Function at 0x100007a44
Capabilities:
Check mutex on windows

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
push rdi
sub rsp, 0x160
mov rax, qword [0x10000a110]
xor rax, rsp
mov qword [rsp + 0x150], rax
xor ebx, ebx
mov edi, ebx
mov rsi, rbx
mov qword [rsp + 0x80], rbx
mov byte [r11 - 0x28], bl
mov byte [r11 - 0x27], bl
mov byte [r11 - 0x26], bl
mov byte [r11 - 0x25], bl
mov byte [r11 - 0x24], bl
mov byte [r11 - 0x23], 5
mov byte [r11 - 0x20], bl
mov byte [r11 - 0x1f], bl
mov byte [r11 - 0x1e], bl
mov byte [r11 - 0x1d], bl
mov byte [r11 - 0x1c], bl
mov byte [r11 - 0x1b], 1
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbx
mov qword [r11 - 0xe0], rbx
mov rax, qword [0x10000a8a8]
cmp rax, rbx
jne 0x100007d70
xor edx, edx
mov r8d, 0x90
lea rcx, [r11 - 0xb8]
call sub.msvcrt.dll_memset
lea r11, [rsp + 0x68]
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8d, [rbx + 0x12]
mov dl, 1
lea rcx, [rsp + 0x140]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
cmp eax, ebx
jne 0x100007b2e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100007dba
mov dword [rsp + 0xb0], 0x1f0001
mov edi, 2
mov dword [rsp + 0xb4], edi
mov dword [rsp + 0xb8], ebx
mov dword [rsp + 0xcc], ebx
mov dword [rsp + 0xd0], 5
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, 0x220
lea r8d, [rdi + 0x1e]
mov dl, dil
lea rcx, [rsp + 0x140]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
cmp eax, ebx
jne 0x100007bb9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100007dba
mov dword [rsp + 0xe0], 0x1f0001
mov dword [rsp + 0xe4], edi
mov dword [rsp + 0xe8], ebx
mov dword [rsp + 0xfc], ebx
mov dword [rsp + 0x100], edi
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x108], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x148]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
cmp eax, ebx
jne 0x100007c36
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100007dba
mov dword [rsp + 0x110], 0x120001
mov dword [rsp + 0x114], edi
mov dword [rsp + 0x118], ebx
mov dword [rsp + 0x12c], ebx
mov dword [rsp + 0x130], 5
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x138], rax
lea r9, [rsp + 0x88]
xor r8d, r8d
lea rdx, [rsp + 0xb0]
lea ecx, [r8 + 3]
call qword [sym.imp.ADVAPI32.dll_SetEntriesInAclW]
mov edi, eax
cmp eax, ebx
jne 0x100007dba
mov edx, 0x28
lea ecx, [rdx + 0x18]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
mov qword [rsp + 0x80], rax
cmp rax, rbx
jne 0x100007cc0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100007dba
mov edx, 1
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cmp eax, ebx
jne 0x100007cdf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100007dba
xor r9d, r9d
mov r8, qword [rsp + 0x88]
lea edx, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
cmp eax, ebx
jne 0x100007d08
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100007dba
mov dword [rsp + 0x90], 0x18
mov dword [rsp + 0xa0], 1
mov qword [rsp + 0x98], rsi
lea r8, [0x100003428]
xor edx, edx
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x10000a8a8], rax
cmp rax, rbx
jne 0x100007d5c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov dword [rsp + 0x60], eax
mov rax, qword [0x10000a8a8]
jmp 0x100007d70
cmp rax, rbx
je 0x100007d9d
mov edx, 0x927c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
mov dword [rsp + 0x60], eax
jmp 0x100007d9d
cmp edi, ebx
je 0x100007db8
cmp edi, 0x80
je 0x100007db8
cmp edi, 0xffffffff
jne 0x100007dba
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100007dba
mov edi, ebx
mov rcx, qword [rsp + 0x68]
cmp rcx, rbx
je 0x100007dca
call qword [sym.imp.ADVAPI32.dll_FreeSid]
mov rcx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x100007dda
call qword [sym.imp.ADVAPI32.dll_FreeSid]
mov rcx, qword [rsp + 0x78]
cmp rcx, rbx
je 0x100007dea
call qword [sym.imp.ADVAPI32.dll_FreeSid]
mov rcx, qword [rsp + 0x88]
cmp rcx, rbx
je 0x100007dfd
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp rsi, rbx
je 0x100007e0b
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, edi
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.100008140
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret