Function at 0x1802330e0
Capabilities:
Check mutex on windows

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1d0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1804cc010]
xor rax, rsp
mov qword [rbp + 0xc0], rax
xor r14d, r14d
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r14w
lea r15d, [r14 + 1]
test cl, cl
je 0x1802336be
mov eax, dword [0x1804dd068]
test r15b, al
jne 0x18023316c
or eax, r15d
mov dword [0x1804dd068], eax
mov qword [0x1804dd060], r14
lea rcx, [0x1803af020]
call fcn.180386e30
nop
lea rcx, [0x1804dd060]
call fcn.180242ca0
lea rcx, [rsp + 0x78]
call fcn.18025ed00
nop
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r14w
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 7
mov word [rbp], r14w
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r14w
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r14w
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], r14w
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r14
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r14w
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r14
lea rcx, [rbp - 0x20]
call fcn.18025ea90
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov r8d, 0x33
lea rdx, str.84E2A8BE_B4E9_4C0B_824A_BE2182ECD590_optimizeUpdate
lea rcx, [rsp + 0x58]
call fcn.180004ea0
nop
mov qword [rsp + 0x38], r14
mov word [rsp + 0x40], 0
mov word [rsp + 0x40], 0
xor bl, bl
cmp qword [rsp + 0x68], 0
je 0x1802332a9
lea r8, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae r8, qword [rsp + 0x58]
jmp 0x1802332ac
mov r8, r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rdi, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1802332d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, bl
cmp eax, 0xb7
cmove ebx, r15d
mov byte [rsp + 0x41], bl
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x18023331e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180233319
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180233319
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
test rdi, rdi
je 0x18023333f
test bl, bl
jne 0x1802333f1
mov qword [rsp + 0x30], r14
lea rcx, [rsp + 0x30]
call fcn.18025e0a0
nop
lea rcx, [rsp + 0x30]
call fcn.18025e6b0
mov rcx, rax
call fcn.1801640b0
test al, al
je 0x1802333a6
lea rcx, [rsp + 0x30]
call fcn.18025e520
lea rdx, [rax + 1]
lea rcx, [rsp + 0x30]
call fcn.18025e300
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.18025e840
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1802333ab
mov rcx, rbx
call fcn.180169f40
jmp 0x1802333ab
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1802333d6
mov rsi, rbx
mov rbx, r14
mov qword [rsp + 0x30], rbx
test rsi, rsi
je 0x1802333d6
mov rcx, rsi
call fcn.180168e70
mov edx, 0x20
mov rcx, rsi
call fcn.180386950
nop
test rbx, rbx
je 0x1802333f1
mov rcx, rbx
call fcn.180168e70
mov edx, 0x20
mov rcx, rbx
call fcn.180386950
nop
test rdi, rdi
je 0x180233404
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x38], r14
mov word [rsp + 0x40], 0
mov ecx, 0x2f0
call fcn.180386914
mov qword [rsp + 0x38], rax
mov rcx, rax
call fcn.1803842c0
nop
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.180384730
mov rbx, qword [rsp + 0x30]
cmp byte [rbx], 0
je 0x1802335fb
lea rdx, [rbx + 0x138]
lea rcx, [rbx + 0x120]
call fcn.180385810
mov rax, qword [rbx + 0x100]
cmp byte [rax + 0x10], 0
je 0x180233475
lea rcx, [rbx + 0x100]
call fcn.180169f40
lea rdx, [rbx + 0x48]
lea rcx, [rbx + 0x120]
call fcn.1803858e0
test al, al
je 0x1802335fb
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x100]
call fcn.180169c10
nop
mov rax, qword [rbx + 0x100]
cmp byte [rax + 0x10], 0
je 0x1802334ca
cmp qword [rsp + 0x68], 0
je 0x1802334ca
mov r8b, 1
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x100]
call fcn.180169c50
mov byte [rbx], al
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x18023350f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18023350a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18023350a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov r8d, 7
lea rdx, str._update
lea rcx, [rbp - 0x68]
call fcn.180004ea0
nop
mov rcx, rbx
call fcn.180384410
mov edx, 0x2f0
mov rcx, rbx
call fcn.180386950
mov qword [rsp + 0x30], r14
lea rcx, [rbp + 0xa0]
call fcn.180005e20
nop
lea rcx, [rbp + 0x80]
call fcn.180004e20
nop
lea rcx, [rbp + 0x60]
call fcn.180004e20
nop
lea rcx, [rbp + 0x40]
call fcn.180004e20
nop
lea rcx, [rbp + 0x20]
call fcn.180004e20
nop
lea rcx, [rbp]
call fcn.180004e20
nop
lea rcx, [rbp - 0x20]
call fcn.180004e20
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1802335e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802335df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1802335df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
jmp 0x1802336d4
mov rcx, rbx
call fcn.180384410
mov edx, 0x2f0
mov rcx, rbx
call fcn.180386950
mov qword [rsp + 0x30], r14
lea rcx, [rbp + 0xa0]
call fcn.180005e20
nop
lea rcx, [rbp + 0x80]
call fcn.180004e20
nop
lea rcx, [rbp + 0x60]
call fcn.180004e20
nop
lea rcx, [rbp + 0x40]
call fcn.180004e20
nop
lea rcx, [rbp + 0x20]
call fcn.180004e20
nop
lea rcx, [rbp]
call fcn.180004e20
nop
lea rcx, [rbp - 0x20]
call fcn.180004e20
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1802336a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802336a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1802336a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
xor bl, bl
jmp 0x180233a15
mov r8d, 7
lea rdx, str._manual
lea rcx, [rbp - 0x68]
call fcn.180004ea0
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x18023371a
lea rdi, [rcx + 1]
mov qword [rbp - 0x58], rdi
lea rbx, [rbp - 0x68]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
mov r8d, 2
lea rdx, [0x1803c3bd8]
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi*2], r14w
jmp 0x180233735
mov qword [rsp + 0x20], r15
lea r9, [0x1803c3bd8]
xor r8d, r8d
mov rdx, r15
lea rcx, [rbp - 0x68]
call fcn.180009e30
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0x14
jb 0x18023377b
lea rdi, [rcx + 0x14]
mov qword [rbp - 0x58], rdi
lea rbx, [rbp - 0x68]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
mov r8d, 0x28
lea rdx, str._update_platform_x64
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi*2], r14w
jmp 0x18023379b
mov qword [rsp + 0x20], 0x14
lea r9, str._update_platform_x64
xor r8d, r8d
lea edx, [r8 + 0x14]
lea rcx, [rbp - 0x68]
call fcn.180009e30
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
mov r8d, 0x11
lea rdx, str.2345PicUpdate.exe
lea rcx, [rsp + 0x78]
call fcn.180004ea0
nop
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.180234720
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x180233820
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18023381b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18023381b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov r8d, 0x11
lea rdx, str.2345PicUpdate.exe
lea rcx, [rsp + 0x58]
call fcn.180004ea0
nop
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x78]
call fcn.18015a940
mov rbx, rax
lea rax, [rbp - 0x48]
cmp rax, rbx
je 0x1802338af
lea rcx, [rbp - 0x48]
call fcn.180004e20
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1802338f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802338ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1802338ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x18023394a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180233945
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180233945
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
lea rbx, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rbx, qword [rbp - 0x48]
mov rax, qword [0x1804de6a0]
test rax, rax
jne 0x18023399c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.CheckSigner
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1804de6a0], rax
test rax, rax
je 0x1802339aa
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call rax
test al, al
jne 0x1802339ae
xor bl, bl
jmp 0x1802339c1
xor r9d, r9d
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x48]
call fcn.1801651b0
movzx ebx, al
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x180233a04
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802339ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1802339ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r14w
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x180233a58
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180233a53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180233a53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180386950
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r14w
movzx eax, bl
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.1803868f0
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret