Function at 0x140007280
Capabilities:
Check mutex on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x240], rbx
mov rax, qword [0x140041018]
xor rax, rsp
mov qword [rbp + 0xe8], rax
mov r15, rdx
mov r14, rcx
mov rcx, qword [rcx]
xor r13d, r13d
test rcx, rcx
je 0x1400072d7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r14], r13
mov word [r14 + 8], r13w
mov qword [rsp + 0x78], r13
mov ecx, 0x58
call fcn.14001f5e4
mov rbx, rax
mov qword [rsp + 0x78], rax
mov qword [rax], r13
lea rsi, [rax + 8]
mov qword [rsi], r13
mov dword [rax + 0x10], 0x18
lea rdi, [rax + 0x28]
mov qword [rax + 0x18], rdi
mov dword [rax + 0x20], r13d
lea rdx, str.Advapi32.dll
lea rcx, [rsp + 0x40]
call fcn.140001ed4
nop
call fcn.140014280
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140014350
mov qword [rbx + 0x50], rax
lea rcx, [rsp + 0x40]
call fcn.140001dd0
mov r9, rsi
mov r8b, 1
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.140013ee0
mov rbx, qword [rsp + 0x78]
mov qword [rbx], rax
cmp qword [rbx], 0
lea rdi, [rbx + 0x10]
jne 0x14000736a
mov rdi, r13
mov rcx, r15
call fcn.140001cc0
test al, al
jne 0x14000737d
call fcn.140001ccc
jmp 0x140007380
mov rax, r13
mov r8, rax
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [r14], rax
test rax, rax
jne 0x1400073d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x1400073d1
lea ecx, [rax + 5]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r15
call fcn.140001cc0
test al, al
jne 0x1400073bd
call fcn.140001ccc
jmp 0x1400073c0
mov rax, r13
mov r8, rax
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [r14], rax
cmp qword [r14], 0
je 0x14000754d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400073ed
mov byte [r14 + 9], 1
mov rsi, qword [r14]
lea rcx, [rbp - 0x70]
call fcn.140010be0
cmp dword [rbp - 0x6c], 6
jb 0x140007549
test rsi, rsi
je 0x140007549
lea rdx, str.Advapi32.dll
lea rcx, [rsp + 0x40]
call fcn.140001ed4
nop
call fcn.140014280
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140014350
mov rdi, rax
lea rcx, [rsp + 0x40]
call fcn.140001dd0
test rdi, rdi
je 0x140007549
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov dword [rbp - 0x7c], r13d
mov dword [rbp - 0x80], r13d
movups xmm0, xmmword [str.ConvertStringSecurityDescriptorToSecurityDescriptorW]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [0x140033248]
movups xmmword [rbp + 0xc0], xmm1
movups xmm0, xmmword [0x140033258]
movups xmmword [rbp + 0xd0], xmm0
mov eax, dword [0x140033268]
mov dword [rbp + 0xe0], eax
movzx eax, byte [0x14003326c]
mov byte [rbp + 0xe4], al
lea rdx, [rbp + 0xb0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x140007549
lea rdx, str.GetSecurityDescriptorSacl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
je 0x140007549
lea rdx, str.SetSecurityInfo
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x140007549
xor r9d, r9d
lea r8, [rsp + 0x68]
lea edx, [r9 + 1]
lea rcx, str.S:_ML__NW___LW_
call r12
test eax, eax
je 0x140007549
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x7c]
mov rcx, qword [rsp + 0x68]
call r15
test eax, eax
je 0x14000753e
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea edx, [r9 + 6]
lea r8d, [r9 + 0x10]
mov rcx, rsi
call rdi
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp qword [r14], 0
setne sil
mov rdi, qword [rbx]
test rdi, rdi
je 0x140007570
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140007583
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rbx + 8], r13
mov edx, 0x58
mov rcx, rbx
call fcn.14001f8d4
mov qword [rsp + 0x78], r13
movzx eax, sil
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.14001f5c0
mov rbx, qword [rsp + 0x240]
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret