Function at 0x409810
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x29ac
call fcn.0041fbd0
mov eax, dword [0x456080]
xor eax, esp
mov dword [esp + 0x29a8], eax
test byte [0x458fe0], 1
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
jne 0x40985b
or dword [0x458fe0], 1
mov ecx, 0x458fe8
call sym.Install_vip.exe_public:_void___thiscall_CNsApp::constructor_void_
push 0x4457b0
call fcn.004174f8
add esp, 4
push 0x449114
push 0x4591fa
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
test byte [0x459544], 1
jne 0x409892
or dword [0x459544], 1
mov ecx, 0x459548
call sym.Install_vip.exe_public:_void___thiscall_CnsDump::constructor_void_
push 0x445800
call fcn.004174f8
add esp, 4
push str.hf_install_dump
push 0x449114
mov ecx, 0x459548
call sym.Install_vip.exe_public:_void___thiscall_CnsDump::Install_wchar_t_const___wchar_t_const__
xor eax, eax
push 0x208
push eax
lea ecx, [esp + 0x27aa]
push ecx
mov word [esp + 0x27ac], ax
call fcn.004182c0
add esp, 0xc
push 0x104
lea edx, [esp + 0x27a4]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x27a0]
push eax
call sym.Install_vip.exe_long_long___int64____cdecl_FileSize_wchar_t_const__
mov edi, edx
mov edx, dword [section..data]
mov esi, eax
mov eax, dword [edx + 0xc]
add esp, 4
mov ecx, section..data
call eax
push edi
add eax, 0x10
push esi
push str.ns_installer__I64d
lea edi, [esp + 0x1c]
mov dword [esp + 0x1c], eax
call fcn.004053b0
add esp, 0xc
push str.ns_installer
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x409987
lea ecx, [esp + 0x18a8]
push ecx
call fcn.00408be0
push 9
push 8
push 0xb4
push 0x140
push 3
push 0
push 0
mov edi, 0x449188
mov edx, 0x449190
lea eax, [esp + 0x18c4]
call fcn.00409530
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x18a8]
push edx
call fcn.00408d60
jmp 0x409b29
lea ecx, [esp + 0xc]
push ecx
mov ecx, ebx
call fcn.00404c50
mov eax, dword [esp + 0xc]
mov esi, dword [eax - 0xc]
test esi, esi
jns 0x4099a8
push 0x80070057
call fcn.004057f0
mov ecx, dword [eax - 8]
mov edi, 1
mov edx, edi
sub edx, dword [eax - 4]
sub ecx, esi
or edx, ecx
jge 0x4099ca
mov eax, esi
lea ecx, [esp + 0xc]
call fcn.00405290
mov eax, dword [esp + 0xc]
lea edx, [esi + 1]
push edx
push eax
call fcn.004180c2
mov eax, dword [esp + 0x14]
add esp, 8
cmp esi, dword [eax - 8]
jg 0x40999e
mov dword [eax - 0xc], esi
mov ecx, dword [esp + 0xc]
xor eax, eax
mov word [ecx + esi*2], ax
mov eax, dword [esp + 0xc]
cmp dword [eax - 0xc], 0
jl 0x409a69
push 0x4491b8
push eax
call fcn.00417e18
add esp, 8
test eax, eax
je 0x409a69
sub eax, dword [esp + 0xc]
sar eax, 1
js 0x409a69
lea ecx, [esp + 0x1c40]
call sym.Install_vip.exe_public:_void___thiscall_CNsInstaller::constructor_void_
push ebx
lea ecx, [esp + 0x1c44]
call sym.Install_vip.exe_public:_void___thiscall_CNsInstaller::ParseParams_wchar_t_const__
push 0
push 0
push 0
push 0
lea ecx, [esp + 0x1c50]
call sym.Install_vip.exe_public:_void___thiscall_CNsInstaller::StartInstall_wchar_t_const___struct_HWND_____int__struct_HWND____
lea ecx, [esp + 0x1c40]
call sym.Install_vip.exe_public:_void___thiscall_CNsInstaller::AutoRun_void_
push 0
lea ecx, [esp + 0x1c44]
call sym.Install_vip.exe_public:_void___thiscall_CNsInstaller::DoUpdate_bool_
lea ecx, [esp + 0x1c40]
call sym.Install_vip.exe_public:_void___thiscall_CNsInstaller::destructor_void_
jmp 0x409b09
lea edx, [esp + 0x18]
push edx
call fcn.00407140
push 0
push 0
push 0
push 0x1b4
push 0x232
push 0
push 0
xor eax, eax
lea ecx, [esp + 0x34]
call fcn.00406750
push 5
push edi
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00404110
test byte [0x458fe0], 1
jne 0x409ac6
or dword [0x458fe0], edi
mov ecx, 0x458fe8
call sym.Install_vip.exe_public:_void___thiscall_CNsApp::constructor_void_
push 0x4457b0
call fcn.004174f8
add esp, 4
test byte [0x458fe0], 1
mov eax, dword [esp + 0x64]
mov dword [0x458fec], eax
jne 0x409af5
or dword [0x458fe0], edi
mov ecx, 0x458fe8
call sym.Install_vip.exe_public:_void___thiscall_CNsApp::constructor_void_
push 0x4457b0
call fcn.004174f8
add esp, 4
mov ecx, 0x458fe8
call sym.Install_vip.exe_public:_int___thiscall_CNsApp::MsgLoop_void_
lea ecx, [esp + 0x18]
push ecx
call fcn.00407420
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x409b29
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409b49
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x29b4]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004173c6
mov esp, ebp
pop ebp
ret 0x10