Function at 0x443a20
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x455ff2
mov eax, dword fs:[0]
push eax
sub esp, 0x2c8
mov eax, dword [0x462544]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [0x464b94], eax
mov dword [ebp - 0x1ec], 0xff
mov dword [ebp - 0x1f0], 8
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea ecx, [ebp - 0x1f0]
push ecx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov dword [ebp - 0x1c0], 0
mov dword [0x464afc], 0
mov edx, dword [0x464afc]
mov dword [0x464b00], edx
mov byte [ebp - 0x1b5], 1
mov dword [ebp - 0x1c4], 0
push 0x464a6c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call fcn.004288c0
push 0x200
call fcn.0043aab0
add esp, 4
mov dword [0x464b14], eax
push 0x104
call fcn.0043aab0
add esp, 4
mov dword [0x464af8], eax
push 0x104
call fcn.0043aab0
add esp, 4
mov dword [0x464b18], eax
push 0x104
call fcn.0043aab0
add esp, 4
mov dword [0x464b0c], eax
push 0x104
call fcn.0043aab0
add esp, 4
mov dword [0x464b08], eax
push 6
call fcn.0043aab0
add esp, 4
mov dword [0x464b10], eax
push 0x104
call fcn.0043aab0
add esp, 4
mov dword [0x464b04], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x464b84], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x464b80], eax
mov eax, dword [0x464af8]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0x104
mov ecx, dword [0x464b18]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x200
mov edx, dword [0x464b14]
push edx
mov eax, dword [0x464b18]
push eax
call fcn.00422f50
add esp, 0xc
mov ecx, dword [0x464b10]
push ecx
mov edx, dword [0x464b18]
push edx
call fcn.0044ce30
add esp, 8
movzx eax, al
test eax, eax
jne 0x443bd0
push 6
push 0
mov ecx, dword [0x464b10]
push ecx
call fcn.00409d80
add esp, 0xc
push 5
push 0x30
mov edx, dword [0x464b10]
push edx
call fcn.00409d80
add esp, 0xc
push 0x104
mov eax, dword [0x464b0c]
push eax
mov ecx, dword [0x464b18]
push ecx
call fcn.0044cd40
add esp, 0xc
mov edx, dword [0x464b0c]
push edx
mov eax, dword [0x464b14]
push eax
call fcn.00427f80
add esp, 8
call fcn.004412d0
call fcn.0043aa00
mov ecx, dword [0x464b0c]
push ecx
call fcn.00428150
add esp, 4
call fcn.0044ccb0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.AzA10_J0b
call fcn.00425350
add esp, 4
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xb7
jne 0x443c63
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x465238
call fcn.0043e680
movzx edx, al
test edx, edx
jne 0x443c79
call fcn.00440f30
push 1
mov eax, dword [0x464b94]
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [0x464b90], eax
push 1
mov ecx, dword [0x464b94]
push ecx
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [0x464b8c], eax
lea ecx, [ebp - 0x20]
call fcn.0043f9d0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1b4]
call fcn.004010f0
mov byte [ebp - 4], 1
push 0x1b8
call fcn.0040a34c
add esp, 4
mov dword [ebp - 0x200], eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x200], 0
je 0x443cf1
mov ecx, dword [ebp - 0x200]
call fcn.00402e20
mov dword [ebp - 0x270], eax
jmp 0x443cfb
mov dword [ebp - 0x270], 0
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0x1fc], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1fc]
mov dword [0x464b40], eax
push 0xbb4
call fcn.0040a34c
add esp, 4
mov dword [ebp - 0x208], eax
mov byte [ebp - 4], 3
cmp dword [ebp - 0x208], 0
je 0x443d49
mov ecx, dword [ebp - 0x208]
call fcn.0043cc50
mov dword [ebp - 0x274], eax
jmp 0x443d53
mov dword [ebp - 0x274], 0
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x204], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x204]
mov dword [0x465154], edx
push 0x20a
call fcn.00423070
add esp, 4
push eax
mov ecx, dword [0x465154]
call fcn.0043d110
push 0
mov ecx, dword [0x465158]
call fcn.0043c3e0
push eax
mov eax, dword [0x465154]
add eax, 0x388
push eax
call fcn.00409e90
add esp, 8
push 1
mov ecx, dword [0x465158]
call fcn.0043c3e0
push eax
mov ecx, dword [0x465154]
add ecx, 0x48c
push ecx
call fcn.00409e90
add esp, 8
push 5
mov ecx, dword [0x465158]
call fcn.0043c3e0
push eax
mov edx, dword [0x465154]
add edx, 0x59c
push edx
call fcn.00409e90
add esp, 8
push 0
mov ecx, dword [0x465158]
call fcn.0043c3e0
push eax
mov eax, dword [0x465154]
add eax, 0xab0
push eax
call fcn.00409e90
add esp, 8
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [0x464b88], eax
push 0
mov ecx, dword [0x464b40]
call fcn.0042fd00
push 0x232
push 0x2f0
push 0
push 0
push str.Caption
push str.General
mov ecx, dword [0x465154]
call fcn.0043cd50
push eax
push str.TaskBar
push str.General
mov ecx, dword [0x465154]
call fcn.0043cd50
push eax
push 0
push 0
mov ecx, dword [0x464b40]
mov edx, dword [ecx]
mov ecx, dword [0x464b40]
mov eax, dword [edx + 0x8c]
call eax
mov dword [0x464af4], eax
call fcn.0044cb40
push 0x40
call fcn.0040a34c
add esp, 4
mov dword [ebp - 0x210], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x210], 0
je 0x443eb8
mov ecx, dword [ebp - 0x210]
call fcn.0043ae40
mov dword [ebp - 0x278], eax
jmp 0x443ec2
mov dword [ebp - 0x278], 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x20c], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x20c]
mov dword [0x464a88], edx
push 0
mov ecx, 0x464a84
call fcn.00401030
push 0x204
call fcn.00423070
add esp, 4
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x280]
or eax, dword [ebp - 0x27c]
jne 0x443ffe
mov ecx, 0x465238
call fcn.0043e680
movzx ecx, al
test ecx, ecx
jne 0x443f42
push fcn.00441ff0
push 0x57e40
push 0x8266
mov edx, dword [0x464af4]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [0x464b40]
call fcn.00421870
push 0x20
push 0x20
push 1
call fcn.00423b00
add esp, 0xc
mov ecx, dword [0x464b40]
mov dword [ecx + 0x70], eax
mov edx, dword [0x464b40]
mov eax, dword [edx]
mov ecx, dword [0x464b40]
mov edx, dword [eax + 0x80]
call edx
mov eax, dword [0x464b40]
mov byte [eax + 0x9e], 0
mov ecx, dword [0x464b40]
call fcn.00401240
mov dword [ebp - 0x6c], eax
mov ecx, dword [0x464b8c]
push ecx
push 1
push 0x80
mov edx, dword [0x464af4]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x464b90]
push eax
push 0
push 0x80
mov ecx, dword [0x464af4]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 1
push 0x204
call fcn.00426c90
add esp, 0xc
mov edx, dword [0x464b40]
cmp dword [edx + 0x19c], 0
je 0x443ff9
mov eax, dword [0x464b40]
mov ecx, dword [eax + 0x19c]
call fcn.00429780
jmp 0x444335
mov byte [0x463a33], 0
mov cl, byte [0x463a33]
mov byte [0x463a32], cl
mov ecx, dword [0x464b40]
call fcn.00421870
push 0x20
push 0x20
push 1
call fcn.00423b00
add esp, 0xc
mov edx, dword [0x464b40]
mov dword [edx + 0x70], eax
mov eax, dword [0x464b40]
mov edx, dword [eax]
mov ecx, dword [0x464b40]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [0x464b40]
call fcn.00401240
mov dword [ebp - 0x6c], eax
mov ecx, dword [0x464b8c]
push ecx
push 1
push 0x80
mov edx, dword [0x464af4]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x464b90]
push eax
push 0
push 0x80
mov ecx, dword [0x464af4]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0x465238
call fcn.0043e680
movzx edx, al
test edx, edx
jne 0x4441de
push 0
push 1
push 0x201
call fcn.00426c90
add esp, 0xc
push 0
push 0
push 0x202
call fcn.00426c90
add esp, 0xc
push 0
push 1
push 0x203
call fcn.00426c90
add esp, 0xc
push 0
mov ecx, 0x465238
call fcn.0043eb70
push 0
mov ecx, 0x465238
call fcn.00403520
push 1
mov eax, dword [0x464b40]
mov ecx, dword [eax + 0x194]
mov ecx, dword [ecx + 0xf8]
call fcn.00432590
push 0
mov edx, dword [0x464b40]
mov eax, dword [edx + 0x194]
mov ecx, dword [eax + 0xfc]
call fcn.00432590
push 1
mov ecx, dword [0x464b40]
mov edx, dword [ecx + 0x194]
mov ecx, dword [edx + 0x100]
call fcn.00432590
push 0x204
call fcn.00423070
add esp, 4
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], edx
cmp dword [ebp - 0x284], 0
jl 0x4441c8
jg 0x444162
cmp dword [ebp - 0x288], 0
jbe 0x4441c8
call fcn.00440840
push 0
push 0x44e990
mov ecx, dword [0x464a88]
call fcn.0043ad80
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
push eax
mov ecx, dword [0x464a88]
call fcn.0043ac70
push fcn.00441ff0
push 0xea60
push 0x8266
mov ecx, dword [0x464af4]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
push 0xea60
push 0x8266
push 0x113
mov edx, dword [0x464af4]
push edx
call fcn.00441ff0
push 0
push 1
push 0x204
call fcn.00426c90
add esp, 0xc
jmp 0x444274
push 1
mov ecx, 0x465238
call fcn.00403520
push 0x205
call fcn.00423070
add esp, 4
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
cmp dword [ebp - 0x290], 1
jne 0x444223
cmp dword [ebp - 0x28c], 0
jne 0x444223
push 1
mov ecx, 0x465238
call fcn.004034f0
jmp 0x44422f
push 0
mov ecx, 0x465238
call fcn.004034f0
push 0x206
call fcn.00423070
add esp, 4
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x298], 1
jne 0x444268
cmp dword [ebp - 0x294], 0
jne 0x444268
push 1
mov ecx, 0x465238
call fcn.004034c0
jmp 0x444274
push 0
mov ecx, 0x465238
call fcn.004034c0
push 0x202
call fcn.00423070
add esp, 4
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x2a0], 1
jne 0x444304
cmp dword [ebp - 0x29c], 0
jne 0x444304
mov eax, dword [0x464b40]
mov byte [eax + 0x9e], 0
mov ecx, dword [0x464b40]
cmp dword [ecx + 0x19c], 0
je 0x4442e4
push 0x82c9
mov edx, dword [0x464b40]
mov ecx, dword [edx + 0x19c]
call fcn.00429050
mov ecx, dword [0x464b40]
call fcn.00401240
push eax
call fcn.00429970
add esp, 4
mov ecx, 0x465238
call fcn.0043e680
movzx eax, al
test eax, eax
jne 0x444302
push 0xfffffffffffffffe
mov ecx, dword [0x464b40]
call fcn.00440370
jmp 0x444335
push 1
mov ecx, dword [0x464b40]
call fcn.00402010
mov ecx, dword [0x464b40]
call fcn.00401240
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [0x464b40]
call fcn.00401240
push eax
call dword [sym.imp.USER32.dll_SetActiveWindow]
push 0x201
call fcn.00423070
add esp, 4
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
cmp dword [ebp - 0x2a8], 1
jne 0x44436c
cmp dword [ebp - 0x2a4], 0
jne 0x44436c
push 1
call fcn.004281c0
add esp, 4
jmp 0x444376
push 0
call fcn.004281c0
add esp, 4
mov ecx, dword [0x464b40]
call fcn.00401ff0
mov ecx, dword [0x464b40]
mov edx, dword [ecx]
mov ecx, dword [0x464b40]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x24], eax
cmp dword [0x46516c], 0
je 0x4443e0
mov ecx, dword [0x46516c]
mov dword [ebp - 0x218], ecx
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x214], edx
cmp dword [ebp - 0x214], 0
je 0x4443d6
push 1
mov ecx, dword [ebp - 0x214]
call fcn.00403540
mov dword [ebp - 0x2ac], eax
jmp 0x4443e0
mov dword [ebp - 0x2ac], 0
cmp dword [0x465168], 0
je 0x444428
mov eax, dword [0x465168]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x21c], ecx
cmp dword [ebp - 0x21c], 0
je 0x44441e
push 1
mov ecx, dword [ebp - 0x21c]
call fcn.00403540
mov dword [ebp - 0x2b0], eax
jmp 0x444428
mov dword [ebp - 0x2b0], 0
cmp dword [0x465164], 0
je 0x444471
mov edx, dword [0x465164]
mov dword [ebp - 0x228], edx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x444467
push 1
mov ecx, dword [ebp - 0x224]
call fcn.00403540
mov dword [ebp - 0x2b4], eax
jmp 0x444471
mov dword [ebp - 0x2b4], 0
cmp dword [0x465160], 0
je 0x4444ba
mov ecx, dword [0x465160]
mov dword [ebp - 0x230], ecx
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0
je 0x4444b0
push 1
mov ecx, dword [ebp - 0x22c]
call fcn.00403540
mov dword [ebp - 0x2b8], eax
jmp 0x4444ba
mov dword [ebp - 0x2b8], 0
cmp dword [0x46515c], 0
je 0x444502
mov eax, dword [0x46515c]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
mov dword [ebp - 0x234], ecx
cmp dword [ebp - 0x234], 0
je 0x4444f8
push 1
mov ecx, dword [ebp - 0x234]
call fcn.00403540
mov dword [ebp - 0x2bc], eax
jmp 0x444502
mov dword [ebp - 0x2bc], 0
cmp dword [0x465158], 0
je 0x44454b
mov edx, dword [0x465158]
mov dword [ebp - 0x240], edx
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x444541
push 1
mov ecx, dword [ebp - 0x23c]
call fcn.00403540
mov dword [ebp - 0x2c0], eax
jmp 0x44454b
mov dword [ebp - 0x2c0], 0
cmp dword [0x464b58], 0
je 0x44459b
mov ecx, dword [0x464b58]
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0
je 0x444591
push 1
mov eax, dword [ebp - 0x244]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x244]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2c4], eax
jmp 0x44459b
mov dword [ebp - 0x2c4], 0
cmp dword [0x464b50], 0
je 0x4445eb
mov ecx, dword [0x464b50]
mov dword [ebp - 0x250], ecx
mov edx, dword [ebp - 0x250]
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0
je 0x4445e1
push 1
mov eax, dword [ebp - 0x24c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x24c]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2c8], eax
jmp 0x4445eb
mov dword [ebp - 0x2c8], 0
cmp dword [0x464b54], 0
je 0x44463b
mov ecx, dword [0x464b54]
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x258]
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 0
je 0x444631
push 1
mov eax, dword [ebp - 0x254]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x254]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2cc], eax
jmp 0x44463b
mov dword [ebp - 0x2cc], 0
cmp dword [0x464b40], 0
je 0x44468b
mov ecx, dword [0x464b40]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0
je 0x444681
push 1
mov eax, dword [ebp - 0x25c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x25c]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2d0], eax
jmp 0x44468b
mov dword [ebp - 0x2d0], 0
mov ecx, dword [0x464a88]
mov dword [ebp - 0x268], ecx
mov edx, dword [ebp - 0x268]
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 0
je 0x4446c1
push 1
mov ecx, dword [ebp - 0x264]
call fcn.00403570
mov dword [ebp - 0x2d4], eax
jmp 0x4446cb
mov dword [ebp - 0x2d4], 0
call fcn.004253e0
call fcn.00425540
push 0x464a6c
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov dword [ebp - 0x26c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1b4]
call fcn.004034b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0043f9b0
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.00409d69
mov esp, ebp
pop ebp
ret 0x10