Function at 0x1400682d0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Encode data using xor
Get hostname
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x11b0
call fcn.14006d2e0
sub rsp, rax
mov rsi, rcx
mov rax, qword [0x140266398]
xor rax, rsp
mov qword [rsp + 0x11a8], rax
mov dword [0x14026823c], 0x6c6c6548
mov word [0x140268240], 0x6f
movaps xmm0, xmmword [str.0123456789abcdef]
movups xmmword [0x140278b4c], xmm0
mov byte [0x140278b5c], 0
movaps xmm0, xmmword [str.1234567890abcdef]
movups xmmword [0x140278b5d], xmm0
mov byte [0x140278b6d], 0
lea rcx, [0x14026833c]
lea r8, str.ab2adfc1e6cd689c3eb6c6135e49791c68956c2e41537b8b11ba
mov edx, 0x104
call fcn.14008eb58
lea rcx, [0x140268440]
lea r8, str.bb7fe5e0e2c9688a3eabda12404f692f4a8e470943487f9d0c83c75177586a2c43887e3271714d9375
mov edx, 0x104
call fcn.14008eb58
lea rcx, [0x140268544]
lea r8, str.db26b3c0e7c963c1079ed6
mov edx, 0x104
call fcn.14008eb58
lea rcx, [0x140268648]
lea r8, str.db26b3e7f1867f9707
mov edx, 0x104
call fcn.14008eb58
lea rcx, [0x14026874c]
lea r8, str.ab2adfc1e6cd689c3eb6c6135e49791c7c937834584e7f9c3e85dc1f54497d6e468a7c
mov edx, 0x104
call fcn.14008eb58
cmp byte [0x140268440], 0
je 0x14006840a
lea rdi, [rsp + 0x30]
xor r15d, r15d
lea r12, [0x14026823c]
lea rbx, [0x140268440]
lea r14, str._2hhx
nop dword [rax + rax]
lea rcx, [r15 + r12]
add rcx, 0x204
mov rdx, r14
mov r8, rdi
call fcn.140069790
add r15, 2
mov rcx, rbx
call fcn.14008f040
inc rdi
cmp rax, r15
ja 0x1400683e0
lea rcx, [0x14026874c]
call fcn.14008f040
mov rdi, rax
shr rdi, 1
cmp byte [0x14026874c], 0
je 0x14006847a
lea rbx, [rsp + 0x30]
xor r12d, r12d
lea r13, [0x14026823c]
lea r14, [0x14026874c]
lea r15, str._2hhx
nop word cs:[rax + rax]
lea rcx, [r12 + r13]
add rcx, 0x510
mov rdx, r15
mov r8, rbx
call fcn.140069790
add r12, 2
mov rcx, r14
call fcn.14008f040
inc rbx
cmp rax, r12
ja 0x140068450
test edi, edi
jle 0x14006855a
mov eax, edi
cmp rax, 8
jae 0x140068491
xor ecx, ecx
jmp 0x14006852f
cmp eax, 0x20
jae 0x14006849a
xor ecx, ecx
jmp 0x1400684ec
mov edx, edi
and edx, 0x1f
mov rcx, rax
sub rcx, rdx
xor r8d, r8d
lea r9, [0x1400a79d0]
nop
movaps xmm0, xmmword [r8 + r9]
movaps xmm1, xmmword [r8 + r9 + 0x10]
xorps xmm0, xmmword [rsp + r8 + 0x30]
xorps xmm1, xmmword [rsp + r8 + 0x40]
movaps xmmword [rsp + r8 + 0x1140], xmm0
movaps xmmword [rsp + r8 + 0x1150], xmm1
add r8, 0x20
cmp rcx, r8
jne 0x1400684b0
test rdx, rdx
je 0x14006855a
cmp edx, 8
jb 0x14006852f
mov rdx, rcx
mov r8d, edi
and r8d, 7
mov rcx, rax
sub rcx, r8
lea r9, [0x1400a79d0]
nop word cs:[rax + rax]
mov r10, qword [rdx + r9]
xor r10, qword [rsp + rdx + 0x30]
mov qword [rsp + rdx + 0x1140], r10
add rdx, 8
cmp rcx, rdx
jne 0x140068510
test r8, r8
je 0x14006855a
lea rdx, [0x1400a79d0]
nop word cs:[rax + rax]
movzx r8d, byte [rcx + rdx]
xor r8b, byte [rsp + rcx + 0x30]
mov byte [rsp + rcx + 0x1140], r8b
inc rcx
cmp rax, rcx
jne 0x140068540
movsxd rax, edi
mov byte [rsp + rax + 0x1140], 0
call fcn.1400633a0
call fcn.1400633b0
call fcn.1400633a0
lea r8, [0x1400b03e0]
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0x1140]
call fcn.14008c134
test eax, eax
jne 0x1400685b8
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400685b8
call fcn.14008b9e4
call fcn.1400633b0
call fcn.1400633a0
lea rcx, [0x1400a7a4f]
call fcn.14008ddf8
jmp 0x140068633
lea rdx, str.error.log
lea r8, [0x1400b03e0]
lea rcx, [rsp + 0x30]
call fcn.14008c134
test eax, eax
jne 0x1400685e3
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400685e3
call fcn.14008b9e4
call fcn.1400633b0
mov dword [rsp + 0x1090], 0x104
lea rdi, [rsp + 0x30]
mov r8d, 0x208
mov rcx, rdi
xor edx, edx
call fcn.14007df10
lea rdx, [rsp + 0x1090]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xor ecx, ecx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x140068658
mov rcx, qword [rsp + 0x11a8]
xor rcx, rsp
call fcn.14006d340
xor eax, eax
add rsp, 0x11b0
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400633a0
lea rdi, [0x140268544]
mov rcx, rdi
call fcn.14008f040
shr rax, 1
mov dword [rsp + 0x20], eax
lea rbx, [0x1400a79d0]
lea r14, [rsp + 0x1120]
mov rdx, rdi
mov r8, rbx
mov r9, r14
call fcn.140068840
lea rdi, [0x140268648]
mov rcx, rdi
call fcn.14008f040
shr rax, 1
mov dword [rsp + 0x20], eax
lea r15, [rsp + 0x1100]
mov rdx, rdi
mov r8, rbx
mov r9, r15
call fcn.140068840
mov rcx, rsi
mov rdx, r14
mov r8, r15
call fcn.1400689e0
call fcn.1400633a0
call fcn.140068ad0
test eax, eax
jne 0x14006882e
call fcn.1400633b0
call fcn.140068b20
mov edi, eax
call fcn.1400633a0
test edi, edi
je 0x140068726
call fcn.1400633a0
call fcn.1400633b0
call fcn.140068ad0
call fcn.1400633b0
call fcn.1400633a0
call fcn.1400633b0
call fcn.140068b20
call fcn.1400633a0
call fcn.1400633b0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdi, [0x14026833c]
mov rcx, rdi
call fcn.14008f040
shr rax, 1
mov dword [rsp + 0x20], eax
lea r8, [0x1400a79d0]
lea rbx, [rsp + 0x1090]
mov rdx, rdi
mov r9, rbx
call fcn.140068840
lea rdx, [rsp + 0x30]
mov r8, rbx
call fcn.140068c30
call fcn.1400633b0
call fcn.1400633a0
lea rdi, [rsp + 0x146]
mov dword [rsp + 0x20], 0
lea rbx, str.resource
mov r8d, 0x65
mov rcx, rsi
mov rdx, rdi
mov r9, rbx
call fcn.140069270
call fcn.1400633b0
lea rdx, [rsp + 0x24a]
mov dword [rsp + 0x20], 8
mov r8d, 0x66
mov rcx, rsi
mov r9, rbx
call fcn.140069270
call fcn.1400633a0
lea rdx, [rsp + 0x452]
mov dword [rsp + 0x20], 0
mov r8d, 0x67
mov rcx, rsi
mov r9, rbx
call fcn.140069270
call fcn.1400633b0
lea rdx, [rsp + 0x34e]
mov dword [rsp + 0x20], 0
mov r8d, 0x68
mov rcx, rsi
mov r9, rbx
call fcn.140069270
call fcn.1400633a0
mov rdx, rdi
call fcn.140069330
call fcn.1400633a0
call fcn.1400633b0
lea rdx, [rsp + 0x1140]
call fcn.140069440
call fcn.1400633a0
int3