Function at 0x18007b2f8
Capabilities:
Check mutex on windows

Disassembly:
mov rax, rsp
push r12
push r14
push r15
sub rsp, 0x220
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1800f4320]
xor rax, rsp
mov qword [rsp + 0x210], rax
mov rcx, qword [0x1800f86c8]
xor r12d, r12d
test rcx, rcx
je 0x18007b34b
mov rax, qword [rcx]
lea rdx, [0x1800f4120]
call qword [rax + reloc.WS2_32.dll_recv]
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0x98], r12
mov byte [rsp + 0x88], r12b
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [0x1800f4128]
lea rcx, [rsp + 0x88]
call fcn.180003a30
nop
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x78], r12
mov byte [rsp + 0x68], r12b
lea rax, [rsp + 0x88]
cmp qword [rsp + 0xa0], 0x10
cmovae rax, qword [rsp + 0x88]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0xc8]
call fcn.18002ac60
nop
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.18007d0ec
test al, al
sete bl
xor r8d, r8d
lea edi, [r14 - 0xe]
mov dl, dil
lea rcx, [rsp + 0xc8]
call fcn.180003450
test bl, bl
je 0x18007b4c2
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xb8], r12
mov byte [rsp + 0xa8], r12b
lea r8d, [r14 + 5]
lea rdx, str.download_json_failed
lea rcx, [rsp + 0xa8]
call fcn.180003900
nop
lea rcx, [rsp + 0xa8]
call fcn.18007ce7c
nop
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x18007b468
mov r8, rdi
inc rdx
mov rcx, qword [rsp + 0xa8]
call fcn.180001f60
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x18007b486
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x68]
call fcn.180001f60
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x78], r12
mov byte [rsp + 0x68], r12b
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x18007bc22
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x88]
call fcn.180001f60
jmp 0x18007bc22
mov esi, 7
mov r9d, esi
xor r8d, r8d
lea rbx, str.shell64
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.18001d7a0
cmp rax, 0xffffffffffffffff
jne 0x18007b548
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0xc8]
call fcn.18000e980
nop
lea r8, [rsp + 0x68]
cmp qword [rsp + 0x80], 0x10
cmovae r8, qword [rsp + 0x68]
lea rdx, [rsp + 0x68]
cmovae rdx, qword [rsp + 0x68]
mov r9d, dword [rsp + 0x78]
mov rcx, rax
call fcn.180027920
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x18007b548
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0xc8]
call fcn.180001f60
mov r9, rsi
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.18001d7a0
cmp rax, 0xffffffffffffffff
jne 0x18007b5a5
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xb8], r12
mov byte [rsp + 0xa8], r12b
lea r8d, [rax + 0xb]
lea rdx, str.node_exsit
lea rcx, [rsp + 0xa8]
call fcn.180003900
nop
lea rcx, [rsp + 0xa8]
call fcn.18007ce7c
nop
jmp 0x18007b446
lea rcx, [rsp + 0x20]
call fcn.1800adce4
mov word [rsp + 0x20], 0x100
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x150]
call fcn.1800adcf0
nop
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.1800acc10
nop
mov r9b, dil
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x150]
call fcn.1800aef74
test al, al
jne 0x18007b6e4
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xb8], r12
mov byte [rsp + 0xa8], r12b
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.parsing_json_failed
lea rcx, [rsp + 0xa8]
call fcn.180003900
nop
lea rcx, [rsp + 0xa8]
call fcn.18007ce7c
nop
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x18007b65b
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0xa8]
call fcn.180001f60
nop
lea rcx, [rsp + 0x48]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x150]
call fcn.18007b018
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x18007b692
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x68]
call fcn.180001f60
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x78], r12
mov byte [rsp + 0x68], r12b
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x18007b6c5
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x88]
call fcn.180001f60
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0x98], r12
mov byte [rsp + 0x88], r12b
xor al, al
jmp 0x18007bc24
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.1800acfa0
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.1800acaac
nop
lea rcx, [rsp + 0x28]
call fcn.1800ad8f4
test al, al
jne 0x18007b7a5
lea rcx, [rsp + 0x28]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x48]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x150]
call fcn.18007b018
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x18007b753
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x68]
call fcn.180001f60
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x78], r12
mov byte [rsp + 0x68], r12b
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x18007b786
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x88]
call fcn.180001f60
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0x98], r12
mov byte [rsp + 0x88], r12b
xor al, al
jmp 0x18007bc24
xor ecx, ecx
call fcn.1800868bc
mov rcx, rax
call fcn.180095490
mov sil, r12b
mov r15d, r12d
mov ebx, 0xa
test sil, sil
jne 0x18007badf
lea rcx, [rsp + 0x28]
call fcn.1800adbc0
test eax, eax
je 0x18007badf
lea rcx, [rsp + 0x28]
call fcn.1800adbc0
mov esi, eax
call fcn.180095464
xor edx, edx
div esi
lea rcx, [rsp + 0x28]
call fcn.1800ace7c
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1800acaac
nop
lea r8, [0x1800f4180]
lea rdx, str.Global_
lea rcx, [rsp + 0xe8]
call fcn.18001c150
nop
lea r8, [rsp + 0xe8]
cmp qword [rsp + 0x100], 8
cmovae r8, qword [rsp + 0xe8]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov r14, rax
mov edx, 0x2bf20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x18007b921
xor r8d, r8d
mov dl, dil
lea rcx, [rsp + 0xe8]
call fcn.180003450
nop
lea rcx, [rsp + 0xa8]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x28]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x48]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x150]
call fcn.18007b018
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x18007b8ca
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x68]
call fcn.180001f60
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x78], r12
mov byte [rsp + 0x68], r12b
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x18007b902
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x88]
call fcn.180001f60
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x98], r12
mov byte [rsp + 0x88], r12b
xor al, al
jmp 0x18007bc24
lea rdx, [0x1800b99b0]
lea rcx, [rsp + 0xa8]
call fcn.1800acfa0
mov rcx, rax
call fcn.1800ad050
mov dword [rsp + 0x40], eax
mov qword [rsp + 0xe0], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xd8], r12
mov byte [rsp + 0xc8], r12b
mov r8, rbx
lea rdx, str.shellext64
lea rcx, [rsp + 0xc8]
call fcn.180003900
nop
lea rdx, [0x1800c5d28]
lea rcx, [rsp + 0xa8]
call fcn.1800acfa0
lea rdx, [rsp + 0x128]
mov rcx, rax
call fcn.1800ad190
mov rsi, rax
lea rdx, [0x1800d5ffc]
lea rcx, [rsp + 0xa8]
call fcn.1800acfa0
lea rdx, [rsp + 0x108]
mov rcx, rax
call fcn.1800ad190
nop
lea r9, [rsp + 0x40]
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.18007bdcc
mov sil, al
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x18007b9fd
inc rdx
mov r8, rdi
mov rcx, qword [rsp + 0x108]
call fcn.180001f60
mov qword [rsp + 0x120], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x118], r12
mov byte [rsp + 0x108], r12b
lea rcx, [rsp + 0x128]
call fcn.180003280
nop
lea rcx, [rsp + 0xc8]
call fcn.180003280
test r14, r14
je 0x18007ba42
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0x28]
call fcn.1800adbc0
cmp r15d, eax
jle 0x18007bab6
xor r8d, r8d
mov dl, dil
lea rcx, [rsp + 0xe8]
call fcn.180003450
nop
lea rcx, [rsp + 0xa8]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x28]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x48]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x150]
call fcn.18007b018
nop
lea rcx, [rsp + 0x68]
call fcn.180003280
nop
lea rcx, [rsp + 0x88]
call fcn.180003280
xor al, al
jmp 0x18007bc24
add r15d, edi
xor r8d, r8d
mov dl, dil
lea rcx, [rsp + 0xe8]
call fcn.180003450
nop
lea rcx, [rsp + 0xa8]
call fcn.1800acd08
jmp 0x18007b7bf
lea rcx, [rsp + 0x28]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x48]
call fcn.1800acd08
nop
lea rcx, [rsp + 0x150]
call fcn.18007b018
nop
lea rsi, [0x1800f4128]
mov rdx, rsi
lea rcx, [0x1800f4220]
call fcn.1800067f0
test eax, eax
jne 0x18007bb39
mov rdx, rsi
lea rcx, [0x1800f4240]
call fcn.1800067f0
test eax, eax
jne 0x18007bb39
mov dil, byte [0x1800f8680]
jmp 0x18007bb6e
or r14, 0xffffffffffffffff
mov r9, r14
xor r8d, r8d
mov rdx, rsi
lea rcx, [0x1800f4220]
call fcn.180003a30
mov r9, r14
xor r8d, r8d
mov rdx, rsi
lea rcx, [0x1800f4240]
call fcn.180003a30
mov byte [0x1800f8680], dil
test dil, dil
je 0x18007bbee
mov qword [rsp + 0xe0], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xd8], r12
mov byte [rsp + 0xc8], r12b
mov r8, rbx
lea rdx, str.update_reg
lea rcx, [rsp + 0xc8]
call fcn.180003900
nop
lea rcx, [rsp + 0xc8]
call fcn.18007ce7c
nop
lea rcx, [rsp + 0xc8]
call fcn.180003280
mov rax, qword [0x1800f8650]
test rax, rax
je 0x18007bbe8
call rax
mov rcx, qword [0x1800f8688]
test rcx, rcx
je 0x18007bbe8
call fcn.180033910
mov qword [0x1800f8688], r12
call fcn.18007c438
nop
lea rcx, [rsp + 0x68]
call fcn.180003280
nop
lea rcx, [rsp + 0x88]
call fcn.180003280
mov al, 1
jmp 0x18007bc24
xor al, al
mov rcx, qword [rsp + 0x210]
xor rcx, rsp
call fcn.180081d90
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
ret