Function at 0x4d44bc
Capabilities:
Check mutex on windows
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd4
mov dword [ebp - 0x10], eax
push 1
lea eax, [ebp - 0x24]
push eax
call sub.advapi32.dll_InitializeSecurityDescriptor
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x24]
push eax
call sub.advapi32.dll_SetSecurityDescriptorDacl
mov dword [ebp - 0xc], 0xc
lea eax, [ebp - 0x24]
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x4df024]
call fcn.00404b48
push eax
push 0x400
push 0
push 4
lea eax, [ebp - 0xc]
push eax
push 0xffffffffffffffff
call sub.kernel32.dll_CreateFileMappingA
mov dword [0x4e1078], eax
call sub.kernel32.dll_GetLastError_1
cmp eax, 0xb7
jne 0x4d464b
mov eax, dword [0x4df024]
call fcn.00404b48
push eax
push 0
push 0xf001f
call sub.kernel32.dll_OpenFileMappingA
mov dword [0x4e1078], eax
cmp dword [0x4e1078], 0
jne 0x4d4564
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x2c]
xor ecx, ecx
mov al, 0x3a
call fcn.004bf058
push 0
push 0
push 0
push 0xf001f
mov eax, dword [0x4e1078]
push eax
call sub.kernel32.dll_MapViewOfFile
mov dword [0x4e1090], eax
cmp dword [0x4e1090], 0
jne 0x4d45a0
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x2c]
xor ecx, ecx
mov al, 0x3a
call fcn.004bf058
mov eax, dword [0x4e1090]
add eax, 0x400
sub eax, 4
mov dword [0x4e1094], eax
mov eax, dword [0x4e1094]
sub eax, 4
mov dword [0x4e1098], eax
mov eax, dword [0x4e1098]
sub eax, 4
mov dword [0x4e109c], eax
mov eax, dword [0x4e109c]
sub eax, 8
mov dword [0x4e10a4], eax
mov eax, dword [0x4e10a4]
sub eax, 4
mov dword [0x4e10a0], eax
mov eax, dword [0x4df020]
call fcn.00404b48
push eax
push 0
push 0x1f0001
call sub.kernel32.dll_OpenMutexA
mov dword [0x4e107c], eax
push ebp
mov eax, 2
call fcn.004d4410
pop ecx
mov dword [0x4e1080], eax
push ebp
mov eax, 3
call fcn.004d4410
pop ecx
mov dword [0x4e1084], eax
push ebp
mov eax, 4
call fcn.004d4410
pop ecx
mov dword [0x4e1088], eax
push ebp
mov eax, 5
call fcn.004d4410
pop ecx
mov dword [0x4e108c], eax
jmp 0x4d472e
mov eax, dword [0x4df020]
call fcn.00404b48
push eax
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.00406e68
mov dword [0x4e107c], eax
push ebp
xor edx, edx
mov eax, 2
call fcn.004d4460
pop ecx
mov dword [0x4e1080], eax
push ebp
mov dl, 1
mov eax, 3
call fcn.004d4460
pop ecx
mov dword [0x4e1084], eax
push ebp
xor edx, edx
mov eax, 4
call fcn.004d4460
pop ecx
mov dword [0x4e1088], eax
push ebp
xor edx, edx
mov eax, 5
call fcn.004d4460
pop ecx
mov dword [0x4e108c], eax
push 0
push 0
push 0
push 0xf001f
mov eax, dword [0x4e1078]
push eax
call sub.kernel32.dll_MapViewOfFile
mov dword [0x4e1090], eax
mov eax, dword [0x4e1090]
add eax, 0x400
sub eax, 4
mov dword [0x4e1094], eax
mov eax, dword [0x4e1094]
sub eax, 4
mov dword [0x4e1098], eax
mov eax, dword [0x4e1098]
sub eax, 4
mov dword [0x4e109c], eax
mov eax, dword [0x4e109c]
sub eax, 8
mov dword [0x4e10a4], eax
mov eax, dword [0x4e10a4]
sub eax, 4
mov dword [0x4e10a0], eax
mov eax, dword [0x4e1094]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e1098]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e10a0]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e1094]
cmp dword [eax], 0
jge 0x4d4741
mov eax, dword [0x4e1094]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e1098]
cmp dword [eax], 0
jge 0x4d4754
mov eax, dword [0x4e1098]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x10]
mov byte [eax + 0xf], 1
mov esp, ebp
pop ebp
ret