Function at 0x403230
Capabilities:
Check mutex on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [0x4ce540]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x7e
xor ebx, ebx
lea ecx, [ebp - 0x86]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x88], ax
call fcn.00427b00
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xd0], bl
mov dword [ebp - 0xcf], eax
mov dword [ebp - 0xcb], eax
mov dword [ebp - 0xc7], eax
mov dword [ebp - 0xc3], eax
mov word [ebp - 0xbf], ax
mov byte [ebp - 0xbd], al
mov dword [ebp - 0xe4], str.MIGJAoGBAKxoHbQyMLeN7LMVtDBYpqXH3PQOIa5JLcxIwa01BuwH9x2yMHTTuPRBOdcxp5h0uC9ry0180dmuIZIbFWdZpNN0ZVLXMYIGKX2X5Vn_wqrLH9XzbOjPIhf6rvQVUPNVt7nZmHTL6lJcIjxfCk0nNug1FDAdluWpt8kSy2XjAgMBAAE
mov dword [ebp - 0xe0], str.iXf33eR4QwurB2hYrMsT8_p2cDrtje8TNIjNOJojXamJ5f9h1YFzQ46lNPvujE5lFyU5Y5zyeGpAIWqRoRqYg
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x120], ebx
call edi
lea edx, [ebp - 0x104]
push edx
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ebx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebp - 0xec]
mov ecx, eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xec], ecx
call fcn.00401e10
mov esi, eax
cmp esi, ebx
je 0x403384
test esi, 0x20000000
je 0x40336b
cmp esi, ebx
jle 0x4035ba
and esi, 0xffff
or esi, 0xa0070000
jmp 0x4035ba
cmp esi, ebx
jle 0x4035ba
and esi, 0xffff
or esi, 0x80070000
jmp 0x4035ba
push 1
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x4033dc
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, 0x20000000
je 0x4033c0
cmp eax, ebx
jg 0x4033af
mov esi, eax
jmp 0x4035ba
and eax, 0xffff
or eax, 0xa0070000
mov esi, eax
jmp 0x4035ba
cmp eax, ebx
jg 0x4033cb
mov esi, eax
jmp 0x4035ba
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
jmp 0x4035ba
push ebx
push ebx
push 1
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
je 0x403397
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push ebx
push ebx
push ebx
lea ecx, [ebp - 0xd0]
push ebx
mov dword [ebp - 0xb8], 0xc
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xb4], ecx
call esi
mov dword [ebp - 0x9c], eax
cmp eax, ebx
je 0x403397
push ebx
push ebx
push ebx
push ebx
call esi
mov dword [ebp - 0x98], eax
cmp eax, ebx
je 0x403397
push ebx
push ebx
push ebx
push ebx
call esi
mov dword [ebp - 0x94], eax
cmp eax, ebx
je 0x403397
push ebx
push ebx
push ebx
push ebx
call esi
mov dword [ebp - 0x90], eax
cmp eax, ebx
je 0x403397
call edi
push eax
push 0x4c7870
lea edx, [ebp - 0x88]
push 0x40
push edx
call fcn.004266d6
add esp, 0x10
lea eax, [ebp - 0x88]
push eax
push ebx
push ebx
lea ecx, [ebp - 0xb8]
push ecx
call esi
mov dword [ebp - 0x8c], eax
cmp eax, ebx
je 0x403397
push str.SecEditMutext
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
mov dword [ebp - 0xac], esi
cmp esi, ebx
je 0x403397
push str.SecEditSharedMemory
push 4
push ebx
push 4
lea edx, [ebp - 0xb8]
push edx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0xa4], eax
cmp eax, ebx
je 0x403397
push ebx
push ebx
push ebx
push 0xf001f
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0xbc], eax
cmp eax, ebx
jne 0x403538
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, 0x20000000
je 0x403522
cmp eax, ebx
jg 0x403511
mov esi, eax
jmp 0x4035a9
and eax, 0xffff
or eax, 0xa0070000
mov esi, eax
jmp 0x4035a9
cmp eax, ebx
jg 0x40352a
mov esi, eax
jmp 0x4035a9
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
jmp 0x4035a9
push ebx
push ebx
lea ecx, [ebp - 0x128]
push ecx
push 0x403790
mov dword [ebp - 0x108], eax
push ebx
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x110], esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], ebx
call esi
mov edi, eax
mov dword [ebp - 0xa8], edi
cmp edi, ebx
je 0x4034f9
push ebx
push ebx
lea edx, [ebp - 0x128]
push edx
push 0x403950
push ebx
push ebx
call esi
mov dword [ebp - 0xa0], eax
cmp eax, ebx
je 0x4034f9
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor esi, esi
mov eax, dword [ebp - 0xbc]
cmp eax, ebx
je 0x4035ba
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x9c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, ebx
je 0x4035d3
push eax
call edi
mov dword [ebp - 0x9c], ebx
mov eax, dword [ebp - 0x98]
cmp eax, ebx
je 0x4035e6
push eax
call edi
mov dword [ebp - 0x98], ebx
mov eax, dword [ebp - 0x94]
cmp eax, ebx
je 0x4035f9
push eax
call edi
mov dword [ebp - 0x94], ebx
mov eax, dword [ebp - 0x90]
cmp eax, ebx
je 0x40360c
push eax
call edi
mov dword [ebp - 0x90], ebx
mov eax, dword [ebp - 0x8c]
cmp eax, ebx
je 0x40361f
push eax
call edi
mov dword [ebp - 0x8c], ebx
cmp dword [ebp - 0xa4], ebx
je 0x403630
mov eax, dword [ebp - 0xa4]
push eax
call edi
cmp dword [ebp - 0xac], ebx
je 0x403641
mov ecx, dword [ebp - 0xac]
push ecx
call edi
cmp dword [ebp - 0xa8], ebx
je 0x403652
mov edx, dword [ebp - 0xa8]
push edx
call edi
cmp dword [ebp - 0xa0], ebx
je 0x403663
mov eax, dword [ebp - 0xa0]
push eax
call edi
lea ecx, [ebp - 0xec]
cmp dword [ebp - 0xec], ecx
je 0x4036a1
mov eax, dword [ebp - 0xe8]
mov ecx, eax
mov eax, dword [eax + 4]
lea edx, [ebp - 0xec]
mov dword [ebp - 0xe8], eax
push ecx
mov dword [eax], edx
call fcn.00405f30
lea eax, [ebp - 0xec]
add esp, 4
cmp dword [ebp - 0xec], eax
jne 0x403671
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.004265ea
mov esp, ebp
pop ebp
ret