Function at 0x1400033d0
Capabilities:
Check mutex on windows

Disassembly:
mov rax, rsp
push r14
sub rsp, 0x220
mov qword [rax - 0xc0], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x14035c8c0]
xor rax, rsp
mov qword [rsp + 0x218], rax
mov r14, rcx
mov qword [rsp + 0xe0], rcx
lea r8, str.MyAppxxxxx
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14036bb70], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140003b79
lea rax, [rsp + 0x88]
mov qword [rsp + 0x1e0], rax
lea rdx, [0x1402ec270]
lea rcx, [rsp + 0x88]
call fcn.14000417c
mov rbx, rax
mov qword [rsp + 0x158], rax
mov rdx, rax
lea rcx, [0x14036bdb0]
call fcn.140002b88
nop
mov rcx, qword [rbx]
sub rcx, 0x18
mov qword [rsp + 0x90], rcx
or esi, 0xffffffff
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400034a7
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rsp + 0x210], 8
mov dword [rsp + 0x214], 0xff
lea rcx, [rsp + 0x210]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov rcx, r14
call fcn.14008cb54
xor ecx, ecx
call fcn.14008e220
mov ecx, 0x18
call fcn.14008adc8
mov qword [rsp + 0x160], rax
test rax, rax
je 0x140003506
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
mov rcx, rax
call fcn.14008f430
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x138], rax
lea rcx, str._4__
call fcn.14009b2b8
mov rcx, r14
call fcn.140002e78
and qword [rsp + 0x200], 0
mov rdx, qword [r14 + 0x90]
lea rcx, [rsp + 0x200]
call fcn.14000417c
nop
and dword [rsp + 0x24], 0
and qword [rsp + 0x1f0], 0
call fcn.14008b2e8
mov rcx, rax
mov qword [rsp + 0x1a8], rax
test rax, rax
je 0x140003ba1
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0x170], rax
add rax, 0x18
mov qword [rsp + 0x1f0], rax
and qword [rsp + 0x1f8], 0
call fcn.14008b2e8
mov rcx, rax
mov qword [rsp + 0x178], rax
test rax, rax
je 0x140003bac
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0x180], rax
add rax, 0x18
mov qword [rsp + 0x1f8], rax
lea r9, [rsp + 0x24]
lea r8, [0x1402ec2ac]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x200]
call fcn.140003fd0
mov qword [rsp + 0x188], rax
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.140002b88
nop
mov rcx, qword [rsp + 0xa0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xa8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003631
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x1f0]
movzx eax, word [rbx]
cmp ax, word [0x1402ec330]
je 0x1400037c7
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x48], eax
test eax, eax
js 0x140003bb7
movzx ecx, word [rbx]
mov word [rsp + 0x28], cx
cmp cx, 0x2d
je 0x140003681
mov dword [rsp + 0x4c], eax
test eax, eax
js 0x140003bc1
mov word [rsp + 0x2a], cx
cmp cx, 0x2f
jne 0x140003708
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [rsp + 0x1f0]
call fcn.140003bd8
lea r9, [rsp + 0x24]
lea r8, [0x1402ec2ac]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x200]
call fcn.140003fd0
mov qword [rsp + 0x190], rax
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call fcn.140002b88
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xb8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003700
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x1f0]
lea rdx, [0x1402ec2b0]
mov rcx, rbx
call fcn.140231410
mov dword [rsp + 0x50], eax
test eax, eax
jne 0x140003728
lea rcx, [0x14036bc00]
jmp 0x140003749
lea rdx, str.referrerid
mov rcx, rbx
call fcn.140231410
mov dword [rsp + 0x80], eax
test eax, eax
jne 0x140003756
lea rcx, [0x14036bc10]
lea rdx, [rsp + 0x1f8]
call fcn.140002b88
lea r9, [rsp + 0x24]
lea r8, [0x1402ec2ac]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x200]
call fcn.140003fd0
mov qword [rsp + 0x198], rax
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.140002b88
nop
mov rcx, qword [rsp + 0xc0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xc8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400037c2
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140003631
and qword [rsp + 0x208], 0
call fcn.14008b2e8
mov rcx, rax
mov qword [rsp + 0x1a0], rax
test rax, rax
je 0x140003bcb
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0x1e8], rax
add rax, 0x18
mov qword [rsp + 0x208], rax
lea rdx, [rsp + 0xd0]
call fcn.140002824
nop
lea r8, [rsp + 0x208]
mov rdx, rax
call fcn.140007aec
nop
mov rcx, qword [rsp + 0xd0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xd8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003855
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rdx, [rsp + 0x208]
call fcn.140008f68
nop
jmp 0x140003870
mov byte [0x14036bdd0], 1
lea rax, [rsp + 0x40]
mov qword [rsp + 0x1b0], rax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x1b8], rax
call fcn.140009130
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0x1c8], rcx
call fcn.140002c94
mov qword [rsp + 0x1d0], rax
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0xe8]
call fcn.140002824
nop
lea r8, [rsp + 0x40]
mov rdx, rax
call fcn.140007b9c
lea rdx, [rsp + 0xf0]
call fcn.140002824
nop
mov rcx, qword [rsp + 0xf0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xf8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003921
mov rdx, qword [rsp + 0xf8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, r14
call fcn.140003268
mov ecx, 0x570
call fcn.14008adc8
mov rbx, rax
mov qword [rsp + 0x1d8], rax
test rax, rax
je 0x140003968
xor edx, edx
mov r8d, 0x570
mov rcx, rax
call fcn.14022ebc0
mov rcx, rbx
call fcn.140004528
mov rcx, rax
mov qword [rsp + 0x100], rax
jmp 0x140003972
xor ecx, ecx
mov qword [rsp + 0x100], rcx
mov qword [r14 + 0x188], rcx
mov rax, qword [rcx]
call qword [rax + 0x2e8]
mov qword [rsp + 0x78], rax
mov rdx, qword [r14 + 0x188]
mov cl, byte [rdx + 0x53a]
mov byte [rsp + 0x20], cl
test cl, cl
jne 0x140003a2e
cmp rax, 2
je 0x140003a2e
mov al, byte [rdx + 0x538]
mov byte [rsp + 0x21], al
test al, al
je 0x1400039f5
lea rdx, [rsp + 0x108]
call fcn.140002824
nop
mov rcx, qword [rsp + 0x108]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x110], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003a6e
mov rdx, qword [rsp + 0x110]
jmp 0x140003a65
lea rdx, [rsp + 0x118]
call fcn.140002824
nop
mov rcx, qword [rsp + 0x118]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x120], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003a6e
mov rdx, qword [rsp + 0x120]
jmp 0x140003a65
lea rdx, [rsp + 0x128]
call fcn.140002824
nop
mov rcx, qword [rsp + 0x128]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x130], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003a6e
mov rdx, qword [rsp + 0x130]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [0x14036bdd1], 1
call fcn.140007c98
mov rcx, qword [rsp + 0x138]
test ecx, ecx
je 0x140003a96
test rcx, rcx
je 0x140003a96
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r14 + 0x188]
test rcx, rcx
je 0x140003ab3
mov qword [rsp + 0x70], rcx
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x208]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x140], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003ae6
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x148], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003b19
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x150], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003b4c
mov rdx, qword [rsp + 0x150]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x200]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x58], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003b79
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor eax, eax
mov rcx, qword [rsp + 0x218]
xor rcx, rsp
call fcn.140229da0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret
mov ecx, 0x80004005
call fcn.140002d3c
nop
mov ecx, 0x80004005
call fcn.140002d3c
nop
mov ecx, 0x80070057
call fcn.140002d3c
mov ecx, 0x80070057
call fcn.140002d3c
mov ecx, 0x80004005
call fcn.140002d3c
int3