Function at 0x14001b8c0
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Terminate process

Disassembly:
sub rsp, 0xa8
lea r8, str.ECA7DF78_C00F_4277_A99C_22BCECF2FEB8
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov qword [0x140067ed0], rax
lea rcx, str.KERNEL32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x20], 0
mov edx, 0xfffe
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
jne 0x14001b924
jmp 0x14001bc6f
mov r8d, 0x104
mov rdx, qword [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x14001b945
jmp 0x14001bc6f
lea rdx, [0x14003b0ec]
mov rcx, qword [rsp + 0x20]
call fcn.140020050
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
jne 0x14001b968
jmp 0x14001bd03
mov rax, qword [rsp + 0x78]
add rax, 2
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x38], 0
lea r8, str.0EB7BDFC_3703_493E_83A8_A36874EF95A9
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x14001b9aa
jmp 0x14001bc6f
call fcn.140013ec0
test eax, eax
jne 0x14001b9bd
jmp 0x14001bc6f
call fcn.140010bf0
test eax, eax
jne 0x14001b9d0
jmp 0x14001bc6f
call fcn.140020450
test eax, eax
jne 0x14001b9e3
jmp 0x14001bc6f
call fcn.140002710
test eax, eax
jne 0x14001b9f6
jmp 0x14001bc6f
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x28], 0
call fcn.140005fe0
cmp eax, 1
jne 0x14001ba3f
lea r8, str.74D77FAC_80D2_4F88_B645_C5F36AFB8791
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x14001ba37
jmp 0x14001bd03
mov dword [rsp + 0x28], 1
lea rcx, str.74D77FAC_80D2_4F88_B645_C5F36AFB8791
call fcn.14001c4c0
mov dword [rsp + 0x30], 0
call fcn.140006100
cmp eax, 1
jne 0x14001ba8b
lea r8, str.365A43B3_1890_4724_93C9_CED4A111EEA3
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x14001ba83
jmp 0x14001bd03
mov dword [rsp + 0x30], 1
lea rcx, str.365A43B3_1890_4724_93C9_CED4A111EEA3
call fcn.14001c4c0
mov dword [rsp + 0x70], 0
call fcn.140006220
cmp eax, 1
jne 0x14001bad7
lea r8, str.2C607456_D6AB_4BCB_A2B8_2A44B8D8393D
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
jne 0x14001bacf
jmp 0x14001bd03
mov dword [rsp + 0x70], 1
lea rcx, str.2C607456_D6AB_4BCB_A2B8_2A44B8D8393D
call fcn.14001c4c0
cmp dword [0x140060ab0], 1
jne 0x14001bbe9
cmp dword [0x1400601f8], 0
jne 0x14001bbe9
cmp dword [rsp + 0x28], 0
jne 0x14001bb12
cmp dword [rsp + 0x30], 0
jne 0x14001bb12
cmp dword [rsp + 0x70], 0
je 0x14001bb4d
mov dword [rsp + 0x80], 0
cmp dword [rsp + 0x80], 5
jge 0x14001bb4d
call fcn.14000d920
test eax, eax
jne 0x14001bb4d
mov ecx, 0x3e8
call qword [0x1400672b0]
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
jmp 0x14001bb1d
cmp dword [0x140060ab4], 1
jne 0x14001bbe9
mov qword [rsp + 0x88], 0
call fcn.140002f00
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
je 0x14001bbe9
mov dword [rsp + 0x90], 0
mov rcx, qword [rsp + 0x88]
call qword [0x1400672c0]
cmp eax, 0xffffffff
je 0x14001bbdb
mov rcx, qword [rsp + 0x88]
call qword [0x140067298]
test eax, eax
jne 0x14001bbd7
mov eax, dword [rsp + 0x90]
inc eax
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0xa
jl 0x14001bbca
jmp 0x14001bbdb
mov ecx, 0x3e8
call qword [0x1400672b0]
jmp 0x14001bbd9
jmp 0x14001bbdb
jmp 0x14001bb89
mov rcx, qword [rsp + 0x88]
call qword [0x1400671c8]
cmp dword [0x140060ab0], 1
jne 0x14001bc08
mov edx, 0xffffffff
mov rcx, qword [0x140066e28]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x14001bc6f
cmp dword [0x1400601f8], 0
je 0x14001bc1e
mov dword [rsp + 0x94], 1
jmp 0x14001bc29
mov dword [rsp + 0x94], 2
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x2c], eax
mov rax, qword [0x140066e28]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x50], rax
mov r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x48]
mov ecx, dword [rsp + 0x2c]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov rcx, qword [0x140066e28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
call fcn.140002770
call fcn.140013f30
test eax, eax
jne 0x14001bc85
xor ecx, ecx
call qword [0x1400671e8]
call fcn.140020720
cmp qword [0x140066e28], 0
je 0x14001bca1
mov rcx, qword [0x140066e28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x38], 0
je 0x14001bcb4
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x38], 0
mov qword [0x140066e28], 0
cmp qword [0x140067ed0], 0
je 0x14001bcdf
mov rcx, qword [0x140067ed0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x20], 0
je 0x14001bcf2
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [0x1400601f8], 0
jne 0x14001bd03
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
add rsp, 0xa8
ret