Function at 0x4133ee
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6ac
mov eax, dword [0x56c718]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp + 0x10]
push edi
push eax
mov dword [ebp - 0x5cc], eax
call fcn.0040d6cf
mov ecx, eax
call fcn.0040f4dd
call fcn.004271a0
xor ebx, ebx
mov ecx, eax
inc ebx
push ebx
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
push 0xf
pop edi
sub eax, ebx
jne 0x4134d3
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
and dword [ebp - 0x24], 0
lea ecx, [ebp - 0x34]
push 3
push 0x52a260
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], 0
call fcn.0040b055
call fcn.004271a0
mov edi, eax
lea ecx, [ebp - 0x6ac]
push 0x15
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00407d91
mov esi, eax
push str.cmd:
push esi
call fcn.00406fb1
push dword [ebp - 0x5cc]
push esi
call fcn.00408735
mov edx, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6ac]
call fcn.004088ea
lea ecx, [ebp - 0x34]
call fcn.0040ae5f
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
push 0xf
pop edi
push str.http:__s.luxiaoche.com_unst_appapppidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionaction
lea ecx, [ebp - 0x5d4]
call fcn.00405fa2
mov eax, dword [ebp - 0x5d4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.0040c6e9
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x5d0]
pop ecx
push eax
call fcn.00417f71
pop ecx
pop ecx
push dword [ebp - 0x5d0]
push str.operate
push 0
call fcn.0040d86b
mov ecx, eax
call fcn.00428070
push str.Global
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
mov dword [ebp - 0x5d8], esi
test esi, esi
je 0x41356b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x41356b
push 0
push 0
push 0x52a5b0
push str.pkg_b_mutex_exist
call fcn.0041d51c
add esp, 0x10
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x413af6
push str.logUltraUninstallerTray.log
call fcn.0041cf6d
pop ecx
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x413637
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.004271a0
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413624
and dword [ebp - 0x24], eax
lea ecx, [ebp - 0x34]
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], al
call fcn.0040b055
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x52a260
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
call fcn.004271a0
mov edi, eax
lea ecx, [ebp - 0x6ac]
push 0x2a
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407d91
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6ac]
call fcn.004088ea
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
lea ecx, [ebp - 0x34]
call fcn.0040ae5f
push dword [ebp - 0x5cc]
call fcn.0041c2af
pop ecx
xor ebx, ebx
jmp 0x413af6
call fcn.004271a0
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x4136d0
and dword [ebp - 0x24], eax
lea ecx, [ebp - 0x34]
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], al
call fcn.0040b055
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x52a260
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
call fcn.004271a0
mov edi, eax
lea ecx, [ebp - 0x6ac]
push 0x30
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407d91
mov esi, eax
push str.run_in_admin
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6ac]
call fcn.004088ea
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
lea ecx, [ebp - 0x34]
call fcn.0040ae5f
push 0
push str.unsttray
lea ecx, [ebp - 0x5c5]
call fcn.004100c0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.004115d4
mov esi, dword [ebp - 0x5dc]
mov edi, 0x572c34
pop ecx
push 0
push esi
push 0
mov ecx, edi
call fcn.00411a0e
push esi
call fcn.004464d0
lea eax, [ebp - 0xd0]
push eax
call fcn.00441f50
pop ecx
pop ecx
push str.skin
lea ecx, [ebp - 0xd0]
call fcn.0043eeb0
lea ecx, [ebp - 0xd0]
call fcn.004146f0
push eax
call fcn.00446750
push ebx
push str.uninstaller_tray.zip
call fcn.00446810
and dword [ebp - 0x24], 0
add esp, 0xc
xor eax, eax
and dword [ebp - 0xc], eax
mov word [ebp - 0x34], ax
push 7
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 8], ecx
lea ecx, [ebp - 0x1c]
push 0x52a7fc
mov word [ebp - 0x1c], ax
call fcn.0040b0e9
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040d6cf
mov ecx, eax
call fcn.0040f37a
lea ecx, [ebp - 0x1c]
call fcn.0040ae85
push str.task
lea ecx, [ebp - 0x34]
call fcn.0040eec4
test al, al
jne 0x4137d2
push 0x52b5a0
lea ecx, [ebp - 0x34]
call fcn.0040eec4
test al, al
jne 0x4137d2
push 0x52b5a8
lea ecx, [ebp - 0x34]
call fcn.0040eec4
test al, al
je 0x4138a3
call fcn.0040d736
mov ecx, eax
call fcn.0040fb6d
test eax, eax
jne 0x4138a3
call fcn.004271a0
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413882
and dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x4c]
push 0xf
pop esi
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], al
call fcn.0040b055
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x52a260
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
call fcn.004271a0
mov edi, eax
lea ecx, [ebp - 0x6ac]
push 0x4d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407d91
mov esi, eax
push str.user_do_not_autorun__exit
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6ac]
call fcn.004088ea
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
lea ecx, [ebp - 0x4c]
call fcn.0040ae5f
push 0
push str.autoitem
push ebx
xor ebx, ebx
push ebx
push str.autooff
call fcn.0040d86b
mov ecx, eax
call fcn.00428090
jmp 0x413ac7
push dword [ebp - 0x5cc]
call fcn.0041cc0b
pop ecx
test eax, eax
jne 0x413989
call fcn.004271a0
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413955
push 0xf
pop esi
push 0x4f
xor ebx, ebx
mov dword [ebp - 8], esi
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], ebx
mov byte [ebp - 0x1c], bl
call fcn.0040b055
push 3
push 0x52a260
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], bl
call fcn.0040b055
call fcn.004271a0
mov edi, eax
lea ecx, [ebp - 0x6ac]
push 0x54
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00407d91
mov esi, eax
push str.CheckEnableAutoRun_False__exit
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6ac]
call fcn.004088ea
lea ecx, [ebp - 0x4c]
call fcn.0040ae5f
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
jmp 0x413957
xor ebx, ebx
push ebx
push str.operate
push ebx
push ebx
push str.no_active
call fcn.0040d86b
mov ecx, eax
call fcn.00428090
push ebx
push ebx
push 0x52a5b0
push str.pkg_b_auto_fail
call fcn.0041d51c
add esp, 0x10
jmp 0x413ac7
call fcn.00411654
test al, al
je 0x413a4a
push 0
push 0
push 0x52a5b0
push str.pkg_b_update
call fcn.0041d51c
add esp, 0x10
call fcn.004271a0
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413ac5
push 0xf
pop esi
push 0x4f
xor ebx, ebx
mov dword [ebp - 8], esi
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], ebx
mov byte [ebp - 0x1c], bl
call fcn.0040b055
push 3
push 0x52a260
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], bl
call fcn.0040b055
call fcn.004271a0
mov edi, eax
lea ecx, [ebp - 0x6ac]
push 0x5d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00407d91
mov esi, eax
push str.update__exit
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6ac]
call fcn.004088ea
lea ecx, [ebp - 0x4c]
call fcn.0040ae5f
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
jmp 0x413ac7
lea eax, [ebp - 0x614]
mov dword [ebp - 0x614], 0x52b2c8
xorps xmm0, xmm0
xor ebx, ebx
push eax
mov ecx, edi
mov dword [ebp - 0x600], ebx
movups xmmword [ebp - 0x610], xmm0
mov dword [ebp - 0x5fc], ebx
call fcn.00410f91
lea ecx, [ebp - 0x5c4]
call fcn.0040cd98
lea ecx, [ebp - 0x5c4]
call fcn.0040d96a
lea ecx, [ebp - 0x614]
call fcn.00412ca8
mov ecx, edi
call fcn.00412b58
lea ecx, [ebp - 0x5c4]
call fcn.0040cf5b
lea ecx, [ebp - 0x604]
call fcn.00406d1c
lea ecx, [ebp - 0x610]
call fcn.00406d1c
jmp 0x413ac7
xor ebx, ebx
lea ecx, [ebp - 0x34]
call fcn.0040ae85
call fcn.00412a45
push dword [ebp - 0x5d8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xd0]
call fcn.0043eb70
lea ecx, [ebp - 0x5c5]
call fcn.00406ec0
mov ecx, dword [ebp - 0x5d0]
add ecx, 0xfffffff0
call fcn.00406cd8
mov ecx, dword [ebp - 0x5d4]
add ecx, 0xfffffff0
call fcn.00406cd8
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004af8d0
leave
ret 0x10