Function at 0x10038959
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push 0x344
mov eax, 0x1006d5d4
call fcn.1003f081
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
mov dword [ebp - 4], 1
push eax
call fcn.10032a8f
pop ecx
xor ebx, ebx
lea esi, [eax + 0x10]
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100c7940], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x100389b1
push esi
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x100c7940], eax
jmp 0x100389c6
cmp eax, 0xb7
jne 0x100389c6
push 0xffffffffffffffff
push dword [0x100c7940]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x100c7940], ebx
lea ecx, [esi - 0x10]
sete bl
call fcn.100372ea
mov byte [edi + 0x2c], bl
test bl, bl
jne 0x1003901b
xor ebx, ebx
mov dword [ebp - 0x338], 0x2f4d6947
push ebx
sub esp, 0xc
mov byte [ebp - 0x2c8], bl
mov ecx, esp
mov dword [ebp - 0x334], 0x4b30434c
lea eax, [ebp - 0x2cd]
mov dword [ebp - 0x330], 0x6b51544c
mov dword [ebp - 0x32c], 0x34785242
push dword [ebp - 0x2c8]
mov dword [ebp - 0x328], 0x71385445
push eax
mov dword [ebp - 0x324], 0x67354450
lea eax, [ebp - 0x338]
mov dword [ebp - 0x320], 0x6c397a65
mov dword [ebp - 0x31c], 0x59347a64
mov dword [ebp - 0x318], 0x30556959
mov dword [ebp - 0x314], 0x2b63424b
mov dword [ebp - 0x310], 0x77515365
mov dword [ebp - 0x30c], 0x716b7861
mov dword [ebp - 0x308], 0x4e306863
mov dword [ebp - 0x304], 0x67517841
mov dword [ebp - 0x300], 0x6b346a41
mov dword [ebp - 0x2fc], 0x77346949
mov dword [ebp - 0x2f8], 0x3645444a
mov dword [ebp - 0x2f4], 0x6b4e544b
mov dword [ebp - 0x2f0], 0x52515345
mov dword [ebp - 0x2ec], 0x35776e41
mov dword [ebp - 0x2e8], 0x58514366
mov dword [ebp - 0x2e4], 0x576b5350
mov dword [ebp - 0x2e0], 0x51417946
mov dword [ebp - 0x2dc], 0x6e5a4747
mov dword [ebp - 0x2d8], 0x7378444a
mov dword [ebp - 0x2d4], 0x41417743
mov word [ebp - 0x2d0], 0x4541
mov byte [ebp - 0x2ce], 0x4d
mov dword [ebp - 0x2b4], 0x6b516a42
mov dword [ebp - 0x2b0], 0x6730694e
mov dword [ebp - 0x2ac], 0x76703264
mov dword [ebp - 0x2a8], 0x6d6f6a4a
mov dword [ebp - 0x2a4], 0x5673524c
mov dword [ebp - 0x2a0], 0x2b455261
mov dword [ebp - 0x29c], 0x3449544a
mov dword [ebp - 0x298], 0x4f556959
mov dword [ebp - 0x294], 0x3051684a
mov dword [ebp - 0x290], 0x4845444e
mov dword [ebp - 0x28c], 0x3663794a
mov dword [ebp - 0x288], 0x6938684d
mov dword [ebp - 0x284], 0x7a67514e
mov dword [ebp - 0x280], 0x54633263
mov dword [ebp - 0x27c], 0x34596a42
mov dword [ebp - 0x278], 0x56496a46
mov dword [ebp - 0x274], 0x56555147
mov dword [ebp - 0x270], 0x6473774b
mov dword [ebp - 0x26c], 0x54384359
mov dword [ebp - 0x268], 0x46735465
mov dword [ebp - 0x264], 0x6b554347
mov dword [ebp - 0x260], 0x2f703350
mov dword [ebp - 0x25c], 0x4e6b4443
mov dword [ebp - 0x258], 0x4d55794d
mov dword [ebp - 0x254], 0x6d345243
mov dword [ebp - 0x250], 0x47555149
mov dword [ebp - 0x24c], 0x3877514b
mov dword [ebp - 0x248], 0x426f5343
mov dword [ebp - 0x244], 0x68525342
mov dword [ebp - 0x240], 0x6a6f6e48
mov dword [ebp - 0x23c], 0x37636d49
mov dword [ebp - 0x238], 0x45385843
mov dword [ebp - 0x234], 0x656f6864
mov dword [ebp - 0x230], 0x2f467a64
mov dword [ebp - 0x22c], 0x30456a4e
mov dword [ebp - 0x228], 0x66413247
mov dword [ebp - 0x224], 0x65734143
mov dword [ebp - 0x220], 0x41416748
mov word [ebp - 0x21c], 0x4741
mov byte [ebp - 0x21a], 0x51
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
push eax
call fcn.1002fda3
lea eax, [ebp - 0x344]
push eax
call fcn.10032cc8
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1003c884
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x2c8], bl
mov ecx, esp
lea eax, [ebp - 0x219]
push dword [ebp - 0x2c8]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x2b4]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1002fda3
lea eax, [ebp - 0x350]
push eax
call fcn.10032e01
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.1003c8cd
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x350]
mov dword [0x100c76dc], eax
call fcn.1003c74d
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 1
call fcn.1003c6ca
cmp dword [0x100c76dc], ebx
je 0x1003901b
push 0x10034621
push 0x100c76dc
call fcn.1003e271
pop ecx
pop ecx
test eax, eax
je 0x1003901b
push dword [ebp + 8]
mov byte [edi + 0x2d], 1
mov dword [0x100c7938], 1
call fcn.100391b1
pop ecx
push eax
push dword [ebp + 8]
mov ecx, 0x100c7700
call fcn.1003908b
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x100c793c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x100c7948], eax
test eax, eax
je 0x10038dbc
mov byte [edi + 0x2e], 1
push dword [ebp + 0xc]
mov byte [ebp - 0x2c8], bl
lea eax, [ebp - 0x219]
push ebx
sub esp, 0xc
mov dword [ebp - 0x2c4], 0x35306a43
mov ecx, esp
mov dword [ebp - 0x2c0], 0x676b694f
mov dword [ebp - 0x2bc], 0x79304847
mov dword [ebp - 0x2b8], 0x384d5448
push dword [ebp - 0x2c8]
mov dword [ebp - 0x2b4], 0x7a49544b
push eax
mov dword [ebp - 0x2b0], 0x38417846
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x2ac], 0x44495250
mov dword [ebp - 0x2a8], 0x44735742
mov dword [ebp - 0x2a4], 0x58636e5a
mov dword [ebp - 0x2a0], 0x33707a49
mov dword [ebp - 0x29c], 0x56596d50
mov dword [ebp - 0x298], 0x49554743
mov dword [ebp - 0x294], 0x54775345
mov dword [ebp - 0x290], 0x77346a4b
mov dword [ebp - 0x28c], 0x6555694b
mov dword [ebp - 0x288], 0x5673444b
mov dword [ebp - 0x284], 0x6b704342
mov dword [ebp - 0x280], 0x7249334f
mov dword [ebp - 0x27c], 0x6f676943
mov dword [ebp - 0x278], 0x73453350
mov dword [ebp - 0x274], 0x5355434a
mov dword [ebp - 0x270], 0x46346948
mov dword [ebp - 0x26c], 0x47635445
mov dword [ebp - 0x268], 0x6f67784b
mov dword [ebp - 0x264], 0x73525349
mov dword [ebp - 0x260], 0x6e78794e
mov dword [ebp - 0x25c], 0x326f6742
mov dword [ebp - 0x258], 0x64517a66
mov dword [ebp - 0x254], 0x2b55544a
mov dword [ebp - 0x250], 0x2b42414a
mov dword [ebp - 0x24c], 0x6e425147
mov dword [ebp - 0x248], 0x5a417942
mov dword [ebp - 0x244], 0x416b6944
mov dword [ebp - 0x240], 0x50777849
mov dword [ebp - 0x23c], 0x6c516864
mov dword [ebp - 0x238], 0x76427a50
mov dword [ebp - 0x234], 0x63456842
mov dword [ebp - 0x230], 0x594d5366
mov dword [ebp - 0x22c], 0x3959794e
mov dword [ebp - 0x228], 0x3730414f
mov dword [ebp - 0x224], 0x7555324f
mov dword [ebp - 0x220], 0x41416743
mov word [ebp - 0x21c], 0x4841
mov byte [ebp - 0x21a], 0x45
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1002fda3
lea eax, [ebp - 0x344]
push eax
call fcn.10032e01
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1003c8cd
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.10033185
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x344]
call fcn.1003c74d
push dword [ebp + 0xc]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100c7944], eax
test eax, eax
je 0x10038ff2
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x1003b953
lea ecx, [ebp - 0x2cc]
call fcn.1002fa4e
push eax
mov ecx, 0x100c76f0
call fcn.1003c22b
cmp dword [ebp - 0x2c8], 0
je 0x1003901b
call fcn.10049b9a
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.100372ea
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.100372ea
call fcn.1003f02b
ret