Function at 0x1001810e
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push 0x398
mov eax, 0x10047027
call fcn.1002e5e6
mov edi, ecx
mov dword [ebp - 4], 1
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.1001aad4
xor ebx, ebx
lea esi, [eax + 0x10]
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x10083108], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x10018163
push esi
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x10083108], eax
jmp 0x10018178
cmp eax, 0xb7
jne 0x10018178
push 0xffffffffffffffff
push dword [0x10083108]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x10083108], ebx
lea ecx, [esi - 0x10]
sete bl
call fcn.1000ff12
mov byte [edi + 0x2c], bl
test bl, bl
jne 0x10018811
mov dword [ebp - 0x2dc], 0x356f5348
mov dword [ebp - 0x2d8], 0x4b497a49
mov dword [ebp - 0x2d4], 0x396f6a50
mov dword [ebp - 0x2d0], 0x62305348
mov dword [ebp - 0x2cc], 0x756b7841
mov dword [ebp - 0x2c8], 0x4e557a42
mov dword [ebp - 0x2c4], 0x79304246
mov dword [ebp - 0x2c0], 0x2f4d444b
mov dword [ebp - 0x2bc], 0x41456a42
mov dword [ebp - 0x2b8], 0x706b544f
mov dword [ebp - 0x2b4], 0x334d4266
mov dword [ebp - 0x2b0], 0x696f6e50
mov dword [ebp - 0x2ac], 0x546f424e
mov dword [ebp - 0x2a8], 0x76305849
mov dword [ebp - 0x2a4], 0x6d675341
mov dword [ebp - 0x2a0], 0x38597945
mov dword [ebp - 0x29c], 0x34735364
mov dword [ebp - 0x298], 0x65414449
mov dword [ebp - 0x294], 0x2f635264
mov dword [ebp - 0x290], 0x59384459
mov dword [ebp - 0x28c], 0x6942324d
mov dword [ebp - 0x288], 0x744d4446
mov dword [ebp - 0x284], 0x4b384241
mov dword [ebp - 0x280], 0x5473414b
mov dword [ebp - 0x27c], 0x62345149
mov dword [ebp - 0x278], 0x42516947
mov dword [ebp - 0x274], 0x794d4342
mov dword [ebp - 0x270], 0x52636850
mov dword [ebp - 0x26c], 0x39594141
mov dword [ebp - 0x268], 0x6451434a
mov dword [ebp - 0x264], 0x6e746a65
mov dword [ebp - 0x260], 0x7051574c
mov dword [ebp - 0x25c], 0x536b4149
mov dword [ebp - 0x258], 0x3445434b
mov dword [ebp - 0x254], 0x666f6e42
mov dword [ebp - 0x250], 0x586b6766
mov dword [ebp - 0x24c], 0x56557a4d
mov dword [ebp - 0x248], 0x53385142
mov dword [ebp - 0x244], 0x6f556a47
mov dword [ebp - 0x240], 0x494d5150
mov dword [ebp - 0x23c], 0x6338514b
mov dword [ebp - 0x238], 0x4141774d
mov word [ebp - 0x234], 0x4841
mov byte [ebp - 0x232], 0x4d
mov dword [ebp - 0x390], 0x69305441
mov dword [ebp - 0x38c], 0x6749544f
mov dword [ebp - 0x388], 0x3252475a
mov dword [ebp - 0x384], 0x7467794c
mov dword [ebp - 0x380], 0x72676a4f
mov dword [ebp - 0x37c], 0x4438424b
mov dword [ebp - 0x378], 0x6267774e
mov dword [ebp - 0x374], 0x69684250
mov dword [ebp - 0x370], 0x57517a41
mov dword [ebp - 0x36c], 0x486f545a
mov dword [ebp - 0x368], 0x78455150
mov dword [ebp - 0x364], 0x6130424f
mov dword [ebp - 0x360], 0x764d694d
mov dword [ebp - 0x35c], 0x3064684b
mov dword [ebp - 0x358], 0x3970784f
mov dword [ebp - 0x354], 0x63305448
mov dword [ebp - 0x350], 0x69677964
mov dword [ebp - 0x34c], 0x6b387849
mov dword [ebp - 0x348], 0x4c4d674c
mov dword [ebp - 0x344], 0x714d6748
mov dword [ebp - 0x340], 0x316b7944
mov dword [ebp - 0x33c], 0x5a496a4f
mov dword [ebp - 0x338], 0x69556742
mov dword [ebp - 0x334], 0x69454349
mov dword [ebp - 0x330], 0x2b385848
mov dword [ebp - 0x32c], 0x6a785249
mov dword [ebp - 0x328], 0x7355794c
mov dword [ebp - 0x324], 0x53347865
mov dword [ebp - 0x320], 0x666b7847
mov dword [ebp - 0x31c], 0x6a70684d
mov dword [ebp - 0x318], 0x68467942
mov dword [ebp - 0x314], 0x42454143
mov dword [ebp - 0x310], 0x7264694c
mov dword [ebp - 0x30c], 0x4c735347
mov dword [ebp - 0x308], 0x38554248
mov dword [ebp - 0x304], 0x38775266
mov dword [ebp - 0x300], 0x61676e42
xor ebx, ebx
mov dword [ebp - 0x2fc], 0x59513347
push ebx
sub esp, 0xc
mov dword [ebp - 0x2f8], 0x755a794a
mov ecx, esp
mov dword [ebp - 0x2f4], 0x6d355448
lea eax, [ebp - 0x231]
mov dword [ebp - 0x2f0], 0x35497748
lea edx, [ebp - 0x2dc]
mov dword [ebp - 0x2ec], 0x65595245
push ecx
push eax
push edx
mov dword [ebp - 0x2e8], 0x72427748
mov dword [ebp - 0x2e4], 0x41596a50
mov dword [ebp - 0x2e0], 0x33424141
call fcn.1001986e
lea ecx, [ebp - 0x224]
call fcn.10010fb3
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.10019968
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0x2dc]
mov ecx, esp
lea edx, [ebp - 0x390]
push ecx
push eax
push edx
call fcn.1001986e
lea ecx, [ebp - 0x3a4]
call fcn.10011111
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.100199e0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x3a4]
mov dword [0x1008310c], eax
call fcn.1001994c
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 1
call fcn.1001994c
cmp dword [0x1008310c], ebx
je 0x10018811
call fcn.1001c568
test eax, eax
je 0x10018811
push dword [ebp + 8]
mov ecx, 0x100831d8
mov byte [edi + 0x2d], 1
mov dword [0x10083104], 1
call fcn.1001920c
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x1008325c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x10083260], eax
test eax, eax
je 0x10018606
mov byte [edi + 0x2e], 1
push dword [ebp + 0xc]
lea eax, [ebp - 0x231]
mov dword [ebp - 0x2a4], 0x2f515444
push ebx
sub esp, 0xc
mov dword [ebp - 0x2a0], 0x6759544e
mov ecx, esp
mov dword [ebp - 0x29c], 0x724d3343
lea edx, [ebp - 0x2a4]
mov dword [ebp - 0x298], 0x30454346
mov dword [ebp - 0x294], 0x62556a4d
push ecx
push eax
push edx
mov dword [ebp - 0x290], 0x6e597745
mov dword [ebp - 0x28c], 0x77633364
mov dword [ebp - 0x288], 0x42346849
mov dword [ebp - 0x284], 0x54736a4b
mov dword [ebp - 0x280], 0x39423343
mov dword [ebp - 0x27c], 0x67464342
mov dword [ebp - 0x278], 0x70304349
mov dword [ebp - 0x274], 0x75566748
mov dword [ebp - 0x270], 0x6e553363
mov dword [ebp - 0x26c], 0x2f455166
mov dword [ebp - 0x268], 0x466f7a50
mov dword [ebp - 0x264], 0x4c34514f
mov dword [ebp - 0x260], 0x636f5342
mov dword [ebp - 0x25c], 0x31675850
mov dword [ebp - 0x258], 0x6d45534f
mov dword [ebp - 0x254], 0x3855335a
mov dword [ebp - 0x250], 0x61597749
mov dword [ebp - 0x24c], 0x56307a48
mov dword [ebp - 0x248], 0x56455144
mov dword [ebp - 0x244], 0x476f774b
mov dword [ebp - 0x240], 0x6846444c
mov dword [ebp - 0x23c], 0x5877544c
mov dword [ebp - 0x238], 0x4141674f
mov word [ebp - 0x234], 0x4541
mov byte [ebp - 0x232], 0x63
call fcn.1001986e
lea ecx, [ebp - 0x224]
call fcn.10011111
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100199e0
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.1001b527
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x224]
call fcn.1001994c
push dword [ebp + 0xc]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x10083100], eax
test eax, eax
je 0x1001879c
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x230]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x230]
call fcn.1002db1f
mov dword [ebp - 0x230], 0x10052b78
mov dword [ebp - 0x220], 0x100180e6
lea eax, [ebp - 0x398]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x230]
call fcn.1002dc17
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 1
call fcn.1002db90
cmp dword [0x10083240], 0
je 0x100187fb
call fcn.1001ec9f
mov eax, dword [ebp - 0x398]
mov dword [0x1008323c], eax
mov eax, dword [ebp - 0x394]
mov dword [0x10083240], eax
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.1000ff12
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.1000ff12
call fcn.1002e595
ret