Function at 0x140025270
Capabilities:
Check mutex on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x390
mov rax, qword [0x1400fc3f8]
xor rax, rsp
mov qword [rsp + 0x380], rax
movzx eax, byte [0x1400fd080]
cmp al, 6
ja 0x1400252bf
mov edx, 6
lea rcx, str.LaunchMcAfeeBuy:_Enter
call fcn.140034b80
lea r8, str.MCWPSSECDASHBOARDSVC
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400252f5
mov edx, 0x1388
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov byte [rsp + 0x88], 0
xor r13d, r13d
mov qword [rsp + 0x38], r13
lea rax, [rsp + 0x38]
mov qword [rsp + 0x68], rax
lea ecx, [r13 + 0x18]
call fcn.140089c64
mov rcx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14002534d
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
call fcn.14002c290
jmp 0x140025350
mov rax, r13
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140025371
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax]
call qword [case.0x14005f7f8.0]
nop
mov rax, qword [0x140101300]
mov qword [rsp + 0x78], rax
nop
lea rcx, [rsp + 0x1e0]
call fcn.14002b870
nop
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], 7
mov word [rsp + 0x110], r13w
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], r13w
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x1e0]
call fcn.140038c80
movzx eax, byte [0x1400fd080]
cmp al, 6
ja 0x140025421
lea r8, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae r8, qword [rsp + 0x110]
mov edx, 6
lea rcx, str.LaunchMcAfeeBuy:_manufacturername_is__s
call fcn.140034b80
mov rdi, qword [rsp + 0x208]
mov rbx, qword [rdi]
mov rsi, qword [rsp + 0x128]
mov r14, qword [rsp + 0x120]
mov r15, qword [rsp + 0x110]
cmp rbx, rdi
je 0x1400254e9
lea r9, [rbx + 0x20]
mov rax, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 8
jb 0x14002545f
mov r9, qword [r9]
lea rcx, [rsp + 0x110]
cmp rsi, 8
cmovae rcx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r14
call fcn.14000f8c0
test eax, eax
jne 0x14002558b
lea rdx, [rbx + 0x40]
lea rax, [rsp + 0xf0]
cmp rax, rdx
je 0x1400254b3
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x1400254a6
mov rdx, qword [rdx]
lea rcx, [rsp + 0xf0]
call fcn.140003c40
movzx eax, byte [0x1400fd080]
cmp al, 6
ja 0x1400254e9
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
mov edx, 6
lea rcx, str.LaunchMcAfeeBuy:_oem_app_name_is__s
call fcn.140034b80
lea rax, vtable.ctp::general_json_wchar_t_.0
mov qword [rsp + 0x170], rax
xor r9d, r9d
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0x178]
call fcn.140016cd0
xorps xmm0, xmm0
movups xmmword [rsp + 0x178], xmm0
mov eax, 3
mov word [rsp + 0x186], ax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x1e0]
call fcn.14003c060
cmp eax, 1
movzx eax, byte [0x1400fd080]
jne 0x1400258ac
cmp al, 6
ja 0x140025567
mov edx, 6
lea rcx, str.LaunchMcAfeeBuy:_subscription_type_is_Paid
call fcn.140034b80
mov r14, qword [rsp + 0x100]
movabs rsi, 0x7ffffffffffffffe
mov rax, rsi
sub rax, r14
cmp rax, 4
jb 0x140025e8e
jmp 0x1400255e4
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400255bb
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400255b3
nop
cmp rbx, qword [rax + 0x10]
jne 0x1400255b3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400255a0
mov rbx, rax
jmp 0x140025444
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140025444
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400255d0
jmp 0x140025444
lea r12, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r12, qword [rsp + 0xf0]
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], r13
lea r15, [r14 + 4]
mov ebx, 7
lea rdi, [rsp + 0xd0]
cmp r15, rbx
jbe 0x140025665
mov rbx, r15
or rbx, 7
cmp rbx, rsi
jbe 0x14002563d
mov rbx, rsi
jmp 0x140025649
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xd0]
call fcn.140003f80
mov rdi, rax
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xe0], r15
mov qword [rsp + 0xe8], rbx
movabs rax, 0x5f007300700077
mov qword [rdi], rax
lea rcx, [rdi + 8]
lea r8, [r14 + r14]
mov rdx, r12
call fcn.14008c5a0
mov word [rdi + r15*2], r13w
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xe8]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x1400256f9
lea rdi, [rcx + 6]
mov qword [rsp + 0xe0], rdi
lea rbx, [rsp + 0xd0]
cmp rdx, 8
cmovae rbx, qword [rsp + 0xd0]
lea rcx, [rbx + rcx*2]
mov r8d, 0xc
lea rdx, str._renew
call fcn.14008c5a0
mov word [rbx + rdi*2], r13w
lea rax, [rsp + 0xd0]
jmp 0x140025721
mov qword [rsp + 0x20], 6
lea r9, str._renew
movzx r8d, byte [rsp + 0x30]
mov edx, 6
lea rcx, [rsp + 0xd0]
call fcn.140004280
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x140], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rsp + 0xe8]
cmp rdx, 8
jb 0x140025790
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002578b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025e94
call fcn.140089ca0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], 7
mov word [rsp + 0xd0], r13w
lea r8, str.renew
lea rdx, str.action
lea rcx, [rsp + 0x38]
call fcn.1400264e0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
lea r14, [rsp + 0x130]
mov r12, qword [rsp + 0x148]
cmp r12, 8
setae r13b
mov rbx, qword [rsp + 0x130]
cmovae r14, rbx
mov r15, qword [rsp + 0x140]
cmp r15, 8
jae 0x140025816
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x48], xmm0
mov edi, 7
jmp 0x14002584a
mov rdi, r15
or rdi, 7
cmp rdi, rsi
cmova rdi, rsi
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x48]
call fcn.140003f80
mov qword [rsp + 0x48], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14008c5a0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rdi
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, str.clicksrc
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], 8
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x90]
mov rax, qword [rax + 0x98]
call qword [case.0x14005f7f8.0]
nop
lea rcx, [rsp + 0x48]
call fcn.140002430
nop
jmp 0x140025b9e
cmp al, 6
ja 0x1400258c1
mov edx, 6
lea rcx, str.LaunchMcAfeeBuy:_subscription_type_is_Trial
call fcn.140034b80
mov r14, qword [rsp + 0x100]
movabs rsi, 0x7ffffffffffffffe
mov rax, rsi
sub rax, r14
cmp rax, 4
jb 0x140025e9a
lea r12, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r12, qword [rsp + 0xf0]
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], r13
lea r15, [r14 + 4]
mov ebx, 7
lea rdi, [rsp + 0xd0]
cmp r15, rbx
jbe 0x140025964
mov rbx, r15
or rbx, 7
cmp rbx, rsi
jbe 0x14002593c
mov rbx, rsi
jmp 0x140025948
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xd0]
call fcn.140003f80
mov rdi, rax
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xe0], r15
mov qword [rsp + 0xe8], rbx
movabs rax, 0x5f007300700077
mov qword [rdi], rax
lea rcx, [rdi + 8]
lea r8, [r14 + r14]
mov rdx, r12
call fcn.14008c5a0
mov word [rdi + r15*2], r13w
mov rdx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov rax, r8
sub rax, rdx
cmp rax, 4
jb 0x1400259f0
lea rcx, [rdx + 4]
mov qword [rsp + 0xe0], rcx
lea rax, [rsp + 0xd0]
cmp r8, 8
cmovae rax, qword [rsp + 0xd0]
movabs r8, 0x7900750062005f
mov qword [rax + rdx*2], r8
mov word [rax + rcx*2], r13w
lea rax, [rsp + 0xd0]
jmp 0x140025a18
mov qword [rsp + 0x20], 4
lea r9, str._buy
movzx r8d, byte [rsp + 0x30]
mov edx, 4
lea rcx, [rsp + 0xd0]
call fcn.140004280
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x140], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rsp + 0xe8]
cmp rdx, 8
jb 0x140025a87
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025a82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025ea0
call fcn.140089ca0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], 7
mov word [rsp + 0xd0], r13w
lea r8, [0x1400ccc30]
lea rdx, str.action
lea rcx, [rsp + 0x38]
call fcn.1400264e0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
lea r14, [rsp + 0x130]
mov r12, qword [rsp + 0x148]
cmp r12, 8
setae r13b
mov rbx, qword [rsp + 0x130]
cmovae r14, rbx
mov r15, qword [rsp + 0x140]
cmp r15, 8
jae 0x140025b0d
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x48], xmm0
mov edi, 7
jmp 0x140025b41
mov rdi, r15
or rdi, 7
cmp rdi, rsi
cmova rdi, rsi
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x48]
call fcn.140003f80
mov qword [rsp + 0x48], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14008c5a0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rdi
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, str.clicksrc
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], 8
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x90]
mov rax, qword [rax + 0x98]
call qword [case.0x14005f7f8.0]
nop
lea rcx, [rsp + 0x48]
call fcn.140002430
nop
test r13b, r13b
je 0x140025bd8
lea rdx, [r12*2 + 2]
cmp rdx, 0x1000
mov rax, rbx
jb 0x140025bd0
mov rbx, qword [rbx - 8]
sub rax, rbx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025ea6
mov rcx, rbx
call fcn.140089ca0
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x170]
call fcn.140043d40
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
mov r10, qword [rax + 8]
lea rax, [rsp + 0x150]
cmp qword [rsp + 0x168], 8
cmovae rax, qword [rsp + 0x150]
mov qword [rsp + 0xa0], rax
mov rdx, qword [rsp + 0x160]
mov qword [rsp + 0xa8], rdx
lea rax, str.trayicon.launch.buy
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 0x13
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xa0], xmm0
movaps xmm1, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0xb0], xmm1
lea r9, [rsp + 0xa0]
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0xc0]
mov rax, r10
call qword [case.0x14005f7f8.0]
movzx eax, byte [0x1400fd080]
cmp al, 6
ja 0x140025ca5
mov edx, 6
lea rcx, str.LaunchMcAfeeBuy:_Exit
call fcn.140034b80
mov rdx, qword [rsp + 0x168]
cmp rdx, 8
jb 0x140025ced
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025ce8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025ea6
call fcn.140089ca0
xor ebx, ebx
mov qword [rsp + 0x160], rbx
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], bx
lea rcx, [rsp + 0x178]
call fcn.140016c30
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x140025d61
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025d5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025eac
call fcn.140089ca0
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], bx
mov rdx, qword [rsp + 0x128]
cmp rdx, 8
jb 0x140025dc5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025dc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025eb2
call fcn.140089ca0
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x128], 7
mov word [rsp + 0x110], bx
lea rcx, [rsp + 0x1e0]
call fcn.14002d700
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140025e0b
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax]
call qword [case.0x14005f7f8.0]
nop
cmp byte [rsp + 0x88], 0
jne 0x140025e2f
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x140025e5c
mov rcx, qword [rsp + 0x380]
xor rcx, rsp
call fcn.14008a6c0
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.140001d40
nop
call fcn.1400916c4
nop
call fcn.140001d40
nop
call fcn.1400916c4
nop
call fcn.1400916c4
nop
call fcn.1400916c4
nop
call fcn.1400916c4
int3