lea eax, [esp + 0xdc]
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov dword [esp + 0x2c], esp
mov byte [esi + 4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401822
sub eax, edx
push eax
lea ecx, [esp + 0xe0]
push ecx
mov ecx, esi
call fcn.004019e0
lea esi, [esp + 0x34]
call fcn.00411780
mov ecx, esi
call fcn.00411820
mov esi, dword [esp + 0x14]
jmp 0x40190a
mov al, 0xc3
mov dl, 0x74
mov byte [esp + 0xc3], al
mov byte [esp + 0xc6], al
xor eax, eax
mov byte [esp + 0xc9], dl
mov byte [esp + 0xcb], dl
lea edx, [esp + 0xc0]
mov dword [esp + 0xcd], eax
mov dword [esp + 0xd1], eax
mov dword [esp + 0xd5], eax
mov dword [esp + 0xd9], eax
mov word [esp + 0xdd], ax
mov byte [esp + 0xdf], al
push edx
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0xc8], 0xca
mov byte [esp + 0xc9], 0xb9
mov byte [esp + 0xca], 0xd3
mov byte [esp + 0xcc], 0xcb
mov byte [esp + 0xcd], 0xb5
mov byte [esp + 0xcf], 0xf7
mov byte [esp + 0xd0], 0x2e
mov byte [esp + 0xd2], 0x78
mov byte [esp + 0xd4], bl
call fcn.00411a60
push ebx
push 0x403860
push ebx
push 0x67
push ebx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp esi, ebx
je 0x401915
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x18]
call fcn.00411710
mov ecx, dword [esp + 0x144]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.00415dd3
mov esp, ebp
pop ebp
ret 0x10