Function at 0x411fae
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x69c
mov eax, dword [0x54c710]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
push 0x511254
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x5c8], ebx
call fcn.0041accd
pop ecx
push ebx
call fcn.0040c1d9
mov ecx, eax
call fcn.0040e2ff
call fcn.0041efe0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
mov edi, str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
push 0xf
pop esi
sub eax, 1
jne 0x41209e
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 0x4f
push edi
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], 0
call fcn.00409b85
and dword [ebp - 0x24], 0
lea ecx, [ebp - 0x34]
push 3
push 0x5101e0
mov dword [ebp - 0x20], esi
mov byte [ebp - 0x34], 0
call fcn.00409b85
call fcn.0041efe0
mov edi, eax
lea ecx, [ebp - 0x69c]
push 0x17
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004068c1
mov esi, eax
push str.cmd:
push esi
call fcn.00405ae1
push ebx
push esi
call fcn.00407265
mov edx, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x69c]
call fcn.0040741a
lea ecx, [ebp - 0x34]
call fcn.0040998f
lea ecx, [ebp - 0x1c]
call fcn.0040998f
push 0xf
pop esi
mov edi, str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
push reloc.OLEAUT32.dll_SysReAllocString
push str.SOFTWAREWinOptimizer
push str.WinOptimizer.exe
call fcn.004104b9
mov ecx, eax
call fcn.00421e30
xor ebx, ebx
lea eax, [ebp - 0x4c]
push ebx
push ebx
push ebx
push ebx
push str.http:__s.91toolbox.com_winopt_appwinoptpidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionaction
push eax
call fcn.00421ed0
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x4120d8
mov eax, dword [eax]
push eax
push str.operate
call fcn.0040c3e0
mov ecx, eax
call fcn.00420240
lea ecx, [ebp - 0x4c]
call fcn.004099b5
push str.Global
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
test ebx, ebx
je 0x412138
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x412138
push 0
push 0
push 0x510674
push str.pkg_b_mutex_exist
call fcn.0041b258
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
inc eax
jmp 0x412692
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x4121f0
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0041efe0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x4121df
push 0x4f
xor ebx, ebx
mov dword [ebp - 0x20], esi
push edi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], ebx
mov byte [ebp - 0x34], bl
call fcn.00409b85
push 3
push 0x5101e0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], bl
call fcn.00409b85
call fcn.0041efe0
mov edi, eax
lea ecx, [ebp - 0x69c]
push 0x2a
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004068c1
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.00405ae1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x69c]
call fcn.0040741a
lea ecx, [ebp - 0x1c]
call fcn.0040998f
lea ecx, [ebp - 0x34]
call fcn.0040998f
push dword [ebp - 0x5c8]
call fcn.0041a288
pop ecx
jmp 0x412690
call fcn.0041efe0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x412282
and dword [ebp - 0x24], eax
lea ecx, [ebp - 0x34]
push 0x4f
push edi
mov dword [ebp - 0x20], esi
mov byte [ebp - 0x34], al
call fcn.00409b85
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x5101e0
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], 0
call fcn.00409b85
call fcn.0041efe0
mov edi, eax
lea ecx, [ebp - 0x69c]
push 0x30
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004068c1
mov esi, eax
push str.run_in_admin
push esi
call fcn.00405ae1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x69c]
call fcn.0040741a
lea ecx, [ebp - 0x1c]
call fcn.0040998f
lea ecx, [ebp - 0x34]
call fcn.0040998f
push 0
push str.winopttray
lea ecx, [ebp - 0x5c1]
call fcn.0040efcf
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.0041011b
mov esi, dword [ebp - 0x5cc]
mov edi, 0x5529ec
pop ecx
push 0
push esi
push 0
mov ecx, edi
call fcn.004105ce
push esi
call fcn.0042c2a0
lea eax, [ebp - 0xd0]
push eax
call fcn.00427ca0
pop ecx
pop ecx
push str.skin
lea ecx, [ebp - 0xd0]
call fcn.00424c00
lea ecx, [ebp - 0xd0]
call fcn.00413240
push eax
call fcn.0042c520
push 1
push str.WinOptimizerTray.zip
call fcn.0042c5e0
and dword [ebp - 0x24], 0
add esp, 0xc
xor eax, eax
and dword [ebp - 0xc], eax
mov word [ebp - 0x34], ax
push 7
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 8], ecx
lea ecx, [ebp - 0x1c]
push 0x510924
mov word [ebp - 0x1c], ax
call fcn.00409c19
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040c1d9
mov ecx, eax
call fcn.0040e19c
lea ecx, [ebp - 0x1c]
call fcn.004099b5
push str.task
lea ecx, [ebp - 0x34]
call fcn.0040dc97
test al, al
jne 0x412385
push 0x5109d0
lea ecx, [ebp - 0x34]
call fcn.0040dc97
test al, al
jne 0x412385
push 0x511550
lea ecx, [ebp - 0x34]
call fcn.0040dc97
test al, al
je 0x41245f
call fcn.0040c240
mov ecx, eax
call fcn.0040e9ef
test eax, eax
jne 0x41245f
call fcn.0041efe0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x412436
and dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x4c]
push 0xf
pop esi
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], al
call fcn.00409b85
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x5101e0
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], 0
call fcn.00409b85
call fcn.0041efe0
mov edi, eax
lea ecx, [ebp - 0x69c]
push 0x4d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004068c1
mov esi, eax
push str.user_do_not_autorun__exit
push esi
call fcn.00405ae1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x69c]
call fcn.0040741a
lea ecx, [ebp - 0x1c]
call fcn.0040998f
lea ecx, [ebp - 0x4c]
call fcn.0040998f
sub esp, 0x28
xor ecx, ecx
mov eax, esp
push ecx
push str.autoitem
push 1
push ecx
push str.autooff
mov dword [eax + 0x24], ecx
call fcn.0040c3e0
mov ecx, eax
call fcn.00420290
jmp 0x412666
push dword [ebp - 0x5c8]
call fcn.0041a5ca
pop ecx
test eax, eax
jne 0x41252b
call fcn.0041efe0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x412510
and dword [ebp - 0xc], eax
lea ecx, [ebp - 0x1c]
push 0xf
pop esi
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], al
call fcn.00409b85
and dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x4c]
push 3
push 0x5101e0
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], 0
call fcn.00409b85
call fcn.0041efe0
mov edi, eax
lea ecx, [ebp - 0x69c]
push 0x54
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004068c1
mov esi, eax
push str.CheckEnableAutoRun_False__exit
push esi
call fcn.00405ae1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x69c]
call fcn.0040741a
lea ecx, [ebp - 0x4c]
call fcn.0040998f
lea ecx, [ebp - 0x1c]
call fcn.0040998f
push 0
push 0
push 0x510674
push str.pkg_b_auto_fail
call fcn.0041b258
add esp, 0x10
jmp 0x412666
call fcn.0041019b
test al, al
je 0x4125ed
push 0
push 0
push 0x510674
push str.pkg_b_update
call fcn.0041b258
add esp, 0x10
call fcn.0041efe0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x412666
and dword [ebp - 0xc], eax
lea ecx, [ebp - 0x1c]
push 0xf
pop esi
push 0x4f
push str.d:jenkins.jenkinsworkspacemgameultra_uninstalleruninstaller_traymain.cpp
mov dword [ebp - 8], esi
mov byte [ebp - 0x1c], al
call fcn.00409b85
and dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x4c]
push 3
push 0x5101e0
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x4c], 0
call fcn.00409b85
call fcn.0041efe0
mov edi, eax
lea ecx, [ebp - 0x69c]
push 0x5c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004068c1
mov esi, eax
push str.update__exit
push esi
call fcn.00405ae1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x69c]
call fcn.0040741a
lea ecx, [ebp - 0x4c]
call fcn.0040998f
lea ecx, [ebp - 0x1c]
call fcn.0040998f
jmp 0x412666
and dword [ebp - 0x5f0], 0
lea eax, [ebp - 0x604]
and dword [ebp - 0x5ec], 0
xorps xmm0, xmm0
push eax
mov ecx, edi
mov dword [ebp - 0x604], 0x51124c
movups xmmword [ebp - 0x600], xmm0
call fcn.0040fad8
lea ecx, [ebp - 0x5c0]
call fcn.0040b8bf
lea ecx, [ebp - 0x5c0]
call fcn.0040c500
lea ecx, [ebp - 0x604]
call fcn.00411868
mov ecx, edi
call fcn.00411718
lea ecx, [ebp - 0x5c0]
call fcn.0040ba71
lea ecx, [ebp - 0x5f4]
call fcn.0040584c
lea ecx, [ebp - 0x600]
call fcn.0040584c
lea ecx, [ebp - 0x34]
call fcn.004099b5
call fcn.00411605
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xd0]
call fcn.00420d10
lea ecx, [ebp - 0x5c1]
call fcn.004059f0
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0049b353
leave
ret 0x10