Function at 0x1800d30b0
Capabilities:
Check mutex on windows

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1d0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1802240e0]
xor rax, rsp
mov qword [rbp + 0xc0], rax
xor r14d, r14d
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r14w
lea r15d, [r14 + 1]
test cl, cl
je 0x1800d368e
mov eax, dword [0x18022eb48]
test r15b, al
jne 0x1800d313c
or eax, r15d
mov dword [0x18022eb48], eax
mov qword [0x18022eb50], r14
lea rcx, [0x180195190]
call fcn.18017e6bc
nop
lea rcx, [0x18022eb50]
call fcn.1800dee50
lea rcx, [rsp + 0x78]
call fcn.1800dc590
nop
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r14w
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 7
mov word [rbp], r14w
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r14w
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r14w
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], r14w
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r14
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r14w
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r14
lea rcx, [rbp - 0x20]
call fcn.1800dc320
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov r8d, gethostbyname
lea rdx, str.84E2A8BE_B4E9_4C0B_824A_BE2182ECD590_optimizeUpdate
lea rcx, [rsp + 0x58]
call fcn.1800055c0
nop
mov qword [rsp + 0x38], r14
mov word [rsp + 0x40], 0
mov word [rsp + 0x40], 0
xor bl, bl
cmp qword [rsp + 0x68], 0
je 0x1800d3279
lea r8, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae r8, qword [rsp + 0x58]
jmp 0x1800d327c
mov r8, r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rdi, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1800d32a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, bl
cmp eax, 0xb7
cmove ebx, r15d
mov byte [rsp + 0x41], bl
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1800d32ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d32e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d32e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
test rdi, rdi
je 0x1800d330f
test bl, bl
jne 0x1800d33c1
mov qword [rsp + 0x30], r14
lea rcx, [rsp + 0x30]
call fcn.1800ddfd0
nop
lea rcx, [rsp + 0x30]
call fcn.1800de640
mov rcx, rax
call fcn.180101a30
test al, al
je 0x1800d3376
lea rcx, [rsp + 0x30]
call fcn.1800de4b0
lea rdx, [rax + 1]
lea rcx, [rsp + 0x30]
call fcn.1800de290
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1800de7d0
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1800d337b
mov rcx, rbx
call fcn.18004ea30
jmp 0x1800d337b
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1800d33a6
mov rsi, rbx
mov rbx, r14
mov qword [rsp + 0x30], rbx
test rsi, rsi
je 0x1800d33a6
mov rcx, rsi
call fcn.18004dae0
mov edx, 0x20
mov rcx, rsi
call fcn.18017df04
nop
test rbx, rbx
je 0x1800d33c1
mov rcx, rbx
call fcn.18004dae0
mov edx, 0x20
mov rcx, rbx
call fcn.18017df04
nop
test rdi, rdi
je 0x1800d33d4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x38], r14
mov word [rsp + 0x40], 0
mov ecx, 0x2f0
call fcn.18017df38
mov qword [rsp + 0x38], rax
mov rcx, rax
call fcn.180119fa0
nop
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.18011a410
mov rbx, qword [rsp + 0x30]
cmp byte [rbx], 0
je 0x1800d35cb
lea rdx, [rbx + 0x138]
lea rcx, [rbx + 0x120]
call fcn.18011d900
mov rax, qword [rbx + 0x100]
cmp byte [rax + 0x10], 0
je 0x1800d3445
lea rcx, [rbx + 0x100]
call fcn.18004ea30
lea rdx, [rbx + 0x48]
lea rcx, [rbx + 0x120]
call fcn.18011d9d0
test al, al
je 0x1800d35cb
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x100]
call fcn.18004e700
nop
mov rax, qword [rbx + 0x100]
cmp byte [rax + 0x10], 0
je 0x1800d349a
cmp qword [rsp + 0x68], 0
je 0x1800d349a
mov r8b, 1
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x100]
call fcn.18004e740
mov byte [rbx], al
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1800d34df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d34da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d34da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov r8d, 7
lea rdx, str._update
lea rcx, [rbp - 0x68]
call fcn.1800055c0
nop
mov rcx, rbx
call fcn.18011a0f0
mov edx, 0x2f0
mov rcx, rbx
call fcn.18017df04
mov qword [rsp + 0x30], r14
lea rcx, [rbp + 0xa0]
call fcn.18001cbf0
nop
lea rcx, [rbp + 0x80]
call fcn.180005540
nop
lea rcx, [rbp + 0x60]
call fcn.180005540
nop
lea rcx, [rbp + 0x40]
call fcn.180005540
nop
lea rcx, [rbp + 0x20]
call fcn.180005540
nop
lea rcx, [rbp]
call fcn.180005540
nop
lea rcx, [rbp - 0x20]
call fcn.180005540
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1800d35b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d35af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d35af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
jmp 0x1800d36a4
mov rcx, rbx
call fcn.18011a0f0
mov edx, 0x2f0
mov rcx, rbx
call fcn.18017df04
mov qword [rsp + 0x30], r14
lea rcx, [rbp + 0xa0]
call fcn.18001cbf0
nop
lea rcx, [rbp + 0x80]
call fcn.180005540
nop
lea rcx, [rbp + 0x60]
call fcn.180005540
nop
lea rcx, [rbp + 0x40]
call fcn.180005540
nop
lea rcx, [rbp + 0x20]
call fcn.180005540
nop
lea rcx, [rbp]
call fcn.180005540
nop
lea rcx, [rbp - 0x20]
call fcn.180005540
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1800d3675
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d3670
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d3670
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
xor bl, bl
jmp 0x1800d39e0
mov r8d, 7
lea rdx, str._manual
lea rcx, [rbp - 0x68]
call fcn.1800055c0
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1800d36ea
lea rdi, [rcx + 1]
mov qword [rbp - 0x58], rdi
lea rbx, [rbp - 0x68]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
mov r8d, 2
lea rdx, [0x1801ba0ac]
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi*2], r14w
jmp 0x1800d3702
mov qword [rsp + 0x20], r15
lea r9, [0x1801ba0ac]
mov rdx, r15
lea rcx, [rbp - 0x68]
call fcn.1800093d0
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0x14
jb 0x1800d3748
lea rdi, [rcx + 0x14]
mov qword [rbp - 0x58], rdi
lea rbx, [rbp - 0x68]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
mov r8d, 0x28
lea rdx, str._update_platform_x64
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi*2], r14w
jmp 0x1800d3766
mov qword [rsp + 0x20], 0x14
lea r9, str._update_platform_x64
mov edx, 0x14
lea rcx, [rbp - 0x68]
call fcn.1800093d0
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
mov r8d, reloc.COMCTL32.dll_InitCommonControls
lea rdx, str.2345PicUpdate.exe
lea rcx, [rsp + 0x78]
call fcn.1800055c0
nop
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.1800d4090
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1800d37eb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d37e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d37e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov r8d, reloc.COMCTL32.dll_InitCommonControls
lea rdx, str.2345PicUpdate.exe
lea rcx, [rsp + 0x58]
call fcn.1800055c0
nop
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x78]
call fcn.180053100
mov rbx, rax
lea rax, [rbp - 0x48]
cmp rax, rbx
je 0x1800d387a
lea rcx, [rbp - 0x48]
call fcn.180005540
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1800d38be
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d38b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d38b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1800d3915
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d3910
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d3910
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
lea rbx, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rbx, qword [rbp - 0x48]
mov rax, qword [0x18022b2b0]
test rax, rax
jne 0x1800d3967
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.CheckSigner
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18022b2b0], rax
test rax, rax
je 0x1800d3975
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call rax
test al, al
jne 0x1800d3979
xor bl, bl
jmp 0x1800d398c
xor r9d, r9d
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x48]
call fcn.18005c190
movzx ebx, al
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x1800d39cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d39ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d39ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r14w
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x1800d3a23
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d3a1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d3a1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18017df04
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r14w
movzx eax, bl
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.18017dee0
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret