Function at 0x1400033d8
Capabilities:
Check mutex on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x100
mov rax, qword [0x14031a940]
xor rax, rsp
mov qword [rsp + 0xf8], rax
mov rdi, rcx
lea r8, str.MyAppxxxxx
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140329c60], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140003837
mov dword [rsp + 0xe8], 8
mov dword [rsp + 0xec], 0xff
lea rcx, [rsp + 0xe8]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov rcx, rdi
call fcn.140084f28
xor ecx, ecx
call fcn.1400865f0
mov ecx, 0x18
call fcn.140084538
mov qword [rsp + 0x90], rax
xor esi, esi
test rax, rax
je 0x140003493
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
mov qword [rax + 0x10], rcx
mov rcx, rax
call fcn.14008779c
jmp 0x140003496
mov rax, rsi
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x80], rax
lea rcx, str.CMFCVisualManagerWindows
call fcn.140093e74
mov rcx, rdi
call fcn.140002e98
mov qword [rsp + 0xe0], rsi
mov rdx, qword [rdi + 0x90]
lea rcx, [rsp + 0xe0]
call fcn.140003de0
nop
mov dword [rsp + 0x20], esi
mov qword [rsp + 0xd0], rsi
call fcn.140083534
mov rcx, rax
test rax, rax
je 0x140003865
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0x98], rax
add rax, 0x18
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rsi
call fcn.140083534
mov rcx, rax
test rax, rax
je 0x140003870
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0xa0], rax
add rax, 0x18
mov qword [rsp + 0xd8], rax
lea r9, [rsp + 0x20]
lea r8, [0x1402c7918]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xe0]
call fcn.140003c48
mov qword [rsp + 0xa8], rax
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140002bcc
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x50], rcx
or r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1400035a4
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0xd0]
cmp word [rbx], si
je 0x14000370c
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14000387b
movzx eax, word [rbx]
mov word [rsp + 0x24], ax
cmp ax, 0x2d
je 0x1400035dd
mov word [rsp + 0x26], ax
cmp ax, 0x2f
jne 0x14000365a
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [rsp + 0xd0]
call fcn.140003888
lea r9, [rsp + 0x20]
lea r8, [0x1402c7918]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0xe0]
call fcn.140003c48
mov qword [rsp + 0xb0], rax
mov rdx, rax
lea rcx, [rsp + 0xd8]
call fcn.140002bcc
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x60], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x140003652
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0xd0]
lea rdx, str.computerid
mov rcx, rbx
call fcn.140229868
mov dword [rsp + 0x34], eax
test eax, eax
jne 0x14000367a
lea rcx, [0x140329d18]
jmp 0x140003698
lea rdx, str.referrerid
mov rcx, rbx
call fcn.140229868
mov dword [rsp + 0x38], eax
test eax, eax
jne 0x1400036a5
lea rcx, [0x140329d28]
lea rdx, [rsp + 0xd8]
call fcn.140002bcc
lea r9, [rsp + 0x20]
lea r8, [0x1402c7918]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0xe0]
call fcn.140003c48
mov qword [rsp + 0xb8], rax
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140002bcc
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x70], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x140003707
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400035a4
mov rcx, rdi
call fcn.140003270
mov ecx, 0x570
call fcn.140084538
mov rbx, rax
mov qword [rsp + 0xc0], rax
test rax, rax
je 0x140003750
xor edx, edx
mov r8d, 0x570
mov rcx, rax
call fcn.140225130
mov rcx, rbx
call fcn.140004154
mov rcx, rax
mov qword [rsp + 0x78], rax
jmp 0x140003758
mov rcx, rsi
mov qword [rsp + 0x78], rcx
mov qword [rdi + 0x188], rcx
mov rax, qword [rcx]
call qword [rax + 0x2e8]
mov rcx, qword [rsp + 0x80]
test ecx, ecx
je 0x140003784
test rcx, rcx
je 0x140003784
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rdi + 0x188]
test rcx, rcx
je 0x1400037a4
mov qword [rsp + 0xc8], rcx
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xd8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x88], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x1400037d9
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xd0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x28], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x140003808
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xe0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x28], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x140003837
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor eax, eax
mov rcx, qword [rsp + 0xf8]
xor rcx, rsp
call fcn.1402202b0
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
mov ecx, 0x80004005
call fcn.140002d6c
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
mov ecx, 0x80070057
call fcn.140002d6c
int3