Function at 0x4b91b4
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd4
push ebx
push esi
mov dword [ebp - 0x10], eax
mov esi, 0x4c5908
push 1
lea eax, [ebp - 0x24]
push eax
call sub.advapi32.dll_InitializeSecurityDescriptor
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x24]
push eax
call sub.advapi32.dll_SetSecurityDescriptorDacl
mov dword [ebp - 0xc], 0xc
lea eax, [ebp - 0x24]
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x4c3570]
call fcn.004049a8
push eax
push 0x800
push 0
push 4
lea eax, [ebp - 0xc]
push eax
push 0xffffffffffffffff
call sub.kernel32.dll_CreateFileMappingA
mov dword [0x4c58ec], eax
call sub.kernel32.dll_GetLastError
mov ebx, eax
cmp ebx, 0xb7
jne 0x4b9268
mov eax, dword [0x4c3570]
call fcn.004049a8
push eax
push 0
push 0xf001f
call sub.kernel32.dll_OpenFileMappingA
mov dword [0x4c58ec], eax
cmp dword [0x4c58ec], 0
jne 0x4b92cf
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x2c]
xor ecx, ecx
mov al, 0x36
call fcn.004bc968
jmp 0x4b92cf
mov eax, dword [0x4c356c]
call fcn.004049a8
push eax
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.00406b90
mov dword [0x4c58f0], eax
push ebp
xor edx, edx
mov eax, 2
call fcn.004b9160
pop ecx
mov dword [0x4c58f4], eax
push ebp
mov dl, 1
mov eax, 3
call fcn.004b9160
pop ecx
mov dword [0x4c58f8], eax
push ebp
xor edx, edx
mov eax, 4
call fcn.004b9160
pop ecx
mov dword [0x4c58fc], eax
push ebp
xor edx, edx
mov eax, 5
call fcn.004b9160
pop ecx
mov dword [0x4c5900], eax
push 0
push 0
push 0
push 0xf001f
mov eax, dword [0x4c58ec]
push eax
call sub.kernel32.dll_MapViewOfFile
mov dword [0x4c5904], eax
cmp dword [0x4c5904], 0
jne 0x4b930b
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x2c]
xor ecx, ecx
mov al, 0x36
call fcn.004bc968
mov eax, dword [0x4c5904]
add eax, 0x800
sub eax, 4
mov dword [esi], eax
mov eax, dword [esi]
mov edx, eax
sub edx, 4
mov dword [0x4c590c], edx
mov edx, eax
sub edx, 8
mov dword [0x4c5910], edx
mov edx, eax
sub edx, 0xc
mov dword [0x4c5928], edx
mov edx, eax
sub edx, 0x10
mov dword [0x4c5914], edx
mov edx, eax
sub edx, 0x14
mov dword [0x4c5918], edx
mov edx, eax
sub edx, 0x18
mov dword [0x4c591c], edx
mov edx, eax
sub edx, 0x1c
mov dword [0x4c5920], edx
sub eax, 0x20
mov dword [0x4c5924], eax
mov eax, dword [0x4c5924]
sub eax, 8
mov dword [0x4c592c], eax
mov eax, dword [0x4c592c]
dec eax
mov dword [0x4c5930], eax
mov eax, dword [0x4c5930]
dec eax
mov dword [0x4c5934], eax
cmp ebx, 0xb7
jne 0x4b93f6
mov eax, dword [0x4c356c]
call fcn.004049a8
push eax
push 0
push 0x1f0001
call sub.kernel32.dll_OpenMutexA
mov dword [0x4c58f0], eax
mov eax, 2
call fcn.004b9118
mov dword [0x4c58f4], eax
mov eax, 3
call fcn.004b9118
mov dword [0x4c58f8], eax
mov eax, 4
call fcn.004b9118
mov dword [0x4c58fc], eax
mov eax, 5
call fcn.004b9118
mov dword [0x4c5900], eax
jmp 0x4b943b
mov eax, dword [esi]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c590c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c5928]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c5914]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c5918]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c591c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c5920]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c5924]
xor edx, edx
mov dword [eax], edx
mov eax, dword [esi]
cmp dword [eax], 0
jge 0x4b9448
mov eax, dword [esi]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4c590c]
cmp dword [eax], 0
jge 0x4b945b
mov eax, dword [0x4c590c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x10]
mov byte [eax + 5], 1
pop esi
pop ebx
mov esp, ebp
pop ebp
ret