Function at 0x14000bed0
Capabilities:
Check mutex on windows
Create thread

Disassembly:
sub rsp, 0x38
lea r8, str.30735656_E317_4D39_9158_CCCE057880E0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14003f4e0], rax
cmp qword [0x14003f4e0], 0
je 0x14000c19f
lea rcx, str.30735656_E317_4D39_9158_CCCE057880E0
call fcn.14000fc20
lea r9, str.C84B969F_7EF4_4BF8_BA74_C5B1650DD652
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f4e8], rax
cmp qword [0x14003f4e8], 0
je 0x14000c187
lea rcx, str.C84B969F_7EF4_4BF8_BA74_C5B1650DD652
call fcn.14000fc20
lea r9, str.911385DC_015C_4AEA_A729_87D274E65044
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f4f0], rax
cmp qword [0x14003f4f0], 0
je 0x14000c16f
lea rcx, str.911385DC_015C_4AEA_A729_87D274E65044
call fcn.14000fc20
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f508], rax
cmp qword [0x14003f508], 0
je 0x14000c157
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f510], rax
cmp qword [0x14003f510], 0
je 0x14000c13f
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14000e580]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14003f4f8], rax
cmp qword [0x14003f4f8], 0
je 0x14000c127
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14000e6a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14003f500], rax
cmp qword [0x14003f500], 0
je 0x14000c108
lea r9, str.F018E97E_E5C9_4C26_A5E4_84834BDADA9A
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f518], rax
cmp qword [0x14003f518], 0
je 0x14000c0dc
lea rcx, str.F018E97E_E5C9_4C26_A5E4_84834BDADA9A
call fcn.14000fc20
lea r9, str.381F8382_D3EF_45D0_A470_16833D6D5BDB
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x14003f520], rax
cmp qword [0x14003f520], 0
je 0x14000c0c4
lea rcx, str.381F8382_D3EF_45D0_A470_16833D6D5BDB
call fcn.14000fc20
mov eax, 1
jmp 0x14000c1a1
mov rcx, qword [0x14003f518]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f518], 0
mov rcx, qword [0x14003f510]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0xffffffff
mov rcx, qword [0x14003f500]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14003f500]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14003f508]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0xffffffff
mov rcx, qword [0x14003f4f8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14003f510]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f510], 0
mov rcx, qword [0x14003f508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f508], 0
mov rcx, qword [0x14003f4f0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f4f0], 0
mov rcx, qword [0x14003f4e8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f4e8], 0
mov rcx, qword [0x14003f4e0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003f4e0], 0
xor eax, eax
add rsp, 0x38
ret