Function at 0x4d73c9
Capabilities:
Check mutex on windows

Disassembly:
push 0x7c
mov eax, 0x5ee1c7
call fcn.00593b07
mov esi, edx
mov edi, ecx
push str.03DE87A6_6432_4BFC_9BA7_738379E4CF88
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x78], eax
mov ebx, str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
test eax, eax
je 0x4d7580
cmp esi, 1
jne 0x4d743c
push 0x63cab4
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
and dword [ebp - 4], 0
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004c676c
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.0040b67e
mov eax, 0x9ca
cmp esi, 1
lea ecx, [eax + 8]
cmove eax, ecx
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x84], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x80], eax
mov eax, edi
jb 0x4d7460
mov eax, dword [edi]
sub esp, 0x18
mov dword [ebp - 0x7c], eax
mov ecx, esp
push edi
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x44]
call fcn.00430ab2
add esp, 0x18
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x4d7490
mov eax, dword [eax]
push eax
push 0x20a4
push str.SendDotInfoToHb
push str.__s__d__PostMessage_WM_COPYDATA_dotData_s
call fcn.0040a649
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
add esp, 0x10
call fcn.0040b67e
push 0
push 0x3e8
push 2
lea eax, [ebp - 0x84]
push eax
push 0
push 0x4a
push dword [ebp - 0x78]
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
jne 0x4d7718
cmp esi, 1
jne 0x4d7522
push 0x66dd24
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.004c676c
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040b67e
push str.send_
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.00456b2d
mov byte [ebp - 4], 6
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4d7554
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040b220
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0040b67e
push ecx
lea edx, [ebp - 0x5c]
mov ecx, edi
call fcn.004d77d1
pop ecx
lea ecx, [ebp - 0x5c]
jmp 0x4d7713
cmp esi, 1
jne 0x4d75c9
push 0x643dc0
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004c676c
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040b67e
push str.find_
lea ecx, [ebp - 0x74]
call fcn.0040b0d5
mov dword [ebp - 4], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.00456b2d
mov byte [ebp - 4], 0xa
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4d75fb
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x74]
call fcn.0040b220
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0040b67e
push str.143359e8_f4b9_4010_a5e5_789147203fa5
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x78], eax
test eax, eax
je 0x4d7683
cmp esi, 1
jne 0x4d7675
push 0x66dd2c
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004c676c
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.0040b67e
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, str._hbalive
jmp 0x4d76f3
cmp esi, 1
jne 0x4d76c9
push 0x66dd40
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004c676c
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.0040b67e
push str._hb:1
lea ecx, [ebp - 0x2c]
call fcn.0040b0d5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.004d78a6
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0040b67e
mov esi, str._hbdead
push esi
call fcn.005baec0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b220
push ecx
lea edx, [ebp - 0x74]
mov ecx, edi
call fcn.004d77d1
pop ecx
lea ecx, [ebp - 0x74]
call fcn.0040b67e
call fcn.00593ab1
ret