Function at 0x4b3600
Capabilities:
Check mutex on windows
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a4
mov eax, dword [0x698b9c]
xor eax, ebp
mov dword [ebp - 0x1c], eax
cmp dword [ebp + 0x10], 0
je 0x4b3649
push 0x610e78
mov eax, dword [ebp + 0x10]
push eax
call fcn.005c0ce9
add esp, 8
test eax, eax
jne 0x4b3649
push 0
call fcn.004b3540
add esp, 4
call fcn.004d1da0
xor eax, eax
jmp 0x4b3b8b
cmp dword [ebp + 0x10], 0
je 0x4b3789
push str.update
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00401520
add esp, 8
cmp eax, dword [ebp + 0x10]
jne 0x4b3789
cmp dword [0x69c258], 3
jl 0x4b377d
mov edx, dword [0x69c260]
cmp dword [edx + 8], 0
je 0x4b377d
mov eax, dword [0x69c260]
mov ecx, dword [eax + 8]
push ecx
lea ecx, [ebp - 0x10]
call fcn.004b4e50
push 0x104
lea edx, [ebp - 0x230]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.clean__
lea eax, [ebp - 0x128]
push eax
call fcn.005c0ae0
add esp, 8
push 0xfa
lea ecx, [ebp - 0x128]
push ecx
call fcn.005c0140
add esp, 4
lea edx, [ebp + eax - 0x128]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x610ea0
lea eax, [ebp - 0x128]
push eax
call fcn.005c0af0
add esp, 8
mov dword [ebp - 0x18], 0x1e
mov dword [ebp - 0x14], 0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x14], 0
jne 0x4b3736
lea ecx, [ebp - 0x10]
call fcn.004efe20
push eax
lea ecx, [ebp - 0x230]
push ecx
call fcn.00403520
add esp, 8
test eax, eax
je 0x4b3765
mov dword [ebp - 0x14], 1
push 0xa
push 0
lea edx, [ebp - 0x128]
push edx
lea ecx, [ebp - 0x10]
call fcn.004efe20
push eax
push 0x610ea4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jbe 0x4b3765
jmp 0x4b3775
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
sub ecx, 1
mov dword [ebp - 0x18], ecx
test eax, eax
jg 0x4b3709
lea ecx, [ebp - 0x10]
call fcn.004b4e90
xor eax, eax
jmp 0x4b3b8b
cmp dword [ebp + 0x10], 0
je 0x4b3844
push str.clean
mov edx, dword [ebp + 0x10]
push edx
call fcn.00401520
add esp, 8
cmp eax, dword [ebp + 0x10]
jne 0x4b3844
cmp dword [0x69c258], 3
jne 0x4b383f
mov eax, dword [0x69c260]
cmp dword [eax + 8], 0
je 0x4b383f
push 0x81
call fcn.004d1990
add esp, 4
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x238], 5
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x69c260]
mov edx, dword [ecx + 8]
push edx
call fcn.005c0aab
add esp, 4
push 0
mov eax, dword [0x69c260]
mov ecx, dword [eax + 8]
push ecx
call fcn.005c0a93
add esp, 8
test eax, eax
jne 0x4b382f
mov edx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x238]
sub eax, 1
mov dword [ebp - 0x238], eax
test edx, edx
jg 0x4b37e2
cmp dword [ebp - 0x234], 0
je 0x4b383f
xor eax, eax
jmp 0x4b3b8b
jmp 0x4b3b48
cmp dword [ebp + 0x10], 0
je 0x4b385f
push 0x610ebc
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.004b4930
add esp, 8
test eax, eax
jne 0x4b386c
call fcn.004d1660
test eax, eax
jne 0x4b3905
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0
je 0x4b388b
mov eax, dword [ebp - 0x240]
movzx ecx, word [eax]
test ecx, ecx
jne 0x4b389f
mov dword [ebp - 0x240], 0x610ed0
mov dword [0x69544c], 0
mov edx, dword [ebp - 0x240]
push edx
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x4b3900
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xb7
jne 0x4b3900
cmp dword [0x69aaa4], 3
jg 0x4b38f9
push str.Already_opened_
push 0xf6
push str..GotoHttp.cpp
push 3
call fcn.00401310
add esp, 0x10
xor eax, eax
jmp 0x4b3b8b
jmp 0x4b3b48
cmp dword [ebp + 0x10], 0
je 0x4b3932
push str.delete
mov eax, dword [ebp + 0x10]
push eax
call fcn.00401520
add esp, 8
cmp eax, dword [ebp + 0x10]
jne 0x4b3932
call fcn.004d18e0
xor eax, eax
jmp 0x4b3b8b
push 1
call fcn.004b3540
add esp, 4
mov dword [ebp - 0x248], 0
push 4
lea ecx, [ebp - 0x248]
push ecx
push 0x610f14
call fcn.004b5170
add esp, 0xc
test eax, eax
je 0x4b39cb
cmp dword [ebp - 0x248], 0
je 0x4b39cb
mov dword [ebp - 0x250], 0x64
cmp dword [ebp + 0x10], 0
je 0x4b3998
push str.exit
mov edx, dword [ebp + 0x10]
push edx
call fcn.005c0ce9
add esp, 8
test eax, eax
jne 0x4b3998
mov dword [ebp - 0x250], 0x65
push 0
mov eax, dword [ebp - 0x250]
and eax, 0xffff
movzx ecx, ax
shl ecx, 0x10
or ecx, 0x800f
push ecx
push 0x111
mov edx, dword [ebp - 0x248]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
jmp 0x4b3b8b
lea eax, [ebp - 0x24c]
push eax
call fcn.004d16a0
add esp, 4
test eax, eax
jne 0x4b3a27
call fcn.004d18e0
push 0x10
push 0x610f40
mov ecx, dword [ebp - 0x24c]
push ecx
push 0xa1
push 0
lea edx, [ebp - 0x29c]
push edx
call fcn.004b52c0
add esp, 0x10
mov ecx, eax
call fcn.004b27b0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x29c]
call fcn.004b2750
jmp 0x4b3b44
lea ecx, [ebp - 0x25c]
call fcn.004d1ea0
lea ecx, [ebp - 0x25c]
call fcn.004b4ec0
test eax, eax
jne 0x4b3b39
mov dword [ebp - 0x260], 0x3c
cmp dword [ebp - 0x260], 0
jle 0x4b3b39
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x290]
call fcn.004b4770
push 0
push 0x610f54
push 0x610f5c
lea ecx, [ebp - 0x290]
call fcn.004042f0
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x4b3aa5
lea ecx, [ebp - 0x290]
call fcn.004b4860
jmp 0x4b3a4f
lea ecx, [ebp - 0x294]
call fcn.00404ed0
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x290]
call fcn.004b4f60
push 0x40
push 0x610f64
lea ecx, [ebp - 0x294]
call fcn.00403cf0
push eax
mov ecx, dword [ebp - 0x264]
push ecx
push 0x93
push 0
lea edx, [ebp - 0x2a4]
push edx
call fcn.004b52c0
add esp, 0x14
mov ecx, eax
call fcn.004b27b0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x2a4]
call fcn.004b2750
lea ecx, [ebp - 0x294]
call fcn.00402fe0
lea ecx, [ebp - 0x290]
call fcn.004b4860
jmp 0x4b3b39
lea ecx, [ebp - 0x25c]
call fcn.004b53e0
xor eax, eax
jmp 0x4b3b8b
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 0
mov ecx, dword [ebp + 8]
push ecx
push 0
mov ecx, 0x69c0a4
call fcn.004b4950
mov dword [ebp - 8], eax
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
call fcn.004b30d0
add esp, 8
mov dword [ebp - 4], eax
mov ecx, 0x69c0a4
call fcn.004b4b10
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.005bfcb8
mov esp, ebp
pop ebp
ret 0x10