Function at 0x41c6b0
Capabilities:
Check mutex on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x3c
mov edx, dword [0x428020]
mov dword [esp + 0x30], 0
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x2c], 0
test edx, edx
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
je 0x41c8a0
mov eax, dword [esp + 0x54]
test byte [eax + 0x18], 0x10
je 0x41c70e
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x41c882
mov dword [esp + 0x2c], 0x2000000
mov dword [esp], ebp
call sub.ADVAPI32.DLL_IsValidSecurityDescriptor
sub esp, 4
xor edx, edx
test eax, eax
jne 0x41c730
add esp, 0x3c
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], ebp
lea edi, [esp + 0x34]
lea esi, [esp + 0x3a]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
call sub.ADVAPI32.DLL_GetSecurityDescriptorControl
sub esp, 0xc
xor edx, edx
test eax, eax
je 0x41c71f
mov edi, dword [esp + 0x54]
mov edx, dword [edi + 8]
test edx, edx
je 0x41c782
mov eax, dword [edi + 0x10]
test eax, eax
je 0x41c869
mov eax, dword [edi + 0x14]
test al, 2
je 0x41c776
mov dword [esp + 0x24], 1
test al, 4
je 0x41c782
mov dword [esp + 0x20], 1
movzx eax, word [esp + 0x3a]
test al, 4
je 0x41c7b3
mov dword [esp + 0x30], 0x40000
mov esi, dword [esp + 0x24]
mov dword [esp + 0x28], 4
test esi, esi
je 0x41c7b3
mov dword [esp + 0x30], 0xc0000
mov dword [esp + 0x28], 7
test al, 0x10
je 0x41c7d4
mov edi, dword [esp + 0x24]
test edi, edi
jne 0x41c7c7
mov edx, dword [esp + 0x20]
test edx, edx
je 0x41c7d4
or dword [esp + 0x30], 0x1000000
or dword [esp + 0x28], 8
mov ecx, dword [esp + 0x28]
xor edx, edx
test ecx, ecx
je 0x41c71f
mov ebx, dword [esp + 0x24]
test ebx, ebx
je 0x41c7f2
or dword [esp + 0x2c], 0x2000000
mov dword [esp + 0x18], 0
mov edx, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x10], 3
mov eax, dword [esp + 0x50]
mov dword [esp + 0x14], edx
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 7
mov dword [esp], eax
call sub.KERNEL32.dll_CreateFileA
sub esp, 0x1c
xor edx, edx
cmp eax, 0xffffffff
mov esi, eax
je 0x41c71f
mov dword [esp + 8], ebp
mov ecx, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.ADVAPI32.DLL_SetKernelObjectSecurity
sub esp, 0xc
mov ebp, eax
mov dword [esp], esi
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
mov edx, ebp
jmp 0x41c71f
mov ebx, dword [0x428028]
mov ecx, dword [0x42802c]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], ecx
jmp 0x41c782
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0041cb30
mov edx, eax
jmp 0x41c71f
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0
call sub.KERNEL32.dll_CreateMutexA
sub esp, 0xc
mov esi, eax
test eax, eax
je 0x41c927
mov dword [esp + 4], eax
mov dword [esp], 0x428024
call sub.KERNEL32.dll_InterlockedExchange
sub esp, 8
mov ebx, eax
test eax, eax
je 0x41c92e
mov dword [esp + 4], eax
mov dword [esp], 0x428024
call sub.KERNEL32.dll_InterlockedExchange
sub esp, 8
mov dword [esp], esi
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call sub.KERNEL32.dll_WaitForSingleObject
sub esp, 8
mov dword [esp], ebx
call sub.KERNEL32.dll_ReleaseMutex
mov eax, dword [0x428020]
sub esp, 4
test eax, eax
jne 0x41c6f1
xor edx, edx
jmp 0x41c71f
mov dword [esp], 0x4396e0
mov ebx, 0x439700
call sub.KERNEL32.dll_InitializeCriticalSection
sub esp, 4
mov dword [esp], 0x439830
call sub.KERNEL32.dll_InitializeCriticalSection
sub esp, 4
mov edx, 0x124
test bl, 4
je 0x41c96d
xor edx, edx
mov ebx, 0x439704
mov dword [0x439700], edx
mov edx, 0x120
cld
mov eax, dword [esp + 0x28]
mov ecx, edx
shr ecx, 2
mov edi, ebx
rep stosd dword es:[edi], eax
call fcn.0041c9d0
mov dword [esp], esi
mov eax, 1
mov dword [0x428020], eax
call sub.KERNEL32.dll_ReleaseMutex
sub esp, 4
mov eax, 1
jmp 0x41c91f