Function at 0x4065c0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4320df
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f0
mov eax, dword [esp + 0x204]
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push 0x442b50
push ebp
mov dword [esp + 0x4c], eax
call fcn.00416fa1
add esp, 8
lea ecx, [esp + 0xe4]
push 1
call fcn.0040aae0
lea ecx, [esp + 0xb8]
mov dword [esp + 0x208], ebp
call fcn.00404ff0
push section..SHMMESS
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x20c], 1
call fcn.00413930
lea ecx, [esp + 0xe4]
lea edx, [esp + 0xb8]
mov dword [0x442c5c], ecx
mov dword [0x442c60], edx
xor ecx, ecx
lea edx, [esp + 0x88]
lea eax, [esp + 0x1a8]
mov dword [esp + 0x88], ecx
push edx
mov byte [esp + 0x20c], 2
mov dword [0x442c64], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x8c], 8
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
lea eax, [esp + 0x78]
lea ecx, [esp + 0xe4]
push eax
call fcn.0040f210
mov eax, dword [esp + 0x80]
mov bl, 3
cmp eax, ebp
mov byte [esp + 0x208], bl
je 0x4066e9
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0xe8]
call fcn.00404f00
lea edx, [esp + 0x78]
push eax
push edx
mov byte [esp + 0x210], 4
call fcn.00409590
add esp, 8
lea ecx, [esp + 0x58]
mov byte [esp + 0x208], bl
call fcn.00403b00
jmp 0x406756
push 0x64
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadBitmapA]
mov esi, eax
cmp esi, ebp
je 0x406756
lea eax, [esp + 0x10]
lea ecx, [esp + 0xe4]
push eax
call fcn.00409d90
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0x20c], 5
call dword [edx + 4]
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.004126b0
add esp, 8
mov dword [esp + 0x10], 0x4352ac
lea ecx, [esp + 0x10]
mov byte [esp + 0x208], 6
call fcn.00404110
mov byte [esp + 0x208], bl
lea ecx, [esp + 0x48]
push ecx
mov ecx, dword [0x442c5c]
call fcn.0040a530
mov eax, dword [esp + 0x50]
mov byte [esp + 0x208], 7
cmp eax, ebp
jle 0x40679a
mov edx, dword [esp + 0x48]
push eax
lea ecx, [esp + 0x4c]
call dword [edx + 4]
mov eax, dword [esp + 0x4c]
push eax
call fcn.004080e0
mov ecx, dword [0x442c5c]
add esp, 4
call fcn.0040b050
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [0x442c5c]
call fcn.0040a400
mov eax, dword [esp + 0x38]
mov byte [esp + 0x208], 8
cmp eax, ebp
je 0x4067d5
mov edx, dword [esp + 0x30]
push eax
lea ecx, [esp + 0x34]
call dword [edx + 4]
mov eax, dword [esp + 0x34]
mov ecx, 0x442c30
push eax
call fcn.00413560
lea ecx, [esp + 0x68]
push ecx
mov ecx, dword [0x442c5c]
call fcn.0040a2d0
mov eax, dword [esp + 0x70]
mov ebx, 9
cmp eax, ebp
mov byte [esp + 0x208], bl
je 0x406814
mov edx, dword [esp + 0x68]
push eax
lea ecx, [esp + 0x6c]
call dword [edx + 4]
mov eax, dword [esp + 0x6c]
mov ecx, 0x442c30
push eax
call fcn.004134f0
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x34]
call dword [edx + 4]
mov eax, dword [esp + 0x34]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x28]
call fcn.00403de0
lea ecx, [esp + 0x20]
mov byte [esp + 0x208], 0xa
push ecx
lea ecx, [esp + 0x6c]
call fcn.0040a900
xor edx, edx
cmp eax, ebp
lea eax, [esp + 0x58]
lea ecx, [esp + 0xe4]
sete dl
push eax
mov byte [esp + 0x20c], bl
mov dword [0x442bb0], edx
mov dword [esp + 0x44], ebp
call fcn.0040a1d0
mov esi, eax
mov eax, dword [esi + 8]
mov edx, dword [esi]
push eax
mov ecx, esi
mov byte [esp + 0x20c], 0xb
call dword [edx + 4]
mov esi, dword [esi + 4]
lea ecx, [esp + 0x40]
push ecx
push 0x43e65c
push esi
call fcn.00415f93
add esp, 0xc
mov dword [esp + 0x58], 0x4352ac
lea ecx, [esp + 0x58]
mov byte [esp + 0x208], 0xc
call fcn.00404110
mov ecx, 6
mov esi, 0x43e640
lea edi, [esp + 0x154]
lea edx, [esp + 0x154]
rep movsd dword es:[edi], dword [esi]
push 0x19
push edx
mov byte [esp + 0x210], bl
movsb byte es:[edi], byte [esi]
call fcn.004085e0
mov cl, byte [eax]
add esp, 8
test cl, cl
je 0x40697d
mov eax, dword [esp + 0x40]
push eax
call fcn.0040fc30
add esp, 4
test eax, eax
jne 0x40697d
lea ecx, [esp + 0x20]
push ebx
push ecx
call fcn.00408b00
lea edx, [esp + 0x18]
push 0xa
push edx
mov byte [esp + 0x218], 0xd
call fcn.00408b00
add esp, 0x10
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x20c], 0xe
call dword [edx + 4]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
call dword [edx + 4]
mov eax, dword [esp + 0x24]
mov ecx, dword [0x442cb8]
push 0x50030
push esi
push eax
call fcn.00412770
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [0x442cb8]
push 0x64
call fcn.00412730
push ebx
call fcn.00416eae
mov ecx, 5
mov esi, 0x43e628
lea edi, [esp + 0x13c]
push 0x1b
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 6
mov esi, 0x43e60c
lea edi, [esp + 0x190]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 6
mov esi, 0x43e5f0
lea edi, [esp + 0x174]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x190]
push ecx
movsw word es:[edi], word [esi]
call fcn.004085e0
mov esi, dword [eax]
lea edx, [esp + 0x178]
push 0x1a
push edx
call fcn.004085e0
mov edi, dword [eax]
lea eax, [esp + 0x14c]
push 0x16
push eax
call fcn.004085e0
mov cl, byte [eax]
add esp, 0x18
test cl, cl
je 0x406a8e
push edi
push esi
push eax
call fcn.00408390
add esp, 0xc
test eax, eax
jne 0x406a8e
lea ecx, [esp + 0x20]
push 0xb
push ecx
call fcn.00408b00
lea edx, [esp + 0x18]
push 0xa
push edx
mov byte [esp + 0x218], 0x11
call fcn.00408b00
add esp, 0x10
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x20c], 0x12
call dword [edx + 4]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
call dword [edx + 4]
mov eax, dword [esp + 0x24]
mov ecx, dword [0x442cb8]
push 0x50030
push esi
push eax
call fcn.00412770
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [0x442cb8]
push 0x64
call fcn.00412730
push 0xb
call fcn.00416eae
lea ecx, [esp + 0x90]
push ecx
mov ecx, dword [0x442c5c]
call fcn.00409b80
push 0xffffffffffffffff
push str.true
lea ecx, [esp + 0x28]
mov byte [esp + 0x210], 0x15
call fcn.00403de0
lea edx, [esp + 0x20]
lea ecx, [esp + 0x90]
push edx
mov byte [esp + 0x20c], 0x16
call fcn.00404130
xor ecx, ecx
cmp eax, ebp
sete cl
mov eax, ecx
mov byte [esp + 0x208], 0x15
cmp eax, ebp
je 0x406c6a
mov ecx, dword [0x442c5c]
lea edx, [esp + 0x10]
push edx
call fcn.00404f00
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov bl, 0x17
xor eax, eax
cmp edx, ebp
mov byte [esp + 0x208], bl
jle 0x406b29
cmp byte [ecx + eax], 0x3a
jne 0x406b24
mov byte [ecx + eax], 0x2e
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
inc eax
cmp eax, edx
jl 0x406b12
xor eax, eax
cmp edx, ebp
jle 0x406b46
cmp byte [ecx + eax], 0x5c
jne 0x406b41
mov byte [ecx + eax], 0x2e
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
inc eax
cmp eax, edx
jl 0x406b2f
push 0xffffffffffffffff
push str..j2e
lea ecx, [esp + 0x28]
call fcn.00403de0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0x20c], 0x18
call fcn.00403be0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0x20c], bl
call dword [edx + 4]
mov eax, dword [esp + 0x14]
push eax
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
cmp esi, ebp
jne 0x406bac
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateMutex_error:__d_n
call fcn.00416e40
add esp, 8
jmp 0x406bc7
push 0x64
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x406c47
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea ecx, [esp + 0x58]
push 0xd
push ecx
call fcn.00408b00
lea edx, [esp + 0x28]
push 0xa
push edx
mov byte [esp + 0x218], 0x19
call fcn.00408b00
add esp, 0x10
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x20c], 0x1a
call dword [edx + 4]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0x24]
push eax
lea ecx, [esp + 0x5c]
call dword [edx + 4]
mov eax, dword [esp + 0x5c]
mov ecx, dword [0x442cb8]
push 0x50030
push esi
push eax
call fcn.00412770
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [0x442cb8]
push 0x64
call fcn.00412730
push 0xb
call fcn.00416eae
mov dword [esp + 0x10], 0x4352ac
lea ecx, [esp + 0x10]
mov byte [esp + 0x208], 0x1d
call fcn.00404110
mov byte [esp + 0x208], 0x15
jmp 0x406ca4
push 0xffffffffffffffff
push str.custom
lea ecx, [esp + 0x28]
call fcn.00403de0
lea ecx, [esp + 0x20]
mov byte [esp + 0x208], 0x1e
push ecx
lea ecx, [esp + 0x94]
call fcn.00404130
cmp eax, ebp
mov byte [esp + 0x208], 0x15
jne 0x406ca4
call fcn.00414650
lea edx, [esp + 0x10]
lea ecx, [esp + 0xe4]
push edx
call fcn.00409a80
mov bl, 0x1f
push 0xffffffffffffffff
push str.true
lea ecx, [esp + 0x28]
mov byte [esp + 0x210], bl
call fcn.00403de0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0x20c], 0x20
call fcn.00404130
cmp eax, ebp
mov byte [esp + 0x208], bl
mov edi, 0x4352a8
je 0x406d56
push 0xffffffffffffffff
push str.auto
lea ecx, [esp + 0x28]
call fcn.00403de0
lea ecx, [esp + 0x20]
mov byte [esp + 0x208], 0x21
push ecx
lea ecx, [esp + 0x14]
call fcn.00404130
cmp eax, ebp
mov byte [esp + 0x208], bl
je 0x406d56
push 0xffffffffffffffff
push 0x43e5bc
lea ecx, [esp + 0x28]
call fcn.00403de0
lea edx, [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0x20c], 0x22
call fcn.00404130
cmp eax, ebp
mov byte [esp + 0x208], bl
jne 0x406dd5
push 0xffffffffffffffff
push 0x43e5bc
lea ecx, [esp + 0x28]
call fcn.00403de0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0x20c], 0x23
call fcn.00404130
mov ecx, dword [esp + 0x214]
mov edx, dword [esp + 0x210]
neg eax
sbb eax, eax
mov byte [esp + 0x208], bl
add eax, 2
mov dword [esp + 0x20], edi
push eax
push ecx
push edx
mov ecx, 0x442b78
call fcn.00414f70
push 0x442ba0
mov ecx, 0x442b78
call fcn.00415810
mov eax, dword [0x442ba8]
mov ecx, 0x442ba0
mov esi, eax
push eax
mov eax, dword [0x442ba0]
call dword [eax + 4]
mov ebx, dword [0x442ba4]
jmp 0x406de0
mov esi, dword [esp + 0x210]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x10], 0x4352ac
lea ecx, [esp + 0x10]
mov byte [esp + 0x208], 0x24
call fcn.00403ca0
cmp eax, ebp
je 0x406e06
push eax
call fcn.00415ab8
add esp, 4
xor ecx, ecx
lea edx, [esp + 0xa0]
mov dword [esp + 0xa4], ecx
push edx
mov dword [esp + 0xac], ecx
push ebp
mov dword [esp + 0xb4], ecx
dec esi
mov dword [esp + 0xb8], ecx
add ebx, 4
push ebp
push 0x406530
mov byte [esp + 0x218], 0x15
mov dword [esp + 0x20], edi
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], 0x4065a0
call fcn.004098a0
mov ebx, 0x4352ac
add esp, 0x10
mov esi, eax
mov dword [0x442c5c], ebp
mov dword [0x442c60], ebp
mov dword [esp + 0x90], ebx
lea ecx, [esp + 0x90]
mov byte [esp + 0x208], 0x25
call fcn.00403ca0
cmp eax, ebp
je 0x406ea6
push eax
call fcn.00415ab8
add esp, 4
mov dword [esp + 0x90], edi
mov dword [esp + 0x68], ebx
lea ecx, [esp + 0x68]
mov byte [esp + 0x208], 0x26
call fcn.00403ca0
cmp eax, ebp
je 0x406ecf
push eax
call fcn.00415ab8
add esp, 4
mov dword [esp + 0x68], edi
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x30]
mov byte [esp + 0x208], 0x27
call fcn.00403ca0
cmp eax, ebp
je 0x406ef5
push eax
call fcn.00415ab8
add esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x30], edi
cmp eax, ebp
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0x54], ebp
je 0x406f1a
push eax
call fcn.00415ab8
add esp, 4
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x48], edi
cmp eax, ebp
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x80], ebp
mov dword [esp + 0x84], ebp
je 0x406f45
push eax
call fcn.00415ab8
add esp, 4
lea ecx, [esp + 0x1a8]
mov dword [esp + 0x78], edi
mov byte [esp + 0x208], 1
call fcn.00413a30
lea ecx, [esp + 0xb8]
mov byte [esp + 0x208], 0x29
call fcn.00405130
lea eax, [esp + 0xc8]
mov dword [esp + 0xc8], ebx
mov dword [esp + 0x44], eax
lea ecx, [esp + 0xc8]
mov byte [esp + 0x208], 0x2a
call fcn.00403ca0
cmp eax, ebp
je 0x406fa4
push eax
call fcn.00415ab8
add esp, 4
mov dword [esp + 0xc8], edi
mov dword [esp + 0xb8], 0x4352e8
lea ecx, [esp + 0xb8]
mov byte [esp + 0x208], 0x2b
call fcn.00403ca0
cmp eax, ebp
je 0x406fd7
push eax
call fcn.00415ab8
add esp, 4
lea ecx, [esp + 0xe4]
mov dword [esp + 0xb8], 0x4352e4
mov dword [esp + 0x208], 0xffffffff
call fcn.0040ea50
mov ecx, dword [esp + 0x200]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1fc
ret