Function at 0x438220
Capabilities:
Accept command line arguments
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x420
mov eax, dword [0x4c9614]
xor eax, esp
mov dword [esp + 0x41c], eax
push esi
push edi
push 0xffffffffffffffff
call sub.IMM32.dll_ImmDisableIME
push 0x8003
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
push esi
call fcn.004380e0
add esp, 4
test al, al
je 0x438359
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
setne al
mov byte [0x4cfcb9], al
test esi, esi
je 0x43830e
cmp word [esi], 0
je 0x43830e
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x1a]
push edx
mov word [esp + 0x1c], cx
call fcn.004845b0
add esp, 0xc
push 0x20
push esi
call fcn.0047f161
push eax
push esi
lea eax, [esp + 0x20]
push 0x103
push eax
call fcn.0047f500
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
add esp, 0x18
push str._s:13
lea ecx, [esp + 0x14]
push ecx
call edi
test eax, eax
je 0x4382e1
mov dword [0x4cfccc], 2
jmp 0x43830e
push str._s:15
push esi
call edi
test eax, eax
je 0x4382f9
mov dword [0x4cfccc], 3
jmp 0x43830e
push str._s:14
push esi
call edi
neg eax
sbb eax, eax
and eax, 3
inc eax
mov dword [0x4cfccc], eax
push str.LocalQ360SandboxMain
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
test edi, edi
je 0x438337
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x438371
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [0x4cfccc]
push 0
push 0x4b25a8
call dword [sym.imp.USER32.dll_FindWindowW]
push 0
push esi
push 0x464
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x41c]
xor ecx, esp
call fcn.0047e6eb
mov esp, ebp
pop ebp
ret 0x10
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea edx, [esp + 8]
push edx
mov dword [esp + 0xc], 8
mov dword [esp + 0x10], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call fcn.0043e4c0
call fcn.0043e2c0
call fcn.0040cf10
call fcn.00438020
push 0x208
lea eax, [esp + 0x21c]
push 0
push eax
call fcn.004845b0
add esp, 0xc
lea esi, [esp + 8]
call fcn.0040ab50
mov edx, dword [eax]
mov esi, 0x104
lea eax, [esp + 0x218]
lea esp, [esp]
lea ecx, [esi + 0x7ffffefa]
test ecx, ecx
je 0x438412
movzx ecx, word [edx]
test cx, cx
je 0x438412
mov word [eax], cx
add eax, 2
add edx, 2
sub esi, 1
jne 0x4383f0
jmp 0x438416
test esi, esi
jne 0x438419
sub eax, 2
xor edx, edx
mov word [eax], dx
mov eax, dword [esp + 8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43843e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str...CrashReport.dll
lea ecx, [esp + 0x21c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [esp + 0x218]
call fcn.0040ba90
test eax, eax
je 0x43848a
lea edx, [esp + 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x438485
push str.Initialize
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x438485
call eax
call fcn.004099a0
xor esi, esi
call fcn.00407900
test eax, eax
je 0x4384d1
cmp dword [0x4cfccc], 1
je 0x4384c3
push str.ipc_sbmon.dll
push 0x4cfd70
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
call fcn.00436e70
mov esi, eax
lea eax, [esp + 0x10]
call fcn.00454ca0
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.004377a0
add esp, 4
mov esi, eax
call fcn.004388d0
call dword [sym.imp.ole32.dll_OleUninitialize]
call dword [sym.imp.ole32.dll_CoUninitialize]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x424]
pop edi
mov eax, esi
pop esi
xor ecx, esp
call fcn.0047e6eb
mov esp, ebp
pop ebp
ret 0x10