Function at 0x41d840
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x601fb6
mov eax, dword fs:[0]
push eax
mov eax, 0x18e0
call fcn.005373d0
mov eax, dword [0x67e4d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [0x689dbc], eax
push str.geeks_950EEE4C_A752_4B04_A2A1_6BAE74A52919
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x1864], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1860], eax
cmp dword [ebp - 0x1860], 0xb7
je 0x41d8ad
cmp dword [ebp - 0x1860], 5
jne 0x41d8ca
cmp dword [ebp - 0x1864], 0
je 0x41d8c3
mov ecx, dword [ebp - 0x1864]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x41df07
mov dword [ebp - 0x1858], 0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.0041c370
add esp, 4
push 0
mov edx, dword [ebp + 8]
push edx
push 0
mov ecx, 0x68df30
call fcn.0041c630
push 0x68df70
mov ecx, 0x68df30
call fcn.0041c790
push 0x208
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.0058a9f0
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push str.Geeks_uninst.log
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x1868]
call fcn.0040aca0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x1868]
push edx
mov ecx, 0x683f00
call fcn.00447e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1868]
call fcn.0040ac80
push 0x6509e4
call fcn.0043d410
add esp, 4
push 0
push 0
push 0
lea ecx, [ebp - 0x18ec]
call fcn.0041cb30
push 0
lea eax, [ebp - 0x18ec]
push eax
lea ecx, [ebp - 0x18a4]
push ecx
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
mov edx, dword [ebp + 8]
push edx
call fcn.0041cd20
add esp, 4
lea ecx, [ebp - 0x18a8]
call fcn.0040f160
mov dword [ebp - 4], 1
mov eax, dword [ebp + 0x10]
push eax
call fcn.0040a960
mov ecx, eax
call fcn.0040d3c0
call fcn.0041d710
call fcn.0040a960
mov ecx, eax
call fcn.0040dae0
mov dword [ebp - 0x18b4], eax
push 0x6509f0
lea ecx, [ebp - 0x1870]
call fcn.0040aca0
mov byte [ebp - 4], 2
push 0x6509f8
lea ecx, [ebp - 0x186c]
call fcn.0040aca0
mov byte [ebp - 4], 3
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18d4], esp
push 0
call fcn.0040ac00
mov dword [ebp - 0x18d8], eax
mov byte [ebp - 4], 4
push 0
push 0
lea ecx, [ebp - 0x1870]
push ecx
lea edx, [ebp - 0x186c]
push edx
call fcn.0040ab50
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.0043ce30
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x186c]
call fcn.0040ac80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1870]
call fcn.0040ac80
lea ecx, [ebp - 0x1854]
call fcn.0040f160
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1854]
push eax
call fcn.0041d020
add esp, 4
mov dword [ebp - 0x1874], eax
cmp dword [ebp - 0x1874], 0
jg 0x41dbe0
cmp dword [ebp - 0x1874], 0
jge 0x41daf6
cmp dword [ebp - 0x18b4], 0
jne 0x41daf6
push 0
push 0x650a00
push 0x650a08
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.0040a960
mov ecx, eax
call fcn.0040dbc0
mov dword [ebp - 0x18b0], eax
lea ecx, [ebp - 0x185c]
push ecx
call fcn.0040a960
mov ecx, eax
call fcn.0040df90
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18b0], 0
jne 0x41dba4
call fcn.00428c10
mov dword [ebp - 0x1878], eax
lea edx, [ebp - 0x1854]
push edx
mov eax, dword [ebp - 0x1878]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1878]
mov eax, dword [edx + 0x4c]
call eax
lea ecx, [ebp - 0x185c]
call fcn.0040ae20
push eax
push str.RunApp_cmdLine:__s
call fcn.0043d410
add esp, 8
xor ecx, ecx
mov byte [ebp - 0x184d], cl
call fcn.00428c10
mov dword [ebp - 0x187c], eax
lea ecx, [ebp - 0x185c]
call fcn.0040ae20
push eax
lea ecx, [ebp - 0x184d]
call fcn.0041df20
push eax
mov edx, dword [ebp - 0x187c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x187c]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x1858], 0x10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x185c]
call fcn.0040ac80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1854]
call fcn.0040ac80
jmp 0x41deb6
call fcn.0041cec0
mov dword [ebp - 0x1858], eax
cmp dword [ebp - 0x1858], 0
je 0x41dc9d
push str.fail_task
lea ecx, [ebp - 0x1884]
call fcn.0040aca0
mov byte [ebp - 4], 7
push 0x650a60
lea ecx, [ebp - 0x1880]
call fcn.0040aca0
mov byte [ebp - 4], 8
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18dc], esp
push 0
call fcn.0040ac00
mov dword [ebp - 0x18bc], eax
mov byte [ebp - 4], 9
push 0
push 0
lea eax, [ebp - 0x1884]
push eax
lea ecx, [ebp - 0x1880]
push ecx
call fcn.0040ab50
mov byte [ebp - 4], 8
mov ecx, eax
call fcn.0043ce30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1880]
call fcn.0040ac80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1884]
call fcn.0040ac80
push str.init_task_fail.
call fcn.0043d410
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1854]
call fcn.0040ac80
jmp 0x41deb6
call fcn.0041cf70
test eax, eax
jne 0x41dd4c
push str.fail_config
lea ecx, [ebp - 0x188c]
call fcn.0040aca0
mov byte [ebp - 4], 0xa
push 0x650aa0
lea ecx, [ebp - 0x1888]
call fcn.0040aca0
mov byte [ebp - 4], 0xb
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18c0], esp
push 0
call fcn.0040ac00
mov dword [ebp - 0x18c4], eax
mov byte [ebp - 4], 0xc
push 0
push 0
lea edx, [ebp - 0x188c]
push edx
lea eax, [ebp - 0x1888]
push eax
call fcn.0040ab50
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.0043ce30
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1888]
call fcn.0040ac80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x188c]
call fcn.0040ac80
mov dword [ebp - 0x1858], 0xe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1854]
call fcn.0040ac80
jmp 0x41deb6
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x18b8], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x1898], eax
mov eax, dword [ebp - 0x18b8]
sub eax, 0x258
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x18a0], eax
mov eax, dword [ebp - 0x1898]
sub eax, 0x190
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x189c], eax
push str.show
lea ecx, [ebp - 0x1894]
call fcn.0040aca0
mov byte [ebp - 4], 0xd
push 0x650ab4
lea ecx, [ebp - 0x1890]
call fcn.0040aca0
mov byte [ebp - 4], 0xe
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18c8], esp
push 0
call fcn.0040ac00
mov dword [ebp - 0x18cc], eax
mov byte [ebp - 4], 0xf
push 0
push 0
lea ecx, [ebp - 0x1894]
push ecx
lea edx, [ebp - 0x1890]
push edx
call fcn.0040ab50
mov byte [ebp - 4], 0xe
mov ecx, eax
call fcn.0043ce30
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1890]
call fcn.0040ac80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1894]
call fcn.0040ac80
lea ecx, [ebp - 0x184c]
call fcn.0042d7e0
mov byte [ebp - 4], 0x10
push 0xffffffffffffffff
push 0x650abc
lea ecx, [ebp - 0x29c]
call fcn.00467140
mov byte [ebp - 4], 0x11
push 0
push 0x190
push 0x258
mov eax, dword [ebp - 0x189c]
push eax
mov ecx, dword [ebp - 0x18a0]
push ecx
lea edx, [ebp - 0x29c]
push edx
push 0
lea ecx, [ebp - 0x184c]
call fcn.00464a70
mov dword [ebp - 0x18d0], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x29c]
call fcn.00467590
mov ecx, 0x68df70
call fcn.0041c3a0
mov dword [ebp - 0x1858], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x184c]
call fcn.0042d900
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1854]
call fcn.0040ac80
xor eax, eax
jne 0x41da9f
mov ecx, 0x68df30
call fcn.0041c840
mov ecx, 0x68df30
call fcn.0041c740
mov ecx, dword [ebp - 0x18a4]
push ecx
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
call dword [sym.imp.ole32.dll_OleUninitialize]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, dword [ebp - 0x1858]
mov dword [ebp - 0x18ac], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18a8]
call fcn.0040ac80
mov eax, dword [ebp - 0x18ac]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00536569
mov esp, ebp
pop ebp
ret