Function at 0x41a5e0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push str.440FC227_74ED_44AE_93CA_E0377D51C2B4
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x48a6e8], eax
push 0x435ed0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
push 0xfffe
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x41a632
jmp 0x41a942
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x41a651
jmp 0x41a942
push 0x435eec
mov ecx, dword [ebp - 4]
push ecx
call fcn.0041de50
add esp, 8
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x41a670
jmp 0x41aa23
mov edx, dword [ebp - 0x34]
add edx, 2
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x28], 0
push str.EAA3B2D1_9975_4E6D_9629_9D7A30B180D2
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x41a6a5
jmp 0x41a942
call fcn.00401c90
test eax, eax
jne 0x41a6b8
jmp 0x41a942
call fcn.00415f80
test eax, eax
jne 0x41a6cb
jmp 0x41a942
call fcn.00411e90
test eax, eax
jne 0x41a6de
jmp 0x41a942
call fcn.004152e0
test eax, eax
jne 0x41a6f1
jmp 0x41a942
call fcn.00402aa0
test eax, eax
jne 0x41a704
jmp 0x41a942
call fcn.00402040
test eax, eax
jne 0x41a717
jmp 0x41a942
mov dword [ebp - 0x24], 0
mov dword [ebp - 8], 0
call fcn.00406210
cmp eax, 1
jne 0x41a753
push str.132F7929_FEBC_4E58_9747_81A3917A5994
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x41a74c
jmp 0x41aa23
mov dword [ebp - 8], 1
push str.132F7929_FEBC_4E58_9747_81A3917A5994
call fcn.0041afe0
add esp, 4
mov dword [ebp - 0x10], 0
call fcn.00406310
cmp eax, 1
jne 0x41a795
push str.1EFE6ACF_A439_4207_8E76_02A0BB22134A
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x41a78e
jmp 0x41aa23
mov dword [ebp - 0x10], 1
push str.1EFE6ACF_A439_4207_8E76_02A0BB22134A
call fcn.0041afe0
add esp, 4
mov dword [ebp - 0x30], 0
call fcn.00406410
cmp eax, 1
jne 0x41a7d7
push str.F462453E_9B98_49C8_B535_3933FB9976D4
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x41a7d0
jmp 0x41aa23
mov dword [ebp - 0x30], 1
push str.F462453E_9B98_49C8_B535_3933FB9976D4
call fcn.0041afe0
add esp, 4
cmp dword [0x47ec84], 1
jne 0x41a8aa
cmp dword [0x487048], 0
jne 0x41a8aa
cmp dword [ebp - 8], 0
jne 0x41a810
cmp dword [ebp - 0x10], 0
jne 0x41a810
cmp dword [ebp - 0x30], 0
je 0x41a83c
mov dword [ebp - 0x38], 0
cmp dword [ebp - 0x38], 5
jge 0x41a83c
call fcn.00405c30
test eax, eax
jne 0x41a83c
push 0x3e8
call dword [0x48a114]
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x41a817
cmp dword [0x47ec88], 1
jne 0x41a8aa
mov dword [ebp - 0x3c], 0
call fcn.00404440
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x41a8aa
mov dword [ebp - 0x40], 0
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [0x48a11c]
cmp eax, 0xffffffff
je 0x41a8a0
mov edx, dword [ebp - 0x3c]
push edx
call dword [0x48a108]
test eax, eax
jne 0x41a89c
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xa
jl 0x41a88f
jmp 0x41a8a0
push 0x3e8
call dword [0x48a114]
jmp 0x41a89e
jmp 0x41a8a0
jmp 0x41a861
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [0x48a0a0]
cmp dword [0x47ec74], 1
jne 0x41a8e9
push 0
push 0
push 1
push 0
call dword [0x48a0a4]
mov dword [0x489f24], eax
cmp dword [0x489f24], 0
je 0x41a8e9
push 0
push 0
push 0
push 0x411340
push 0
push 0
call dword [0x48a0e4]
mov dword [0x489f28], eax
cmp dword [0x47ec84], 1
jne 0x41a905
push 0xffffffffffffffff
mov edx, dword [0x4885b8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x41a942
mov eax, dword [0x487048]
neg eax
sbb eax, eax
add eax, 2
mov dword [ebp - 0xc], eax
mov ecx, dword [0x4885b8]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x18], edx
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edx, dword [0x4885b8]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
cmp dword [0x47ec74], 1
jne 0x41a991
cmp dword [0x489f28], 0
je 0x41a97c
mov eax, dword [0x489f24]
push eax
call dword [0x48a0dc]
push 0xffffffffffffffff
mov ecx, dword [0x489f28]
push ecx
call dword [0x48a0b4]
mov edx, dword [0x489f28]
push edx
call dword [0x48a08c]
cmp dword [0x489f24], 0
je 0x41a991
mov eax, dword [0x489f24]
push eax
call dword [0x48a08c]
call fcn.00401d50
call fcn.004020d0
call fcn.00402af0
call fcn.00415fd0
test eax, eax
jne 0x41a9b1
push 0
call dword [0x48a0b0]
call fcn.00415520
cmp dword [0x4885b8], 0
je 0x41a9cc
mov ecx, dword [0x4885b8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x28], 0
je 0x41a9dc
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x28], 0
mov dword [0x4885b8], 0
cmp dword [0x48a6e8], 0
je 0x41aa02
mov eax, dword [0x48a6e8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 4], 0
je 0x41aa12
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [0x487048], 0
jne 0x41aa23
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esp, ebp
pop ebp
ret