Function at 0x489d40
Capabilities:
Check mutex on windows
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x27c
mov eax, dword [0x4eb664]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x4efc20]
test eax, eax
jne 0x489fb2
push ebx
push edi
xor ebx, ebx
push 0x3f
lea eax, [ebp - 0x43]
push ebx
push eax
mov byte [ebp - 0x44], bl
call fcn.004921d0
add esp, 0xc
lea eax, [ebp - 0x44]
push 0xa
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.00499a68
add esp, 0xc
lea ecx, [ebp - 0x264]
push str.chrome.statistics.share.
call fcn.00407395
push str.chrome.statistics.mutex.
lea ecx, [ebp - 0x27c]
call fcn.00407395
lea eax, [ebp - 0x44]
push eax
call fcn.004071c8
pop ecx
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x264]
call fcn.00420541
lea eax, [ebp - 0x44]
push eax
call fcn.004071c8
pop ecx
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00420541
cmp dword [ebp - 0x268], 0x10
lea eax, [ebp - 0x27c]
cmovae eax, dword [ebp - 0x27c]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, eax
test edi, edi
je 0x489f6a
push 0x3e8
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x489f6a
cmp dword [ebp - 0x250], 0x10
push esi
lea eax, [ebp - 0x264]
cmovae eax, dword [ebp - 0x264]
push eax
push 4
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov esi, eax
test esi, esi
je 0x489f3c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x489e88
push 4
push 0
push 0
push 4
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
test ecx, ecx
je 0x489e80
mov eax, dword [ecx]
push ecx
mov dword [0x4efc20], eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push esi
call ebx
jmp 0x489f60
push 0x340
call fcn.00449b05
pop ecx
test eax, eax
je 0x489ea5
mov ecx, eax
call fcn.004889ee
mov dword [0x4efc20], eax
jmp 0x489eac
and dword [0x4efc20], 0
push 4
push 0
push 0
push 0xf001f
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
test ecx, ecx
je 0x489ed2
mov eax, dword [0x4efc20]
push ecx
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [0x4efc28]
test al, 1
jne 0x489ef4
or eax, 1
push 0x4bb3a5
mov dword [0x4efc28], eax
mov dword [0x4efc24], esi
call fcn.0048f202
pop ecx
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x24c], ax
lea eax, [ebp - 0x24a]
push eax
call fcn.004921d0
add esp, 0xc
lea eax, [ebp - 0x24c]
push 0x104
push eax
push 0x400000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x489f60
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x489f60
push 0x340
call fcn.00449b05
pop ecx
test eax, eax
je 0x489f59
mov ecx, eax
call fcn.004889ee
mov dword [0x4efc20], eax
jmp 0x489f60
and dword [0x4efc20], 0
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
pop esi
jmp 0x489f8e
push 0x340
call fcn.00449b05
pop ecx
test eax, eax
je 0x489f87
mov ecx, eax
call fcn.004889ee
mov dword [0x4efc20], eax
jmp 0x489f8e
and dword [0x4efc20], 0
test edi, edi
je 0x489f95
push edi
call ebx
lea ecx, [ebp - 0x27c]
call fcn.004073c4
lea ecx, [ebp - 0x264]
call fcn.004073c4
mov eax, dword [0x4efc20]
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048f059
leave
ret