Function at 0x1400488c0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Print debug messages
Terminate process

Disassembly:
sub rsp, 0xc8
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x140048b87
mov eax, 0x53
mov word [rsp + 0x68], ax
mov eax, 0x6f
mov word [rsp + 0x6a], ax
mov eax, 0x66
mov word [rsp + 0x6c], ax
mov eax, 0x74
mov word [rsp + 0x6e], ax
mov eax, 0x77
mov word [rsp + 0x70], ax
mov eax, 0x61
mov word [rsp + 0x72], ax
mov eax, 0x72
mov word [rsp + 0x74], ax
mov eax, 0x65
mov word [rsp + 0x76], ax
mov eax, 0x5c
mov word [rsp + 0x78], ax
mov eax, 0x54
mov word [rsp + 0x7a], ax
mov eax, 0x65
mov word [rsp + 0x7c], ax
mov eax, 0x6e
mov word [rsp + 0x7e], ax
mov eax, 0x63
mov word [rsp + 0x80], ax
mov eax, 0x65
mov word [rsp + 0x82], ax
mov eax, 0x6e
mov word [rsp + 0x84], ax
mov eax, 0x74
mov word [rsp + 0x86], ax
mov eax, 0x5c
mov word [rsp + 0x88], ax
mov eax, 0x57
mov word [rsp + 0x8a], ax
mov eax, 0x65
mov word [rsp + 0x8c], ax
mov eax, 0x43
mov word [rsp + 0x8e], ax
mov eax, 0x68
mov word [rsp + 0x90], ax
mov eax, 0x61
mov word [rsp + 0x92], ax
mov eax, 0x74
mov word [rsp + 0x94], ax
xor eax, eax
mov word [rsp + 0x96], ax
mov eax, 0x53
mov word [rsp + 0x40], ax
mov eax, 0x6f
mov word [rsp + 0x42], ax
mov eax, 0x66
mov word [rsp + 0x44], ax
mov eax, 0x74
mov word [rsp + 0x46], ax
mov eax, 0x77
mov word [rsp + 0x48], ax
mov eax, 0x61
mov word [rsp + 0x4a], ax
mov eax, 0x72
mov word [rsp + 0x4c], ax
mov eax, 0x65
mov word [rsp + 0x4e], ax
mov eax, 0x5c
mov word [rsp + 0x50], ax
mov eax, 0x44
mov word [rsp + 0x52], ax
mov eax, 0x69
mov word [rsp + 0x54], ax
mov eax, 0x6e
mov word [rsp + 0x56], ax
mov eax, 0x67
mov word [rsp + 0x58], ax
mov eax, 0x54
mov word [rsp + 0x5a], ax
mov eax, 0x61
mov word [rsp + 0x5c], ax
mov eax, 0x6c
mov word [rsp + 0x5e], ax
mov eax, 0x6b
mov word [rsp + 0x60], ax
xor eax, eax
mov word [rsp + 0x62], ax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0x68]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x98], eax
cmp dword [rsp + 0x98], 0
jne 0x140048aea
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0x30], 1
jmp 0x140048af2
mov dword [rsp + 0x30], 0
cmp dword [rsp + 0x30], 0
jne 0x140048b87
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x9c], eax
cmp dword [rsp + 0x9c], 0
jne 0x140048b50
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0x34], 1
jmp 0x140048b58
mov dword [rsp + 0x34], 0
cmp dword [rsp + 0x34], 0
jne 0x140048b87
lea rcx, str._RC__BB
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor r9d, r9d
lea r8, str.Error
lea rdx, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140048bf7
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x140048bf2
mov qword [rsp + 0xa0], 0
lea r8, str.TEST
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa0], 0
je 0x140048bd8
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x140048bd8
mov dword [rsp + 0x38], 1
jmp 0x140048be0
mov dword [rsp + 0x38], 0
cmp dword [rsp + 0x38], 0
je 0x140048bf2
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1400045c0
add rsp, 0xc8
ret