Function at 0x18000cd30
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
imul ebx, edx, 0x64a
mov r13, r9
mov r15d, edx
mov r14, rcx
mov esi, edx
mov dword [rsp + 0x24], ebx
cmp edx, ebx
ja 0x18000d048
mov rbp, qword [rsp + 0x28]
movabs r10, 0x342da7f2f4960343
mov r12, qword [rsp + 0x28]
nop word [rax + rax]
cmp esi, 0x3830
ja 0x18000cea4
je 0x18000d048
cmp esi, 0xbb
ja 0x18000ce6e
je 0x18000ce43
mov eax, esi
sub eax, 0x61
je 0x18000ce25
sub eax, 0x1b
je 0x18000cddc
cmp eax, 0x30
jne 0x18000d013
xor r9d, r9d
lea r8, str.WSAEnumProtocolsW
mov edx, 0xe1
lea rcx, str.ws2_32.dll
call fcn.18000a910
mov r12, rax
jmp 0x18000d001
movzx r8d, byte [r13]
mov rdx, qword [r14]
cmp r8, rdx
jbe 0x18000ce18
mov ecx, 2
nop
mov eax, ecx
sub eax, 2
je 0x18000ce02
cmp eax, 1
je 0x18000d048
jmp 0x18000ce11
mov rax, rdx
sub rax, r8
add rax, 0x40
mov qword [rsp + 0x28], rax
inc ecx
cmp ecx, 4
jb 0x18000cdf0
sub rdx, r8
mov qword [rsp + 0x28], rdx
jmp 0x18000d00b
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
test rax, rax
mov qword [r14 + 0x78], rax
setne byte [rsp + 0x28]
jmp 0x18000d001
mov r8, qword [r14 + 0x98]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x18000d001
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, esi
sub eax, 0xc3
je 0x18000ce90
sub eax, 0x5f
je 0x18000d023
cmp eax, 0x2ad2
je 0x18000d048
jmp 0x18000d013
mov rax, qword [r14 + 0x10]
mov qword [r13], rax
mov rax, qword [r14 + 0x18]
mov qword [r8], rax
jmp 0x18000d013
cmp esi, 0xe878
ja 0x18000cf37
je 0x18000cf21
cmp esi, 0x4df0
je 0x18000cf08
cmp esi, 0x585c
je 0x18000d040
cmp esi, 0x9b34
jne 0x18000d013
cmp dword [rsp + 0x20], 0x274
jae 0x18000d013
mov ecx, 0x25
mov eax, ecx
sub eax, 0x25
je 0x18000cef7
cmp eax, 1
je 0x18000d048
jmp 0x18000cefc
mov byte [rsp + 0x28], 0
inc ecx
cmp ecx, 0x27
jb 0x18000cee5
jmp 0x18000d013
lea r8, [rsp + 0x20]
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call r12
jmp 0x18000d001
mov ecx, dword [rsp + 0x20]
mov rax, r10
mul rcx
mov rbp, rdx
shr rbp, 7
jmp 0x18000d013
cmp esi, 0x135bc
je 0x18000cf50
cmp esi, 0x18300
je 0x18000d048
jmp 0x18000d013
mov rdi, qword [r14 + 8]
mov rax, r10
mov r9, qword [r14]
mov rcx, rdi
sub rcx, r9
mov byte [rsp + 0x78], 0
imul rcx
mov r8, rdx
sar r8, 7
mov rax, r8
shr rax, 0x3f
add r8, rax
cmp rbp, r8
jae 0x18000cf8e
imul rax, rbp, 0x274
add rax, r9
mov qword [r14 + 8], rax
jmp 0x18000cfe9
jbe 0x18000cfe9
mov rcx, qword [r14 + 0x10]
mov rax, r10
sub rcx, r9
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbp, rdx
jbe 0x18000cfc2
lea r8, [rsp + 0x78]
mov rdx, rbp
mov rcx, r14
call fcn.180003980
jmp 0x18000cfe9
mov rax, rbp
sub rax, r8
je 0x18000cfe5
imul rbx, rax, 0x274
xor edx, edx
mov rcx, rdi
mov r8, rbx
call fcn.1800321f0
add rdi, rbx
mov ebx, dword [rsp + 0x24]
mov qword [r14 + 8], rdi
mov rdx, qword [r14]
lea r8, [rsp + 0x20]
xor ecx, ecx
call r12
movsxd rcx, eax
cmp rcx, rbp
sete byte [rsp + 0x28]
movabs r10, 0x342da7f2f4960343
mov r8, qword [rsp + 0x80]
imul eax, r15d, 0x73
add esi, eax
cmp esi, ebx
jbe 0x18000cd80
jmp 0x18000d048
movzx eax, byte [r14]
cmp al, 9
ja 0x18000d033
add al, 0x30
mov byte [rsp + 0x28], al
jmp 0x18000d048
add al, 0x57
mov byte [rsp + 0x28], al
jmp 0x18000d048
mov dword [rsp + 0x28], 0
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret