Function at 0x18001b5c0
Capabilities:
Check mutex on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1800f6ae8]
xor rax, rsp
mov qword [rbp + 0x228], rax
mov r12, qword [rbp + 0x290]
xor r10d, r10d
imul r15d, ecx, 0x186
mov rbx, r8
mov qword [rsp + 0x50], r9
mov r14, rdx
mov qword [rsp + 0x60], rbx
mov r13d, ecx
mov qword [rsp + 0x68], r12
mov esi, ecx
cmp ecx, r15d
ja 0x18001b7e7
mov ecx, 0x6b63
nop dword [rax]
cmp esi, 0x93e
ja 0x18001b83a
je 0x18001b833
cmp esi, 0x326
ja 0x18001b6d2
je 0x18001b6cd
cmp esi, 0x1a
je 0x18001b6b3
cmp esi, 0x33
je 0x18001b6a4
cmp esi, 0x79
jne 0x18001b7d8
mov rcx, r9
mov dword [rsp + 0x30], 0x80000004
call qword [rbx + 0x120]
xor edx, edx
lea r8d, [rsi - 0x30]
div dword [rbx + 0x60]
lea rax, [rsp + 0x30]
xor r9d, r9d
mov dword [rsp + 0x58], edx
lea rcx, [rsp + 0x58]
mov rdx, rbx
mov qword [rsp + 0x20], rax
call fcn.1800c1cc0
mov dword [rsp + 0x30], eax
jmp 0x18001b7cb
mov dword [rbp + 0x200], 0x53415357
jmp 0x18001b7d8
mov rcx, qword [r12]
test rcx, rcx
je 0x18001b6c6
mov eax, dword [rbx]
cmp dword [rcx], eax
je 0x18001b7d3
mov eax, dword [rbx]
jmp 0x18001b959
mov rcx, qword [r14]
jmp 0x18001b6b7
mov eax, esi
sub eax, 0x62d
je 0x18001b82a
cmp eax, 5
jne 0x18001b7d8
mov rbx, qword [r12]
mov rdx, qword [r14]
mov rax, qword [rbx + 0x20]
cmp rax, qword [rdx + 0x20]
jne 0x18001b720
mov r8, qword [rbx + 0x28]
cmp r8, qword [rdx + 0x28]
jne 0x18001b720
mov rdx, qword [rdx + 0x40]
sub r8, rax
mov rcx, qword [rbx + 0x40]
shr r8, 3
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18001b74b
mov r9, qword [rsp + 0x50]
mov ecx, 0x100
mov eax, ecx
sub eax, 0x100
je 0x18001b739
cmp eax, 0x2b
je case.0x18001b828.13
jmp 0x18001b740
mov eax, dword [r9]
mov dword [rsp + 0x30], eax
add ecx, 0x2b
cmp ecx, 0x156
jb 0x18001b725
mov edi, dword [rbx + 0x28]
mov eax, edi
sub eax, dword [rbx + 0x20]
and eax, 7
sub edi, eax
mov eax, edi
cmp rax, qword [rbx + 0x28]
ja 0x18001b7c6
xor r9d, r9d
mov dword [rsp + 0x40], edi
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x20], 0x95
xor ecx, ecx
call fcn.180088560
mov rbx, rax
mov dword [rsp + 0x48], edi
mov rax, qword [r14]
lea r8, [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x20], 0x95
xor ecx, ecx
call fcn.180088560
cmp ebx, eax
jne 0x18001b8c1
mov rbx, qword [r12]
inc edi
mov eax, edi
cmp rax, qword [rbx + 0x28]
jbe 0x18001b760
mov rbx, qword [rsp + 0x60]
mov r9, qword [rsp + 0x50]
xor r10d, r10d
mov ecx, 0x6b63
imul eax, r13d, 0x1e
add esi, eax
cmp esi, r15d
jbe 0x18001b630
lea r14d, [r13 + 0xe]
cmp r13d, r14d
jae case.0x18001b828.13
mov r12, qword [rsp + 0x68]
lea esi, [r13 - 0x33]
mov rdi, qword [rsp + 0x68]
lea rdx, [0x180000000]
movzx r15d, byte [rsp + 0x38]
mov r8d, 0x6c
cmp esi, 0xd
ja case.default.0x18001b828
mov ecx, dword [rdx + rsi*4 + 0x1baf4]
add rcx, rdx
jmp rcx
mov byte [rbp + 0x204], 0x6f
jmp 0x18001b7d8
mov dword [rsp + 0x30], r10d
jmp 0x18001b7d8
cmp esi, 0x1221
ja 0x18001b892
je 0x18001b872
mov eax, esi
sub eax, 0xc27
je 0x18001b866
sub eax, 0x23
je case.0x18001b828.13
cmp eax, 0x25d
je case.0x18001b828.13
jmp 0x18001b7d8
mov word [rbp + 0x205], cx
jmp 0x18001b7d8
movzx eax, word [0x1800edc1e]
mov word [rbp + 0x207], ax
movzx eax, byte [0x1800edc20]
mov byte [rbp + 0x209], al
jmp 0x18001b7d8
cmp esi, 0x181b
je 0x18001b8b5
cmp esi, 0x1e15
jne 0x18001b7d8
mov dword [rbp + 0x210], 0x730077
jmp 0x18001b7d8
mov byte [rbp + 0x20a], 0
jmp 0x18001b7d8
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
jmp 0x18001b959
mov dword [rsp + 0x28], 1
lea r9, [rbp - 0x80]
xor r8d, r8d
mov dword [rsp + 0x20], r10d
xor edx, edx
xor ecx, ecx
call r12
mov qword [rbx], rax
lea rdx, [0x180000000]
mov r8d, 0x6c
xor r10d, r10d
jmp case.default.0x18001b828
movzx eax, r15b
test rdi, rdi
mov ecx, r10d
cmovne ecx, eax
movzx r15d, cl
jmp case.default.0x18001b828
mov rax, qword [rsp + 0x68]
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsp + 0x48], eax
mov eax, dword [r9]
xor r9d, r9d
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xac
call fcn.1800a0c10
test al, al
jne 0x18001b8eb
mov byte [rsp + 0x30], al
mov eax, dword [rsp + 0x30]
mov rcx, qword [rbp + 0x228]
xor rcx, rsp
call fcn.1800d1090
mov rbx, qword [rsp + 0x370]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp + 0x220], 0x6c
jmp case.default.0x18001b828
mov rdx, rbx
mov ecx, 0xa4
call fcn.1800b9bf0
test al, al
jne 0x18001b9cf
mov ecx, 0xdf
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xdf
je 0x18001b9c0
cmp eax, 1
je case.0x18001b828.13
jmp 0x18001b9c5
mov byte [rsp + 0x30], 0
inc ecx
cmp ecx, 0xe1
jb 0x18001b9b0
test r15b, r15b
je 0x18001b8eb
mov ebx, 0xdb
nop dword [rax]
mov eax, ebx
sub eax, 0xdb
je 0x18001b9f9
cmp eax, 1
jne 0x18001ba07
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18001ba07
mov edx, 1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
inc ebx
cmp ebx, 0xdd
jb 0x18001b9e0
jmp 0x18001b8eb
mov eax, dword [0x1800edc54]
mov dword [rbp + 0x214], eax
movzx eax, word [0x1800edc58]
mov word [rbp + 0x218], ax
jmp case.default.0x18001b828
mov eax, dword [0x1800edca4]
mov dword [rbp + 0x21a], eax
movzx eax, word [0x1800edca8]
mov word [rbp + 0x21e], ax
jmp case.default.0x18001b828
mov r8d, 1
lea rdx, [0x1800edcd2]
lea rcx, [rbp + 0x222]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r10d, r10d
lea rdx, [0x180000000]
mov word [rbp + 0x224], r10w
lea r8d, [r10 + 0x6c]
jmp case.default.0x18001b828
lea r8, [rbp + 0x210]
mov ecx, 0x7f
lea rdx, [rbp + 0x200]
call fcn.1800c3a10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r12, rax
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rdi, rax
jmp 0x18001b8eb
mov word [rbp + 0x220], r10w
jmp case.default.0x18001b828
mov byte [rsp + 0x30], 1
jmp case.default.0x18001b828
mov r15b, 1
jmp case.default.0x18001b828
mov word [rbp + 0x21a], r10w
inc r13d
inc esi
cmp r13d, r14d
jae case.0x18001b828.13
mov r9, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x60]
jmp 0x18001b815