Function at 0x4d9780
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x583db0
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x608514]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push eax
push 0x4d9aa0
push 6
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
test eax, eax
je 0x4d99af
cmp dword [ebp - 0x44], 0
je 0x4d99af
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov dword [ebp - 4], 1
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [ebp - 0x40]
push str.9CDB4DA2_ACEA_446E_AA3A_D25628140939__d__p
push eax
call fcn.00446b70
add esp, 0x10
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
cmovae eax, dword [ebp - 0x40]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [esi], eax
test eax, eax
jne 0x4d98ec
cmp dword [0x60e3b0], eax
je 0x4d99a0
push ecx
mov ecx, 0x60e3b0
call fcn.004d07d0
mov eax, dword [0x60e3b0]
cmp byte [eax + 0x54], 0
je 0x4d99a0
cmp dword [eax + 0x58], 4
jb 0x4d99a0
mov bl, byte [eax + 0x5c]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
push 0x1a
push 0x5c2bec
call fcn.004047a0
push 0x2d
push str.RC::RCModuleThreadSync::AcquireLock
push str.d:_rhinoprotect_framework_src_framework_srcutils_rcmodulethreadsync.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x60e3b0
push eax
push 4
call fcn.004d10e0
test bl, bl
je 0x4d98d1
lea eax, [ebp - 0x28]
mov ecx, 0x60e3b0
push eax
call fcn.004d1410
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.004046e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
jmp 0x4d9a47
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x4d990c
mov byte [esi + 4], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
jmp 0x4d9a47
push 4
mov ecx, 0x60e3b0
call fcn.004d1070
mov edi, eax
test edi, edi
je 0x4d998e
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
push 0x1c
push 0x5c2c24
call fcn.004047a0
push 0x37
push str.RC::RCModuleThreadSync::AcquireLock
push str.d:_rhinoprotect_framework_src_framework_srcutils_rcmodulethreadsync.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x60e3b0
push eax
push 4
call fcn.004d10e0
cmp edi, 1
jbe 0x4d9982
lea eax, [ebp - 0x28]
mov ecx, 0x60e3b0
push eax
call fcn.004d1410
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.004046e0
push dword [esi]
mov byte [esi + 4], 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
jmp 0x4d9a47
cmp dword [0x60e3b0], 0
je 0x4d9a4c
push ecx
mov ecx, 0x60e3b0
call fcn.004d07d0
mov eax, dword [0x60e3b0]
cmp byte [eax + 0x54], 0
je 0x4d9a4c
cmp dword [eax + 0x58], 4
jb 0x4d9a4c
mov bl, byte [eax + 0x5c]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x28]
push 0x1a
push 0x5c2c80
call fcn.004047a0
push 0x22
push str.RC::RCModuleThreadSync::AcquireLock
push str.d:_rhinoprotect_framework_src_framework_srcutils_rcmodulethreadsync.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x60e3b0
push eax
push 4
call fcn.004d10e0
test bl, bl
je 0x4d9a3d
lea eax, [ebp - 0x28]
mov ecx, 0x60e3b0
push eax
call fcn.004d1410
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.004046e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0054bed3
mov esp, ebp
pop ebp
ret