Function at 0x40d570
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49f23d
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x4c400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00409e80
test eax, eax
jne 0x40d5eb
push str.RECSR202210121837mutex
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [ebp - 0x90], ebx
call esi
cmp eax, 0xb7
jne 0x40d609
test ebx, ebx
je 0x40d5d6
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push eax
push str.RunEntryChromeSvcRun
push str._s:CreateMutex___alreadly_run:_d
call fcn.004015b0
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043cc06
mov esp, ebp
pop ebp
ret
push str.RECSR202210121837Event
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x8c], eax
test eax, eax
jne 0x40d639
call esi
push eax
push str.RunEntryChromeSvcRun
push str._s:CreateEvent___failed:_d
call fcn.004015b0
add esp, 0xc
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x70]
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 0x70], xmm0
call ebx
mov edi, 1
mov ecx, edi
call fcn.00407ac0
mov esi, dword [0x4c5294]
lea eax, [ebp - 0x18]
test esi, esi
xorps xmm0, xmm0
push eax
cmove esi, edi
movlpd qword [ebp - 0x18], xmm0
call ebx
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x14]
call fcn.00408070
mov ecx, eax
or ecx, edx
je 0x40d6b8
cmp ebx, edx
jb 0x40d6bf
ja 0x40d68d
cmp edi, eax
jbe 0x40d6bf
sub edi, eax
push 0xc9
push 0x2a69c000
sbb ebx, edx
push ebx
push edi
call fcn.00497d20
test edx, edx
jb 0x40d6bf
ja 0x40d6ac
cmp eax, esi
jb 0x40d6bf
sub eax, esi
sbb edx, 0
jne 0x40d6b8
cmp eax, 5
jb 0x40d6bf
xor ecx, ecx
call fcn.00408150
xorps xmm0, xmm0
xor esi, esi
movlpd qword [ebp - 0x18], xmm0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x18]
movlpd qword [ebp - 0x20], xmm0
mov ebx, dword [ebp - 0x1c]
movlpd qword [ebp - 0x88], xmm0
mov edi, dword [ebp - 0x88]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7c], eax
test esi, esi
je 0x40d75c
mov eax, dword [ebp - 0x8c]
push 0x1b7740
test eax, eax
je 0x40d715
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x40da84
jmp 0x40d71b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
add ecx, 0x1b7740
mov dword [ebp - 0x78], ecx
adc eax, 0
add dword [ebp - 0x7c], 0x1b7740
mov dword [ebp - 0x74], eax
adc ebx, 0
add edi, 0x1b7740
adc dword [ebp - 0x84], 0
jne 0x40d755
cmp edi, 0x5265c00
jb 0x40d833
xor ecx, ecx
call fcn.00407ac0
call fcn.00408890
mov eax, dword [ebp - 0x7c]
mov ecx, 1
mov dword [ebp - 0x7c], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x74], eax
mov eax, dword [0x4c5294]
test eax, eax
movlpd qword [ebp - 0x20], xmm0
cmovle eax, ecx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x84], eax
call fcn.00408070
mov ecx, eax
mov dword [ebp - 0x1c], eax
or ecx, edx
jne 0x40d7b6
lea edi, [ecx + 2]
jmp 0x40d7ee
mov eax, dword [ebp - 0x84]
cmp eax, edx
jb 0x40d818
mov ecx, dword [ebp - 0x1c]
ja 0x40d7c9
cmp edi, ecx
jbe 0x40d818
sub edi, ecx
push 0xc9
push 0x2a69c000
sbb eax, edx
push eax
push edi
call fcn.00497d20
test edx, edx
jb 0x40d818
ja 0x40d7e9
cmp eax, dword [ebp - 0x14]
jb 0x40d818
mov edi, 1
test esi, esi
jne 0x40d818
lea ecx, [esi + 1]
call fcn.00408150
push esi
push esi
push esi
xor eax, eax
cmp edi, 1
push esi
setne al
xor edx, edx
push esi
add eax, 0x2be
xor ecx, ecx
push eax
push esi
push esi
call fcn.0040a750
xorps xmm0, xmm0
movlpd qword [ebp - 0x88], xmm0
mov edi, dword [ebp - 0x88]
test esi, esi
je 0x40d83f
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x78]
test eax, eax
jne 0x40d83f
cmp ecx, 0x5265c00
jb 0x40d87b
push 0
push 0
push 0
xor eax, eax
test esi, esi
push 0
setne al
xor edx, edx
push 0
add eax, 0x2bc
xor ecx, ecx
push eax
push 0
push 0
call fcn.0040a750
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x78], eax
test esi, esi
je 0x40d88c
test ebx, ebx
jne 0x40d88c
cmp dword [ebp - 0x7c], 0xa4cb80
jb 0x40da37
call fcn.00409e80
test eax, eax
jne 0x40da26
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
lea edx, [ebp - 0x38]
mov dword [ebp - 4], eax
call fcn.00405580
test eax, eax
je 0x40d8e9
cmp dword [ebp - 0x24], 8
lea ecx, [ebp - 0x38]
cmovae ecx, dword [ebp - 0x38]
sub esp, 0x10
push 0
push ecx
call fcn.0040c090
test eax, eax
jne 0x40da47
push str.RunEntryChromeSvcRun
push str._s:JHCreateProcess___failed
call fcn.004015b0
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.00404ab0
lea edx, [ebp - 0x50]
call fcn.00404e70
call fcn.0040cf90
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x3c]
cmp edx, 8
jb 0x40d96c
mov ecx, dword [ebp - 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40d962
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40daaf
push edx
push ecx
call fcn.0043d19d
add esp, 8
xor eax, eax
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
cmp edx, 8
jb 0x40d9bd
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40d9b3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40daaf
push edx
push ecx
call fcn.0043d19d
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x40da12
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40da08
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40daaf
push edx
push ecx
call fcn.0043d19d
add esp, 8
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov ecx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x7c], ecx
cmp esi, 0xa
lea eax, [esi + 1]
cmovge eax, esi
mov esi, eax
jmp 0x40d6f1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x24]
cmp edx, 8
jb 0x40da84
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40da7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40daaf
push edx
push ecx
call fcn.0043d19d
add esp, 8
mov eax, dword [ebp - 0x90]
test eax, eax
je 0x40da95
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x40d5eb
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40d5eb
call fcn.00446380
int3