Function at 0x40336a
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
push 0xc4
mov eax, 0x565ecd
call fcn.00549017
mov edi, ecx
mov dword [ebp - 0xcc], edi
call fcn.00414c0e
push 0x5a69b8
mov ecx, edi
call fcn.004222eb
xor ebx, ebx
push ebx
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call fcn.00423eb0
mov dword [ebp - 0xc8], eax
test eax, eax
je 0x40341b
lea ecx, [ebp - 0xd0]
call fcn.00402798
push 0x65
lea ecx, [ebp - 0xd0]
mov dword [ebp - 4], ebx
call fcn.004038a3
mov esi, dword [ebp - 0xd0]
lea eax, [esi - 0x10]
mov dword [ebp - 0xd0], eax
cmp dword [eax + 4], ebx
je 0x403410
mov eax, dword [ebp - 0xc8]
mov edi, dword [sym.imp.USER32.dll_AppendMenuA]
push ebx
push ebx
push 0x800
push dword [eax + 4]
call edi
mov eax, dword [ebp - 0xc8]
push esi
push 0x10
push ebx
push dword [eax + 4]
call edi
mov edi, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd0]
or dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.0040234c
push dword [edi + 0xd0]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push 0x80
push dword [edi + 0x20]
mov byte [edi + 0xdc], bl
call esi
push dword [edi + 0xd0]
push ebx
push 0x80
push dword [edi + 0x20]
call esi
push str.JiSu_Installer_Ysk
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x40346c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4036cd
lea ecx, [edi + 0x2b8]
mov word [edi + 0xdc], bx
push ebx
mov byte [edi + 0xde], bl
call fcn.0042233d
lea ecx, [edi + 0x438]
push ebx
call fcn.0042233d
lea ecx, [edi + 0x338]
push ebx
call fcn.0042233d
lea ecx, [edi + 0x3b8]
push ebx
call fcn.0042233d
lea ecx, [edi + 0x128]
push ebx
call fcn.0042233d
lea ecx, [edi + 0x4c0]
push ebx
call fcn.0042233d
push 1
push 0xfbfbfb
mov ecx, edi
call fcn.004232e5
movaps xmm0, xmmword [0x5a6ee0]
lea edi, [ebp - 0x30]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0x64
mov esi, 0x5a6a10
mov dword [ebp - 0x38], 0x1000000
xor eax, eax
mov dword [ebp - 0x34], ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xcc]
lea edi, [ebp - 0x27]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x4c]
push eax
lea edi, [esi + 0x110]
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push eax
mov ecx, edi
call fcn.00404609
mov eax, ebx
test edi, edi
je 0x40352a
mov eax, dword [edi + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push eax
push 0x30
push dword [esi + 0x358]
call edi
lea eax, [esi + 0x110]
test eax, eax
jne 0x40354b
mov eax, ebx
jmp 0x40354e
mov eax, dword [eax + 4]
push 1
push eax
push 0x30
push dword [esi + 0x3d8]
call edi
movaps xmm0, xmmword [0x5a6ef0]
lea edi, [ebp - 0x6c]
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], 0x64
mov esi, 0x5a6a10
mov dword [ebp - 0x74], 0x1000000
xor eax, eax
mov dword [ebp - 0x70], ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xcc]
lea edi, [ebp - 0x63]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x88]
push eax
lea edi, [esi + 0x118]
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push eax
mov ecx, edi
call fcn.00404609
mov eax, ebx
test edi, edi
je 0x4035bc
mov eax, dword [edi + 4]
push 1
push eax
push 0x30
push dword [esi + 0x2d8]
call dword [sym.imp.USER32.dll_SendMessageA]
movaps xmm0, xmmword [0x5a6f00]
lea edi, [ebp - 0xa8]
movups xmmword [ebp - 0xc4], xmm0
mov dword [ebp - 0xb4], 0x64
mov esi, 0x5a6a10
mov dword [ebp - 0xb0], 0x1000000
xor eax, eax
mov dword [ebp - 0xac], ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xcc]
lea edi, [ebp - 0x9f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xc4]
push eax
lea edi, [esi + 0x120]
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push eax
mov ecx, edi
call fcn.00404609
test edi, edi
je 0x40363b
mov ebx, dword [edi + 4]
push 1
push ebx
push 0x30
push dword [esi + 0x258]
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esi + 0x230]
mov ecx, 0x89
push eax
call fcn.00402e54
lea eax, [esi + 0x1a8]
mov ecx, 0x87
push eax
call fcn.00402e54
lea eax, [esi + 0x4b8]
mov ecx, 0x8a
push eax
call fcn.00402e54
lea eax, [esi + 0x540]
mov ecx, 0x88
push eax
call fcn.00402e54
add esp, 0x10
lea ecx, [ebp - 0xc8]
push 0x5a6a20
call fcn.004038fc
lea ecx, [ebp - 0xc8]
xor ebx, ebx
push ecx
inc ebx
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.00403849
mov ecx, dword [ebp - 0xc8]
add ecx, 0xfffffff0
call fcn.0040234c
mov eax, ebx
call fcn.00548fc1
ret
push ebx
push ebx
push 0x5a69e0
call fcn.00413a7e
push 0xffffffffffffffff
call fcn.005504cf
int3