Function at 0x41e8a0
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41ebe9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 4
sub esp, 0x140
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 4], 0
jmp 0x41e8f5
push 0x103
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [0x44a140]
push eax
call fcn.004095f0
add esp, 0xc
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x41e946
mov eax, dword [ebp - 0x150]
movsx eax, byte [ebp + eax - 0x12d]
cmp eax, 0x5c
je 0x41e955
mov dword [ebp - 0x14c], 1
jmp 0x41e95f
mov dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0
jne 0x41e994
mov eax, dword [ebp - 0x150]
lea eax, [ebp + eax - 0x12d]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.0040e250
add esp, 8
movzx eax, ax
test eax, eax
je 0x41e9a3
mov dword [ebp - 0x14c], 1
jmp 0x41e9ad
mov dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0
je 0x41e9d6
mov eax, dword [ebp - 0x150]
mov byte [ebp + eax - 0x12c], 0x5c
mov eax, dword [ebp - 0x150]
mov byte [ebp + eax - 0x12b], 0
jmp 0x41e9db
push str.IMGWALK.DLL
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x41e9f2
push str.ImageWalkMutex
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x14], eax
mov eax, dword [0x45a074]
add eax, eax
push eax
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xffffffff
je 0x41ea39
cmp dword [ebp - 0x130], 0x102
jne 0x41ea40
xor eax, eax
jmp 0x41ebf3
push str.ImageWalkMapping
push 0x10000
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x41ea79
cmp dword [ebp - 0x18], 0xffffffff
je 0x41ea79
jmp 0x41eaa6
jmp 0x41ea8b
mov dword [ebp - 0x138], str.Unable_to_create_file_mapping
push 0x4574f0
lea eax, [ebp - 0x138]
push eax
call fcn.00420569
push 0
push 0
push 0
push 2
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x41eae0
mov dword [ebp - 0x13c], str.Unable_to_map_the_view_of_the_file
push 0x4574f0
lea eax, [ebp - 0x13c]
push eax
call fcn.00420569
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov byte [eax], 0
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0041e860
add esp, 8
push 0x10000
mov eax, dword [ebp - 0x28]
push eax
call fcn.0040bdf0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jle 0x41eb36
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.0041fd64
add esp, 0xc
jmp 0x41eb36
mov dword [ebp - 0x1c], 1
jmp 0x41eb48
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x20], 0
je 0x41eb63
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [ebp - 0x18], 0
je 0x41eb7c
cmp dword [ebp - 0x18], 0xffffffff
je 0x41eb7c
jmp 0x41eb81
jmp 0x41eb9d
jmp 0x41eb93
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x14], 0
je 0x41ebb6
cmp dword [ebp - 0x14], 0xffffffff
je 0x41ebb6
jmp 0x41ebbb
jmp 0x41ebe1
jmp 0x41ebcd
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
jmp 0x41ebf3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret