Function at 0x10011660
Capabilities:
Check mutex on windows
Link many functions at runtime

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1001a2c6
push eax
mov eax, 0xa074
mov dword fs:[0], esp
call fcn.10019a50
mov eax, dword [0x10021cf0]
push str.HGNAHS
push eax
mov dword [esp + 0x1c], 0
call fcn.100074a0
add esp, 8
mov dword [esp + 0x24], eax
test eax, eax
jne 0x100116bc
or eax, 0xffffffff
mov ecx, dword [esp + 0xa074]
mov dword fs:[0], ecx
add esp, 0xa080
ret 4
push ebx
push ebp
push esi
push edi
call dword [sym.imp.USER32.dll_GetProcessWindowStation]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.OpenWindowStationA
push str.USER32.dll
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebp
push 0x2000000
push 0
push str.winsta0
call eax
test eax, eax
je 0x100116fa
push eax
call dword [sym.imp.USER32.dll_SetProcessWindowStation]
push str.OpenEventA
push str.KERNEL32.dll
call ebx
push eax
call ebp
mov dword [esp + 0x20], eax
mov eax, dword [0x10021cf0]
test eax, eax
je 0x100117ba
push str.wsprintfA
push str.USER32.dll
call ebx
push eax
call ebp
push str.GetTickCount
push str.KERNEL32.dll
mov esi, eax
call ebx
push eax
call ebp
push str.SetUnhandledExceptionFilter
push str.KERNEL32.dll
mov edi, eax
call ebx
push eax
call ebp
push 0x10011620
call eax
push str.lstrcpyA
push str.KERNEL32.dll
call ebx
push eax
call ebp
lea ecx, [esp + 0x128]
mov ebp, dword [esp + 0xa094]
push ebp
push ecx
call eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.lobal
lea edx, [esp + 0x44]
push str.P_yyyTTEIOIU_d_d
push edx
call esi
mov eax, dword [esp + 0x48]
add esp, 0x14
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
lea ecx, [esp + 0x128]
push ecx
mov dword [esp + 0x28], eax
call fcn.10007580
push ebp
call fcn.10007360
add esp, 8
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
xor esi, esi
lea ecx, [esp + 0x6c]
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 0x50
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], esi
call fcn.10001cc0
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [esp + 0xa08c], esi
mov byte [esp + 0x13], 0
mov al, byte [esp + 0x13]
test al, al
je 0x1001183e
cmp al, 3
je 0x1001183e
xor edi, edi
lea edx, [esp + 0x38]
push edx
push 0
push 0x1f0003
call dword [esp + 0x2c]
mov esi, eax
test esi, esi
jne 0x1001182e
push 0x3c
call ebp
inc edi
cmp edi, 0x7d0
jl 0x10011809
jmp 0x1001183e
lea ecx, [esp + 0x6c]
call fcn.100026b0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x28]
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x34]
push ecx
lea eax, [esp + 0x34]
push edx
push eax
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x28]
push ecx
add eax, 6
push edx
push eax
call fcn.10010360
add esp, 4
push eax
call fcn.100104e0
add esp, 0x1c
test al, al
jne 0x10011883
mov byte [esp + 0x13], 1
jmp 0x100117fb
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1001189f
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x34]
push edx
push ecx
push eax
push 5
jmp 0x100118ac
push 0
push 0
push 0x438
push 0
push 0
lea ecx, [esp + 0x80]
call fcn.100029a0
push str.GetTickCount
push str.KERNEL32.dll
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
call edi
mov edx, dword [esp + 0x14]
mov esi, eax
mov eax, dword [esp + 0x18]
push edx
push eax
lea ecx, [esp + 0x74]
call fcn.10001e80
test al, al
jne 0x100118f2
mov byte [esp + 0x13], 2
jmp 0x100117fb
call edi
sub eax, esi
lea ecx, [esp + 0x6c]
push eax
lea edx, [esp + 0x12c]
push ecx
push edx
call fcn.10011140
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x38]
push eax
mov eax, dword [0x10021d14]
push ecx
push edx
lea ecx, [esp + 0x134]
push eax
lea edx, [esp + 0x7c]
push ecx
push edx
lea ecx, [esp + 0x240]
call fcn.1000aa10
lea eax, [esp + 0x228]
lea ecx, [esp + 0x6c]
push eax
mov byte [esp + 0xa090], 1
call fcn.10002990
xor esi, esi
lea ecx, [esp + 0x228]
call fcn.1000b170
test al, al
jne 0x10011972
push 0x3e8
call ebp
inc esi
cmp esi, 0xa
jl 0x10011955
lea ecx, [esp + 0x228]
call fcn.1000b170
test al, al
jne 0x1001199a
lea ecx, [esp + 0x228]
mov byte [esp + 0xa08c], al
call fcn.1000ab20
jmp 0x100117fb
call edi
lea ecx, [esp + 0x38]
push ecx
push 0
push 0x1f0003
call dword [esp + 0x2c]
push 0x64
mov esi, eax
mov edx, dword [esp + 0x11c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x1f4
mov edi, eax
call ebp
test esi, esi
jne 0x100119e8
test edi, edi
jne 0x1001199c
lea ecx, [esp + 0x228]
mov byte [esp + 0xa08c], 0
call fcn.1000ab20
jmp 0x100117fb
lea ecx, [esp + 0x6c]
call fcn.100026b0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
lea ecx, [esp + 0x228]
mov byte [esp + 0xa08c], 0
call fcn.1000ab20
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov edi, dword [esp + 0x24]
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push edi
call esi
lea ecx, [esp + 0x6c]
mov dword [esp + 0xa08c], 0xffffffff
call fcn.10001dc0
mov ecx, dword [esp + 0xa084]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa080
ret 4