Function at 0x4145ff
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6a8
mov eax, dword [0x5766c0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
push 0x5361b0
push 1
push 0
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
mov dword [ebp - 0x660], ebx
test ebx, ebx
je 0x414769
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x414769
push edi
lea ecx, [ebp - 0x4c]
call fcn.00407ad0
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0xcc]
cmovae eax, dword [ebp - 0x4c]
push 3
mov dword [ebp - 0xd0], ecx
lea ecx, [ebp - 0xd0]
push eax
call fcn.00412b42
mov ecx, dword [ebp - 0xd0]
and dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41469d
sub ecx, edx
push ecx
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x34]
call fcn.0040ae55
lea eax, [ebp - 0xcc]
cmp dword [ebp - 0xd0], eax
je 0x4146cf
push dword [ebp - 0xd0]
call fcn.004fe1f1
pop ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push str.downloadWeb:
push eax
call fcn.00411c7a
add esp, 0xc
lea ecx, [ebp - 0x34]
push eax
call fcn.00411f19
lea ecx, [ebp - 0x1c]
call fcn.0040ac5f
push edi
call fcn.0040d9b8
mov ecx, eax
call fcn.0040ffcf
xor eax, eax
mov dword [ebp - 8], 7
xor esi, esi
mov word [ebp - 0x1c], ax
push str.autorun
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], esi
call fcn.0040aee9
lea eax, [ebp - 0x1c]
push esi
push eax
call fcn.0040d9b8
mov ecx, eax
call fcn.0040fe78
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.0040ac85
test esi, esi
jne 0x41474a
lea eax, [ebp - 0x34]
push eax
call fcn.0040c3c7
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x34]
call fcn.0040ac5f
lea ecx, [ebp - 0x4c]
call fcn.0040ac85
xor eax, eax
inc eax
jmp 0x414ddd
push str.pcstore_tray.log
call fcn.0041d856
pop ecx
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x414838
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.004283f0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x41482c
and dword [ebp - 0x24], eax
lea ecx, [ebp - 0x34]
push 0xf
pop ebx
push 0x3c
push str.d:jenkins.jenkinsworkspacepcstorepcstoretray_2main.cpp
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x34], al
call fcn.0040ae55
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x534ba4
mov dword [ebp - 8], ebx
mov byte [ebp - 0x1c], 0
call fcn.0040ae55
call fcn.004283f0
mov edi, eax
lea ecx, [ebp - 0xe4]
push 0x28
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407b91
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.00406db1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xe4]
call fcn.004086ea
lea ecx, [ebp - 0x1c]
call fcn.0040ac5f
lea ecx, [ebp - 0x34]
call fcn.0040ac5f
mov edi, dword [ebp - 0x664]
push edi
call fcn.0041ccc6
pop ecx
jmp 0x414ddb
call fcn.004283f0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
push 0xf
pop ebx
sub eax, 1
jne 0x4148dd
and dword [ebp - 0x24], 0
lea ecx, [ebp - 0x34]
push 0x3c
push str.d:jenkins.jenkinsworkspacepcstorepcstoretray_2main.cpp
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x34], 0
call fcn.0040ae55
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0x1c]
push 3
push 0x534ba4
mov dword [ebp - 8], ebx
mov byte [ebp - 0x1c], 0
call fcn.0040ae55
call fcn.004283f0
mov edi, eax
lea ecx, [ebp - 0xe4]
push 0x2e
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407b91
mov esi, eax
push str.run_in_admin
push esi
call fcn.00406db1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xe4]
call fcn.004086ea
lea ecx, [ebp - 0x1c]
call fcn.0040ac5f
lea ecx, [ebp - 0x34]
call fcn.0040ac5f
mov edi, dword [ebp - 0x664]
xor esi, esi
lea ecx, [ebp - 0x659]
push esi
push str.storetray
call fcn.00411041
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.00412707
pop ecx
push esi
push dword [ebp - 0x668]
mov ecx, 0x57ce78
push esi
call fcn.00412c21
push edi
call fcn.0040d9b8
mov ecx, eax
call fcn.0040ffcf
call fcn.004283f0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x4149d6
and dword [ebp - 0x24], esi
lea ecx, [ebp - 0x34]
push 0x3c
push str.d:jenkins.jenkinsworkspacepcstorepcstoretray_2main.cpp
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x34], al
call fcn.0040ae55
and dword [ebp - 0xc], esi
lea ecx, [ebp - 0x1c]
push 3
push 0x534ba4
mov dword [ebp - 8], ebx
mov byte [ebp - 0x1c], 0
call fcn.0040ae55
call fcn.004283f0
mov edi, eax
lea ecx, [ebp - 0xe4]
push 0x37
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407b91
mov esi, eax
push str.cmd:
push esi
call fcn.00406db1
push dword [ebp - 0x664]
push esi
call fcn.00408535
mov edx, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xe4]
call fcn.004086ea
lea ecx, [ebp - 0x1c]
call fcn.0040ac5f
lea ecx, [ebp - 0x34]
call fcn.0040ac5f
mov edi, dword [ebp - 0x664]
push str.http:__s.ludashi.com_store_pidpidtypetypeactionactionappappappverappvermidmidmid2mid2modvermodver
lea ecx, [ebp - 0x670]
call fcn.00405da2
mov eax, dword [ebp - 0x670]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00410cd8
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x66c]
pop ecx
push eax
call fcn.00419d4b
pop ecx
pop ecx
push dword [ebp - 0x66c]
xor esi, esi
push str.tray
push esi
call fcn.0040db54
mov ecx, eax
call fcn.00429e10
push dword [ebp - 0x668]
call fcn.00448d30
lea eax, [ebp - 0x168]
push eax
call fcn.00444730
pop ecx
pop ecx
push str.skin
lea ecx, [ebp - 0x168]
call fcn.00441690
lea ecx, [ebp - 0x168]
call fcn.004159b0
push eax
call fcn.00448fb0
push 1
push str.pctray.zip
call fcn.00449070
add esp, 0xc
mov dword [ebp - 0x24], esi
xor eax, eax
mov dword [ebp - 0xc], esi
mov word [ebp - 0x34], ax
mov word [ebp - 0x1c], ax
push 7
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 8], ecx
lea ecx, [ebp - 0x1c]
push 0x535844
call fcn.0040aee9
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040d9b8
mov ecx, eax
call fcn.0040fe6c
lea ecx, [ebp - 0x1c]
call fcn.0040ac85
push str.task
lea ecx, [ebp - 0x34]
call fcn.0040f836
test al, al
jne 0x414ae8
push 0x536414
lea ecx, [ebp - 0x34]
call fcn.0040f836
test al, al
jne 0x414ae8
push 0x53641c
lea ecx, [ebp - 0x34]
call fcn.0040f836
test al, al
je 0x414bb2
call fcn.0040da1f
mov ecx, eax
call fcn.0041065f
test eax, eax
jne 0x414bb2
call fcn.004283f0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x414b91
and dword [ebp - 0x3c], esi
lea ecx, [ebp - 0x4c]
push 0x3c
push str.d:jenkins.jenkinsworkspacepcstorepcstoretray_2main.cpp
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x4c], al
call fcn.0040ae55
and dword [ebp - 0xc], esi
lea ecx, [ebp - 0x1c]
push 3
push 0x534ba4
mov dword [ebp - 8], ebx
mov byte [ebp - 0x1c], 0
call fcn.0040ae55
call fcn.004283f0
mov edi, eax
lea ecx, [ebp - 0xe4]
push 0x51
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407b91
mov esi, eax
push str.user_do_not_autorun__exit
push esi
call fcn.00406db1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xe4]
call fcn.004086ea
lea ecx, [ebp - 0x1c]
call fcn.0040ac5f
lea ecx, [ebp - 0x4c]
call fcn.0040ac5f
push 0
push str.autoitem
push 1
push 0
push str.autooff
call fcn.0040db54
mov ecx, eax
call fcn.00429e30
jmp 0x414d8f
push edi
call fcn.0041d48a
pop ecx
test eax, eax
jne 0x414c5f
call fcn.004283f0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x414d8f
and dword [ebp - 0xc], esi
lea ecx, [ebp - 0x1c]
push 0x3c
push str.d:jenkins.jenkinsworkspacepcstorepcstoretray_2main.cpp
mov dword [ebp - 8], ebx
mov byte [ebp - 0x1c], al
call fcn.0040ae55
and dword [ebp - 0x3c], esi
lea ecx, [ebp - 0x4c]
push 3
push 0x534ba4
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x4c], 0
call fcn.0040ae55
call fcn.004283f0
mov edi, eax
lea ecx, [ebp - 0xe4]
push 0x58
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00407b91
mov esi, eax
push str.CheckEnableAutoRun_False__exit
push esi
call fcn.00406db1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xe4]
call fcn.004086ea
lea ecx, [ebp - 0x4c]
call fcn.0040ac5f
lea ecx, [ebp - 0x1c]
call fcn.0040ac5f
jmp 0x414d8f
call fcn.004127a2
test al, al
je 0x414d13
call fcn.004283f0
push 1
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 8]
movzx eax, al
sub eax, 1
jne 0x414d01
and dword [ebp - 0xc], esi
lea ecx, [ebp - 0x1c]
push 0x3c
push str.d:jenkins.jenkinsworkspacepcstorepcstoretray_2main.cpp
mov dword [ebp - 8], ebx
mov byte [ebp - 0x1c], al
call fcn.0040ae55
and dword [ebp - 0x3c], esi
lea ecx, [ebp - 0x4c]
push 3
push 0x534ba4
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x4c], 0
call fcn.0040ae55
call fcn.004283f0
mov edi, eax
lea ecx, [ebp - 0xe4]
push 0x5e
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00407b91
mov esi, eax
push str.update__exit
push esi
call fcn.00406db1
mov edx, dword [edi]
pop ecx
pop ecx
push esi
mov ecx, edi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xe4]
call fcn.004086ea
lea ecx, [ebp - 0x4c]
call fcn.0040ac5f
lea ecx, [ebp - 0x1c]
call fcn.0040ac5f
mov esi, dword [ebp - 0x660]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x414d95
and dword [ebp - 0x694], esi
lea eax, [ebp - 0x6a8]
and dword [ebp - 0x690], esi
xorps xmm0, xmm0
mov esi, 0x57ce78
mov dword [ebp - 0x6a8], 0x5361a8
push eax
mov ecx, esi
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004120c4
lea ecx, [ebp - 0x658]
call fcn.0040cdf3
lea ecx, [ebp - 0x658]
call fcn.0040dc53
lea ecx, [ebp - 0x6a8]
call fcn.00413e0f
mov ecx, esi
call fcn.00413cbf
lea ecx, [ebp - 0x658]
call fcn.0040d034
lea ecx, [ebp - 0x698]
call fcn.00406b1c
lea ecx, [ebp - 0x6a4]
call fcn.00406b1c
mov esi, dword [ebp - 0x660]
lea ecx, [ebp - 0x34]
call fcn.0040ac85
call fcn.00413bac
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x168]
call fcn.00441350
mov ecx, dword [ebp - 0x66c]
lea ecx, [ecx - 0x10]
call fcn.00406ad8
mov ecx, dword [ebp - 0x670]
lea ecx, [ecx - 0x10]
call fcn.00406ad8
lea ecx, [ebp - 0x659]
call fcn.00406cc0
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004b77e0
leave
ret 0x10