Function at 0x407270
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x40dccb
push eax
mov eax, 0x9e68
mov dword fs:[0], esp
call fcn.0040d910
push ebx
push esi
push edi
push str.Nr_wN7yYUr2eNNiVNbKG
call fcn.004057f0
mov esi, eax
push str.MbWdP7WG
mov dword [esp + 0x1c], esi
call fcn.004057f0
add esp, 8
mov ebx, eax
mov dword [esp + 0x10], ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
call esi
push ebx
push 0
push 0
mov edi, eax
call esi
test edi, edi
mov esi, eax
je 0x4072fd
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 0xb7
jne 0x4072fd
test esi, esi
je 0x4072fd
call edi
cmp eax, 0xb7
jne 0x4072fd
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.MSVCRT.dll_exit]
push 0x2000000
push 0
push str.winsta0
call dword [sym.imp.USER32.dll_OpenWindowStationA]
test eax, eax
je 0x40732d
push eax
call dword [sym.imp.USER32.dll_SetProcessWindowStation]
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x407230
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x13], 0
mov al, byte [esp + 0x13]
test al, al
je 0x40737e
cmp al, 3
je 0x40737e
xor edi, edi
push str.BITS
push 0
push 0x1f0003
call ebx
mov esi, eax
test esi, esi
jne 0x40736d
push 0x3c
call ebp
inc edi
cmp edi, 0x64
jl 0x40734d
jmp 0x40737e
mov ecx, 0x412520
call fcn.004022d0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [sym.imp.MSVCRT.dll_atoi]
mov esi, eax
mov eax, dword [esp + 0x14]
push eax
call edi
mov ecx, dword [esp + 0x1c]
add esp, 4
push eax
push ecx
mov ecx, 0x412520
call fcn.00401e80
test al, al
jne 0x4073b1
mov byte [esp + 0x13], 2
jmp 0x40733f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
push eax
push 0x412520
push str.BITS
call fcn.00406260
mov edx, dword [esp + 0x20]
push edx
call edi
mov ecx, dword [0x412514]
add esp, 0x10
push eax
mov eax, dword [esp + 0x1c]
push eax
push str.BITS
push ecx
push str.BITS
push 0x412520
lea ecx, [esp + 0x34]
call fcn.004036e0
lea edx, [esp + 0x1c]
xor esi, esi
push edx
mov ecx, 0x412520
mov dword [esp + 0x9e84], esi
call fcn.004024f0
lea ecx, [esp + 0x1c]
call fcn.00403c70
test al, al
jne 0x40742a
push 0x3e8
call ebp
inc esi
cmp esi, 0xa
jl 0x407410
lea ecx, [esp + 0x1c]
call fcn.00403c70
test al, al
jne 0x407450
lea ecx, [esp + 0x1c]
mov dword [esp + 0x9e80], 0xffffffff
call fcn.00403780
jmp 0x40733f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push str.BITS
push 0
push 0x1f0003
call ebx
mov esi, eax
mov eax, dword [0x4125cc]
push 0x64
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x1f4
mov edi, eax
call ebp
test esi, esi
jne 0x40749e
test edi, edi
jne 0x407456
lea ecx, [esp + 0x1c]
mov dword [esp + 0x9e80], 0xffffffff
call fcn.00403780
jmp 0x40733f
mov ecx, 0x412520
call fcn.004022d0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x9e80], 0xffffffff
call fcn.00403780
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov ecx, dword [esp + 0x9e78]
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x9e74
ret