Function at 0x140008460
Capabilities:
Check mutex on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x240], rbx
mov rax, qword [0x14004f018]
xor rax, rsp
mov qword [rbp + 0xe8], rax
mov r15, rdx
mov r14, rcx
mov rcx, qword [rcx]
xor r13d, r13d
test rcx, rcx
je 0x1400084b7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r14], r13
mov word [r14 + 8], r13w
mov qword [rsp + 0x78], r13
mov ecx, 0x58
call fcn.140025ae4
mov rbx, rax
mov qword [rsp + 0x78], rax
mov qword [rax], r13
lea rsi, [rax + 8]
mov qword [rsi], r13
mov dword [rax + 0x10], 0x18
lea rdi, [rax + 0x28]
mov qword [rax + 0x18], rdi
mov dword [rax + 0x20], r13d
lea rdx, str.Advapi32.dll
lea rcx, [rsp + 0x40]
call fcn.140002c74
nop
call fcn.1400161a0
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140016270
mov qword [rbx + 0x50], rax
lea rcx, [rsp + 0x40]
call fcn.140002b70
mov r9, rsi
mov r8b, 1
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.140015e00
mov rbx, qword [rsp + 0x78]
mov qword [rbx], rax
cmp qword [rbx], 0
lea rdi, [rbx + 0x10]
jne 0x14000854a
mov rdi, r13
mov rcx, r15
call fcn.140002a60
test al, al
jne 0x14000855d
call fcn.140002a6c
jmp 0x140008560
mov rax, r13
mov r8, rax
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [r14], rax
test rax, rax
jne 0x1400085b1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x1400085b1
lea ecx, [rax + 5]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r15
call fcn.140002a60
test al, al
jne 0x14000859d
call fcn.140002a6c
jmp 0x1400085a0
mov rax, r13
mov r8, rax
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [r14], rax
cmp qword [r14], 0
je 0x14000872d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400085cd
mov byte [r14 + 9], 1
mov rsi, qword [r14]
lea rcx, [rbp - 0x70]
call fcn.140011dd0
cmp dword [rbp - 0x6c], 6
jb 0x140008729
test rsi, rsi
je 0x140008729
lea rdx, str.Advapi32.dll
lea rcx, [rsp + 0x40]
call fcn.140002c74
nop
call fcn.1400161a0
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140016270
mov rdi, rax
lea rcx, [rsp + 0x40]
call fcn.140002b70
test rdi, rdi
je 0x140008729
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov dword [rbp - 0x7c], r13d
mov dword [rbp - 0x80], r13d
movups xmm0, xmmword [str.ConvertStringSecurityDescriptorToSecurityDescriptorW]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [0x14003e7f0]
movups xmmword [rbp + 0xc0], xmm1
movups xmm0, xmmword [0x14003e800]
movups xmmword [rbp + 0xd0], xmm0
mov eax, dword [0x14003e810]
mov dword [rbp + 0xe0], eax
movzx eax, byte [0x14003e814]
mov byte [rbp + 0xe4], al
lea rdx, [rbp + 0xb0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x140008729
lea rdx, str.GetSecurityDescriptorSacl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
je 0x140008729
lea rdx, str.SetSecurityInfo
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x140008729
xor r9d, r9d
lea r8, [rsp + 0x68]
lea edx, [r9 + 1]
lea rcx, str.S:_ML__NW___LW_
call r12
test eax, eax
je 0x140008729
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x7c]
mov rcx, qword [rsp + 0x68]
call r15
test eax, eax
je 0x14000871e
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea edx, [r9 + 6]
lea r8d, [r9 + 0x10]
mov rcx, rsi
call rdi
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp qword [r14], 0
setne sil
mov rdi, qword [rbx]
test rdi, rdi
je 0x140008750
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140008763
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rbx + 8], r13
mov edx, 0x58
mov rcx, rbx
call fcn.140025dd4
mov qword [rsp + 0x78], r13
movzx eax, sil
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.140025ac0
mov rbx, qword [rsp + 0x240]
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret