Function at 0x1400033d0
Capabilities:
Check mutex on windows

Disassembly:
mov rax, rsp
push r14
sub rsp, 0x260
mov qword [rax - 0xd8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x14035d8c0]
xor rax, rsp
mov qword [rsp + 0x250], rax
mov r14, rcx
mov qword [rsp + 0xd8], rcx
lea r8, str.MyAppxxxxx
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14036cb70], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140003c0a
lea rax, [rsp + 0x80]
mov qword [rsp + 0x218], rax
lea rdx, [0x1402ed290]
lea rcx, [rsp + 0x80]
call fcn.14000420c
mov rbx, rax
mov qword [rsp + 0x150], rax
mov rdx, rax
lea rcx, [0x14036cdb0]
call fcn.140002b88
nop
mov rcx, qword [rbx]
sub rcx, 0x18
mov qword [rsp + 0x58], rcx
or esi, 0xffffffff
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400034a1
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rsp + 0x248], 8
mov dword [rsp + 0x24c], 0xff
lea rcx, [rsp + 0x248]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov rcx, r14
call fcn.14008df54
xor ecx, ecx
call fcn.14008f620
mov ecx, 0x18
call fcn.14008c1c8
mov qword [rsp + 0x158], rax
test rax, rax
je 0x140003500
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
mov rcx, rax
call fcn.140090830
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x130], rax
lea rcx, str._D__
call fcn.14009c6b8
mov rcx, r14
call fcn.140002e78
and qword [rsp + 0x238], 0
mov rdx, qword [r14 + 0x90]
lea rcx, [rsp + 0x238]
call fcn.14000420c
nop
and dword [rsp + 0x24], 0
and qword [rsp + 0x228], 0
call fcn.14008c6e8
mov rcx, rax
mov qword [rsp + 0x160], rax
test rax, rax
je 0x140003c32
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0x168], rax
add rax, 0x18
mov qword [rsp + 0x228], rax
and qword [rsp + 0x230], 0
call fcn.14008c6e8
mov rcx, rax
mov qword [rsp + 0x170], rax
test rax, rax
je 0x140003c3d
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0x178], rax
add rax, 0x18
mov qword [rsp + 0x230], rax
lea r9, [rsp + 0x24]
lea r8, [0x1402ed2cc]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x238]
call fcn.140004060
mov qword [rsp + 0x180], rax
mov rdx, rax
lea rcx, [rsp + 0x228]
call fcn.140002b88
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xa0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14000362b
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x228]
movzx eax, word [rbx]
cmp ax, word [0x1402ed39c]
je 0x1400037be
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x48], eax
test eax, eax
js 0x140003c48
movzx ecx, word [rbx]
mov word [rsp + 0x28], cx
cmp cx, 0x2d
je 0x14000367b
mov dword [rsp + 0x4c], eax
test eax, eax
js 0x140003c52
mov word [rsp + 0x2a], cx
cmp cx, 0x2f
jne 0x140003702
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [rsp + 0x228]
call fcn.140003c68
lea r9, [rsp + 0x24]
lea r8, [0x1402ed2cc]
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x238]
call fcn.140004060
mov qword [rsp + 0x188], rax
mov rdx, rax
lea rcx, [rsp + 0x230]
call fcn.140002b88
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xb0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400036fa
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x228]
lea rdx, [0x1402ed2d0]
mov rcx, rbx
call fcn.140232810
mov dword [rsp + 0x50], eax
test eax, eax
jne 0x140003722
lea rcx, [0x14036cc00]
jmp 0x140003740
lea rdx, str.referrerid
mov rcx, rbx
call fcn.140232810
mov dword [rsp + 0x54], eax
test eax, eax
jne 0x14000374d
lea rcx, [0x14036cc10]
lea rdx, [rsp + 0x230]
call fcn.140002b88
lea r9, [rsp + 0x24]
lea r8, [0x1402ed2cc]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x238]
call fcn.140004060
mov qword [rsp + 0x1d8], rax
mov rdx, rax
lea rcx, [rsp + 0x228]
call fcn.140002b88
nop
mov rcx, qword [rsp + 0xb8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xc0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400037b9
mov rdx, qword [rsp + 0xc0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14000362b
and qword [rsp + 0x240], 0
call fcn.14008c6e8
mov rcx, rax
mov qword [rsp + 0x198], rax
test rax, rax
je 0x140003c5c
mov rax, qword [rax]
call qword [rax + 0x18]
mov qword [rsp + 0x1a0], rax
add rax, 0x18
mov qword [rsp + 0x240], rax
lea rdx, [rsp + 0xc8]
call fcn.140002824
nop
lea r8, [rsp + 0x240]
mov rdx, rax
call fcn.140007e80
nop
mov rcx, qword [rsp + 0xc8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xd0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14000384c
mov rdx, qword [rsp + 0xd0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rdx, [rsp + 0x240]
call fcn.1400092fc
nop
jmp 0x140003867
mov byte [0x14036cdd0], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x1b0], rax
call fcn.1400094c4
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0x1c0], rcx
call fcn.140002c94
mov qword [rsp + 0x1c8], rax
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0xe0]
call fcn.140002824
nop
lea r8, [rsp + 0x30]
mov rdx, rax
call fcn.140007f30
lea rdx, [rsp + 0xe8]
call fcn.140002824
mov qword [rsp + 0x1d0], rax
mov r9, qword [rax]
mov qword [rsp + 0x220], r9
lea rdx, [0x1402ed300]
mov r8, rdx
call fcn.1400046b8
nop
mov rcx, qword [rsp + 0xe8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xf0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14000393a
mov rdx, qword [rsp + 0xf0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, r14
call fcn.140003268
mov ecx, 0x570
call fcn.14008c1c8
mov rbx, rax
mov qword [rsp + 0x1e0], rax
test rax, rax
je 0x140003981
xor edx, edx
mov r8d, 0x570
mov rcx, rax
call fcn.14022ffc0
mov rcx, rbx
call fcn.140004948
mov rcx, rax
mov qword [rsp + 0xf8], rax
jmp 0x14000398b
xor ecx, ecx
mov qword [rsp + 0xf8], rcx
mov qword [r14 + 0x188], rcx
mov rax, qword [rcx]
call qword [rax + 0x2e8]
mov qword [rsp + 0x1e8], rax
mov rdx, qword [r14 + 0x188]
mov cl, byte [rdx + 0x53a]
mov byte [rsp + 0x20], cl
test cl, cl
jne 0x140003a99
cmp rax, 2
je 0x140003a99
mov al, byte [rdx + 0x538]
mov byte [rsp + 0x21], al
test al, al
je 0x140003a3a
lea rdx, [rsp + 0x100]
call fcn.140002824
mov qword [rsp + 0x1f0], rax
mov r9, qword [rax]
mov qword [rsp + 0x1f8], r9
lea r8, [0x1402ed330]
lea rdx, [0x1402ed320]
call fcn.1400046b8
nop
mov rcx, qword [rsp + 0x100]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x108], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003aff
mov rdx, qword [rsp + 0x108]
jmp 0x140003af6
lea rdx, [rsp + 0x110]
call fcn.140002824
mov qword [rsp + 0x200], rax
mov r9, qword [rax]
mov qword [rsp + 0x208], r9
lea r8, [0x1402ed340]
lea rdx, [0x1402ed320]
call fcn.1400046b8
nop
mov rcx, qword [rsp + 0x110]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x118], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003aff
mov rdx, qword [rsp + 0x118]
jmp 0x140003af6
lea rdx, [rsp + 0x120]
call fcn.140002824
mov qword [rsp + 0x210], rax
mov r9, qword [rax]
mov qword [rsp + 0x88], r9
lea r8, [0x1402ed310]
lea rdx, [0x1402ed320]
call fcn.1400046b8
nop
mov rcx, qword [rsp + 0x120]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x128], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003aff
mov rdx, qword [rsp + 0x128]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [0x14036cdd1], 1
call fcn.14000802c
mov rcx, qword [rsp + 0x130]
test ecx, ecx
je 0x140003b27
test rcx, rcx
je 0x140003b27
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r14 + 0x188]
test rcx, rcx
je 0x140003b44
mov qword [rsp + 0x78], rcx
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x240]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x138], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003b77
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x230]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x140], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003baa
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x228]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x148], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003bdd
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x238]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x60], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140003c0a
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor eax, eax
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.14022b1a0
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret
mov ecx, 0x80004005
call fcn.140002d3c
nop
mov ecx, 0x80004005
call fcn.140002d3c
nop
mov ecx, 0x80070057
call fcn.140002d3c
mov ecx, 0x80070057
call fcn.140002d3c
mov ecx, 0x80004005
call fcn.140002d3c
int3