Function at 0x180041a00
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov ebx, dword [rsp + 0x98]
lea eax, [rdx*4]
add eax, edx
mov r14, r9
add eax, eax
mov rbp, r8
mov dword [rsp + 0x30], eax
mov r13d, edx
mov r15, rcx
mov r12d, edx
cmp edx, eax
ja 0x180041cd3
mov esi, dword [rsp + 0x98]
cmp r12d, 0x165
ja 0x180041b55
je 0x180041b02
mov eax, r12d
sub eax, 0x77
je 0x180041af2
sub eax, 7
je 0x180041ae7
sub eax, 0x70
je 0x180041ab6
sub eax, 0xe
je 0x180041cd3
cmp eax, 0x24
jne 0x180041cc5
mov r8, qword [r14 + 0x98]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x180041cc5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r9, [rsp + 0x38]
mov dword [rsp + 0x98], esi
lea r8, [rsp + 0x98]
mov qword [rsp + 0x20], 0
mov edx, 0x27
xor ecx, ecx
call fcn.1800352e0
mov qword [r15], rax
jmp 0x180041cc5
mov rax, qword [r14]
mov ebx, dword [rax + 0x18]
jmp 0x180041cc5
mov esi, 8
mov r8d, esi
lea edx, [rsi - 7]
jmp 0x180041c90
mov r9, qword [r14]
lea rcx, [rsp + 0x38]
mov edx, 1
mov r8d, edx
call qword [rbp]
cmp rax, 1
jne 0x180041ca0
mov dword [rsp + 0x98], eax
lea r8, [rsp + 0x98]
lea rax, [rsp + 0x38]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0x89
call fcn.18004f550
mov byte [r15 + 8], al
mov esi, 0xc
jmp 0x180041cc5
mov eax, r12d
sub eax, 0x1dc
je 0x180041ca7
sub eax, 0x77
je 0x180041c42
sub eax, 0x77
je 0x180041be1
cmp eax, 0x77
jne 0x180041cc5
xor r12d, r12d
cmp byte [r15 + 0x1c], r12b
jbe 0x180041dc4
nop word [rax + rax]
mov ebx, 0x101
nop word [rax + rax]
cmp ebx, 0x101
je 0x180041d30
cmp ebx, 0x1b9
je 0x180041cf3
cmp ebx, 0x271
jne 0x180041da1
mov r9, qword [r14]
lea rcx, [rsp + 0x38]
mov r8d, esi
mov edx, 1
mov edi, esi
call qword [rbp]
cmp rax, rdi
jmp 0x180041d9b
lea rax, [rsp + 0x38]
mov dword [rsp + 0x98], esi
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x98]
xor edx, edx
mov ecx, 0x89
call fcn.18004f550
mov byte [r15 + 0x1c], al
test al, al
jne 0x180041c1e
mov qword [r15 + 0x20], 0
jmp 0x180041cc5
movzx ecx, al
mov edx, 0x10
call fcn.180059324
mov qword [r15 + 0x20], rax
test rax, rax
jne 0x180041cc5
mov eax, 0xb
jmp 0x180041cd5
mov r9, qword [r14]
lea rcx, [rsp + 0x38]
mov r8d, esi
mov edx, 1
mov edi, esi
call qword [rbp]
cmp rax, rdi
jne 0x180041ca0
movzx edx, byte [rsp + 0x38]
mov esi, 1
and dword [r15 + 0x18], 0xfffffffe
mov ecx, edx
shr ecx, 7
mov eax, edx
or ecx, dword [r15 + 0x18]
shr edx, 7
or edx, dword [r15 + 0x18]
shr eax, 5
xor ecx, eax
and ecx, 2
xor ecx, edx
mov edx, esi
mov r8d, edx
mov dword [r15 + 0x18], ecx
mov r9, qword [r14]
lea rcx, [rsp + 0x38]
call qword [rbp]
cmp rax, rsi
je 0x180041cc5
mov eax, 6
jmp 0x180041cd5
mov r9, qword [r14]
lea rcx, [r15 + 9]
mov r8d, esi
mov edx, 1
mov edi, esi
call qword [rbp]
cmp rax, rdi
jne 0x180041ca0
mov esi, 0xe
add r12d, r13d
cmp r12d, dword [rsp + 0x30]
jbe 0x180041a50
mov eax, ebx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rax, [rsp + 0x38]
mov dword [rsp + 0x98], esi
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x98]
xor edx, edx
mov ecx, 0x89
call fcn.18004f550
mov rcx, qword [r15 + 0x20]
mov esi, 3
mov edx, r12d
add rdx, rdx
mov byte [rcx + rdx*8 + 8], al
jmp 0x180041da1
mov r9, qword [r14]
lea rcx, [rsp + 0x38]
mov edx, 1
lea r8d, [rdx + 7]
call qword [rbp]
cmp rax, 8
jne 0x180041ca0
lea r9, [rsp + 0x38]
mov dword [rsp + 0x98], eax
lea r8, [rsp + 0x98]
mov qword [rsp + 0x20], 0
lea edx, [rax + 0x1f]
xor ecx, ecx
call fcn.1800352e0
mov rcx, qword [r15 + 0x20]
mov esi, 1
mov edx, r12d
add rdx, rdx
mov qword [rcx + rdx*8], rax
mov edx, esi
mov r9, qword [r14]
lea rcx, [rsp + 0x38]
mov r8d, edx
call qword [rbp]
cmp rax, rsi
jne 0x180041ca0
add ebx, 0xb8
cmp ebx, 0x329
jb 0x180041ba0
movzx ecx, byte [r15 + 0x1c]
inc r12d
cmp r12d, ecx
jb 0x180041b90
xor eax, eax
jmp 0x180041cd5