Function at 0x4d5901
Capabilities:
Check mutex on windows

Disassembly:
push 0x7c
mov eax, 0x5ec391
call fcn.00592017
mov esi, edx
mov edi, ecx
push str.03DE87A6_6432_4BFC_9BA7_738379E4CF88
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x78], eax
mov ebx, str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
test eax, eax
je 0x4d5ab8
cmp esi, 1
jne 0x4d5974
push 0x63a8c4
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
and dword [ebp - 4], 0
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004c4ca4
lea ecx, [ebp - 0x2c]
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.0040b67b
mov eax, 0x9ca
cmp esi, 1
lea ecx, [eax + 8]
cmove eax, ecx
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x84], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x80], eax
mov eax, edi
jb 0x4d5998
mov eax, dword [edi]
sub esp, 0x18
mov dword [ebp - 0x7c], eax
mov ecx, esp
push edi
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x44]
call fcn.00430aaf
add esp, 0x18
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x4d59c8
mov eax, dword [eax]
push eax
push 0x2050
push str.SendDotInfoToHb
push str.__s__d__PostMessage_WM_COPYDATA_dotData_s
call fcn.0040a649
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
add esp, 0x10
call fcn.0040b67b
push 0
push 0x3e8
push 2
lea eax, [ebp - 0x84]
push eax
push 0
push 0x4a
push dword [ebp - 0x78]
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
jne 0x4d5c50
cmp esi, 1
jne 0x4d5a5a
push 0x66b58c
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.004c4ca4
lea ecx, [ebp - 0x2c]
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040b67b
push str.send_
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.00456b2d
mov byte [ebp - 4], 6
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4d5a8c
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040b220
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0040b67b
push ecx
lea edx, [ebp - 0x5c]
mov ecx, edi
call fcn.004d5d09
pop ecx
lea ecx, [ebp - 0x5c]
jmp 0x4d5c4b
cmp esi, 1
jne 0x4d5b01
push 0x641b60
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004c4ca4
lea ecx, [ebp - 0x2c]
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040b67b
push str.find_
lea ecx, [ebp - 0x74]
call fcn.0040b0d5
mov dword [ebp - 4], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.00456b2d
mov byte [ebp - 4], 0xa
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4d5b33
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x74]
call fcn.0040b220
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0040b67b
push str.143359e8_f4b9_4010_a5e5_789147203fa5
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x78], eax
test eax, eax
je 0x4d5bbb
cmp esi, 1
jne 0x4d5bad
push 0x66b594
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004c4ca4
lea ecx, [ebp - 0x2c]
call fcn.0040b67b
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.0040b67b
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, str._hbalive
jmp 0x4d5c2b
cmp esi, 1
jne 0x4d5c01
push 0x66b5a8
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004c4ca4
lea ecx, [ebp - 0x2c]
call fcn.0040b67b
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.0040b67b
push str._hb:1
lea ecx, [ebp - 0x2c]
call fcn.0040b0d5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.004d5dde
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0040b67b
mov esi, str._hbdead
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b220
push ecx
lea edx, [ebp - 0x74]
mov ecx, edi
call fcn.004d5d09
pop ecx
lea ecx, [ebp - 0x74]
call fcn.0040b67b
call fcn.00591fc1
ret