Function at 0x5df08e5b
Capabilities:
Check mutex on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xb0
mov eax, dword [0x5df0b004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, 0x94
push edi
mov dword [ebp - 0xb0], eax
xor ebx, ebx
lea eax, [ebp - 0x98]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x98], edi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
xor esi, esi
test eax, eax
je 0x5df08ec6
cmp dword [ebp - 0x88], 2
jne 0x5df08ec6
push 0x5df01418
push ebx
push ebx
inc esi
call fcn.5df13c39
push eax
jmp 0x5df08ece
push 0x5df01408
push ebx
push ebx
push ebx
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventA]
call edi
mov dword [ebp - 0x9c], eax
cmp eax, ebx
jne 0x5df08ee7
xor eax, eax
jmp 0x5df09054
cmp esi, ebx
je 0x5df08efa
push 0x5df013ec
push ebx
push ebx
call fcn.5df13c39
push eax
jmp 0x5df08f02
push 0x5df013d8
push ebx
push ebx
push ebx
call edi
mov dword [ebp - 0xa0], eax
cmp eax, ebx
jne 0x5df08f1c
push dword [ebp - 0x9c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x5df08ee0
cmp esi, ebx
je 0x5df08f32
push 0x5df013c0
push 0x10
push ebx
push 4
call fcn.5df08d2f
push eax
jmp 0x5df08f3d
push 0x5df013ac
push 0x10
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0xa4], eax
cmp eax, ebx
jne 0x5df08f6a
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x9c]
call esi
push dword [ebp - 0xa0]
call esi
jmp 0x5df08ee0
push ebx
push ebx
push ebx
push 0xf001f
push dword [ebp - 0xa4]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
mov dword [ebp - 0xac], edi
cmp edi, ebx
jne 0x5df08f9a
push dword [ebp - 0xa4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x5df08f55
cmp esi, ebx
je 0x5df08fa5
push 0x5df01394
jmp 0x5df08faa
push 0x5df01384
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
mov dword [ebp - 0xa8], eax
cmp eax, ebx
jne 0x5df08fc9
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x5df08f8a
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0xffffffffffffffff
push dword [ebp - 0xa8]
call ebx
mov esi, dword [ebp - 0xb0]
push dword [ebp - 0x9c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
je 0x5df09012
push 0xffffffffffffffff
push dword [ebp - 0xa0]
call ebx
mov esi, dword [ebp - 0xac]
mov edi, dword [ebp - 0xb0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
inc edi
jmp 0x5df09014
xor edi, edi
push dword [ebp - 0xa8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0xa8]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x9c]
call esi
push dword [ebp - 0xa0]
call esi
push dword [ebp - 0xac]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push dword [ebp - 0xa4]
call esi
mov eax, edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.5df099e0
leave
ret 4