Function at 0x10009f90
Capabilities:
Check mutex on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b0
lea ecx, [ebp - 0x18]
lea eax, str.Gdi32.dll
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x14
call fcn.1015b5c0
lea ecx, [ebp - 0x2e]
lea eax, [0x1018e876]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x16
call fcn.1015b5c0
lea ecx, [ebp - 0x40]
lea eax, str.EnumFontFamiliesA
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x12
call fcn.1015b5c0
lea eax, [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
sub esp, 4
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x2e]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
sub esp, 4
mov dword [ebp - 0x48], eax
mov eax, dword [0x1018e89e]
mov dword [ebp - 0x4e], eax
mov ax, word [0x1018e8a2]
mov word [ebp - 0x4a], ax
lea eax, [ebp - 0x4e]
mov ecx, dword [ebp - 0x48]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10007f90
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10007f90
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x198], eax
xor eax, eax
mov dword [esp], 0
call dword [ebp - 0x54]
sub esp, 4
mov edx, eax
mov eax, dword [ebp - 0x198]
xor ecx, ecx
lea ecx, [0x100093e0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
call eax
sub esp, 0x10
mov dword [esp], 0x400
call fcn.10019552
mov dword [ebp - 0x5c], eax
call dword [sym.imp.KERNEL32.dll_FreeConsole]
call fcn.100083d0
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x190], 0x56a2308d
lea eax, [ebp - 0x190]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x19c], eax
sub eax, 0x840b0162
je 0x1000a553
jmp 0x1000a0e6
mov eax, dword [ebp - 0x19c]
sub eax, 0x85a59b11
je 0x1000a29a
jmp 0x1000a0fc
mov eax, dword [ebp - 0x19c]
sub eax, 0x97ed0365
je 0x1000a338
jmp 0x1000a112
mov eax, dword [ebp - 0x19c]
sub eax, 0x9a29eebe
je 0x1000a51c
jmp 0x1000a128
mov eax, dword [ebp - 0x19c]
sub eax, 0x9a30ee97
je 0x1000a282
jmp 0x1000a13e
mov eax, dword [ebp - 0x19c]
sub eax, 0xe17ac399
je 0x1000a447
jmp 0x1000a154
mov eax, dword [ebp - 0x19c]
sub eax, 0xe81d177a
je 0x1000a4cf
jmp 0x1000a16a
mov eax, dword [ebp - 0x19c]
sub eax, 0xee71d01d
je 0x1000a3c3
jmp 0x1000a180
mov eax, dword [ebp - 0x19c]
sub eax, 0xf628c827
je 0x1000a4f2
jmp 0x1000a196
mov eax, dword [ebp - 0x19c]
sub eax, 0xf792e797
je 0x1000a362
jmp 0x1000a1ac
mov eax, dword [ebp - 0x19c]
sub eax, 0xfd1906ed
je 0x1000a2d6
jmp 0x1000a1c2
mov eax, dword [ebp - 0x19c]
sub eax, 0x30a32fd5
je 0x1000a5dd
jmp 0x1000a1d8
mov eax, dword [ebp - 0x19c]
sub eax, 0x3499c1ea
je 0x1000a2be
jmp 0x1000a1ee
mov eax, dword [ebp - 0x19c]
sub eax, 0x37f1664c
je 0x1000a38a
jmp 0x1000a204
mov eax, dword [ebp - 0x19c]
sub eax, 0x4fc34104
je 0x1000a58a
jmp 0x1000a21a
mov eax, dword [ebp - 0x19c]
sub eax, 0x502e2b86
je 0x1000a46f
jmp 0x1000a230
mov eax, dword [ebp - 0x19c]
sub eax, 0x56a2308d
je 0x1000a261
jmp 0x1000a246
mov eax, dword [ebp - 0x19c]
sub eax, 0x661f159a
je 0x1000a426
jmp 0x1000a25c
jmp 0x1000a5e8
mov ecx, 0x85a59b11
mov eax, 0x9a30ee97
cmp dword [ebp - 0x18c], 1
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a5e8
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x30a32fd5
jmp 0x1000a5e8
call fcn.10008180
mov edx, eax
mov ecx, 0xfd1906ed
mov eax, 0x3499c1ea
cmp edx, 1
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a5e8
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x30a32fd5
jmp 0x1000a5e8
mov eax, dword [str.GlobalCef_Test]
mov dword [ebp - 0x6c], eax
mov eax, dword [0x1018e8a8]
mov dword [ebp - 0x68], eax
mov eax, dword [0x1018e8ac]
mov dword [ebp - 0x64], eax
mov eax, dword [0x1018e8b0]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x6c]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
sub esp, 0xc
mov dword [ebp - 0x70], eax
mov ecx, 0xf792e797
mov eax, 0x97ed0365
cmp dword [ebp - 0x70], 0
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a5e8
lea eax, str.CreateMutex_failed:_n
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x30a32fd5
jmp 0x1000a5e8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov ecx, 0xee71d01d
mov eax, 0x37f1664c
cmp edx, 0xb7
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a5e8
lea eax, str.Process_is_already_running._n
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x30a32fd5
jmp 0x1000a5e8
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1a0], eax
xor eax, eax
mov dword [esp], 0
call dword [ebp - 0x54]
sub esp, 4
mov edx, eax
mov eax, dword [ebp - 0x1a0]
xor ecx, ecx
lea ecx, [0x10009090]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
call eax
sub esp, 0x10
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x661f159a
jmp 0x1000a5e8
mov ecx, 0x502e2b86
mov eax, 0xe17ac399
cmp dword [ebp - 0x74], 0x7fffffff
cmovl ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a5e8
mov eax, dword [ebp - 0x74]
mov ecx, 1
cdq
idiv ecx
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x661f159a
jmp 0x1000a5e8
mov eax, dword [str.heihe.exe]
mov dword [ebp - 0x82], eax
mov eax, dword [0x1018e8b8]
mov dword [ebp - 0x7e], eax
mov ax, word [0x1018e8bc]
mov word [ebp - 0x7a], ax
lea eax, [ebp - 0x186]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
mov edx, eax
mov ecx, 0xf628c827
mov eax, 0xe81d177a
cmp edx, 0
cmova ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a5e8
lea eax, [ebp - 0x186]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x9a29eebe
jmp 0x1000a5e8
lea eax, str.GetModuleBaseNameA__error
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 4
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x30a32fd5
jmp 0x1000a5e8
lea eax, [ebp - 0x82]
lea ecx, [ebp - 0x186]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10009900
mov edx, eax
mov ecx, 0x4fc34104
mov eax, 0x840b0162
cmp edx, 0
cmove ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
jmp 0x1000a5e8
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea ecx, [0x10009a10]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call dword [sym.imp.KERNEL32.dll_QueueUserAPC]
sub esp, 0xc
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x4fc34104
jmp 0x1000a5e8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [0x101c3b0c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
sub esp, 0xc
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x194]
mov dword [eax], 0x30a32fd5
jmp 0x1000a5e8
mov eax, dword [ebp - 4]
add esp, 0x1b0
pop ebp
ret
jmp 0x1000a0ca