Function at 0x406ee0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4c]
push ecx
push 0x43adc8
push 0
push 0
call fcn.00407780
add esp, 0x10
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
add edx, 1
push edx
call fcn.00416a09
add esp, 4
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4c]
push edx
push 0x43ade0
mov eax, dword [ebp - 0x10]
push eax
call fcn.00407840
add esp, 0xc
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x30]
test edx, edx
jne 0x4070aa
mov eax, dword [ebp - 0x10]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x40702d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xb7
je 0x406f76
cmp dword [ebp - 0x14], 5
jne 0x406fa2
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x5c], 0
je 0x406fa0
mov edx, dword [ebp - 4]
cmp dword [edx + 0x48], 0
je 0x406fa0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x48]
push ecx
push 0x43adf8
mov edx, dword [ebp - 4]
push edx
call fcn.00406ae0
add esp, 0xc
jmp 0x407017
push 0x43ae08
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x48]
push ecx
call fcn.00407760
add esp, 8
test eax, eax
je 0x406fe6
mov edx, dword [ebp - 4]
cmp dword [edx + 0x5c], 0
je 0x406fe4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x48], 0
je 0x406fe4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x48]
push edx
push 0x43ae18
mov eax, dword [ebp - 4]
push eax
call fcn.00406ae0
add esp, 0xc
jmp 0x407017
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x48]
push edx
push 0x43ae28
mov eax, dword [ebp - 4]
push eax
call fcn.00406ae0
add esp, 0xc
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4070aa
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40709a
push 0x43ae98
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x48]
push eax
call fcn.00407760
add esp, 8
test eax, eax
jne 0x407054
mov ecx, dword [ebp - 4]
call fcn.00407280
movzx ecx, al
test ecx, ecx
je 0x407080
mov edx, dword [ebp - 4]
cmp dword [edx + 0x5c], 0
je 0x40707e
mov eax, dword [ebp - 4]
cmp dword [eax + 0x48], 0
je 0x40707e
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x48]
push edx
push 0x43aea8
mov eax, dword [ebp - 4]
push eax
call fcn.00406ae0
add esp, 0xc
jmp 0x40709a
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x48]
push edx
push 0x43aeb8
mov eax, dword [ebp - 4]
push eax
call fcn.00406ae0
add esp, 0xc
jmp 0x4070aa
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x406f34
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x48]
push edx
push 0x43af14
mov eax, dword [ebp - 4]
push eax
call fcn.00406ae0
add esp, 0xc
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x30]
test edx, edx
jne 0x407166
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x48]
push ecx
push 0x43af38
mov edx, dword [ebp - 4]
push edx
call fcn.00406ae0
add esp, 0xc
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x58]
test ecx, ecx
jne 0x407116
push 0x43af60
mov edx, dword [ebp - 4]
push edx
call fcn.00406ae0
add esp, 8
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x407166
push 0x43af78
mov eax, dword [ebp - 4]
push eax
call fcn.00406ae0
add esp, 8
mov ecx, dword [ebp - 4]
add ecx, 0x3c
call fcn.00407730
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xc]
sub edx, 1
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0x20], 0
jbe 0x407166
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x3c
call fcn.00407620
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
jmp 0x407135
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x24], edx
push 1
mov eax, dword [ebp - 0x24]
push eax
call fcn.004169fb
add esp, 8
mov esp, ebp
pop ebp
ret