Function at 0x140061460
Capabilities:
Check mutex on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x188
movaps xmmword [rsp + 0x170], xmm7
movaps xmmword [rsp + 0x160], xmm6
mov r14, r8
mov r13, rdx
mov rbx, rcx
mov rax, qword [0x1402b7040]
xor rax, rsp
mov qword [rsp + 0x158], rax
movaps xmm6, xmmword [0x140275a70]
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
lea rdx, [rsp + 0xb0]
mov qword [rdx], 0
mov rcx, r13
call qword [sym.imp.USERENV.dll_DeriveAppContainerSidFromAppContainerName]
test eax, eax
js 0x14006187e
mov rdi, qword [rsp + 0xb0]
lea rcx, [rsp + 0x40]
mov rdx, rdi
call fcn.140186d70
test rdi, rdi
je 0x1400614f2
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_FreeSid]
mov al, byte [rsp + 0x58]
test al, al
je 0x14006185b
lea r8, str._app_container_profile_lock_0278d671_c445_4dfa_a8b4_d5ccf66d4cc3
xor esi, esi
xor ecx, ecx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
test rax, rax
je 0x14006153b
mov r15, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
cmp r15, 0xffffffffffffffff
je 0x140061807
call fcn.1401074f0
mov rsi, r15
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rsi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140061867
cmp byte [rsp + 0x58], 0
je 0x1400617f9
mov eax, dword [0x1402d0c00]
mov ecx, dword [0x1402c6098]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1400615cb
lea rcx, [0x1402d0c00]
call fcn.14019ce70
cmp dword [0x1402d0c00], 0xffffffff
jne 0x1400615cb
lea rcx, str.kernelbase.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.AppContainerRegisterSid
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140061873
mov qword [0x1402d0bf8], rax
lea rcx, [0x1402d0c00]
call fcn.14019cd94
mov rax, qword [0x1402d0bf8]
mov rcx, qword [rsp + 0x40]
mov rdx, r13
mov r8, r14
call qword [0x1402a7b00]
cmp eax, 0x800700b7
jne 0x140061950
mov qword [rsp + 0x28], rsi
cmp byte [rsp + 0x58], 0
je 0x1400617f9
mov rsi, rbx
mov ecx, pe_nt_image_headers64
call fcn.14019ca88
mov r14, rax
mov rbp, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
lea rax, [0x1402776b0]
mov qword [r14], rax
test r13, r13
je 0x1400617f9
lea r12, [r14 + 8]
movabs rbx, 0x7ffffffffffffff7
mov rcx, r13
call fcn.14019cee8
cmp rax, rbx
ja 0x140061876
mov r15, rax
mov qword [rsp + 0x38], rdi
cmp rax, 0xa
mov rbx, rsi
jbe 0x1400617d8
mov rdi, rbp
mov rbp, r13
mov r13, qword [rsp + 0x28]
mov rsi, rbx
mov rax, r15
or rax, 3
lea rcx, [rax + 1]
cmp rax, 0xb
mov ebx, Ordinal_14
cmovne rbx, rcx
test rbx, rbx
js 0x140061856
lea rcx, [rbx + rbx]
call fcn.14019ca88
mov r12, rax
mov qword [r14 + 8], rax
movabs rax, 0x7ffffffffffffff7
add rax, rbx
add rax, 9
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x10], r15
mov rbx, rsi
mov rsi, r13
mov r13, rbp
mov rbp, rdi
lea rdi, [r12 + r15*2]
cmp r13, r12
setb al
cmp r13, rdi
setae cl
or cl, al
je 0x1400617f9
test r15, r15
je 0x14006170c
add r15, r15
mov rcx, r12
mov rdx, r13
mov r8, r15
call fcn.1401d8080
mov word [rdi], 0
mov qword [r14 + 0x20], rbp
mov rax, qword [rsp + 0x38]
mov qword [r14 + 0x28], rax
mov rax, qword [rsp + 0x30]
mov qword [r14 + 0x30], rax
mov byte [r14 + 0x38], 0
xorps xmm0, xmm0
movups xmmword [r14 + 0x40], xmm0
movups xmmword [r14 + 0x50], xmm0
movups xmmword [r14 + 0x60], xmm0
mov dword [r14 + 0x70], 2
mov qword [rbx], r14
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsi + 1]
cmp rax, 2
jb 0x140061785
call fcn.1401074f0
cmp qword [0x1402c9688], 0
je 0x14006180e
mov rcx, qword [0x1402c9688]
mov rax, qword [rcx]
mov rax, qword [rax]
mov rdx, rsi
call qword [0x1402a7b00]
mov al, byte [rsp + 0x58]
test al, 1
je 0x140061797
mov rcx, qword [rsp + 0x40]
test rcx, rcx
jne 0x1400617e6
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
cmp rcx, qword [0x1402b7040]
je 0x1400617b1
call fcn.14019f290
int3
mov rax, rbx
movaps xmm6, xmmword [rsp + 0x160]
movaps xmm7, xmmword [rsp + 0x170]
add rsp, 0x188
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov byte [r14 + 0x1f], r15b
mov rsi, qword [rsp + 0x28]
jmp 0x1400616de
mov rax, qword [rsp + 0x48]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x1400617fb
ud2
mov qword [rsp + 0x48], rcx
call fcn.14019cac4
jmp 0x140061797
xor esi, esi
jmp 0x140061533
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x14028e385]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140061ac0
lea rcx, [sym.chrome.exe_GetHandleVerifier]
cmp rax, rcx
je 0x140061850
call qword [0x1402a7b00]
mov rcx, rax
xor edx, edx
call fcn.14003d980
jmp 0x14006176f
xor ecx, ecx
mov dl, 1
jmp 0x140061846
call fcn.1401dc2e0
mov qword [rbx], 0
jmp 0x140061789
mov qword [rbx], 0
jmp 0x140061752
int3
mov rcx, r12
call fcn.1401dc2a0
xor eax, eax
mov byte [rsp + 0x40], al
mov byte [rsp + 0x58], al
jmp 0x1400614f2
test al, al
je 0x1400617f9
lea rcx, [rsp + 0x40]
call fcn.140242c10
jmp 0x140061957
lea rcx, [rsp + 0x140]
call fcn.14018ef20
cmp byte [rsp + 0x78], 0
je 0x1400617f9
lea rcx, [rsp + 0x60]
call fcn.1400641c0
xor r15d, r15d
cmp byte [rsp + 0x78], 1
jne 0x1400618da
lea rcx, [rsp + 0x60]
call fcn.14018ef20
mov al, byte [rsp + 0x58]
test r15b, r15b
je 0x14006188d
test al, al
je 0x1400617f9
mov ecx, pe_nt_image_headers64
call fcn.14019ca88
mov r14, rax
movaps xmm6, xmmword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
xorps xmm7, xmm7
movaps xmmword [rsp + 0x40], xmm7
mov qword [rsp + 0x50], 0
lea rax, [0x1402776b0]
mov qword [r14], rax
lea rcx, [r14 + 8]
mov rdx, r13
call fcn.14013bb50
movups xmmword [r14 + 0x20], xmm6
mov qword [r14 + 0x30], rsi
mov byte [r14 + 0x38], 0
movups xmmword [r14 + 0x40], xmm7
movups xmmword [r14 + 0x50], xmm7
movups xmmword [r14 + 0x60], xmm7
mov dword [r14 + 0x70], 2
jmp 0x14006195a
mov rdi, rsi
test eax, eax
jns 0x140061962
xor r14d, r14d
mov rsi, rdi
jmp 0x140061746
cmp byte [rsp + 0x58], 0
je 0x1400617f9
lea r14, [rsp + 0x60]
movaps xmmword [r14 + 0x10], xmm6
movaps xmmword [r14], xmm6
mov rcx, r14
mov rdx, r13
call fcn.140242df0
cmp byte [r14 + 0x18], 1
jne 0x1400618c6
lea rcx, [rsp + 0x60]
call fcn.140064450
mov r15b, 1
test al, al
jne 0x1400618c9
cmp byte [rsp + 0x78], 0
je 0x1400617f9
lea rcx, [rsp + 0x60]
call fcn.14002d220
test al, al
je 0x1400618c6
cmp byte [rsp + 0x78], 0
je 0x1400617f9
movabs rsi, 0xaaaaaaaaaaaaaaaa
lea r14, [rsp + 0x140]
mov qword [r14 + 0x10], rsi
movaps xmmword [r14], xmm6
lea rax, [0x1402a35e0]
lea r8, [rsp + 0x130]
mov qword [r8], rax
mov qword [r8 + 8], 2
lea rcx, [rsp + 0x60]
mov rdx, r14
call fcn.140153070
mov rcx, r14
call fcn.14002d220
test al, al
je 0x1400618a4
lea r14, [rsp + 0xb0]
mov qword [r14 + 0x70], rsi
movaps xmmword [r14 + 0x60], xmm6
movaps xmmword [r14 + 0x50], xmm6
movaps xmmword [r14 + 0x40], xmm6
movaps xmmword [r14 + 0x30], xmm6
movaps xmmword [r14 + 0x20], xmm6
movaps xmmword [r14 + 0x10], xmm6
movaps xmmword [r14], xmm6
lea rdx, [rsp + 0x140]
mov rcx, r14
mov r8d, 4
call fcn.14006a3d0
cmp byte [r14 + 0x70], 1
jne 0x140061a8c
lea rcx, [rsp + 0xb0]
mov edx, 0x1000
mov r8d, 3
mov r9d, 1
call fcn.1400565a0
test al, al
jne 0x140061ac7
xor ebp, ebp
cmp byte [rsp + 0x120], 1
jne 0x140061aa5
lea rcx, [rsp + 0xb0]
call fcn.14006a320
lea rcx, [rsp + 0x140]
call fcn.14018ef20
test bpl, bpl
je 0x1400618b1
jmp 0x1400618c9
xor ecx, ecx
jmp 0x140061844
cmp byte [rsp + 0x120], 0
je 0x1400617f9
mov dword [rsp + 0x20], 3
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x40]
xor ebp, ebp
xor r8d, r8d
mov r9d, 0x1f01ff
call fcn.1402155f0
test al, al
je 0x140061a8e
cmp byte [rsp + 0x120], 0
je 0x1400617f9
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x140]
mov r8d, 0x14
call fcn.1400c23c0
test al, al
je 0x140061a8c
lea rax, str.Temp
lea r8, [rsp + 0x88]
mov qword [r8], rax
mov qword [r8 + 8], 4
lea rcx, [rsp + 0x140]
lea r14, [rsp + 0x98]
mov rdx, r14
call fcn.140153070
mov rcx, r14
call fcn.14002d220
mov ebp, eax
mov rcx, r14
call fcn.14018ef20
jmp 0x140061a8e