Function at 0x10011acf
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push 0x29c
mov eax, 0x1003f5f7
call fcn.10027266
lea eax, [ebp + 0xc]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x270]
call fcn.100125af
push dword [ebp - 0x270]
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x1007b06c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x10011b2d
push dword [ebp - 0x270]
push esi
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x1007b06c], eax
jmp 0x10011b42
cmp eax, 0xb7
jne 0x10011b42
push 0xffffffffffffffff
push dword [0x1007b06c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x270]
cmp dword [0x1007b06c], esi
sete bl
lea ecx, [ecx - 0x10]
call fcn.1000e534
test bl, bl
jne 0x10011ebe
push esi
sub esp, 0xc
mov dword [ebp - 0x26c], 0x2b637a45
mov ecx, esp
mov dword [ebp - 0x268], 0x4a6b7949
lea eax, [ebp - 0x235]
mov dword [ebp - 0x264], 0x7030694a
lea edx, [ebp - 0x26c]
mov dword [ebp - 0x260], 0x51596959
push ecx
push eax
push edx
mov dword [ebp - 0x25c], 0x3052534b
mov dword [ebp - 0x258], 0x61386763
mov dword [ebp - 0x254], 0x32776d59
mov dword [ebp - 0x250], 0x7a416843
mov dword [ebp - 0x24c], 0x774d535a
mov dword [ebp - 0x248], 0x65414364
mov dword [ebp - 0x244], 0x69345344
mov dword [ebp - 0x240], 0x3255524a
mov dword [ebp - 0x23c], 0x41416759
mov word [ebp - 0x238], 0x4241
mov byte [ebp - 0x236], 0x77
mov dword [ebp - 0x29c], 0x6c417944
mov dword [ebp - 0x298], 0x6a6b534f
mov dword [ebp - 0x294], 0x694e4866
mov dword [ebp - 0x290], 0x3534434d
mov dword [ebp - 0x28c], 0x61417947
mov dword [ebp - 0x288], 0x47594344
mov dword [ebp - 0x284], 0x7a41794b
mov dword [ebp - 0x280], 0x6c6f6e4c
mov dword [ebp - 0x27c], 0x41676741
mov dword [ebp - 0x278], 0x4f414141
call fcn.1001299b
lea ecx, [ebp - 0x224]
call fcn.1000ea1a
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.10012a95
push eax
push esi
sub esp, 0xc
lea eax, [ebp - 0x274]
mov ecx, esp
lea edx, [ebp - 0x29c]
push ecx
push eax
push edx
call fcn.1001299b
lea ecx, [ebp - 0x2a8]
call fcn.1000eb8b
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.10012b0d
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x2a8]
mov dword [0x1007b060], eax
call fcn.10012a79
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 1
call fcn.10012a79
cmp dword [0x1007b060], 0
je 0x10011ebe
call fcn.1001532f
test eax, eax
je 0x10011ebe
push dword [ebp + 8]
mov ecx, 0x1007b128
mov dword [0x1007b068], 1
call fcn.100124eb
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x1007b1a8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push dword [ebp + 0xc]
mov dword [0x1007b1ac], eax
lea edx, [ebp - 0x26c]
push esi
sub esp, 0xc
mov dword [ebp - 0x26c], 0x346b7941
mov ecx, esp
mov dword [ebp - 0x268], 0x6a30534e
lea eax, [ebp - 0x232]
mov dword [ebp - 0x264], 0x2f513245
mov dword [ebp - 0x260], 0x2b637943
push ecx
push eax
push edx
mov dword [ebp - 0x25c], 0x31566861
mov dword [ebp - 0x258], 0x41556842
mov dword [ebp - 0x254], 0x4c4d7743
mov dword [ebp - 0x250], 0x7a63774f
mov dword [ebp - 0x24c], 0x38636946
mov dword [ebp - 0x248], 0x794d7966
mov dword [ebp - 0x244], 0x6c467749
mov dword [ebp - 0x240], 0x2f68414a
mov dword [ebp - 0x23c], 0x4a41334e
mov dword [ebp - 0x238], 0x41414141
mov word [ebp - 0x234], 0x4148
call fcn.1001299b
lea ecx, [ebp - 0x224]
call fcn.1000eb8b
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.10012b0d
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.10014469
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x224]
call fcn.10012a79
push dword [ebp + 0xc]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x1007b064], eax
test eax, eax
je 0x10011e49
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x230]
call fcn.1002679f
mov dword [ebp - 0x230], 0x1004ac00
mov dword [ebp - 0x220], 0x10011aa7
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x230]
call fcn.10026897
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 1
call fcn.10026810
cmp dword [0x1007b18c], 0
je 0x10011ea8
call fcn.10017915
mov eax, dword [ebp - 0x274]
mov dword [0x1007b188], eax
mov eax, dword [ebp - 0x270]
mov dword [0x1007b18c], eax
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.1000e534
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.1000e534
call fcn.10027215
ret