Function at 0x120180fe
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push 0x350
mov eax, 0x1204cdb5
call fcn.1201e877
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
mov dword [ebp - 4], 1
push eax
call fcn.12012289
pop ecx
xor ebx, ebx
lea esi, [eax + 0x10]
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x16027940], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x12018156
push esi
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x16027940], eax
jmp 0x1201816b
cmp eax, 0xb7
jne 0x1201816b
push 0xffffffffffffffff
push dword [0x16027940]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x16027940], ebx
lea ecx, [esi - 0x10]
sete bl
call fcn.1201669e
mov byte [edi + 0x2c], bl
test bl, bl
jne 0x120186ce
xor ebx, ebx
mov dword [ebp - 0x250], 0x6c4d4448
push ebx
sub esp, 0xc
mov byte [ebp - 0x26c], bl
mov ecx, esp
mov dword [ebp - 0x24c], 0x44597950
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x248], 0x7734444a
mov dword [ebp - 0x244], 0x68457748
push dword [ebp - 0x26c]
mov dword [ebp - 0x240], 0x2b6f5141
push eax
mov dword [ebp - 0x23c], 0x36597a4b
lea eax, [ebp - 0x250]
mov dword [ebp - 0x238], 0x6d77794d
mov dword [ebp - 0x234], 0x444d524c
mov dword [ebp - 0x230], 0x42555243
mov dword [ebp - 0x22c], 0x306b514f
mov dword [ebp - 0x228], 0x36736766
mov dword [ebp - 0x224], 0x41637a65
mov dword [ebp - 0x220], 0x61414141
mov dword [ebp - 0x344], 0x2b514341
mov dword [ebp - 0x340], 0x7059534a
mov dword [ebp - 0x33c], 0x37426d66
mov dword [ebp - 0x338], 0x34347a4c
mov dword [ebp - 0x334], 0x41515148
mov dword [ebp - 0x330], 0x6959544b
mov dword [ebp - 0x32c], 0x6134444f
mov dword [ebp - 0x328], 0x63454463
mov dword [ebp - 0x324], 0x74634749
mov dword [ebp - 0x320], 0x3668684d
mov dword [ebp - 0x31c], 0x6c456845
mov dword [ebp - 0x318], 0x5641534b
mov dword [ebp - 0x314], 0x6d68514f
mov dword [ebp - 0x310], 0x6d744250
mov dword [ebp - 0x30c], 0x43417a59
mov dword [ebp - 0x308], 0x366c7a44
mov dword [ebp - 0x304], 0x6d4e5445
mov dword [ebp - 0x300], 0x37674246
mov dword [ebp - 0x2fc], 0x7056535a
mov dword [ebp - 0x2f8], 0x51495261
mov dword [ebp - 0x2f4], 0x4c675849
mov dword [ebp - 0x2f0], 0x5630674a
mov dword [ebp - 0x2ec], 0x6c415150
mov dword [ebp - 0x2e8], 0x4f676a4b
mov dword [ebp - 0x2e4], 0x5a494344
mov dword [ebp - 0x2e0], 0x33647a49
mov dword [ebp - 0x2dc], 0x54596e42
mov dword [ebp - 0x2d8], 0x5567414a
mov dword [ebp - 0x2d4], 0x4e596761
mov dword [ebp - 0x2d0], 0x45554261
mov dword [ebp - 0x2cc], 0x62457850
mov dword [ebp - 0x2c8], 0x3352584f
mov dword [ebp - 0x2c4], 0x2f554350
mov dword [ebp - 0x2c0], 0x38775249
mov dword [ebp - 0x2bc], 0x6d456843
mov dword [ebp - 0x2b8], 0x6a494363
mov dword [ebp - 0x2b4], 0x4649784a
mov dword [ebp - 0x2b0], 0x4477684c
mov dword [ebp - 0x2ac], 0x74783349
mov dword [ebp - 0x2a8], 0x57344450
mov dword [ebp - 0x2a4], 0x5773694c
mov dword [ebp - 0x2a0], 0x68594265
mov dword [ebp - 0x29c], 0x686f6750
mov dword [ebp - 0x298], 0x5467514d
mov dword [ebp - 0x294], 0x6e734250
mov dword [ebp - 0x290], 0x2b4e7941
mov dword [ebp - 0x28c], 0x74347762
mov dword [ebp - 0x288], 0x69497864
mov dword [ebp - 0x284], 0x4867444a
mov dword [ebp - 0x280], 0x4f38524f
mov dword [ebp - 0x27c], 0x6667544f
mov dword [ebp - 0x278], 0x416f7948
mov dword [ebp - 0x274], 0x50434141
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1200f5c3
lea eax, [ebp - 0x350]
push eax
call fcn.120124c2
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1201c0fc
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x26c], bl
mov ecx, esp
lea eax, [ebp - 0x270]
push dword [ebp - 0x26c]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x344]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1200f5c3
lea eax, [ebp - 0x35c]
push eax
call fcn.120125fb
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.1201c145
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x35c]
mov dword [0x160276dc], eax
call fcn.1201bfc5
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 1
call fcn.1201bf42
cmp dword [0x160276dc], ebx
je 0x120186ce
push 0x12013f59
push 0x160276dc
call fcn.1201da67
pop ecx
pop ecx
test eax, eax
je 0x120186ce
push dword [ebp + 8]
mov byte [edi + 0x2d], 1
mov dword [0x16027938], 1
call fcn.12018864
pop ecx
push eax
push dword [ebp + 8]
mov ecx, 0x16027700
call fcn.1201873e
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x1602793c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x16027948], eax
test eax, eax
je 0x12018555
mov byte [edi + 0x2e], 1
push dword [ebp + 0xc]
mov byte [ebp - 0x26c], bl
lea eax, [ebp - 0x219]
push ebx
sub esp, 0xc
mov dword [ebp - 0x268], 0x6a304344
mov ecx, esp
mov dword [ebp - 0x264], 0x7049534b
mov dword [ebp - 0x260], 0x6d635845
mov dword [ebp - 0x25c], 0x2b634446
push dword [ebp - 0x26c]
mov dword [ebp - 0x258], 0x2b70674e
push eax
mov dword [ebp - 0x254], 0x33677a64
lea eax, [ebp - 0x268]
mov dword [ebp - 0x250], 0x7977774d
mov dword [ebp - 0x24c], 0x36673246
mov dword [ebp - 0x248], 0x6f315449
mov dword [ebp - 0x244], 0x6b307a4f
mov dword [ebp - 0x240], 0x376c4443
mov dword [ebp - 0x23c], 0x6d457849
mov dword [ebp - 0x238], 0x47456a50
mov dword [ebp - 0x234], 0x6a525747
mov dword [ebp - 0x230], 0x395a6946
mov dword [ebp - 0x22c], 0x6f735364
mov dword [ebp - 0x228], 0x354d6942
mov dword [ebp - 0x224], 0x4c774263
mov dword [ebp - 0x220], 0x4141674e
mov word [ebp - 0x21c], 0x4341
mov byte [ebp - 0x21a], 0x77
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1200f5c3
lea eax, [ebp - 0x350]
push eax
call fcn.120125fb
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1201c145
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.1201297f
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x350]
call fcn.1201bfc5
push dword [ebp + 0xc]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x16027944], eax
test eax, eax
je 0x120186a5
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x1201b1cb
lea ecx, [ebp - 0x270]
call fcn.1200f26e
push eax
mov ecx, 0x160276f0
call fcn.1201baa3
cmp dword [ebp - 0x26c], 0
je 0x120186ce
call fcn.1202938a
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.1201669e
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.1201669e
call fcn.1201e821
ret