Function at 0x1400fd5d0
Capabilities:
Check mutex on windows
Get common file path

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1b8
call fcn.1400144c0
xor ecx, ecx
mov edx, 1
lea r8, str.MyUniqueMutexName
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov r13, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400fd62e
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Another_instance_is_already_running._Exiting.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x1400fd8f8
lea rdi, [rsp + 0xac]
lea rsi, [rsp + 0x28]
call fcn.1400018fb
mov rdx, rdi
mov ecx, 0x104
lea rbp, [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov rdx, rdi
mov rcx, rsi
call fcn.140001554
or r8, 0xffffffffffffffff
lea rdx, [0x1401021a2]
mov rcx, rsi
call fcn.140036360
cmp rax, 0xffffffffffffffff
mov rbx, rax
je 0x1400fd7aa
or r9, 0xffffffffffffffff
lea r8, [rax + 1]
mov rdx, rsi
mov rcx, rbp
call fcn.1400370a0
mov rcx, rbp
lea rdx, str.Temp
call fcn.140037160
mov rcx, rbp
mov r12d, eax
call fcn.1400d9110
test r12d, r12d
je 0x1400fd7aa
mov r9, rbx
xor r8d, r8d
mov rdx, rsi
mov rcx, rbp
call fcn.1400370a0
mov rcx, rsi
call fcn.140036350
mov rcx, rbp
mov ebx, eax
call fcn.140036350
mov r8, qword [rsp + 0x90]
test al, al
je 0x1400fd715
test r8, r8
je 0x1400fd6fd
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x28]
call fcn.1400dc780
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
mov byte [rdx + rax], 0
jmp 0x1400fd77a
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x98]
test bl, bl
je 0x1400fd73a
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], rdx
jmp 0x1400fd76a
mov rax, qword [rsp + 0x28]
mov r9, qword [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], rdx
test rax, rax
je 0x1400fd76a
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x98], r9
jmp 0x1400fd77a
lea rax, [rsp + 0x98]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
xor edx, edx
mov rcx, rbp
mov qword [rsp + 0x90], rdx
mov byte [rax], 0
call fcn.1400d9110
mov r8, qword [rsp + 0x28]
mov edx, 0x104
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_strcpy_s]
mov rdx, rdi
mov rcx, rbp
call fcn.140001554
lea rdi, [rsp + 0x48]
lea r8, str.WinTempMicrosoft_Edge_Protect.exe
mov rdx, rbp
mov rcx, rdi
call fcn.1400f9970
mov rcx, rbp
lea r12, [rsp + 0x68]
call fcn.1400d9110
lea rax, [rsp + 0x78]
mov rcx, r12
mov byte [rsp + 0x78], 0
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x50]
lea rdx, [rax + 1]
call fcn.1400df0e0
mov r8d, 0x22
mov edx, 1
mov rcx, r12
call fcn.1400da820
mov rdx, rdi
mov rcx, r12
call fcn.1400da5e0
jmp 0x1400fd825
mov r8d, 0x22
mov edx, 1
mov rcx, r12
call fcn.1400da820
mov rcx, rbp
mov rdx, rax
call fcn.1400df780
mov rcx, rbp
call fcn.1400015c1
mov rcx, rbp
call fcn.1400d9110
mov rcx, r12
call fcn.1400d9110
lea rdx, str.Microsoft_Edge_Protect.exe
mov rcx, rbp
call fcn.140001554
mov rcx, rbp
call fcn.140001640
mov ebx, eax
mov rcx, rbp
call fcn.1400d9110
test bl, bl
jne 0x1400fd888
mov rcx, rdi
call fcn.140001762
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.1400d9110
mov rcx, rsi
call fcn.1400d9110
xor eax, eax
jmp 0x1400fd8f8
add rsp, 0x1b8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret