Function at 0x4df395
Capabilities:
Check mutex on windows

Disassembly:
push 0x7c
mov eax, 0x5f704a
call fcn.0059bbd7
mov esi, edx
mov edi, ecx
push str.03DE87A6_6432_4BFC_9BA7_738379E4CF88
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x78], eax
mov ebx, str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
test eax, eax
je 0x4df54c
cmp esi, 1
jne 0x4df408
push 0x64689c
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
and dword [ebp - 4], 0
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004ce48f
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.0040b67e
mov eax, 0x9ca
cmp esi, 1
lea ecx, [eax + 8]
cmove eax, ecx
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x84], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x80], eax
mov eax, edi
jb 0x4df42c
mov eax, dword [edi]
sub esp, 0x18
mov dword [ebp - 0x7c], eax
mov ecx, esp
push edi
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x44]
call fcn.00435b82
add esp, 0x18
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x4df45c
mov eax, dword [eax]
push eax
push 0x2156
push 0x678984
push str.__s__d__PostMessage_WM_COPYDATA_dotData_s
call fcn.0040a649
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
add esp, 0x10
call fcn.0040b67e
push 0
push 0x3e8
push 2
lea eax, [ebp - 0x84]
push eax
push 0
push 0x4a
push dword [ebp - 0x78]
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
jne 0x4df6e4
cmp esi, 1
jne 0x4df4ee
push 0x6789b0
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.004ce48f
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040b67e
push str.send_
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.0045bbd2
mov byte [ebp - 4], 6
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4df520
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040b220
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0040b67e
push ecx
lea edx, [ebp - 0x5c]
mov ecx, edi
call fcn.004df79d
pop ecx
lea ecx, [ebp - 0x5c]
jmp 0x4df6df
cmp esi, 1
jne 0x4df595
push 0x64dd50
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004ce48f
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040b67e
push str.find_
lea ecx, [ebp - 0x74]
call fcn.0040b0d5
mov dword [ebp - 4], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.0045bbd2
mov byte [ebp - 4], 0xa
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4df5c7
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x74]
call fcn.0040b220
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0040b67e
push str.143359e8_f4b9_4010_a5e5_789147203fa5
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x78], eax
test eax, eax
je 0x4df64f
cmp esi, 1
jne 0x4df641
push 0x678a3c
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004ce48f
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.0040b67e
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, str._hbalive
jmp 0x4df6bf
cmp esi, 1
jne 0x4df695
push 0x678a54
lea ecx, [ebp - 0x44]
call fcn.0040b0d5
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004ce48f
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.0040b67e
push str._hb:1
lea ecx, [ebp - 0x2c]
call fcn.0040b0d5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.004df872
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0040b67e
mov esi, str._hbdead
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b220
push ecx
lea edx, [ebp - 0x74]
mov ecx, edi
call fcn.004df79d
pop ecx
lea ecx, [ebp - 0x74]
call fcn.0040b67e
call fcn.0059bb81
ret