Function at 0x4cef60
Capabilities:
Check mutex on windows
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5f0
mov eax, dword [0x6c6f60]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x530], str.debug
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x52c], eax
mov ecx, dword [ebp - 0x52c]
mov dx, word [ecx]
mov word [ebp - 0x536], dx
mov eax, dword [ebp - 0x530]
cmp dx, word [eax]
jne 0x4cefec
cmp word [ebp - 0x536], 0
je 0x4cefe0
mov ecx, dword [ebp - 0x52c]
mov dx, word [ecx + 2]
mov word [ebp - 0x538], dx
mov eax, dword [ebp - 0x530]
cmp dx, word [eax + 2]
jne 0x4cefec
add dword [ebp - 0x52c], 4
add dword [ebp - 0x530], 4
cmp word [ebp - 0x538], 0
jne 0x4cef86
mov dword [ebp - 0x548], 0
jmp 0x4ceff7
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x548], ecx
mov edx, dword [ebp - 0x548]
mov dword [ebp - 0x590], edx
cmp dword [ebp - 0x590], 0
jne 0x4cf011
call fcn.004cee40
push str.test
call fcn.004cbc00
add esp, 4
push 0x695c18
push 0x8a
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.DLL_FindResourceW]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0
je 0x4cf41a
mov ecx, dword [ebp - 0x528]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.DLL_LoadResource]
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
je 0x4cf41a
mov eax, dword [ebp - 0x528]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
je 0x4cf41a
push 3
mov edx, dword [ebp - 0x54c]
push edx
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.KERNEL32.DLL_LockResource]
push eax
call fcn.004fb8b6
add esp, 0xc
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 0
je 0x4cf41a
push str.configureconfigure.xml
lea ecx, [ebp - 0x58c]
call fcn.0046beb0
lea ecx, [ebp - 0x514]
push ecx
lea edx, [ebp - 0x598]
push edx
push 1
mov eax, dword [ebp - 0x58c]
push eax
mov ecx, dword [ebp - 0x534]
push ecx
call fcn.004fb2f7
add esp, 0x14
mov dword [ebp - 0x5b0], eax
mov edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x554], edx
mov eax, dword [ebp - 0x554]
push eax
call fcn.005c9b2c
add esp, 4
mov dword [ebp - 0x594], eax
mov ecx, dword [ebp - 0x594]
mov dword [ebp - 0x51c], ecx
push 3
mov edx, dword [ebp - 0x554]
push edx
mov eax, dword [ebp - 0x51c]
push eax
mov ecx, dword [ebp - 0x598]
push ecx
mov edx, dword [ebp - 0x534]
push edx
call fcn.004fbc76
add esp, 0x14
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x51c]
add eax, 3
mov dword [ebp - 0x51c], eax
mov ecx, dword [ebp - 0x51c]
push ecx
lea ecx, [ebp - 0x29c]
call fcn.0048bf00
push 0
push str.Downloader_id
lea ecx, [ebp - 0x29c]
call fcn.0048b6e0
mov dword [ebp - 0x59c], eax
mov edx, dword [ebp - 0x59c]
push edx
push 0x695c6c
lea ecx, [ebp - 0x29c]
call fcn.0048b6e0
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
add eax, 2
push eax
push 0x695c70
lea ecx, [ebp - 0x29c]
call fcn.0048b6e0
mov dword [ebp - 0x5a0], eax
mov ecx, dword [ebp - 0x5a0]
sub ecx, dword [ebp - 0x53c]
sub ecx, 2
push ecx
mov edx, dword [ebp - 0x53c]
add edx, 2
push edx
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x29c]
call fcn.0048b660
call fcn.00475980
movzx ecx, al
test ecx, ecx
jne 0x4cf211
mov edx, dword [ebp - 0x534]
push edx
call fcn.004fb151
add esp, 4
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x5a4], eax
mov ecx, dword [ebp - 0x5a4]
push ecx
call fcn.005c98d2
add esp, 4
mov dword [ebp - 0x51c], 0
mov edx, dword [ebp - 0x528]
push edx
call dword [sym.imp.KERNEL32.DLL_FreeResource]
call fcn.00480560
mov dword [ebp - 0x578], eax
lea ecx, [ebp - 0x2cc]
call fcn.0048b7e0
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 0
jne 0x4cf277
mov dword [ebp - 0x55c], 0
jmp 0x4cf32f
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
add ecx, 1
mov dword [ebp - 0x570], ecx
mov edx, dword [ebp - 0x520]
mov al, byte [edx]
mov byte [ebp - 0x515], al
add dword [ebp - 0x520], 1
cmp byte [ebp - 0x515], 0
jne 0x4cf292
mov ecx, dword [ebp - 0x520]
sub ecx, dword [ebp - 0x570]
mov dword [ebp - 0x574], ecx
mov edx, dword [ebp - 0x574]
add edx, 1
mov dword [ebp - 0x540], edx
cmp dword [ebp - 0x540], 0x3fffffff
jle 0x4cf2e9
mov dword [ebp - 0x558], 0
jmp 0x4cf323
mov eax, dword [ebp - 0x540]
shl eax, 1
call fcn.005ca190
mov dword [ebp - 0x57c], esp
mov eax, dword [ebp - 0x578]
push eax
mov ecx, dword [ebp - 0x540]
push ecx
mov edx, dword [ebp - 0x544]
push edx
mov eax, dword [ebp - 0x57c]
push eax
call fcn.00480570
mov dword [ebp - 0x558], eax
mov ecx, dword [ebp - 0x558]
mov dword [ebp - 0x55c], ecx
mov edx, dword [ebp - 0x55c]
push edx
lea ecx, [ebp - 0x2e4]
call fcn.0048b540
lea eax, [ebp - 0x2e4]
push eax
push str.TS_UI_Frame_
lea ecx, [ebp - 0x2b4]
push ecx
call fcn.004ca580
add esp, 0xc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5b8], esp
lea edx, [ebp - 0x2b4]
push edx
call fcn.0047cc80
call fcn.004da440
add esp, 0x18
push 0
lea ecx, [ebp - 0x2b4]
call fcn.0047ca20
push eax
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 0
je 0x4cf3ee
push 1
mov eax, dword [ebp - 0x56c]
push eax
call dword [sym.imp.USER32.dll_SwitchToThisWindow]
mov dword [ebp - 0x580], 0
lea ecx, [ebp - 0x2b4]
call fcn.0047caf0
lea ecx, [ebp - 0x2e4]
call fcn.0047caf0
lea ecx, [ebp - 0x2cc]
call fcn.0048bcd0
lea ecx, [ebp - 0x29c]
call fcn.0048bcd0
mov eax, dword [ebp - 0x580]
jmp 0x4cf5fc
lea ecx, [ebp - 0x2b4]
call fcn.0047caf0
lea ecx, [ebp - 0x2e4]
call fcn.0047caf0
lea ecx, [ebp - 0x2cc]
call fcn.0048bcd0
lea ecx, [ebp - 0x29c]
call fcn.0048bcd0
mov ecx, dword [ebp + 8]
push ecx
call fcn.004759a0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 0
jge 0x4cf444
xor eax, eax
jmp 0x4cf5fc
push 0x100
lea edx, [ebp - 0x284]
push edx
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x284]
push eax
call fcn.004d5eb0
add esp, 4
mov dword [ebp - 0x5ac], eax
push 0x5f0
call fcn.005c97b8
add esp, 4
mov dword [ebp - 0x588], eax
mov ecx, dword [ebp - 0x588]
call fcn.004b2dc0
mov dword [ebp - 0x568], eax
jmp 0x4cf49d
mov ecx, dword [ebp - 0x568]
mov dword [ebp - 0x5a8], ecx
mov edx, dword [ebp - 0x5a8]
mov dword [ebp - 0x524], edx
cmp dword [ebp - 0x524], 0
jne 0x4cf4c5
xor eax, eax
jmp 0x4cf5fc
push 0
push 0x190
push 0x258
push 0
push 0
push 0
push 0x800a0000
push 0x695c44
push 0
mov ecx, dword [ebp - 0x524]
call fcn.004ffb71
mov ecx, dword [ebp - 0x524]
call fcn.004bd130
mov dword [ebp - 0x564], eax
xor eax, eax
mov word [ebp - 0x84], ax
push 0x7e
push 0
lea ecx, [ebp - 0x82]
push ecx
call fcn.005e2ec0
add esp, 0xc
mov edx, dword [ebp - 0x564]
push edx
push str.AFS_Downloader__d
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x84]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateMutexW]
mov dword [ebp - 0x560], eax
mov edx, dword [ebp - 0x560]
push edx
call fcn.004da4a0
add esp, 4
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0xb7
jne 0x4cf5d5
lea eax, [ebp - 0x564]
push eax
push str._Already_exist_instance__id_is:
mov ecx, dword [0x6c7c1c]
push ecx
push 1
push 0
push 2
push str.int___stdcall_wWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
push 0xca
push str........._srcCommonwWndMain.cpp
push 0x80
lea ecx, [ebp - 0x5f0]
call fcn.00485d60
push eax
call fcn.00485e40
add esp, 0xc
mov ecx, eax
call fcn.0049bb80
mov ecx, eax
call fcn.0049bd40
lea ecx, [ebp - 0x5f0]
call fcn.00485de0
mov edx, dword [ebp - 0x560]
push edx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
xor eax, eax
jmp 0x4cf5fc
mov ecx, dword [ebp - 0x524]
call fcn.004ffa19
push 1
push 1
mov ecx, dword [ebp - 0x524]
call fcn.005000b5
call fcn.004794e0
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
lea esp, [ebp - 0x5f0]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c950e
mov esp, ebp
pop ebp
ret 0x10