Function at 0x415eda
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
mov eax, dword [0x4b0364]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
push str.Global7E2CBB66_E11A_47A4_BCC5_16451BF021FF
push 1
push 0
mov dword [ebp - 0x194], esi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x416452
cmp eax, 5
je 0x416452
test ebx, ebx
jne 0x415f2f
xor eax, eax
jmp 0x416460
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x415f49
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call fcn.0041c984
pop ecx
jmp 0x415f28
push 0
push str.anysearchtray
lea ecx, [ebp - 0x18d]
call fcn.00412ab3
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.004141bf
pop ecx
push 0
push dword [ebp + 8]
mov ecx, 0x4b5748
push 0
call fcn.004145a1
push esi
call fcn.0040f94e
mov ecx, eax
call fcn.0041c79a
push esi
call fcn.0040f880
mov ecx, eax
call fcn.00411a27
push str.logAnyWhereTray.log
call fcn.0041ccbe
pop ecx
call fcn.00427a00
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
push 0xf
pop edi
sub eax, 1
jne 0x416062
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 0x41
push str.d:jenkins.jenkinsworkspacemgame_bzysearch_searchtraymain.cpp
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.00406824
and dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x4c]
push 3
push 0x48e858
mov dword [ebp - 0x38], edi
mov byte [ebp - 0x4c], 0
call fcn.00406824
call fcn.00427a00
mov edi, eax
lea ecx, [ebp - 0x264]
push 0x33
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0040355d
mov esi, eax
push str.cmd:
push esi
call fcn.0040277d
push dword [ebp - 0x194]
push esi
call fcn.00403efb
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x264]
call fcn.004040b0
lea ecx, [ebp - 0x4c]
call fcn.0040662e
lea ecx, [ebp - 0x1c]
call fcn.0040662e
mov esi, dword [ebp - 0x194]
push 0xf
pop edi
push reloc.OLEAUT32.dll_SysReAllocString
push str.SOFTWAREAnyWhere
push str.AnyWhere.exe
call fcn.0040ab6c
mov ecx, eax
call fcn.0042a6a0
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x64]
push str.http:__s.fishwantg.com_anysearch_pidpidtypetypeactionactionappanysearchappverappvermidmidmid2mid2modvermodver
push eax
call fcn.0042a740
add esp, 0x18
lea eax, [ebp - 0x64]
cmp dword [ebp - 0x50], 8
cmovae eax, dword [ebp - 0x64]
push eax
push str.operate
call fcn.0040dba0
mov ecx, eax
call fcn.0042b110
sub esp, 0x28
xor ecx, ecx
mov eax, esp
push ecx
push ecx
push 1
push ecx
push 0x4904a8
mov dword [eax + 0x24], ecx
call fcn.0040dba0
mov ecx, eax
call fcn.0042b160
and dword [ebp - 0x3c], 0
xor eax, eax
and dword [ebp - 0xc], eax
push 7
pop ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 8], ecx
lea ecx, [ebp - 0x1c]
push 0x48f99c
mov word [ebp - 0x4c], ax
mov word [ebp - 0x1c], ax
call fcn.004068b8
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040f880
mov ecx, eax
call fcn.004118c4
lea ecx, [ebp - 0x1c]
call fcn.00406654
push str.task
lea ecx, [ebp - 0x4c]
call fcn.004114f2
test al, al
jne 0x41614b
push 0x48fa9c
lea ecx, [ebp - 0x4c]
call fcn.004114f2
test al, al
jne 0x41614b
push 0x48fab0
lea ecx, [ebp - 0x4c]
call fcn.004114f2
test al, al
je 0x416222
call fcn.0040aa54
mov ecx, eax
call fcn.00412248
test eax, eax
jne 0x416222
call fcn.00427a00
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x4161f9
and dword [ebp - 0x24], eax
lea ecx, [ebp - 0x34]
push 0x41
push str.d:jenkins.jenkinsworkspacemgame_bzysearch_searchtraymain.cpp
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], al
call fcn.00406824
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x48e858
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
call fcn.00406824
call fcn.00427a00
mov edi, eax
lea ecx, [ebp - 0x264]
push 0x45
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040355d
mov esi, eax
push str.user_do_not_autorun__exit
push esi
call fcn.0040277d
mov eax, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x264]
call fcn.004040b0
lea ecx, [ebp - 0x1c]
call fcn.0040662e
lea ecx, [ebp - 0x34]
call fcn.0040662e
sub esp, 0x28
xor ecx, ecx
mov eax, esp
push ecx
push str.autoitem
push 1
push ecx
push str.autooff
mov dword [eax + 0x24], ecx
call fcn.0040dba0
mov ecx, eax
call fcn.0042b160
jmp 0x416421
push esi
call fcn.0041ca53
pop ecx
test eax, eax
jne 0x4162f3
sub esp, 0x28
xor ecx, ecx
mov eax, esp
push ecx
push str.autoitem
push ecx
push ecx
push str.no_active
mov dword [eax + 0x24], ecx
call fcn.0040dba0
mov ecx, eax
call fcn.0042b160
call fcn.00427a00
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x416421
and dword [ebp - 0xc], eax
lea ecx, [ebp - 0x1c]
push 0x41
push str.d:jenkins.jenkinsworkspacemgame_bzysearch_searchtraymain.cpp
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], al
call fcn.00406824
and dword [ebp - 0x24], 0
lea ecx, [ebp - 0x34]
push 3
push 0x48e858
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], 0
call fcn.00406824
call fcn.00427a00
mov edi, eax
lea ecx, [ebp - 0x264]
push 0x4d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040355d
mov esi, eax
push str.CheckEnableAutoRun_False__exit
push esi
call fcn.0040277d
mov eax, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x264]
call fcn.004040b0
lea ecx, [ebp - 0x34]
call fcn.0040662e
lea ecx, [ebp - 0x1c]
call fcn.0040662e
jmp 0x416421
call fcn.0041423f
test al, al
je 0x4163a3
call fcn.00427a00
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x41639a
and dword [ebp - 0xc], eax
lea ecx, [ebp - 0x1c]
push 0x41
push str.d:jenkins.jenkinsworkspacemgame_bzysearch_searchtraymain.cpp
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], al
call fcn.00406824
and dword [ebp - 0x24], 0
lea ecx, [ebp - 0x34]
push 3
push 0x48e858
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], 0
call fcn.00406824
call fcn.00427a00
mov edi, eax
lea ecx, [ebp - 0x264]
push 0x53
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040355d
mov esi, eax
push str.update__exit
push esi
call fcn.0040277d
mov eax, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x264]
call fcn.004040b0
lea ecx, [ebp - 0x34]
call fcn.0040662e
lea ecx, [ebp - 0x1c]
call fcn.0040662e
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x416421
and dword [ebp - 0x1b8], 0
lea eax, [ebp - 0x1cc]
and dword [ebp - 0x1b4], 0
xorps xmm0, xmm0
mov esi, 0x4b5748
mov dword [ebp - 0x1cc], 0x49026c
push eax
mov ecx, esi
movups xmmword [ebp - 0x1c8], xmm0
call fcn.00413b7c
lea ecx, [ebp - 0x18c]
call fcn.0040eede
lea ecx, [ebp - 0x18c]
call fcn.0040fa80
lea ecx, [ebp - 0x1cc]
call fcn.004157d2
mov ecx, esi
call fcn.00415682
lea ecx, [ebp - 0x18c]
call fcn.0040f01f
lea ecx, [ebp - 0x1bc]
call fcn.004024ec
lea ecx, [ebp - 0x1c8]
call fcn.004024ec
lea ecx, [ebp - 0x4c]
call fcn.00406654
call fcn.00415562
call fcn.0041552c
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x64]
call fcn.00406654
lea ecx, [ebp - 0x18d]
call fcn.00406470
jmp 0x415f28
test ebx, ebx
je 0x41645d
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043bcea
leave
ret 0x10