Function at 0x10002ab0
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x28
push esi
mov esi, dword [ebp + 0x10]
push edi
push str.GlobalClipboardMonitorTask
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x10033e84], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x10002ae9
mov edx, 0x1002ed4c
jmp 0x10002d34
test esi, esi
je 0x10002d2f
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10002af6
sub ecx, edx
je 0x10002d2f
mov ecx, esi
call fcn.10002910
mov edx, 0x1002ed7c
mov ecx, 0x100330e8
call fcn.100065c0
mov edx, esi
mov ecx, eax
call fcn.100065c0
mov edx, 0x1002ed78
mov ecx, eax
call fcn.100065c0
push eax
call fcn.10006860
add esp, 4
mov dword [esp + 0x20], 0
xorps xmm0, xmm0
mov dword [esp + 0x24], 0
lea ecx, [esp + 0x10]
movaps xmmword [esp + 0x10], xmm0
push 0x11
push str.encrypted_dll.dat
call fcn.10006af0
lea edx, [esp + 0xc]
lea ecx, [esp + 0x10]
call fcn.10002060
mov ecx, dword [esp + 0x24]
mov byte [esp + 0xb], al
cmp ecx, 0xf
jbe 0x10002bac
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002b9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002d4f
push ecx
push edx
call fcn.10009db4
mov al, byte [esp + 0x13]
add esp, 8
test al, al
je 0x10002ce9
mov ecx, str.createTask
mov eax, esi
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10002be0
test dl, dl
je 0x10002bdc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10002be0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10002bc0
xor eax, eax
jmp 0x10002be5
sbb eax, eax
or eax, 1
mov edi, dword [esp + 0xc]
test eax, eax
jne 0x10002c0d
mov edx, str.CreateScheduledTask
mov ecx, edi
call fcn.10008cd0
mov esi, eax
test esi, esi
je 0x10002ce0
mov edx, 0x1002ed98
jmp 0x10002ca1
mov ecx, str.monitor
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10002c34
test dl, dl
je 0x10002c30
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10002c34
add eax, 2
add ecx, 2
test dl, dl
jne 0x10002c14
xor eax, eax
jmp 0x10002c39
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10002c5a
mov edx, str.ClipboardMonitor
mov ecx, edi
call fcn.10008cd0
mov esi, eax
test esi, esi
je 0x10002ce0
mov edx, 0x1002edd0
jmp 0x10002ca1
mov ecx, str.start
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10002c81
test dl, dl
je 0x10002c7d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10002c81
add eax, 2
add ecx, 2
test dl, dl
jne 0x10002c61
xor eax, eax
jmp 0x10002c86
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10002cbf
mov edx, str.StartClipboardMonitorInNewProcess
mov ecx, edi
call fcn.10008cd0
mov esi, eax
test esi, esi
je 0x10002ce0
mov edx, 0x1002ee18
mov ecx, 0x100330e8
call fcn.100065c0
push eax
call fcn.10006860
add esp, 4
call esi
mov ecx, edi
call fcn.10008e20
jmp 0x10002d01
mov edx, 0x1002ee44
mov ecx, 0x100331d0
call fcn.100065c0
mov edx, esi
mov ecx, eax
call fcn.100065c0
push eax
call fcn.10006860
add esp, 4
mov ecx, edi
call fcn.10008e20
jmp 0x10002d01
mov edx, 0x1002ecfc
mov ecx, 0x100331d0
call fcn.100065c0
push eax
call fcn.10006860
add esp, 4
mov eax, dword [0x10033e84]
test eax, eax
je 0x10002d47
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [0x10033e84]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x10033e84], 0
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov edx, 0x1002ed64
mov ecx, 0x100331d0
call fcn.100065c0
push eax
call fcn.10006860
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
call fcn.10011fef
int3