Function at 0x18004b7d0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov eax, dword [rsp + 0xf0]
mov rsi, r8
mov r15, rdx
mov r14, rcx
lea ebx, [rax - 8]
mov dword [rsp + 0x40], ebx
cmp eax, ebx
jbe 0x18004bae6
mov ebp, dword [rsp + 0xf0]
lea edi, [rax - 0x53]
mov r12, qword [rsp + 0x60]
lea rdx, [0x180000000]
mov r13, qword [rsp + 0x60]
mov r10d, 1
mov ebx, dword [rsp + 0xf0]
mov ecx, dword [rsp + 0x40]
mov dword [rsp + 0x48], edi
lea r8d, [r10 + 1]
nop dword [rax]
cmp edi, 0x10
ja case.default.0x18004b863
mov ecx, dword [rdx + rdi*4 + 0x4bbf8]
add rcx, rdx
jmp rcx
xor ebp, ebp
jmp case.0x18004b863.1
mov rax, qword [r15]
lea r9, [rsp + 0xf0]
xor edx, edx
mov word [rsp + 0xf0], r10w
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x20], 0
lea r8d, [rdx + 0x28]
call fcn.180068730
cdqe
mov qword [rsp + 0x70], rax
jmp 0x18004babe
mov rax, qword [rsp + 0x68]
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x50]
mov rax, qword [r15]
mov r8d, 0x92
mov qword [rsp + 0x50], rax
call fcn.18004ff10
jmp 0x18004babe
mov rcx, r12
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18004b9ab
mov rsi, qword [rsp + 0x80]
mov edi, 0x7c
mov r14, qword [rsp + 0x60]
cmp edi, 0x7c
je 0x18004b912
mov r10d, 1
cmp edi, 0x3450
jne 0x18004b980
mov qword [rsp + 0x68], r10
jmp 0x18004b980
mov rcx, r12
mov edx, 0xfffffff0
test r13, r13
je 0x18004b924
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r8d, eax
cmp r14, 1
jne 0x18004b938
or r8d, esi
jmp 0x18004b93f
mov eax, esi
not eax
and r8d, eax
mov rcx, r12
mov edx, 0xfffffff0
test r13, r13
je 0x18004b951
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_SetWindowLongW]
xor eax, eax
mov dword [rsp + 0x30], 0x27
mov dword [rsp + 0x28], eax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], eax
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r10d, 1
add edi, 0x33d4
cmp edi, 0x67a8
jbe 0x18004b8f8
mov rsi, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xd0]
mov edi, dword [rsp + 0x48]
jmp 0x18004bac4
mov qword [rsp + 0x68], 0
jmp 0x18004babe
xor ebx, ebx
jmp case.0x18004b863.1
mov rax, qword [r15]
lea r9, [rsp + 0x48]
xor edx, edx
mov word [rsp + 0x48], r8w
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x20], 0
lea r8d, [rdx + 0x28]
call fcn.180068730
cdqe
lea r9, [rsp + 0x48]
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x50]
xor r12d, r12d
mov eax, 3
mov word [rsp + 0x48], ax
xor edx, edx
mov rax, qword [r15]
mov qword [rsp + 0x50], rax
lea r8d, [r12 + 0x28]
mov qword [rsp + 0x20], r12
call fcn.180068730
cdqe
lea r9, [rsp + 0x48]
mov qword [rsp + 0x60], rax
lea r8d, [r12 + 0x28]
mov eax, 4
mov qword [rsp + 0x20], r12
mov word [rsp + 0x48], ax
lea rcx, [rsp + 0x50]
mov rax, qword [r15]
xor edx, edx
mov qword [rsp + 0x50], rax
call fcn.180068730
movsxd r13, eax
mov rax, qword [rsp + 0xe8]
cmp dword [rax], r12d
je 0x18004ba99
mov rax, qword [rsp + 0x70]
xor r9d, r9d
mov dword [rsp + 0x58], eax
xor r8d, r8d
lea rax, [rsp + 0x58]
xor edx, edx
mov qword [rsp + 0x28], rax
mov ecx, 0xb4
mov qword [rsp + 0x20], r12
call fcn.180052ca0
mov r12, rax
jmp 0x18004babe
mov r12, qword [rsp + 0x70]
jmp 0x18004babe
mov r8, qword [r15 + 0x98]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x18004bb08
mov r10d, 1
lea rdx, [0x180000000]
mov r8d, 2
mov ecx, dword [rsp + 0x40]
dec edi
mov dword [rsp + 0x48], edi
lea eax, [rdi + 0x53]
cmp eax, ecx
ja 0x18004b850
mov eax, dword [rsp + 0xf0]
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r12d, 0xa1
cmp r12d, 0xa1
je 0x18004bb55
cmp r12d, 0x154
jne 0x18004bbcf
cmp ebx, dword [r14]
jae 0x18004bbe8
mov r9, qword [r15 + 0x48]
lea rdx, [0x18009f130]
mov r8d, r10d
mov ecx, r10d
call qword [r15 + 0x30]
mov ebp, eax
test eax, eax
jne 0x18004baed
inc ebx
jmp 0x18004bbc9
mov ecx, dword [r14]
cmp ebx, ecx
jae 0x18004bb6e
nop dword [rax]
mov eax, ebx
cmp byte [rax + rsi], 0
je 0x18004bb6e
inc ebx
cmp ebx, ecx
jb 0x18004bb60
test ebx, ebx
je 0x18004bbcf
mov edi, 0x91
mov eax, edi
sub eax, 0x91
je 0x18004bba3
sub eax, 0x10
je 0x18004bb98
sub eax, 0x10
je 0x18004bb93
cmp eax, 0x10
jne 0x18004bbbe
xor ebx, ebx
jmp 0x18004bbbe
sub dword [r14], ebx
jmp 0x18004bbbe
test ebp, ebp
jne 0x18004bbef
mov eax, ebx
add rsi, rax
jmp 0x18004bbbe
mov r10, qword [rsp + 0xe8]
mov r8d, ebx
mov r9, qword [r15 + 0x48]
mov rdx, rsi
mov ecx, dword [r10]
call qword [r15 + 0x30]
mov ebp, eax
add edi, 0x10
cmp edi, 0xd1
jb 0x18004bb77
mov r10d, 1
add r12d, 0xb3
cmp r12d, 0x207
jb 0x18004bb17
jmp case.0x18004b863.14
xor eax, eax
jmp 0x18004baed
mov eax, ebp
jmp 0x18004baed