Function at 0x406fe0
Capabilities:
Check mutex on windows
Create process on windows
Read .ini file

Disassembly:
sub esp, 0x220
mov eax, dword [0x4878d4]
xor eax, esp
mov dword [esp + 0x21c], eax
mov ecx, dword [esp + 0x22c]
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x234]
lea eax, [esp + 0x10]
push eax
call fcn.004040c0
push 0x47ba38
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x40713d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, dword [sym.imp.USER32.dll_GetWindow]
push eax
call esi
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
mov edi, eax
push edi
call ebx
test eax, eax
je 0x407124
mov ebp, dword [sym.imp.USER32.dll_GetPropW]
push str.NewFilmEveryday
push edi
call ebp
test eax, eax
jne 0x407082
push 2
push edi
call esi
mov edi, eax
push edi
call ebx
test eax, eax
jne 0x407063
jmp 0x407124
mov eax, dword [esp + 0x10]
xor ebx, ebx
cmp dword [eax - 0xc], ebx
je 0x4070ff
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
call fcn.00404c80
add eax, 0x10
mov dword [esi], eax
call fcn.00406f70
add esp, 4
cmp eax, ebx
je 0x4070ff
mov ecx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], ebx
mov eax, dword [ecx - 0xc]
lea eax, [eax + eax + 2]
mov dword [esp + 0x1c], eax
cmp eax, ebx
jne 0x4070dc
lea ecx, [esp + 0x10]
call fcn.00404200
jmp 0x40740e
lea esi, [esp + 0x10]
call fcn.00404020
lea edx, [esp + 0x18]
push edx
push ebx
push 0x4a
push edi
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00407480
jmp 0x407124
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x18]
push eax
push ebx
push 0x4a
push edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x407402
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x2e]
push edx
mov word [esp + 0x30], cx
call fcn.0045cac0
add esp, 0xc
push 0x104
lea eax, [esp + 0x28]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x28]
call fcn.004040c0
push str.updateex.ini
push 0x47b320
lea edx, [esp + 0x1c]
push edx
call fcn.00404320
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push eax
push 0
push str.NEXTTIME
push str.FORCE
call esi
cmp eax, 1
jne 0x407211
push str.ttkupdate.exe
push str.updateex.ini
lea ecx, [esp + 0x1c]
push ecx
call fcn.00404320
mov edx, dword [esp + 0x14]
push 1
push 0
push 0x47bad0
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4071f8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x407402
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x407231
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0
mov dword [0x48a6d8], 0x48a5d0
call dword [sym.imp.ole32.dll_OleInitialize]
push edi
call fcn.00433840
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jge 0x407271
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x407402
push 0x105c
call fcn.00459c10
add esp, 4
test eax, eax
je 0x40728a
push eax
call fcn.00410ab0
jmp 0x40728c
xor eax, eax
mov dword [0x48a5b4], eax
test eax, eax
jne 0x4072ae
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x407402
push 0
push 0x2bc
push 0x3ee
push 0
push 0
push 0
push 0x10cf0000
push 0x47bad8
push 0
mov ecx, eax
call fcn.004333c0
mov ecx, dword [0x48a5b4]
call fcn.004325a0
mov ecx, dword [0x48a5b4]
push 1
push 1
call fcn.00432550
mov ecx, dword [0x48a5b4]
call fcn.004484d0
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [0x48a5b4]
mov eax, dword [ecx + 0x59c]
push eax
push 3
push 0x47bae8
push str.memory
call esi
cmp eax, 1
je 0x40742b
cmp eax, 2
je 0x40745d
mov ecx, dword [0x48a5b4]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
call fcn.004484d0
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
call esi
mov ecx, dword [0x48a5b4]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
call fcn.004484d0
push eax
call esi
mov ecx, dword [0x48a5b4]
push 1
push 1
call fcn.00432550
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x4073e3
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
call fcn.00404c80
add eax, 0x10
mov dword [esi], eax
call fcn.00406f70
add esp, 4
test eax, eax
je 0x4073e3
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 0xc]
lea ecx, [esp + 0x10]
push ecx
add eax, 0xfffffffe
mov ecx, 1
lea edx, [esp + 0x18]
call fcn.00404580
lea edi, [esp + 0x10]
call fcn.004048f0
lea ecx, [esp + 0x14]
call fcn.00404200
mov edi, dword [0x48a5b4]
add edi, 0x484
lea eax, [esp + 0x10]
call fcn.004048f0
call fcn.00438720
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40740e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x22c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004599ea
add esp, 0x220
ret 0x10
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x40732c
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
call fcn.00404c80
add eax, 0x10
mov dword [esi], eax
call fcn.00406f70
add esp, 4
test eax, eax
je 0x40732c
mov ecx, dword [0x48a5b4]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
call fcn.004484d0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x407366