Function at 0x40ae60
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4617b9
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47c824]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x5c]
push eax
call fcn.0040c600
xor ebx, ebx
push 0x400
push ebx
push 0x481238
mov dword [esp + 0x1a4], ebx
call fcn.00445a00
add esp, 0xc
call fcn.00415540
cmp al, 1
mov byte [0x481230], al
lea ebp, [ebx + 0xf]
jne 0x40af07
sub esp, 0x1c
mov esi, esp
mov eax, 0x481238
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
mov dword [esp + 0x34], esp
mov byte [esi + 4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40aee6
sub eax, edx
push eax
push 0x481238
mov ecx, esi
call fcn.004017f0
lea ecx, [esp + 0x78]
call fcn.0040d400
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x480dd0
call esi
push 0x480de8
call esi
mov ecx, edi
call fcn.0040b450
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
lea esi, [edi + 0xa8]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push esi
mov byte [ecx + 4], bl
call fcn.004015b0
mov byte [esp + 0x1b4], 1
call fcn.0040a8d0
push eax
mov byte [esp + 0x1b8], bl
call fcn.00401df0
call fcn.0040a8d0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
add eax, 0xb0
push ebx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.004015b0
push ecx
mov byte [esp + 0x1b8], 2
call fcn.00405940
add esp, 4
push eax
mov byte [esp + 0x1b8], bl
call fcn.0040a860
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push esi
mov byte [ecx + 4], bl
call fcn.004015b0
push ecx
mov byte [esp + 0x1b8], 3
call fcn.00405940
add esp, 4
mov ecx, eax
mov byte [esp + 0x1b4], bl
call fcn.00406b20
cmp byte [0x481230], 1
jne 0x40aff1
call fcn.0040a8d0
push 0x38
push str.http:__cdn.u1wan.com_dfxj_q360_360launch_360luncher.html
jmp 0x40affd
call fcn.0040a8d0
push 0x26
push str.http:__dfxj.wan.360.cn_zonelist_s.html
add eax, 0xcc
mov ecx, eax
call fcn.004017f0
push str.DEC9B843_4B30_4EA6_AE5F_1A22D5323ABB
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [edi + 0xa4], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x40b0cd
push 2
push ecx
call fcn.00405940
add esp, 4
lea edi, [esp + 0x44]
call fcn.00407270
mov esi, eax
push 1
push ecx
mov byte [esp + 0x1a0], 4
call fcn.00405940
add esp, 4
lea edi, [esp + 0x28]
call fcn.00407270
mov edi, 0x10
cmp dword [esi + 0x18], edi
jb 0x40b06e
mov esi, dword [esi + 4]
jmp 0x40b071
add esi, 4
cmp dword [eax + 0x18], edi
jb 0x40b07b
mov eax, dword [eax + 4]
jmp 0x40b07e
add eax, 4
push ebx
push esi
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [esp + 0x3c], edi
jb 0x40b09b
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00420ede
add esp, 4
cmp dword [esp + 0x58], edi
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
jb 0x40b0ba
mov edx, dword [esp + 0x44]
push edx
call fcn.00420ede
add esp, 4
lea eax, [esp + 0x5c]
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
push eax
jmp 0x40b132
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x20], 8
mov dword [esp + 0x24], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, edi
call fcn.00424eaf
push ebx
call fcn.0042650a
test eax, eax
jne 0x40b10a
push 0xffffffffffffffff
push ebx
push 0x67
call fcn.00426adf
lea edx, [esp + 0x5c]
push edx
jmp 0x40b132
push ebx
call fcn.00425ed3
add esp, 4
push str.Local_AppWizard_Generated_Applications
mov ecx, edi
call fcn.00426e76
lea eax, [esp + 0x5c]
mov ecx, eax
mov dword [edi + 0x20], eax
call fcn.004277ac
lea ecx, [esp + 0x5c]
push ecx
mov dword [esp + 0x19c], 0xffffffff
call fcn.0040b160
xor eax, eax
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret