Function at 0x4027a0
Capabilities:
Check mutex on windows

Disassembly:
push 0x38
mov eax, 0x5e794e
call fcn.005bd0d5
mov edi, ecx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x30], edi
push 0x63aab8
push 1
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x683348], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x402be0
mov dword [ebp - 4], ebx
push 0x63aad0
lea ecx, [ebp - 0x34]
call fcn.004030b4
mov byte [ebp - 4], 1
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x6834a0
call fcn.0040215c
mov byte [ebp - 4], 2
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.00402325
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x28], 0xff
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, edi
call fcn.00478778
push ebx
call fcn.004798f5
push 0xc
call fcn.00476eaa
pop ecx
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 4], 3
test ecx, ecx
je 0x40285a
xor eax, eax
mov edi, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.0047a59b
mov edi, dword [ebp - 0x38]
jmp 0x40285c
mov eax, ebx
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x3c], eax
push 0x602d7c
call fcn.00482a0f
mov ecx, edi
call fcn.00402427
mov dword [ebp - 0x20], ebx
push dword [edi + 0x48]
lea ecx, [ebp - 0x20]
call fcn.004030b4
mov byte [ebp - 4], 4
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x18]
call fcn.00402347
mov byte [ebp - 4], 5
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x1c]
call fcn.00402347
mov byte [ebp - 4], 6
lea eax, [ebp - 0x38]
push eax
mov esi, 0x63ab0c
push esi
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x20]
call fcn.00402f8b
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x18]
call fcn.0040215c
mov byte [ebp - 4], 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.00402325
push 0x63abd4
push dword [ebp - 0x18]
call fcn.0040312a
pop ecx
pop ecx
test eax, eax
je 0x4029b9
push ebx
lea ecx, [ebp - 0x18]
call fcn.00402cfe
cmp ax, 0x2d
je 0x402914
push ebx
lea ecx, [ebp - 0x18]
call fcn.00402cfe
cmp ax, 0x2f
jne 0x402950
push 1
push ebx
lea ecx, [ebp - 0x18]
call fcn.00402c80
lea eax, [ebp - 0x38]
push eax
push esi
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x20]
call fcn.00402f8b
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040215c
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.00402325
push 0x63ab10
push dword [ebp - 0x18]
call fcn.005c40f7
pop ecx
pop ecx
test eax, eax
jne 0x40296a
mov ecx, 0x6833b8
jmp 0x402982
push str.referrerid
push dword [ebp - 0x18]
call fcn.005c40f7
pop ecx
pop ecx
test eax, eax
jne 0x40298b
mov ecx, 0x6833c0
lea eax, [ebp - 0x1c]
push eax
call fcn.0040215c
lea eax, [ebp - 0x38]
push eax
push esi
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x20]
call fcn.00402f8b
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x18]
call fcn.0040215c
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x44]
jmp 0x4028d7
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x24]
call fcn.00402347
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x44]
push eax
call fcn.00401e93
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x24]
push ecx
push eax
call fcn.00405d56
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.00402325
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x24]
push eax
call fcn.00406f9a
mov dword [ebp - 4], 0xd
jmp 0x402a20
mov byte [0x6834b0], 1
push ecx
mov esi, esp
mov dword [ebp - 0x30], esp
call fcn.004070ef
push eax
mov ecx, esi
call fcn.0040228c
mov byte [ebp - 4], 0x12
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00401e93
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0xd
call fcn.00405db5
lea eax, [ebp - 0x30]
push eax
call fcn.00401e93
mov byte [ebp - 4], 0x14
push dword [eax]
mov eax, 0x63ab40
push eax
push eax
call fcn.0040346b
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402325
mov ecx, edi
call fcn.00402660
push 0x308
call fcn.00476eaa
pop ecx
mov esi, eax
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 0x16
test esi, esi
je 0x402abd
push 0x308
push ebx
push esi
call fcn.005c0a60
pop ecx
pop ecx
mov ecx, esi
call fcn.004035e6
mov ecx, eax
jmp 0x402abf
mov ecx, ebx
mov byte [ebp - 4], 0xd
mov dword [edi + 0xd4], ecx
mov eax, dword [ecx]
call dword [eax + 0x174]
mov edx, dword [edi + 0xd4]
mov cl, byte [edx + 0x2e6]
test cl, cl
jne 0x402b34
cmp eax, 2
je 0x402b34
mov al, byte [edx + 0x2e4]
test al, al
lea eax, [ebp - 0x30]
push eax
je 0x402b14
call fcn.00401e93
mov byte [ebp - 4], 0x19
push dword [eax]
push 0x63ab68
push 0x63ab5c
call fcn.0040346b
mov byte [ebp - 4], 0x1a
jmp 0x402b56
call fcn.00401e93
mov byte [ebp - 4], 0x1b
push dword [eax]
push 0x63ab74
push 0x63ab5c
call fcn.0040346b
mov byte [ebp - 4], 0x1c
jmp 0x402b56
lea eax, [ebp - 0x30]
push eax
call fcn.00401e93
mov byte [ebp - 4], 0x17
push dword [eax]
push 0x63ab4c
push 0x63ab5c
call fcn.0040346b
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00402325
mov byte [0x6834b1], 1
push ecx
call fcn.00405e36
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x402b80
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [edi + 0xd4]
test ecx, ecx
je 0x402b91
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.00402325
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402325
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00402325
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00402325
or dword [ebp - 4], 0xffffffff
xor eax, eax
call fcn.005bd022
ret