Function at 0x479a40
Capabilities:
Check mutex on windows
Extract resource via kernel32 functions
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x698
mov eax, dword [0x63f070]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x534], str.debug
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x530], eax
mov ecx, dword [ebp - 0x530]
mov dx, word [ecx]
mov word [ebp - 0x53a], dx
mov eax, dword [ebp - 0x534]
cmp dx, word [eax]
jne 0x479acc
cmp word [ebp - 0x53a], 0
je 0x479ac0
mov ecx, dword [ebp - 0x530]
mov dx, word [ecx + 2]
mov word [ebp - 0x53c], dx
mov eax, dword [ebp - 0x534]
cmp dx, word [eax + 2]
jne 0x479acc
add dword [ebp - 0x530], 4
add dword [ebp - 0x534], 4
cmp word [ebp - 0x53c], 0
jne 0x479a66
mov dword [ebp - 0x54c], 0
jmp 0x479ad7
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x54c], ecx
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0x590], edx
cmp dword [ebp - 0x590], 0
jne 0x479af1
call fcn.004796c0
push str.test
call fcn.00476460
add esp, 4
push 0x605e34
push 0x8a
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.DLL_FindResourceW]
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0
je 0x479f13
mov ecx, dword [ebp - 0x538]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.DLL_LoadResource]
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0
je 0x479f13
mov eax, dword [ebp - 0x538]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
je 0x479f13
push 0
mov edx, dword [ebp - 0x550]
push edx
mov eax, dword [ebp - 0x554]
push eax
call dword [sym.imp.KERNEL32.DLL_LockResource]
push eax
call fcn.004d224e
add esp, 0xc
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0
je 0x479f13
push 0x605dec
lea ecx, [ebp - 0x594]
call fcn.00412800
lea ecx, [ebp - 0x514]
push ecx
lea edx, [ebp - 0x59c]
push edx
push 1
mov eax, dword [ebp - 0x594]
push eax
mov ecx, dword [ebp - 0x528]
push ecx
call fcn.004d1c34
add esp, 0x14
mov dword [ebp - 0x5b4], eax
mov edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x558], edx
mov eax, dword [ebp - 0x558]
push eax
call fcn.004a74f9
add esp, 4
mov dword [ebp - 0x598], eax
mov ecx, dword [ebp - 0x598]
mov dword [ebp - 0x520], ecx
mov edx, dword [ebp - 0x558]
push edx
mov eax, dword [ebp - 0x520]
push eax
mov ecx, dword [ebp - 0x59c]
push ecx
mov edx, dword [ebp - 0x528]
push edx
call fcn.004d26a5
add esp, 0x10
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x520]
add eax, 3
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
push ecx
lea ecx, [ebp - 0x29c]
call fcn.00411850
push 0
push str.Downloader_id
lea ecx, [ebp - 0x29c]
call fcn.00429f70
mov dword [ebp - 0x5a0], eax
mov edx, dword [ebp - 0x5a0]
push edx
push 0x605e80
lea ecx, [ebp - 0x29c]
call fcn.00429f70
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
add eax, 2
push eax
push 0x605e84
lea ecx, [ebp - 0x29c]
call fcn.00429f70
mov dword [ebp - 0x5a4], eax
mov ecx, dword [ebp - 0x5a4]
sub ecx, dword [ebp - 0x540]
sub ecx, 2
push ecx
mov edx, dword [ebp - 0x540]
add edx, 2
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x29c]
call fcn.00429ef0
call fcn.004aa6ac
movzx ecx, al
test ecx, ecx
jne 0x479cef
mov edx, dword [ebp - 0x528]
push edx
call fcn.004d1a17
add esp, 4
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x5a8]
push ecx
call fcn.004a729f
add esp, 4
mov dword [ebp - 0x520], 0
mov edx, dword [ebp - 0x538]
push edx
call dword [sym.imp.KERNEL32.DLL_FreeResource]
call fcn.0041ce50
mov dword [ebp - 0x578], eax
lea ecx, [ebp - 0x2e4]
call fcn.00411740
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0
jne 0x479d55
mov dword [ebp - 0x560], 0
jmp 0x479e0d
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
add ecx, 1
mov dword [ebp - 0x570], ecx
mov edx, dword [ebp - 0x524]
mov al, byte [edx]
mov byte [ebp - 0x519], al
add dword [ebp - 0x524], 1
cmp byte [ebp - 0x519], 0
jne 0x479d70
mov ecx, dword [ebp - 0x524]
sub ecx, dword [ebp - 0x570]
mov dword [ebp - 0x574], ecx
mov edx, dword [ebp - 0x574]
add edx, 1
mov dword [ebp - 0x544], edx
cmp dword [ebp - 0x544], 0x3fffffff
jle 0x479dc7
mov dword [ebp - 0x55c], 0
jmp 0x479e01
mov eax, dword [ebp - 0x544]
shl eax, 1
call fcn.004a7960
mov dword [ebp - 0x57c], esp
mov eax, dword [ebp - 0x578]
push eax
mov ecx, dword [ebp - 0x544]
push ecx
mov edx, dword [ebp - 0x548]
push edx
mov eax, dword [ebp - 0x57c]
push eax
call fcn.0041ce60
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
mov dword [ebp - 0x560], ecx
mov edx, dword [ebp - 0x560]
push edx
lea ecx, [ebp - 0x2cc]
call fcn.00418610
lea eax, [ebp - 0x2cc]
push eax
push str.TS_UI_Frame_
lea ecx, [ebp - 0x2b4]
push ecx
call fcn.004740d0
add esp, 0xc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5b0], esp
lea edx, [ebp - 0x2b4]
push edx
call fcn.004138a0
call fcn.00487680
add esp, 0x18
push 0
lea ecx, [ebp - 0x2b4]
call fcn.00413640
push eax
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x564], eax
call fcn.00487b30
movzx eax, al
test eax, eax
jne 0x479ed8
cmp dword [ebp - 0x564], 0
je 0x479ed8
push 1
mov ecx, dword [ebp - 0x564]
push ecx
call dword [sym.imp.USER32.dll_SwitchToThisWindow]
mov dword [ebp - 0x580], 0
lea ecx, [ebp - 0x2b4]
call fcn.00413710
lea ecx, [ebp - 0x2cc]
call fcn.00413710
lea ecx, [ebp - 0x2e4]
call fcn.00411780
lea ecx, [ebp - 0x29c]
call fcn.00411780
mov eax, dword [ebp - 0x580]
jmp 0x47a275
mov edx, dword [ebp - 0x528]
push edx
call fcn.004d1a17
add esp, 4
lea ecx, [ebp - 0x2b4]
call fcn.00413710
lea ecx, [ebp - 0x2cc]
call fcn.00413710
lea ecx, [ebp - 0x2e4]
call fcn.00411780
lea ecx, [ebp - 0x29c]
call fcn.00411780
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 0
jge 0x479f31
xor eax, eax
jmp 0x47a275
mov eax, dword [ebp + 8]
push eax
call fcn.004aec03
add esp, 4
call fcn.00479740
push 0x100
lea ecx, [ebp - 0x284]
push ecx
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea edx, [ebp - 0x284]
push edx
call fcn.00482a60
add esp, 4
mov dword [ebp - 0x5b8], eax
push 0xab8
call fcn.004a6eec
add esp, 4
mov dword [ebp - 0x588], eax
mov ecx, dword [ebp - 0x588]
call fcn.00456af0
mov dword [ebp - 0x568], eax
jmp 0x479f9b
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0x58c]
mov dword [ebp - 0x518], ecx
cmp dword [ebp - 0x518], 0
jne 0x479fc3
xor eax, eax
jmp 0x47a275
push 0
push 0x190
push 0x258
push 0
push 0
push 0
push 0x800a0000
push 0x605e60
push 0
mov ecx, dword [ebp - 0x518]
call fcn.004b44e2
mov ecx, dword [ebp - 0x518]
call fcn.00467030
mov dword [ebp - 0x56c], eax
xor edx, edx
mov word [ebp - 0x84], dx
push 0x7e
push 0
lea eax, [ebp - 0x82]
push eax
call fcn.0057a870
add esp, 0xc
mov ecx, dword [ebp - 0x56c]
push ecx
push str.AFS_Downloader__d
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x84]
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.DLL_CreateMutexW]
mov dword [ebp - 0x52c], eax
mov ecx, dword [ebp - 0x52c]
push ecx
call fcn.004876e0
add esp, 4
call fcn.00487b30
movzx edx, al
test edx, edx
jne 0x47a0e2
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0xb7
jne 0x47a0e2
lea eax, [ebp - 0x56c]
push eax
push str._Already_exist_instance__id_is:
mov ecx, dword [0x6401b0]
push ecx
push 1
push 0
push 2
push 0x605f18
push 0xa7
push 0x605e88
push 0x80
lea ecx, [ebp - 0x698]
call fcn.00422610
push eax
call fcn.004226f0
add esp, 0xc
mov ecx, eax
call fcn.0043ac80
mov ecx, eax
call fcn.0043ad40
lea ecx, [ebp - 0x698]
call fcn.00422690
mov edx, dword [ebp - 0x52c]
push edx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
xor eax, eax
jmp 0x47a275
push 0
mov ecx, dword [ebp - 0x518]
call fcn.0046d350
movzx eax, al
test eax, eax
je 0x47a135
push 0
push 0xe
mov ecx, dword [ebp - 0x518]
call fcn.00465810
push 0
push 0x5e4893
push str.CountryStartupForbided
push 0x605f68
call fcn.0048be70
mov ecx, eax
call fcn.0048bf10
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x518]
call fcn.004b4947
jmp 0x47a154
mov ecx, dword [ebp - 0x518]
call fcn.004b4363
push 1
push 1
mov ecx, dword [ebp - 0x518]
call fcn.004b4ac7
call fcn.004aceee
push str._Wait_exit_1
mov ecx, dword [0x6401b0]
push ecx
push 1
push 0
push 2
push 0x605f70
push 0xba
push 0x606028
push 0x80
lea ecx, [ebp - 0x5f0]
call fcn.00422610
push eax
call fcn.004226f0
add esp, 0xc
mov ecx, eax
call fcn.0043ac80
lea ecx, [ebp - 0x5f0]
call fcn.00422690
call fcn.004af0ed
mov edx, dword [ebp - 0x52c]
push edx
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
mov eax, dword [ebp - 0x52c]
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebp - 0x52c], 0
push str._Wait_exit_2
mov ecx, dword [0x6401b0]
push ecx
push 1
push 0
push 2
push 0x605fd8
push 0xc9
push 0x605ef4
push 0x80
lea ecx, [ebp - 0x628]
call fcn.00422610
push eax
call fcn.004226f0
add esp, 0xc
mov ecx, eax
call fcn.0043ac80
lea ecx, [ebp - 0x628]
call fcn.00422690
call fcn.0048be70
mov ecx, eax
call fcn.0048ca40
push str._Wait_exit_3
mov edx, dword [0x6401b0]
push edx
push 1
push 0
push 2
push str.int___stdcall_wWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
push 0xcb
push str........._srcCommonwWndMain.cpp
push 0x80
lea ecx, [ebp - 0x660]
call fcn.00422610
push eax
call fcn.004226f0
add esp, 0xc
mov ecx, eax
call fcn.0043ac80
lea ecx, [ebp - 0x660]
call fcn.00422690
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
lea esp, [ebp - 0x698]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a6edb
mov esp, ebp
pop ebp
ret 0x10