Function at 0x14000bed0
Capabilities:
Check mutex on windows
Create thread

Disassembly:
sub rsp, 0x38
lea r8, str.BE1B8C7E_7B32_40C5_A699_DC27BA0CA4E9
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14003f4e0], rax
cmp qword [0x14003f4e0], 0
je 0x14000c19f
lea rcx, str.BE1B8C7E_7B32_40C5_A699_DC27BA0CA4E9
call fcn.14000fc20
lea r9, str.2AF5734F_8C43_4506_BB7A_DB1AF3DAAE27
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f4e8], rax
cmp qword [0x14003f4e8], 0
je 0x14000c187
lea rcx, str.2AF5734F_8C43_4506_BB7A_DB1AF3DAAE27
call fcn.14000fc20
lea r9, str.3DBB5A3E_0C1F_4FA8_AE54_7F3857E7F0E4
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f4f0], rax
cmp qword [0x14003f4f0], 0
je 0x14000c16f
lea rcx, str.3DBB5A3E_0C1F_4FA8_AE54_7F3857E7F0E4
call fcn.14000fc20
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f508], rax
cmp qword [0x14003f508], 0
je 0x14000c157
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f510], rax
cmp qword [0x14003f510], 0
je 0x14000c13f
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14000e580]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14003f4f8], rax
cmp qword [0x14003f4f8], 0
je 0x14000c127
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14000e6a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14003f500], rax
cmp qword [0x14003f500], 0
je 0x14000c108
lea r9, str.A3024C41_1919_4CC0_B1F9_BA4BCE590CEC
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f518], rax
cmp qword [0x14003f518], 0
je 0x14000c0dc
lea rcx, str.A3024C41_1919_4CC0_B1F9_BA4BCE590CEC
call fcn.14000fc20
lea r9, str.D0351140_15E2_43A0_B7DD_6228FBC845EF
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f520], rax
cmp qword [0x14003f520], 0
je 0x14000c0c4
lea rcx, str.D0351140_15E2_43A0_B7DD_6228FBC845EF
call fcn.14000fc20
mov eax, 1
jmp 0x14000c1a1
mov rcx, qword [0x14003f518]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f518], 0
mov rcx, qword [0x14003f510]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0xffffffff
mov rcx, qword [0x14003f500]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14003f500]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14003f508]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0xffffffff
mov rcx, qword [0x14003f4f8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14003f510]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f510], 0
mov rcx, qword [0x14003f508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f508], 0
mov rcx, qword [0x14003f4f0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f4f0], 0
mov rcx, qword [0x14003f4e8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f4e8], 0
mov rcx, qword [0x14003f4e0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f4e0], 0
xor eax, eax
add rsp, 0x38
ret