Function at 0x6681ec
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
mov dword [ebp - 0x10], eax
push 1
lea eax, [ebp - 0x28]
push eax
call sub.advapi32.dll_InitializeSecurityDescriptor
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x28]
push eax
call sub.advapi32.dll_SetSecurityDescriptorDacl
mov dword [ebp - 0xc], 0xc
lea eax, [ebp - 0x28]
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x6b7094]
call fcn.004056f0
push eax
push 0x800
push 0
push 4
lea eax, [ebp - 0xc]
push eax
push 0xffffffffffffffff
call sub.KERNEL32.DLL_CreateFileMappingA
mov dword [0x6bcec8], eax
call sub.KERNEL32.DLL_GetLastError_1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xb7
jne 0x66829b
mov eax, dword [0x6b7094]
call fcn.004056f0
push eax
push 0
push 0xf001f
call sub.KERNEL32.DLL_OpenFileMappingA
mov dword [0x6bcec8], eax
cmp dword [0x6bcec8], 0
jne 0x668302
call sub.KERNEL32.DLL_GetLastError_1
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
xor ecx, ecx
mov al, 0x36
call fcn.0067ab78
jmp 0x668302
mov eax, dword [0x6b7090]
call fcn.004056f0
push eax
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.00407f84
mov dword [0x6bcecc], eax
push ebp
xor edx, edx
mov eax, 2
call fcn.00668190
pop ecx
mov dword [0x6bced0], eax
push ebp
mov dl, 1
mov eax, 3
call fcn.00668190
pop ecx
mov dword [0x6bced4], eax
push ebp
xor edx, edx
mov eax, 4
call fcn.00668190
pop ecx
mov dword [0x6bced8], eax
push ebp
xor edx, edx
mov eax, 5
call fcn.00668190
pop ecx
mov dword [0x6bcedc], eax
push 0
push 0
push 0
push 0xf001f
mov eax, dword [0x6bcec8]
push eax
call sub.KERNEL32.DLL_MapViewOfFile
mov dword [0x6bcee0], eax
cmp dword [0x6bcee0], 0
jne 0x66833e
call sub.KERNEL32.DLL_GetLastError_1
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
xor ecx, ecx
mov al, 0x36
call fcn.0067ab78
mov eax, dword [0x6bcee0]
add eax, 0x800
sub eax, 4
mov dword [0x6bcee4], eax
mov eax, dword [0x6bcee4]
sub eax, 4
mov dword [0x6bcee8], eax
mov eax, dword [0x6bcee4]
sub eax, 8
mov dword [0x6bceec], eax
mov eax, dword [0x6bcee4]
sub eax, 0xc
mov dword [0x6bcf04], eax
mov eax, dword [0x6bcee4]
sub eax, 0x10
mov dword [0x6bcef0], eax
mov eax, dword [0x6bcee4]
sub eax, 0x14
mov dword [0x6bcef4], eax
mov eax, dword [0x6bcee4]
sub eax, 0x18
mov dword [0x6bcef8], eax
mov eax, dword [0x6bcee4]
sub eax, 0x1c
mov dword [0x6bcefc], eax
mov eax, dword [0x6bcee4]
sub eax, 0x20
mov dword [0x6bcf00], eax
mov eax, dword [0x6bcf00]
sub eax, 8
mov dword [0x6bcf08], eax
mov eax, dword [0x6bcf08]
dec eax
mov dword [0x6bcf0c], eax
mov eax, dword [0x6bcf0c]
dec eax
mov dword [0x6bcf10], eax
cmp dword [ebp - 0x14], 0xb7
jne 0x668446
mov eax, dword [0x6b7090]
call fcn.004056f0
push eax
push 0
push 0x1f0001
call sub.KERNEL32.DLL_OpenMutexA
mov dword [0x6bcecc], eax
push ebp
mov eax, 2
call fcn.00668140
pop ecx
mov dword [0x6bced0], eax
push ebp
mov eax, 3
call fcn.00668140
pop ecx
mov dword [0x6bced4], eax
push ebp
mov eax, 4
call fcn.00668140
pop ecx
mov dword [0x6bced8], eax
push ebp
mov eax, 5
call fcn.00668140
pop ecx
mov dword [0x6bcedc], eax
jmp 0x66848e
mov eax, dword [0x6bcee4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcee8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcf04]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcef0]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcef4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcef8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcefc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcf00]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcee4]
cmp dword [eax], 0
jge 0x6684a1
mov eax, dword [0x6bcee4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6bcee8]
cmp dword [eax], 0
jge 0x6684b4
mov eax, dword [0x6bcee8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x10]
mov byte [eax + 5], 1
mov esp, ebp
pop ebp
ret