Function at 0x1000cb610
Capabilities:
Check mutex on windows
Link many functions at runtime

Disassembly:
push rbp
push r14
push r15
mov eax, 0x12f0
call fcn.10005f3c0
sub rsp, rax
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x18], 0xfffffffffffffffe
mov qword [rbp + 0x12d0], rbx
mov qword [rbp + 0x12d8], rsi
mov qword [rbp + 0x12e0], rdi
mov qword [rbp + 0x12e8], r12
mov rax, qword [0x10022f440]
xor rax, rbp
mov qword [rbp + 0x12a0], rax
mov rcx, qword [0x10022f440]
call fcn.1000688b0
lea rcx, [0x1000062f8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
lea rcx, [0x1000220e8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rsi, rax
lea rcx, [0x100022100]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
call fcn.100109670
lea rcx, [rbp + 0x30]
call fcn.1000f2e20
lea rcx, [rbp + 0x30]
call fcn.1000f31b0
lea rcx, [rbp + 0x30]
call fcn.1000c9990
xor r15d, r15d
mov qword [rbp], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp]
mov edx, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1000cb743
mov rbx, qword [rbp]
lea r8, [rbp + 8]
lea rdx, [0x100022118]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x1000cb739
mov dword [rbp + 0x20], 1
mov rax, qword [rbp + 8]
mov qword [rbp + 0x24], rax
mov dword [rbp + 0x2c], 2
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 0x10]
lea r8, [rbp + 0x20]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1000cb739
call fcn.10006bb80
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1000c9120
call fcn.10006c090
mov rbx, rax
call fcn.10011b7d0
movabs r12, 0x624dd2f1a9fbe77
test eax, eax
je 0x1000cb788
call fcn.10011b7f0
lea rcx, [rax*4 + 0x3e7]
mov rax, r12
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 9
mov qword [rbx], rcx
jmp 0x1000cb78f
mov qword [rbx], 0x9c40
call fcn.10006af30
mov rcx, rax
imul rcx, rcx, 0x3a98
mov rax, r12
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 9
call fcn.10006bf00
call fcn.10006af30
mov r11, rax
imul r11, r11, 0x64
mov rax, r12
mul r11
sub r11, rdx
shr r11, 1
add r11, rdx
shr r11, 9
mov qword [0x10023cbf0], r11
call fcn.10006af70
mov rbx, rax
cmp qword [rax], 0xffffffffffffffff
jne 0x1000cb7f0
or rbx, 0xffffffffffffffff
jmp 0x1000cb829
call fcn.10011b7d0
test eax, eax
je 0x1000cb815
call fcn.10011b7f0
mov r11, rax
mov rax, qword [rbx]
imul rax, rax, 0x3e8
xor edx, edx
div r11
mov rbx, rax
jmp 0x1000cb829
movabs rax, 0x346dc5d63886594b
mul qword [rbx]
mov rbx, rdx
shr rbx, 0xb
imul rbx, rbx, 0x3e8
cmp rbx, 0xffffffffffffffff
jne 0x1000cb83f
mov qword [0x1002784f0], rbx
jmp 0x1000cb885
call fcn.10011b7d0
test eax, eax
je 0x1000cb877
call fcn.10011b7f0
mov r11, rax
imul r11, rbx
add r11, 0x3e7
mov rax, r12
mul r11
sub r11, rdx
shr r11, 1
add r11, rdx
shr r11, 9
mov qword [0x1002784f0], r11
jmp 0x1000cb885
imul rbx, rbx, 0x2710
mov qword [0x1002784f0], rbx
call fcn.100063360
call fcn.10006af90
mov ecx, eax
call fcn.10006afa0
call fcn.1000cb590
lea rdx, [0x100022148]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
call fcn.10006b750
lea rdx, [0x100022168]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x100278928], rax
lea rdx, [0x100022180]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
call fcn.10006b770
lea rdx, [0x100022198]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x100278940], rax
lea rdx, [0x1000221a8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x100278938], rax
call fcn.100084190
call fcn.10006aeb0
mov rcx, qword [rax + 8]
shl rcx, 3
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x1000cb935
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.10005f3c0
sub rsp, rax
lea rbx, [rsp + 0x40]
call fcn.10006aeb0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
mov r9, rbx
mov r8, qword [rax + 8]
xor edx, edx
lea rcx, [rbp + 0xb0]
call fcn.1000675e0
nop
call fcn.10006b680
mov rbx, rax
call fcn.10011b7d0
test eax, eax
je 0x1000cb994
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r11, qword [rbp + 0x10]
mov qword [rbx], r11
jmp 0x1000cb99f
mov rax, qword [0x7ffe0008]
mov qword [rbx], rax
call fcn.10006b690
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
call fcn.10006add0
mov rcx, rax
call fcn.100081ff0
mov rbx, rax
mov qword [0x100278968], rax
call fcn.10006bfd0
mov qword [rax + 0x580], rbx
mov rcx, rdi
call fcn.1000df3c0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x100278500], rax
call fcn.10006ba10
mov qword [0x1002784c0], r15
call fcn.1000cc830
call fcn.1000caf80
test rax, rax
je 0x1000cba13
lea rcx, [rax - 0x1000]
call fcn.10006bfc0
lea rdx, [0x1000221c8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x100278950], rax
lea rcx, [rbp + 0xb0]
call fcn.100067830
xor eax, eax
mov rcx, qword [rbp + 0x12a0]
xor rcx, rbp
call fcn.10005f420
mov rbx, qword [rbp + 0x12d0]
mov rsi, qword [rbp + 0x12d8]
mov rdi, qword [rbp + 0x12e0]
mov r12, qword [rbp + 0x12e8]
lea rsp, [rbp + 0x12b0]
pop r15
pop r14
pop rbp
ret