Function at 0x1401869e
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push 0x398
mov eax, 0x1404c955
call fcn.1401f08f
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
mov dword [ebp - 4], 1
push eax
call fcn.14012be4
pop ecx
xor ebx, ebx
lea esi, [eax + 0x10]
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x1c027930], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x140186f6
push esi
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x1c027930], eax
jmp 0x1401870b
cmp eax, 0xb7
jne 0x1401870b
push 0xffffffffffffffff
push dword [0x1c027930]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x1c027930], ebx
lea ecx, [esi - 0x10]
sete bl
call fcn.14016fdf
mov byte [edi + 0x2c], bl
test bl, bl
jne 0x14018ef2
mov dword [ebp - 0x348], 0x78415341
mov dword [ebp - 0x344], 0x4230694c
mov dword [ebp - 0x340], 0x6934544c
mov dword [ebp - 0x33c], 0x396b5349
mov dword [ebp - 0x338], 0x4e305241
mov dword [ebp - 0x334], 0x656b4763
mov dword [ebp - 0x330], 0x436b5859
mov dword [ebp - 0x32c], 0x6a63784b
mov dword [ebp - 0x328], 0x4c307a62
mov dword [ebp - 0x324], 0x3177694b
mov dword [ebp - 0x320], 0x4a516950
mov dword [ebp - 0x31c], 0x4b494343
mov dword [ebp - 0x318], 0x4a6f4466
mov dword [ebp - 0x314], 0x44737841
mov dword [ebp - 0x310], 0x6e307a63
mov dword [ebp - 0x30c], 0x794a4250
mov dword [ebp - 0x308], 0x63346746
mov dword [ebp - 0x304], 0x755a4349
mov dword [ebp - 0x300], 0x68677943
mov dword [ebp - 0x2fc], 0x49305247
mov dword [ebp - 0x2f8], 0x786f5349
mov dword [ebp - 0x2f4], 0x7577694d
mov dword [ebp - 0x2f0], 0x32425743
mov dword [ebp - 0x2ec], 0x6b6b7962
mov dword [ebp - 0x2e8], 0x786c424a
mov dword [ebp - 0x2e4], 0x48495149
mov dword [ebp - 0x2e0], 0x69514843
mov dword [ebp - 0x2dc], 0x6341694b
mov dword [ebp - 0x2d8], 0x6c746d45
mov dword [ebp - 0x2d4], 0x466f334f
mov dword [ebp - 0x2d0], 0x75426859
mov dword [ebp - 0x2cc], 0x336b7744
mov dword [ebp - 0x2c8], 0x2f497746
mov dword [ebp - 0x2c4], 0x476b794d
mov dword [ebp - 0x2c0], 0x5755414a
mov dword [ebp - 0x2bc], 0x6a34444d
mov dword [ebp - 0x2b8], 0x68736942
mov dword [ebp - 0x2b4], 0x4e4d5844
mov dword [ebp - 0x2b0], 0x6e686848
mov dword [ebp - 0x2ac], 0x76675142
mov dword [ebp - 0x2a8], 0x32777a44
mov dword [ebp - 0x2a4], 0x4e346e4d
mov dword [ebp - 0x2a0], 0x4f41524c
mov dword [ebp - 0x29c], 0x6455674d
mov dword [ebp - 0x298], 0x47556742
mov dword [ebp - 0x294], 0x4a67434d
mov dword [ebp - 0x290], 0x6a317747
mov dword [ebp - 0x28c], 0x3251434a
mov dword [ebp - 0x288], 0x56595149
mov dword [ebp - 0x284], 0x6b776949
mov dword [ebp - 0x280], 0x79634349
mov dword [ebp - 0x27c], 0x4a38534f
mov dword [ebp - 0x278], 0x42515450
mov dword [ebp - 0x274], 0x4855584e
mov dword [ebp - 0x270], 0x4659514f
mov dword [ebp - 0x26c], 0x38646d4c
mov dword [ebp - 0x268], 0x396f444b
mov dword [ebp - 0x264], 0x33463343
mov dword [ebp - 0x260], 0x43516d41
mov dword [ebp - 0x25c], 0x46496a50
mov dword [ebp - 0x258], 0x4e4d7a4e
mov dword [ebp - 0x254], 0x6f594144
mov dword [ebp - 0x250], 0x6759694b
mov dword [ebp - 0x24c], 0x3555684d
mov dword [ebp - 0x248], 0x78746843
mov dword [ebp - 0x244], 0x7541474c
mov dword [ebp - 0x240], 0x7a514241
mov dword [ebp - 0x23c], 0x56517949
mov dword [ebp - 0x238], 0x6a397a47
mov dword [ebp - 0x234], 0x5677424e
mov dword [ebp - 0x230], 0x43386e5a
mov dword [ebp - 0x22c], 0x4d77534e
mov dword [ebp - 0x228], 0x54496941
mov dword [ebp - 0x224], 0x6b516a62
mov dword [ebp - 0x220], 0x41414141
mov word [ebp - 0x21c], 0x5131
mov dword [ebp - 0x38c], 0x71635448
mov dword [ebp - 0x388], 0x7230434e
mov dword [ebp - 0x384], 0x70423264
mov dword [ebp - 0x380], 0x39415350
mov dword [ebp - 0x37c], 0x4967524c
xor ebx, ebx
mov dword [ebp - 0x378], 0x3855534b
push ebx
sub esp, 0xc
mov dword [ebp - 0x374], 0x6d6f7850
mov ecx, esp
mov dword [ebp - 0x370], 0x634d6e44
lea eax, [ebp - 0x21a]
mov dword [ebp - 0x36c], 0x6b596a48
mov dword [ebp - 0x368], 0x2f356848
push dword [ebp - 0x34c]
mov dword [ebp - 0x364], 0x6249474a
push eax
mov dword [ebp - 0x360], 0x32674441
lea eax, [ebp - 0x348]
mov dword [ebp - 0x35c], 0x736f474d
mov dword [ebp - 0x358], 0x4173434c
mov dword [ebp - 0x354], 0x64414141
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1400fecf
lea eax, [ebp - 0x398]
push eax
call fcn.14012e1d
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1401c864
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0x350]
mov ecx, esp
push dword [ebp - 0x34c]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x38c]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1400fecf
lea eax, [ebp - 0x3a4]
push eax
call fcn.14012f54
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.1401c8ad
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x3a4]
mov dword [0x1c0276cc], eax
call fcn.1401c72f
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 1
call fcn.1401c6ac
cmp dword [0x1c0276cc], ebx
je 0x14018ef2
push 0x1401466e
push 0x1c0276cc
call fcn.1401e292
pop ecx
pop ecx
test eax, eax
je 0x14018ef2
push dword [ebp + 8]
mov byte [edi + 0x2d], 1
mov dword [0x1c027928], 1
call fcn.14019088
pop ecx
push eax
push dword [ebp + 8]
mov ecx, 0x1c0276f0
call fcn.14018f62
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x1c02792c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x1c027938], eax
test eax, eax
je 0x14018be2
mov byte [edi + 0x2e], 1
push dword [ebp + 0xc]
lea eax, [ebp - 0x21a]
mov dword [ebp - 0x310], 0x33345445
push ebx
sub esp, 0xc
mov dword [ebp - 0x30c], 0x726b434f
mov ecx, esp
mov dword [ebp - 0x308], 0x30634847
mov dword [ebp - 0x304], 0x776b6942
mov dword [ebp - 0x300], 0x7a41324b
push dword [ebp - 0x34c]
mov dword [ebp - 0x2fc], 0x306b324b
push eax
mov dword [ebp - 0x2f8], 0x366b6e41
lea eax, [ebp - 0x310]
mov dword [ebp - 0x2f4], 0x704e4448
mov dword [ebp - 0x2f0], 0x38597942
mov dword [ebp - 0x2ec], 0x4e49694b
mov dword [ebp - 0x2e8], 0x7474784a
mov dword [ebp - 0x2e4], 0x796c334e
mov dword [ebp - 0x2e0], 0x49517746
mov dword [ebp - 0x2dc], 0x70705861
mov dword [ebp - 0x2d8], 0x61636849
mov dword [ebp - 0x2d4], 0x70673243
mov dword [ebp - 0x2d0], 0x6d455164
mov dword [ebp - 0x2cc], 0x5549784c
mov dword [ebp - 0x2c8], 0x6a42424b
mov dword [ebp - 0x2c4], 0x416f544f
mov dword [ebp - 0x2c0], 0x64414442
mov dword [ebp - 0x2bc], 0x5955694d
mov dword [ebp - 0x2b8], 0x71676a4d
mov dword [ebp - 0x2b4], 0x466f6847
mov dword [ebp - 0x2b0], 0x49637865
mov dword [ebp - 0x2ac], 0x33594245
mov dword [ebp - 0x2a8], 0x7959674f
mov dword [ebp - 0x2a4], 0x7963694a
mov dword [ebp - 0x2a0], 0x38737847
mov dword [ebp - 0x29c], 0x314d7945
mov dword [ebp - 0x298], 0x50596862
mov dword [ebp - 0x294], 0x68417a4f
mov dword [ebp - 0x290], 0x32354444
mov dword [ebp - 0x28c], 0x53385248
mov dword [ebp - 0x288], 0x4d6b334f
mov dword [ebp - 0x284], 0x4951524a
mov dword [ebp - 0x280], 0x30307a65
mov dword [ebp - 0x27c], 0x7542484f
mov dword [ebp - 0x278], 0x344d6747
mov dword [ebp - 0x274], 0x3834514e
mov dword [ebp - 0x270], 0x75494759
mov dword [ebp - 0x26c], 0x72776859
mov dword [ebp - 0x268], 0x2f42574a
mov dword [ebp - 0x264], 0x72557741
mov dword [ebp - 0x260], 0x456b524a
mov dword [ebp - 0x25c], 0x44456d41
mov dword [ebp - 0x258], 0x36386866
mov dword [ebp - 0x254], 0x4b514349
mov dword [ebp - 0x250], 0x36416a49
mov dword [ebp - 0x24c], 0x6a73794f
mov dword [ebp - 0x248], 0x62456749
mov dword [ebp - 0x244], 0x39384847
mov dword [ebp - 0x240], 0x45736d4c
mov dword [ebp - 0x23c], 0x4249674d
mov dword [ebp - 0x238], 0x4e4d514a
mov dword [ebp - 0x234], 0x33595446
mov dword [ebp - 0x230], 0x534d7766
mov dword [ebp - 0x22c], 0x4b496e43
mov dword [ebp - 0x228], 0x57415464
mov dword [ebp - 0x224], 0x7567534d
mov dword [ebp - 0x220], 0x41414141
mov word [ebp - 0x21c], 0x5171
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1400fecf
lea eax, [ebp - 0x398]
push eax
call fcn.14012f54
add esp, 0x10
mov byte [ebp - 4], 4
mov ecx, eax
call fcn.1401c8ad
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.140132d6
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x398]
call fcn.1401c72f
push dword [ebp + 0xc]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x1c027934], eax
test eax, eax
je 0x14018ec9
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x1401b946
lea ecx, [ebp - 0x350]
call fcn.1400fb7c
push eax
mov ecx, 0x1c0276e0
call fcn.1401c204
cmp dword [ebp - 0x34c], 0
je 0x14018ef2
call fcn.14029ac8
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.14016fdf
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.14016fdf
call fcn.1401f039
ret