Function at 0x1400188f0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
sub rsp, 0xa8
lea r8, str.2C946605_9315_4C0A_8DD0_2BE6BCD8AB06
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov qword [0x140064930], rax
lea rcx, str.KERNEL32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x20], 0
mov edx, 0xfffe
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
jne 0x140018954
jmp 0x140018c9f
mov r8d, 0x104
mov rdx, qword [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x140018975
jmp 0x140018c9f
lea rdx, [0x140037c7c]
mov rcx, qword [rsp + 0x20]
call fcn.14001d080
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
jne 0x140018998
jmp 0x140018d33
mov rax, qword [rsp + 0x78]
add rax, 2
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x38], 0
lea r8, str.E214110F_FE41_4DA7_B23B_9838A75D12EE
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x1400189da
jmp 0x140018c9f
call fcn.1400141b0
test eax, eax
jne 0x1400189ed
jmp 0x140018c9f
call fcn.140001cf0
test eax, eax
jne 0x140018a00
jmp 0x140018c9f
call fcn.14001d480
test eax, eax
jne 0x140018a13
jmp 0x140018c9f
call fcn.140005b80
test eax, eax
jne 0x140018a26
jmp 0x140018c9f
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x28], 0
call fcn.140009450
cmp eax, 1
jne 0x140018a6f
lea r8, str.9780484E_C7AB_409D_9923_D2408D1C7126
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x140018a67
jmp 0x140018d33
mov dword [rsp + 0x28], 1
lea rcx, str.9780484E_C7AB_409D_9923_D2408D1C7126
call fcn.1400194f0
mov dword [rsp + 0x30], 0
call fcn.140009570
cmp eax, 1
jne 0x140018abb
lea r8, str.AEDE81E5_8A09_457F_A342_055686902FED
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x140018ab3
jmp 0x140018d33
mov dword [rsp + 0x30], 1
lea rcx, str.AEDE81E5_8A09_457F_A342_055686902FED
call fcn.1400194f0
mov dword [rsp + 0x70], 0
call fcn.140009690
cmp eax, 1
jne 0x140018b07
lea r8, str.C6FB2553_0283_4C30_BBFC_198C934300FF
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
jne 0x140018aff
jmp 0x140018d33
mov dword [rsp + 0x70], 1
lea rcx, str.C6FB2553_0283_4C30_BBFC_198C934300FF
call fcn.1400194f0
cmp dword [0x14005d520], 1
jne 0x140018c19
cmp dword [0x14005cc68], 0
jne 0x140018c19
cmp dword [rsp + 0x28], 0
jne 0x140018b42
cmp dword [rsp + 0x30], 0
jne 0x140018b42
cmp dword [rsp + 0x70], 0
je 0x140018b7d
mov dword [rsp + 0x80], 0
cmp dword [rsp + 0x80], 5
jge 0x140018b7d
call fcn.140010ed0
test eax, eax
jne 0x140018b7d
mov ecx, 0x3e8
call qword [0x140063df0]
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
jmp 0x140018b4d
cmp dword [0x14005d524], 1
jne 0x140018c19
mov qword [rsp + 0x88], 0
call fcn.140006370
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
je 0x140018c19
mov dword [rsp + 0x90], 0
mov rcx, qword [rsp + 0x88]
call qword [0x140063e00]
cmp eax, 0xffffffff
je 0x140018c0b
mov rcx, qword [rsp + 0x88]
call qword [0x140063dd8]
test eax, eax
jne 0x140018c07
mov eax, dword [rsp + 0x90]
inc eax
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0xa
jl 0x140018bfa
jmp 0x140018c0b
mov ecx, 0x3e8
call qword [0x140063df0]
jmp 0x140018c09
jmp 0x140018c0b
jmp 0x140018bb9
mov rcx, qword [rsp + 0x88]
call qword [0x140063d08]
cmp dword [0x14005d520], 1
jne 0x140018c38
mov edx, 0xffffffff
mov rcx, qword [0x140063968]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x140018c9f
cmp dword [0x14005cc68], 0
je 0x140018c4e
mov dword [rsp + 0x94], 1
jmp 0x140018c59
mov dword [rsp + 0x94], 2
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x2c], eax
mov rax, qword [0x140063968]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x50], rax
mov r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x48]
mov ecx, dword [rsp + 0x2c]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov rcx, qword [0x140063968]
call qword [sym.imp.KERNEL32.dll_SetEvent]
call fcn.140005be0
call fcn.140014220
test eax, eax
jne 0x140018cb5
xor ecx, ecx
call qword [0x140063d28]
call fcn.14001d750
cmp qword [0x140063968], 0
je 0x140018cd1
mov rcx, qword [0x140063968]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x38], 0
je 0x140018ce4
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x38], 0
mov qword [0x140063968], 0
cmp qword [0x140064930], 0
je 0x140018d0f
mov rcx, qword [0x140064930]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x20], 0
je 0x140018d22
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [0x14005cc68], 0
jne 0x140018d33
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
add rsp, 0xa8
ret