Function at 0x14018700
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push 0x384
mov eax, 0x1404c68f
call fcn.1401edd8
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
mov dword [ebp - 4], 1
push eax
call fcn.14012e0f
pop ecx
xor ebx, ebx
lea esi, [eax + 0x10]
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x1c027930], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14018758
push esi
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x1c027930], eax
jmp 0x1401876d
cmp eax, 0xb7
jne 0x1401876d
push 0xffffffffffffffff
push dword [0x1c027930]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x1c027930], ebx
lea ecx, [esi - 0x10]
sete bl
call fcn.140172a0
mov byte [edi + 0x2c], bl
test bl, bl
jne 0x14018ea8
xor ebx, ebx
mov dword [ebp - 0x2e0], 0x67734345
push ebx
sub esp, 0xc
mov dword [ebp - 0x2dc], 0x4a63694f
mov ecx, esp
mov dword [ebp - 0x2d8], 0x77345349
mov dword [ebp - 0x2d4], 0x5851434d
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x2d0], 0x71735866
push dword [ebp - 0x318]
mov dword [ebp - 0x2cc], 0x504d4442
mov dword [ebp - 0x2c8], 0x72636749
mov dword [ebp - 0x2c4], 0x646b6847
mov dword [ebp - 0x2c0], 0x55416e47
mov dword [ebp - 0x2bc], 0x3739444e
mov dword [ebp - 0x2b8], 0x36684764
mov dword [ebp - 0x2b4], 0x4a6b434b
mov dword [ebp - 0x2b0], 0x356f414c
mov dword [ebp - 0x2ac], 0x6874414e
mov dword [ebp - 0x2a8], 0x6d555141
mov dword [ebp - 0x2a4], 0x7477534b
mov dword [ebp - 0x2a0], 0x52775463
mov dword [ebp - 0x29c], 0x71594747
mov dword [ebp - 0x298], 0x434d6e42
mov dword [ebp - 0x294], 0x6934414d
mov dword [ebp - 0x290], 0x68386849
mov dword [ebp - 0x28c], 0x31515447
mov dword [ebp - 0x288], 0x42496a4f
mov dword [ebp - 0x284], 0x69643346
mov dword [ebp - 0x280], 0x59775848
mov dword [ebp - 0x27c], 0x53515142
mov dword [ebp - 0x278], 0x4d554165
mov dword [ebp - 0x274], 0x62497962
mov dword [ebp - 0x270], 0x4445444f
mov dword [ebp - 0x26c], 0x34464346
mov dword [ebp - 0x268], 0x3563444c
mov dword [ebp - 0x264], 0x67595465
mov dword [ebp - 0x260], 0x686f6a44
mov dword [ebp - 0x25c], 0x6534684b
mov dword [ebp - 0x258], 0x43775444
mov dword [ebp - 0x254], 0x52417846
mov dword [ebp - 0x250], 0x724d324d
mov dword [ebp - 0x24c], 0x474d5146
mov dword [ebp - 0x248], 0x59677944
mov dword [ebp - 0x244], 0x4445524a
mov dword [ebp - 0x240], 0x374e534a
mov dword [ebp - 0x23c], 0x4967524c
mov dword [ebp - 0x238], 0x32675249
mov dword [ebp - 0x234], 0x6a347944
mov dword [ebp - 0x230], 0x42415343
mov dword [ebp - 0x22c], 0x30644463
mov dword [ebp - 0x228], 0x31426a4a
mov dword [ebp - 0x224], 0x41777841
mov dword [ebp - 0x220], 0x47434141
mov dword [ebp - 0x378], 0x37774444
mov dword [ebp - 0x374], 0x6a634349
mov dword [ebp - 0x370], 0x37423365
mov dword [ebp - 0x36c], 0x3530694a
mov dword [ebp - 0x368], 0x6c514248
mov dword [ebp - 0x364], 0x33785344
mov dword [ebp - 0x360], 0x7a4a794f
mov dword [ebp - 0x35c], 0x65637962
mov dword [ebp - 0x358], 0x70384242
mov dword [ebp - 0x354], 0x6e776a47
mov dword [ebp - 0x350], 0x50305241
mov dword [ebp - 0x34c], 0x385a4147
mov dword [ebp - 0x348], 0x6d735348
mov dword [ebp - 0x344], 0x6434794d
mov dword [ebp - 0x340], 0x68356a45
mov dword [ebp - 0x33c], 0x54633349
mov dword [ebp - 0x338], 0x2f5a5465
mov dword [ebp - 0x334], 0x626b5449
mov dword [ebp - 0x330], 0x6a644249
mov dword [ebp - 0x32c], 0x374e784a
mov dword [ebp - 0x328], 0x36466966
mov dword [ebp - 0x324], 0x41517841
mov dword [ebp - 0x320], 0x31414141
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.1400fdb1
lea eax, [ebp - 0x384]
push eax
call fcn.14013048
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1401c5f6
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0x31c]
mov ecx, esp
push dword [ebp - 0x318]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x378]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1400fdb1
lea eax, [ebp - 0x390]
push eax
call fcn.1401317f
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.1401c63f
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x390]
mov dword [0x1c0276cc], eax
call fcn.1401c4c1
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 1
call fcn.1401c43e
cmp dword [0x1c0276cc], ebx
je 0x14018ea8
push 0x14014ab8
push 0x1c0276cc
call fcn.1401dfdb
pop ecx
pop ecx
test eax, eax
je 0x14018ea8
push dword [ebp + 8]
mov byte [edi + 0x2d], 1
mov dword [0x1c027928], 1
call fcn.1401903e
pop ecx
push eax
push dword [ebp + 8]
mov ecx, 0x1c0276f0
call fcn.14018f18
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x1c02792c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x1c027938], eax
test eax, eax
je 0x14018b87
mov byte [edi + 0x2e], 1
push dword [ebp + 0xc]
lea eax, [ebp - 0x219]
mov dword [ebp - 0x314], 0x6d554441
push ebx
sub esp, 0xc
mov dword [ebp - 0x310], 0x6a4d434c
mov ecx, esp
mov dword [ebp - 0x30c], 0x6d634746
mov dword [ebp - 0x308], 0x46515348
mov dword [ebp - 0x304], 0x51306a4b
push dword [ebp - 0x318]
mov dword [ebp - 0x300], 0x6a516a4b
push eax
mov dword [ebp - 0x2fc], 0x57773365
lea eax, [ebp - 0x314]
mov dword [ebp - 0x2f8], 0x31774443
mov dword [ebp - 0x2f4], 0x66415842
mov dword [ebp - 0x2f0], 0x3651684d
mov dword [ebp - 0x2ec], 0x2b4a7a4c
mov dword [ebp - 0x2e8], 0x3373794a
mov dword [ebp - 0x2e4], 0x6b5a6a4f
mov dword [ebp - 0x2e0], 0x7452434a
mov dword [ebp - 0x2dc], 0x4a30794a
mov dword [ebp - 0x2d8], 0x49414166
mov dword [ebp - 0x2d4], 0x2b554744
mov dword [ebp - 0x2d0], 0x6d386e44
mov dword [ebp - 0x2cc], 0x63306742
mov dword [ebp - 0x2c8], 0x69674145
mov dword [ebp - 0x2c4], 0x6b315443
mov dword [ebp - 0x2c0], 0x62596e49
mov dword [ebp - 0x2bc], 0x74305163
mov dword [ebp - 0x2b8], 0x486b6e4b
mov dword [ebp - 0x2b4], 0x6b676a47
mov dword [ebp - 0x2b0], 0x6f45524d
mov dword [ebp - 0x2ac], 0x69636744
mov dword [ebp - 0x2a8], 0x4b557a5a
mov dword [ebp - 0x2a4], 0x3838444e
mov dword [ebp - 0x2a0], 0x5634574e
mov dword [ebp - 0x29c], 0x6a497a64
mov dword [ebp - 0x298], 0x45554142
mov dword [ebp - 0x294], 0x51415263
mov dword [ebp - 0x290], 0x68414144
mov dword [ebp - 0x28c], 0x31735364
mov dword [ebp - 0x288], 0x6e6b444c
mov dword [ebp - 0x284], 0x73735142
mov dword [ebp - 0x280], 0x3773524a
mov dword [ebp - 0x27c], 0x6f784446
mov dword [ebp - 0x278], 0x6a45794b
mov dword [ebp - 0x274], 0x5a305263
mov dword [ebp - 0x270], 0x2b706965
mov dword [ebp - 0x26c], 0x4b4d784a
mov dword [ebp - 0x268], 0x424d5849
mov dword [ebp - 0x264], 0x42677a63
mov dword [ebp - 0x260], 0x30775265
mov dword [ebp - 0x25c], 0x78525448
mov dword [ebp - 0x258], 0x4c67444f
mov dword [ebp - 0x254], 0x56515142
mov dword [ebp - 0x250], 0x4851534c
mov dword [ebp - 0x24c], 0x4f55524d
mov dword [ebp - 0x248], 0x71597a50
mov dword [ebp - 0x244], 0x436f6a42
mov dword [ebp - 0x240], 0x52555142
mov dword [ebp - 0x23c], 0x65495146
mov dword [ebp - 0x238], 0x524d3342
mov dword [ebp - 0x234], 0x53634147
mov dword [ebp - 0x230], 0x69306849
mov dword [ebp - 0x22c], 0x6767794a
mov dword [ebp - 0x228], 0x4b30534d
mov dword [ebp - 0x224], 0x2b517a50
mov dword [ebp - 0x220], 0x4141674b
mov word [ebp - 0x21c], 0x4b41
mov byte [ebp - 0x21a], 0x30
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1400fdb1
lea eax, [ebp - 0x384]
push eax
call fcn.1401317f
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1401c63f
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.14013501
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x384]
call fcn.1401c4c1
push dword [ebp + 0xc]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x1c027934], eax
test eax, eax
je 0x14018e7f
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x1401b6d8
lea ecx, [ebp - 0x31c]
call fcn.1400fa5e
push eax
mov ecx, 0x1c0276e0
call fcn.1401bf96
cmp dword [ebp - 0x318], 0
je 0x14018ea8
call fcn.1402980b
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.140172a0
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.140172a0
call fcn.1401ed82
ret