Function at 0x1000a110
Capabilities:
Check mutex on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b0
lea ecx, [ebp - 0x18]
lea eax, str.Gdi32.dll
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x14
call fcn.1015ba80
lea ecx, [ebp - 0x2e]
lea eax, [0x1018e876]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x16
call fcn.1015ba80
lea ecx, [ebp - 0x40]
lea eax, str.EnumFontFamiliesA
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x12
call fcn.1015ba80
lea eax, [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
sub esp, 4
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x2e]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
sub esp, 4
mov dword [ebp - 0x48], eax
mov eax, dword [0x1018e89e]
mov dword [ebp - 0x4e], eax
mov ax, word [0x1018e8a2]
mov word [ebp - 0x4a], ax
lea eax, [ebp - 0x4e]
mov ecx, dword [ebp - 0x48]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10008120
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10008120
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x198], eax
xor eax, eax
mov dword [esp], 0
call dword [ebp - 0x54]
sub esp, 4
mov edx, eax
mov eax, dword [ebp - 0x198]
xor ecx, ecx
lea ecx, [0x10009570]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
call eax
sub esp, 0x10
mov dword [esp], 0x400
call fcn.10019a12
mov dword [ebp - 0x5c], eax
call dword [sym.imp.KERNEL32.dll_FreeConsole]
call fcn.10008560
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x190], 0xc54a65a2
lea eax, [ebp - 0x190]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x19c], eax
sub eax, 0x8a7e4ac3
je 0x1000a50a
jmp 0x1000a266
mov eax, dword [ebp - 0x19c]
sub eax, 0x9be017fc
je 0x1000a672
jmp 0x1000a27c
mov eax, dword [ebp - 0x19c]
sub eax, 0xa6070af9
je 0x1000a70a
jmp 0x1000a292
mov eax, dword [ebp - 0x19c]
sub eax, 0xc54a65a2
je 0x1000a3e1
jmp 0x1000a2a8
mov eax, dword [ebp - 0x19c]
sub eax, 0xcbdf9406
je 0x1000a456
jmp 0x1000a2be
mov eax, dword [ebp - 0x19c]
sub eax, 0xcd83bd06
je 0x1000a41a
jmp 0x1000a2d4
mov eax, dword [ebp - 0x19c]
sub eax, 0xcf6389cb
je 0x1000a64f
jmp 0x1000a2ea
mov eax, dword [ebp - 0x19c]
sub eax, 0xea273a9c
je 0x1000a402
jmp 0x1000a300
mov eax, dword [ebp - 0x19c]
sub eax, 0xea79c65b
je 0x1000a43e
jmp 0x1000a316
mov eax, dword [ebp - 0x19c]
sub eax, 0xeaf0cecb
je 0x1000a5a6
jmp 0x1000a32c
mov eax, dword [ebp - 0x19c]
sub eax, 0xf6574876
je 0x1000a75d
jmp 0x1000a342
mov eax, dword [ebp - 0x19c]
sub eax, 0xf784e380
je 0x1000a69c
jmp 0x1000a358
mov eax, dword [ebp - 0x19c]
sub eax, 0x1e38854e
je 0x1000a4e2
jmp 0x1000a36e
mov eax, dword [ebp - 0x19c]
sub eax, 0x325a944e
je 0x1000a4b8
jmp 0x1000a384
mov eax, dword [ebp - 0x19c]
sub eax, 0x3d554093
je 0x1000a5ef
jmp 0x1000a39a
mov eax, dword [ebp - 0x19c]
sub eax, 0x3dbc95be
je 0x1000a543
jmp 0x1000a3b0
mov eax, dword [ebp - 0x19c]
sub eax, 0x6ff0d639
je 0x1000a6d3
jmp 0x1000a3c6
mov eax, dword [ebp - 0x19c]
sub eax, 0x710b42ff
je 0x1000a5c7
jmp 0x1000a3dc
jmp 0x1000a768
mov ecx, 0xcd83bd06
mov eax, 0xea273a9c
cmp dword [ebp - 0x18c], 1
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a768
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xf6574876
jmp 0x1000a768
call fcn.10008310
mov edx, eax
mov ecx, 0xcbdf9406
mov eax, 0xea79c65b
cmp edx, 1
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a768
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xf6574876
jmp 0x1000a768
mov eax, dword [str.GlobalCef_Test]
mov dword [ebp - 0x6c], eax
mov eax, dword [0x1018e8a8]
mov dword [ebp - 0x68], eax
mov eax, dword [0x1018e8ac]
mov dword [ebp - 0x64], eax
mov eax, dword [0x1018e8b0]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x6c]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
sub esp, 0xc
mov dword [ebp - 0x70], eax
mov ecx, 0x1e38854e
mov eax, 0x325a944e
cmp dword [ebp - 0x70], 0
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a768
lea eax, str.CreateMutex_failed:_n
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xf6574876
jmp 0x1000a768
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov ecx, 0x3dbc95be
mov eax, 0x8a7e4ac3
cmp edx, 0xb7
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a768
lea eax, str.Process_is_already_running._n
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xf6574876
jmp 0x1000a768
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1a0], eax
xor eax, eax
mov dword [esp], 0
call dword [ebp - 0x54]
sub esp, 4
mov edx, eax
mov eax, dword [ebp - 0x1a0]
xor ecx, ecx
lea ecx, [0x10009220]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
call eax
sub esp, 0x10
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xeaf0cecb
jmp 0x1000a768
mov ecx, 0x3d554093
mov eax, 0x710b42ff
cmp dword [ebp - 0x74], 0x7fffffff
cmovl ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a768
mov eax, dword [ebp - 0x74]
mov ecx, 1
cdq
idiv ecx
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xeaf0cecb
jmp 0x1000a768
mov eax, dword [str.heihe.exe]
mov dword [ebp - 0x82], eax
mov eax, dword [0x1018e8b8]
mov dword [ebp - 0x7e], eax
mov ax, word [0x1018e8bc]
mov word [ebp - 0x7a], ax
lea eax, [ebp - 0x186]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
mov edx, eax
mov ecx, 0x9be017fc
mov eax, 0xcf6389cb
cmp edx, 0
cmova ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a768
lea eax, [ebp - 0x186]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xf784e380
jmp 0x1000a768
lea eax, str.GetModuleBaseNameA__error
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xf6574876
jmp 0x1000a768
lea eax, [ebp - 0x82]
lea ecx, [ebp - 0x186]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10009a90
mov edx, eax
mov ecx, 0xa6070af9
mov eax, 0x6ff0d639
cmp edx, 0
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a768
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea ecx, [0x10009ba0]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call dword [sym.imp.KERNEL32.dll_QueueUserAPC]
sub esp, 0xc
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xa6070af9
jmp 0x1000a768
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [0x101c01bc]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
sub esp, 0xc
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x194]
mov dword [eax], 0xf6574876
jmp 0x1000a768
mov eax, dword [ebp - 4]
add esp, 0x1b0
pop ebp
ret
jmp 0x1000a24a