Function at 0x100004368
Capabilities:
Check mutex on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
sub rsp, 0x80
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea r13d, [r9 + 1]
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_HeapSetInformation]
xor r12d, r12d
lea rax, [0x10001cd00]
lea rbx, [0x10001cce0]
mov qword [0x10001cce0], rax
lea rax, [0x100001918]
mov byte [0x10001ccf8], r13b
mov qword [0x10001cd20], rax
lea rax, [0x100001928]
mov qword [0x10001ccf0], r12
mov byte [0x10001ccf9], r12b
mov word [0x10001ccfa], r12w
mov dword [0x10001ccfc], r12d
mov qword [0x10001cd28], rax
mov qword [0x10001cd10], r12
mov qword [0x10001cd00], r12
mov byte [0x10001cd18], r13b
mov byte [0x10001cd19], r12b
mov word [0x10001cd1a], r12w
mov dword [0x10001cd1c], r12d
mov qword [0x10001c260], rbx
lea rdi, [0x10001cd20]
mov r8, qword [rdi]
lea rax, [rbx + 8]
lea rcx, [0x100004228]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], r12
mov r9d, r13d
mov rdx, rbx
mov qword [rsp + 0x28], r12
add rdi, 8
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegisterTraceGuidsW]
mov rbx, qword [rbx]
cmp rbx, r12
jne 0x100004429
lea r8, [0x1000019d8]
mov edx, r13d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x100004509
mov rbx, qword [0x10001c260]
lea rdi, [0x10001c260]
cmp rbx, rdi
je 0x1000044c9
test byte [rbx + 0x1c], 4
je 0x1000044c9
mov rcx, qword [rbx + 0x10]
lea r8, [0x1000019c8]
mov edx, 0xa
call fcn.1000041c8
mov rbx, qword [0x10001c260]
cmp rbp, r12
je 0x1000044de
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [0x10001c260]
cmp rbx, rdi
je 0x1000046b2
jmp 0x1000044ff
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1000044fc
call qword [sym.imp.ADVAPI32.dll_UnregisterTraceGuids]
mov qword [rbx + 8], r12
mov rbx, qword [rbx]
cmp rbx, r12
jne 0x1000044e9
jmp 0x1000046ab
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rcx, [0x100001ad8]
xor edx, edx
mov qword [0x10001ccd8], rax
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
lea rdi, [0x10001c260]
cmp eax, r12d
jge 0x10000455d
mov rcx, qword [0x10001c260]
cmp rcx, rdi
je 0x10000455d
test byte [rcx + 0x1c], 4
je 0x10000455d
mov rcx, qword [rcx + 0x10]
lea r8, [0x1000019c8]
mov edx, 0xb
mov r9d, eax
call fcn.1000041ec
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov ecx, 0x110
call fcn.100018ffe
cmp rax, r12
je 0x100004583
xor edx, edx
mov rcx, rax
call fcn.100004858
mov rbx, rax
jmp 0x100004586
mov rbx, r12
cmp rbx, r12
je 0x10000466e
mov rcx, rbx
call fcn.100015890
cmp eax, r12d
mov esi, eax
cmovge esi, r12d
cmp esi, r12d
je 0x1000045be
mov r8, qword [rbx]
mov edx, r13d
mov rcx, rbx
call qword [r8 + 0x38]
cmp esi, r12d
mov rbx, r12
jl 0x10000466e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r11, qword [0x10001c260]
lea rsi, [0x100003900]
mov r8, qword [r11 + 0x30]
cmp r8, r12
je 0x1000045f5
lea rcx, [0x1000018c8]
mov r9b, r13b
mov edx, r13d
mov qword [rsp + 0x20], rsi
call fcn.100017b10
mov rcx, rbx
call fcn.100015a60
mov r11, qword [0x10001c260]
mov r8, qword [r11 + 0x30]
cmp r8, r12
je 0x10000463c
lea rcx, [0x1000018c8]
mov r9b, 2
mov edx, r13d
mov qword [rsp + 0x20], rsi
call fcn.100017b10
jmp 0x10000463c
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_DispatchMessageW]
lea rcx, [rsp + 0x50]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageW]
cmp eax, r12d
jg 0x100004626
mov rcx, qword [rbx + 0x20]
cmp rcx, r12
je 0x100004665
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x30]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
cmp rbp, r12
je 0x10000467c
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rbx, qword [0x10001c260]
cmp rbx, rdi
je 0x1000046b2
jmp 0x1000046a6
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1000046a3
call qword [sym.imp.ADVAPI32.dll_UnregisterTraceGuids]
mov qword [rbx + 8], r12
mov rbx, qword [rbx]
cmp rbx, r12
jne 0x100004690
mov qword [0x10001c260], rdi
lea r11, [rsp + 0x80]
xor eax, eax
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
ret