Function at 0x4133ee
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6a8
mov eax, dword [0x570720]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp + 0x10]
push edi
push eax
mov dword [ebp - 0x5c8], eax
call fcn.0040d6cf
mov ecx, eax
call fcn.0040f4d7
call fcn.00426e70
xor ebx, ebx
mov ecx, eax
inc ebx
push ebx
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
push 0xf
pop edi
sub eax, ebx
jne 0x4134d3
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
and dword [ebp - 0x24], 0
lea ecx, [ebp - 0x34]
push 3
push 0x52e240
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], 0
call fcn.0040b055
call fcn.00426e70
mov edi, eax
lea ecx, [ebp - 0x6a8]
push 0x15
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00407d91
mov esi, eax
push str.cmd:
push esi
call fcn.00406fb1
push dword [ebp - 0x5c8]
push esi
call fcn.00408735
mov edx, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6a8]
call fcn.004088ea
lea ecx, [ebp - 0x34]
call fcn.0040ae5f
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
push 0xf
pop edi
push str.http:__s.luxiaoche.com_unst_appapppidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionaction
lea ecx, [ebp - 0x5d0]
call fcn.00405fa2
mov eax, dword [ebp - 0x5d0]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.0040c6e9
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x5cc]
pop ecx
push eax
call fcn.00417f4e
pop ecx
pop ecx
push dword [ebp - 0x5cc]
push str.operate
push 0
call fcn.0040d86b
mov ecx, eax
call fcn.00427d40
push str.Global
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
mov dword [ebp - 0x5d4], esi
test esi, esi
je 0x41356b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x41356b
push 0
push 0
push 0x52e590
push str.pkg_b_mutex_exist
call fcn.0041cd17
add esp, 0x10
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x413add
push str.logUltraUninstallerTray.log
call fcn.0041c768
pop ecx
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x413637
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00426e70
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413624
and dword [ebp - 0x24], eax
lea ecx, [ebp - 0x34]
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], al
call fcn.0040b055
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x52e240
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
call fcn.00426e70
mov edi, eax
lea ecx, [ebp - 0x6a8]
push 0x2a
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407d91
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6a8]
call fcn.004088ea
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
lea ecx, [ebp - 0x34]
call fcn.0040ae5f
push dword [ebp - 0x5c8]
call fcn.0041ba72
pop ecx
xor ebx, ebx
jmp 0x413add
call fcn.00426e70
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x4136d0
and dword [ebp - 0x24], eax
lea ecx, [ebp - 0x34]
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], al
call fcn.0040b055
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x52e240
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
call fcn.00426e70
mov edi, eax
lea ecx, [ebp - 0x6a8]
push 0x30
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407d91
mov esi, eax
push str.run_in_admin
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6a8]
call fcn.004088ea
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
lea ecx, [ebp - 0x34]
call fcn.0040ae5f
push 0
push str.unsttray
lea ecx, [ebp - 0x5c1]
call fcn.004100ba
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.004115d4
mov esi, dword [ebp - 0x5d8]
mov edi, 0x576d4c
pop ecx
push 0
push esi
push 0
mov ecx, edi
call fcn.00411a0e
push esi
call fcn.00446220
lea eax, [ebp - 0xd0]
push eax
call fcn.00441c10
pop ecx
pop ecx
push str.skin
lea ecx, [ebp - 0xd0]
call fcn.0043eb70
lea ecx, [ebp - 0xd0]
call fcn.004146d0
push eax
call fcn.004464a0
push ebx
push str.uninstaller_tray.zip
call fcn.00446560
and dword [ebp - 0x24], 0
add esp, 0xc
xor eax, eax
and dword [ebp - 0xc], eax
mov word [ebp - 0x34], ax
push 7
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 8], ecx
lea ecx, [ebp - 0x1c]
push 0x52e7dc
mov word [ebp - 0x1c], ax
call fcn.0040b0e9
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040d6cf
mov ecx, eax
call fcn.0040f374
lea ecx, [ebp - 0x1c]
call fcn.0040ae85
push str.task
lea ecx, [ebp - 0x34]
call fcn.0040eebe
test al, al
jne 0x4137d2
push 0x52f580
lea ecx, [ebp - 0x34]
call fcn.0040eebe
test al, al
jne 0x4137d2
push 0x52f588
lea ecx, [ebp - 0x34]
call fcn.0040eebe
test al, al
je 0x4138a3
call fcn.0040d736
mov ecx, eax
call fcn.0040fb67
test eax, eax
jne 0x4138a3
call fcn.00426e70
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413882
and dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x4c]
push 0xf
pop esi
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], al
call fcn.0040b055
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x52e240
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], 0
call fcn.0040b055
call fcn.00426e70
mov edi, eax
lea ecx, [ebp - 0x6a8]
push 0x4d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407d91
mov esi, eax
push str.user_do_not_autorun__exit
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6a8]
call fcn.004088ea
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
lea ecx, [ebp - 0x4c]
call fcn.0040ae5f
push 0
push str.autoitem
push ebx
xor ebx, ebx
push ebx
push str.autooff
call fcn.0040d86b
mov ecx, eax
call fcn.00427d60
jmp 0x413aae
push dword [ebp - 0x5c8]
call fcn.0041c3d1
pop ecx
test eax, eax
jne 0x413970
call fcn.00426e70
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413955
push 0xf
pop esi
push 0x4f
xor ebx, ebx
mov dword [ebp - 8], esi
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], ebx
mov byte [ebp - 0x1c], bl
call fcn.0040b055
push 3
push 0x52e240
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], bl
call fcn.0040b055
call fcn.00426e70
mov edi, eax
lea ecx, [ebp - 0x6a8]
push 0x54
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00407d91
mov esi, eax
push str.CheckEnableAutoRun_False__exit
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6a8]
call fcn.004088ea
lea ecx, [ebp - 0x4c]
call fcn.0040ae5f
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
jmp 0x413957
xor ebx, ebx
push ebx
push ebx
push 0x52e590
push str.pkg_b_auto_fail
call fcn.0041cd17
add esp, 0x10
jmp 0x413aae
call fcn.00411654
test al, al
je 0x413a31
push 0
push 0
push 0x52e590
push str.pkg_b_update
call fcn.0041cd17
add esp, 0x10
call fcn.00426e70
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x413aac
push 0xf
pop esi
push 0x4f
xor ebx, ebx
mov dword [ebp - 8], esi
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], ebx
mov byte [ebp - 0x1c], bl
call fcn.0040b055
push 3
push 0x52e240
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], bl
call fcn.0040b055
call fcn.00426e70
mov edi, eax
lea ecx, [ebp - 0x6a8]
push 0x5c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00407d91
mov esi, eax
push str.update__exit
push esi
call fcn.00406fb1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x6a8]
call fcn.004088ea
lea ecx, [ebp - 0x4c]
call fcn.0040ae5f
lea ecx, [ebp - 0x1c]
call fcn.0040ae5f
jmp 0x413aae
lea eax, [ebp - 0x610]
mov dword [ebp - 0x610], 0x52f2a8
xorps xmm0, xmm0
xor ebx, ebx
push eax
mov ecx, edi
mov dword [ebp - 0x5fc], ebx
movups xmmword [ebp - 0x60c], xmm0
mov dword [ebp - 0x5f8], ebx
call fcn.00410f91
lea ecx, [ebp - 0x5c0]
call fcn.0040cd98
lea ecx, [ebp - 0x5c0]
call fcn.0040d96a
lea ecx, [ebp - 0x610]
call fcn.00412ca8
mov ecx, edi
call fcn.00412b58
lea ecx, [ebp - 0x5c0]
call fcn.0040cf5b
lea ecx, [ebp - 0x600]
call fcn.00406d1c
lea ecx, [ebp - 0x60c]
call fcn.00406d1c
jmp 0x413aae
xor ebx, ebx
lea ecx, [ebp - 0x34]
call fcn.0040ae85
call fcn.00412a45
push dword [ebp - 0x5d4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xd0]
call fcn.0043e830
lea ecx, [ebp - 0x5c1]
call fcn.00406ec0
mov ecx, dword [ebp - 0x5cc]
add ecx, 0xfffffff0
call fcn.00406cd8
mov ecx, dword [ebp - 0x5d0]
add ecx, 0xfffffff0
call fcn.00406cd8
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004b3200
leave
ret 0x10