Function at 0x493df0
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x848
mov eax, dword [0x4b98d0]
xor eax, ebp
mov dword [ebp - 0x20], eax
mov eax, dword [0x4cc1d8]
push eax
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateMutexW]
mov dword [0x4cdd24], eax
cmp dword [0x4cdd24], 0
jne 0x493e28
xor eax, eax
jmp 0x494103
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0xb7
jne 0x493e3c
xor eax, eax
jmp 0x494103
push 0x400
lea ecx, [ebp - 0x820]
push ecx
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x838], esp
lea edx, [ebp - 0x820]
push edx
call fcn.0045e170
lea ecx, [ebp - 0x848]
call fcn.0045d720
push eax
mov ecx, 0x4ce1c4
call fcn.0045e450
lea ecx, [ebp - 0x848]
call fcn.0045deb0
call fcn.004969e0
call fcn.00496c70
mov byte [0x4cdd13], al
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.user32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.user32.dll_GetWindowRect]
mov eax, dword [ebp - 0x828]
sub eax, 0x328
cdq
sub eax, edx
sar eax, 1
mov dword [0x4cdd18], eax
mov eax, dword [ebp - 0x824]
sub eax, 0x274
cdq
sub eax, edx
sar eax, 1
mov dword [0x4cdd1c], eax
mov byte [0x4cdd11], 0
mov byte [0x4cdd10], 1
mov byte [0x4cdd12], 0
push 0x64
push 0x4cddf0
push 0x67
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.user32.dll_LoadStringW]
push 0x64
push 0x4cdd28
push 0x91
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.user32.dll_LoadStringW]
mov eax, dword [ebp + 8]
push eax
call fcn.00493d60
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jge 0x493f32
xor eax, eax
jmp 0x494103
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00492ce0
add esp, 8
test eax, eax
je 0x4940e8
mov eax, 1
test eax, eax
je 0x4940e8
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x1c]
push ecx
call dword [sym.imp.user32.dll_PeekMessageW]
test eax, eax
je 0x493fc3
push 0
push 0
push 0
lea edx, [ebp - 0x1c]
push edx
call dword [sym.imp.user32.dll_GetMessageW]
test eax, eax
jne 0x493f86
jmp 0x4940e8
cmp dword [ebp - 0x18], 0x104
jne 0x493fad
mov ecx, dword [0x4ce18c]
call fcn.00404ff0
cmp eax, 2
jne 0x493fad
cmp dword [ebp - 0x14], 0x73
je 0x493fad
cmp dword [ebp - 0x14], 0xd
je 0x493fad
jmp 0x493f4a
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.user32.dll_TranslateMessage]
lea ecx, [ebp - 0x1c]
push ecx
call dword [sym.imp.user32.dll_DispatchMessageW]
jmp 0x493f4a
call dword [sym.imp.winmm.dll_timeGetTime]
mov dword [ebp - 0x834], eax
movzx edx, byte [0x4ce160]
test edx, edx
jne 0x493ff8
mov eax, dword [ebp - 0x834]
sub eax, dword [0x4ce1e4]
cmp eax, 0x19
jae 0x493ff8
push 1
call dword [sym.imp.kernel32.dll_Sleep]
jmp 0x493f4a
mov ecx, dword [ebp - 0x834]
mov dword [0x4ce1e4], ecx
mov byte [0x4ce160], 0
mov edx, dword [0x4ce18c]
mov eax, dword [edx]
mov ecx, dword [0x4ce18c]
mov edx, dword [eax + 0x50]
call edx
test eax, eax
je 0x494027
jmp 0x493f4a
mov ecx, dword [0x4ce18c]
call fcn.00401110
movzx eax, al
test eax, eax
je 0x49405c
mov ecx, dword [0x4ce18c]
mov edx, dword [ecx]
mov ecx, dword [0x4ce18c]
mov eax, dword [edx + 0x20]
call eax
test eax, eax
je 0x494057
jmp 0x493f4a
call fcn.004764f0
mov ecx, dword [0x4ce190]
call fcn.00479570
movzx ecx, al
test ecx, ecx
jne 0x494094
mov ecx, dword [0x4ce170]
call fcn.0048c2b0
movzx edx, al
test edx, edx
jne 0x494082
jmp 0x4940e8
movzx eax, byte [0x4ce160]
test eax, eax
jne 0x494094
mov byte [0x4ce160], 0
call fcn.00475d60
movzx ecx, al
test ecx, ecx
jne 0x4940e3
mov edx, dword [0x4ce18c]
mov eax, dword [edx]
mov ecx, dword [0x4ce18c]
mov edx, dword [eax + 0x28]
call edx
mov ecx, dword [0x4ce190]
call fcn.00479b00
mov eax, dword [0x4ce18c]
mov edx, dword [eax]
mov ecx, dword [0x4ce18c]
mov eax, dword [edx + 0x38]
call eax
mov ecx, dword [0x4ce18c]
mov edx, dword [ecx]
mov ecx, dword [0x4ce18c]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x493f4a
call dword [sym.imp.ole32.dll_CoUninitialize]
call fcn.00492960
mov ecx, dword [0x4cdd24]
push ecx
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.0041a435
mov esp, ebp
pop ebp
ret 0x10