joyce8/EMBER2024-capa huggingface dataset:
Function at 0x211018d0
Capabilities:
Create thread

Disassembly:
push ecx
mov ecx, dword [0x2114e8bc]
test ecx, ecx
jne 0x21101989
mov eax, dword [0x2114e820]
mov dword [0x2114e7e0], eax
shl eax, 5
push eax
call sym.mss32.dll__AIL_mem_alloc_lock_4
test eax, eax
mov dword [0x2114e8bc], eax
jne 0x21101902
or eax, 0xffffffff
pop ecx
ret 4
mov edx, dword [0x2114e7e0]
xor ecx, ecx
test edx, edx
mov dword [esp], ecx
jle 0x21101935
jmp 0x21101919
mov eax, dword [0x2114e8bc]
shl ecx, 5
mov dword [ecx + eax], 0
mov ecx, dword [esp]
mov eax, dword [0x2114e7e0]
inc ecx
cmp ecx, eax
mov dword [esp], ecx
jl 0x21101914
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x2114e7e4], eax
lea eax, [esp]
push eax
push 0
push 0
push 0x21101540
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp]
push str.MSS_Timer
push ecx
mov dword [0x2114e8d4], eax
call fcn.21101000
mov edx, dword [0x2114e8d4]
push 0xf
push edx
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov ecx, dword [0x2114e8bc]
mov edx, dword [0x2114e7e0]
xor eax, eax
test edx, edx
push esi
mov dword [esp + 4], eax
jle 0x211019ae
mov esi, eax
shl esi, 5
cmp dword [esi + ecx], 0
je 0x211019ae
inc eax
cmp eax, edx
mov dword [esp + 4], eax
jl 0x2110199a
cmp eax, edx
pop esi
jne 0x211019ba
or eax, 0xffffffff
pop ecx
ret 4
mov edx, dword [esp + 8]
shl eax, 5
mov dword [eax + ecx], 1
mov eax, dword [esp]
mov ecx, dword [0x2114e8bc]
shl eax, 5
mov dword [eax + ecx + 4], edx
mov eax, dword [esp]
mov ecx, dword [0x2114e8bc]
shl eax, 5
mov dword [eax + ecx + 0x10], 0x2710
mov edx, dword [esp]
mov eax, dword [0x2114e8bc]
shl edx, 5
mov dword [edx + eax + 0xc], 0
mov eax, dword [esp]
pop ecx
ret 4

Function at 0x21101d10
Capabilities:
Get common file path

Disassembly:
sub esp, 0x104
push edi
push 0x103
push 0x2114e5dc
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
or ecx, 0xffffffff
xor eax, eax
mov edi, 0x2114e5dc
repne scasb al, byte es:[edi]
not ecx
dec ecx
pop edi
je 0x21101d4b
mov al, byte [ecx + 0x2114e5dc]
cmp al, 0x5c
je 0x21101d4b
cmp al, 0x3a
je 0x21101d4b
dec ecx
jne 0x21101d3a
push 0x103
lea eax, [esp + 4]
push eax
mov byte [ecx + 0x2114e5dc], 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x103
lea edx, [esp + 4]
mov ecx, 0x2114e5dc
call fcn.2111afa0
test eax, eax
je 0x21101da0
push 0x103
lea ecx, [esp + 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x103
lea edx, [esp + 4]
mov ecx, 0x2114e5dc
call fcn.2111afa0
test eax, eax
jne 0x21101dbd
push 0x10
push str.Miles_Error
push str.The_MSS_DLL_file_is_installed_in_the_Windows_or_Windows_system_directory___it_must_be_installed_in_the_application_directory.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add esp, 0x104
ret
mov eax, 1
add esp, 0x104
ret
Function at 0x21102400
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 4]
push esi
mov esi, 0x2114e8d8
xor ecx, ecx
sub esi, eax
mov dl, byte [eax]
mov byte [esi + eax], dl
cmp byte [eax], 0
je 0x21102422
inc ecx
inc eax
cmp ecx, 0x800
jl 0x2110240e
lea eax, [esp + 0xc]
push eax
push 0x2114e8d8
push 0x2114f200
mov byte [0x2114f0d7], 0
call fcn.2112ed66
add esp, 0xc
push 0x2114f200
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop esi
ret
Function at 0x21102450
Capabilities:
Check mutex on windows

Disassembly:
mov eax, dword [0x2114fa3c]
push ebx
xor ebx, ebx
cmp eax, ebx
push ebp
push esi
je 0x21102464
pop esi
pop ebp
xor eax, eax
pop ebx
ret
cmp dword [0x2114fa40], ebx
mov ebp, 1
mov dword [0x2114fa3c], ebp
jne 0x21102499
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 2
push ebx
push ebx
push 0x2114e5d4
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov esi, dword [sym.imp.KERNEL32.dll_GetProfileStringA]
push 0x100
push 0x2114f0dc
push str.None
push str.MSSDebug
push 0x2113e648
mov word [0x2114fa30], bx
mov word [0x2114fa32], bx
call esi
push 4
mov edx, str.None
mov ecx, 0x2114f0dc
call fcn.2111afa0
test eax, eax
jne 0x21102502
cmp dword [0x2114fa40], ebx
je 0x211024f7
xor edx, edx
mov ecx, 7
call fcn.21102670
pop esi
mov eax, ebp
pop ebp
pop ebx
ret
call fcn.21101040
pop esi
mov eax, ebp
pop ebp
pop ebx
ret
push 8
push 0x2114f1e8
push 0x2113e644
push str.MSSSysDebug
push 0x2113e648
call esi
push ebp
mov edx, 0x2113e644
mov ecx, 0x2114f1e8
call fcn.2111afa0
test eax, eax
je 0x21102535
mov word [0x2114fa32], bp
push 0x2113e634
push 0x2114f0dc
call fcn.2112f0e9
add esp, 8
cmp eax, ebx
mov dword [0x211530f8], eax
jne 0x2110256a
cmp dword [0x2114fa40], ebx
je 0x211024f7
xor edx, edx
mov ecx, 7
call fcn.21102670
pop esi
mov eax, ebp
pop ebp
pop ebx
ret
push edi
push 0x2114fa00
call fcn.2112efed
push 0x2114fa00
call fcn.2112ee8d
push eax
mov dword [0x2114f1f0], eax
call fcn.2112edb7
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
mov edi, 0x2114fa10
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x211530f8]
push 0x2114fa10
push str.________________________________________________________________________________r_nMiles_Sound_System_usage_script_generated_by_MSS_V6.1c_r_nStart_time:__s_r_n________________________________________________________________________________r_n_r_n
push ecx
mov byte [0x2114fa28], bl
call fcn.2112ed34
mov eax, dword [0x2114e89c]
add esp, 0x18
cmp eax, ebx
pop edi
je 0x211025fb
mov eax, dword [0x2114fa38]
cmp eax, ebx
jne 0x211025f2
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push ebx
push ebx
push ebx
call esi
cmp eax, ebx
mov dword [0x2114fa38], eax
je 0x211025e4
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x2114fa40], ebx
je 0x21102611
xor edx, edx
mov ecx, 7
call fcn.21102670
jmp 0x21102616
call fcn.21101040
cmp dword [0x2114e89c], ebx
je 0x2110262b
mov edx, dword [0x2114fa38]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call sym.mss32.dll__AIL_ms_count_0
mov dword [0x211530fc], eax
mov word [0x2114fa30], bp
mov word [0x2114fa34], bp
call fcn.21102230
mov eax, dword [0x211530f8]
push str.AIL_startup___r_n
push eax
mov word [0x2114fa34], bx
call fcn.2112ed34
add esp, 8
pop esi
mov eax, ebp
pop ebp
pop ebx
ret
Function at 0x211027c0
Capabilities:
Check mutex on windows

Disassembly:
mov eax, dword [0x2114fa3c]
test eax, eax
je 0x211027d3
mov dword [0x2114fa3c], 0
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x2110281d
cmp word [0x2114fa34], 1
je 0x211027f8
cmp word [0x2114fa32], 0
je 0x2110281d
call fcn.211023e0
test eax, eax
jne 0x2110281d
call fcn.21102230
test eax, eax
je 0x2110281d
mov eax, dword [0x211530f8]
push str.AIL_shutdown___r_n
push eax
call fcn.2112ed34
add esp, 8
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21102851
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21102848
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21102836
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21102868
xor edx, edx
mov ecx, 8
call fcn.21102670
jmp 0x2110286d
call fcn.21101600
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21102883
mov ecx, dword [0x2114fa38]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp word [0x2114fa30], 0
je 0x2110289c
mov edx, dword [0x211530f8]
push edx
call fcn.2112f0fc
add esp, 4
mov eax, dword [0x2114fa40]
dec word [0x2114fa34]
test eax, eax
jne 0x211028c6
mov eax, dword [0x2114e5d4]
test eax, eax
je 0x211028c6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x2114e5d4], 0
ret

Function at 0x21102af0
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
push esi
push edi
mov edi, dword [esp + 0x10]
je 0x21102b47
cmp word [0x2114fa34], 1
je 0x21102b1b
cmp word [0x2114fa32], 0
je 0x21102b47
call fcn.211023e0
test eax, eax
jne 0x21102b47
call fcn.21102230
test eax, eax
je 0x21102b47
mov eax, dword [esp + 0xc]
mov ecx, dword [0x211530f8]
push edi
push eax
push str.AIL_set_preference__ld__ld__r_n
push ecx
call fcn.2112ed34
add esp, 0x10
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21102b79
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21102b70
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21102b5f
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21102b92
lea edx, [esp + 0xc]
mov ecx, 9
call fcn.21102670
jmp 0x21102b9d
mov edx, dword [esp + 0xc]
push edi
push edx
call fcn.21101010
mov esi, eax
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21102bb4
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp word [0x2114fa30], 0
je 0x21102be2
cmp word [0x2114fa34], 1
je 0x21102bd2
cmp word [0x2114fa32], 0
je 0x21102be2
call fcn.211023e0
test eax, eax
jne 0x21102be2
mov ecx, esi
call fcn.21102390
dec word [0x2114fa34]
pop edi
mov eax, esi
pop esi
ret 8
Function at 0x21102dc0
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x21102e10
cmp word [0x2114fa34], 1
je 0x21102de5
cmp word [0x2114fa32], 0
je 0x21102e10
call fcn.211023e0
test eax, eax
jne 0x21102e10
call fcn.21102230
test eax, eax
je 0x21102e10
mov eax, dword [esp + 4]
mov ecx, dword [0x211530f8]
push eax
push str.AIL_register_timer_0x_lX__r_n
push ecx
call fcn.2112ed34
add esp, 0xc
mov eax, dword [0x2114e89c]
test eax, eax
push esi
je 0x21102e43
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21102e3a
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21102e29
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21102e5c
lea edx, [esp + 8]
mov ecx, 0x64
call fcn.21102670
jmp 0x21102e66
mov edx, dword [esp + 8]
push edx
call fcn.211018d0
mov esi, eax
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21102e7d
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp word [0x2114fa30], 0
je 0x21102eab
cmp word [0x2114fa34], 1
je 0x21102e9b
cmp word [0x2114fa32], 0
je 0x21102eab
call fcn.211023e0
test eax, eax
jne 0x21102eab
mov ecx, esi
call fcn.21102390
dec word [0x2114fa34]
mov eax, esi
pop esi
ret 4

Function at 0x21102ec0
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
push esi
push edi
mov edi, dword [esp + 0x10]
je 0x21102f17
cmp word [0x2114fa34], 1
je 0x21102eeb
cmp word [0x2114fa32], 0
je 0x21102f17
call fcn.211023e0
test eax, eax
jne 0x21102f17
call fcn.21102230
test eax, eax
je 0x21102f17
mov eax, dword [esp + 0xc]
mov ecx, dword [0x211530f8]
push edi
push eax
push str.AIL_set_timer_user__ld__lu__r_n
push ecx
call fcn.2112ed34
add esp, 0x10
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21102f49
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21102f40
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21102f2f
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21102f62
lea edx, [esp + 0xc]
mov ecx, 0x67
call fcn.21102670
jmp 0x21102f6d
mov edx, dword [esp + 0xc]
push edi
push edx
call fcn.21101a10
mov esi, eax
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21102f84
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp word [0x2114fa30], 0
je 0x21102fb2
cmp word [0x2114fa34], 1
je 0x21102fa2
cmp word [0x2114fa32], 0
je 0x21102fb2
call fcn.211023e0
test eax, eax
jne 0x21102fb2
mov ecx, esi
call fcn.21102390
dec word [0x2114fa34]
pop edi
mov eax, esi
pop esi
ret 8
Function at 0x21102fc0
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
push edi
mov edi, dword [esp + 0xc]
je 0x21103016
cmp word [0x2114fa34], 1
je 0x21102fea
cmp word [0x2114fa32], 0
je 0x21103016
call fcn.211023e0
test eax, eax
jne 0x21103016
call fcn.21102230
test eax, eax
je 0x21103016
mov eax, dword [esp + 8]
mov ecx, dword [0x211530f8]
push edi
push eax
push str.AIL_set_timer_period__ld__lu__r_n
push ecx
call fcn.2112ed34
add esp, 0x10
mov eax, dword [0x2114e89c]
test eax, eax
je 0x2110304a
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21103041
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x2110302f
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21103063
lea edx, [esp + 8]
mov ecx, 0x61
call fcn.21102670
jmp 0x2110306e
mov edx, dword [esp + 8]
push edi
push edx
call fcn.21101a40
mov eax, dword [0x2114e89c]
test eax, eax
pop edi
je 0x21103084
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret 8

Function at 0x21103090
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
push edi
mov edi, dword [esp + 0xc]
je 0x211030e6
cmp word [0x2114fa34], 1
je 0x211030ba
cmp word [0x2114fa32], 0
je 0x211030e6
call fcn.211023e0
test eax, eax
jne 0x211030e6
call fcn.21102230
test eax, eax
je 0x211030e6
mov eax, dword [esp + 8]
mov ecx, dword [0x211530f8]
push edi
push eax
push str.AIL_set_timer_frequency__ld__lu__r_n
push ecx
call fcn.2112ed34
add esp, 0x10
mov eax, dword [0x2114e89c]
test eax, eax
je 0x2110311a
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21103111
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x211030ff
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21103133
lea edx, [esp + 8]
mov ecx, 0x62
call fcn.21102670
jmp 0x2110313e
mov edx, dword [esp + 8]
push edi
push edx
call fcn.21101a80
mov eax, dword [0x2114e89c]
test eax, eax
pop edi
je 0x21103154
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret 8
Function at 0x21103160
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
push edi
mov edi, dword [esp + 0xc]
je 0x211031b6
cmp word [0x2114fa34], 1
je 0x2110318a
cmp word [0x2114fa32], 0
je 0x211031b6
call fcn.211023e0
test eax, eax
jne 0x211031b6
call fcn.21102230
test eax, eax
je 0x211031b6
mov eax, dword [esp + 8]
mov ecx, dword [0x211530f8]
push edi
push eax
push str.AIL_set_timer_divisor__ld__lu__r_n
push ecx
call fcn.2112ed34
add esp, 0x10
mov eax, dword [0x2114e89c]
test eax, eax
je 0x211031ea
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x211031e1
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x211031cf
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21103203
lea edx, [esp + 8]
mov ecx, 0x63
call fcn.21102670
jmp 0x2110320e
mov edx, dword [esp + 8]
push edi
push edx
call fcn.21101aa0
mov eax, dword [0x2114e89c]
test eax, eax
pop edi
je 0x21103224
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret 8

Function at 0x21103230
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x21103280
cmp word [0x2114fa34], 1
je 0x21103255
cmp word [0x2114fa32], 0
je 0x21103280
call fcn.211023e0
test eax, eax
jne 0x21103280
call fcn.21102230
test eax, eax
je 0x21103280
mov eax, dword [esp + 4]
mov ecx, dword [0x211530f8]
push eax
push str.AIL_start_timer__lu__r_n
push ecx
call fcn.2112ed34
add esp, 0xc
mov eax, dword [0x2114e89c]
test eax, eax
je 0x211032b4
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x211032ab
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21103299
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x211032cd
lea edx, [esp + 4]
mov ecx, 0x65
call fcn.21102670
jmp 0x211032d7
mov edx, dword [esp + 4]
push edx
call fcn.21101af0
mov eax, dword [0x2114e89c]
test eax, eax
je 0x211032ec
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret 4
Function at 0x21103300
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x2110334a
cmp word [0x2114fa34], 1
je 0x21103325
cmp word [0x2114fa32], 0
je 0x2110334a
call fcn.211023e0
test eax, eax
jne 0x2110334a
call fcn.21102230
test eax, eax
je 0x2110334a
mov eax, dword [0x211530f8]
push str.AIL_start_all_timers___r_n
push eax
call fcn.2112ed34
add esp, 8
mov eax, dword [0x2114e89c]
test eax, eax
je 0x2110337e
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21103375
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21103363
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21103395
xor edx, edx
mov ecx, 0x66
call fcn.21102670
jmp 0x2110339a
call fcn.21101b20
mov eax, dword [0x2114e89c]
test eax, eax
je 0x211033b0
mov ecx, dword [0x2114fa38]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret

Function at 0x211033c0
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x21103410
cmp word [0x2114fa34], 1
je 0x211033e5
cmp word [0x2114fa32], 0
je 0x21103410
call fcn.211023e0
test eax, eax
jne 0x21103410
call fcn.21102230
test eax, eax
je 0x21103410
mov eax, dword [esp + 4]
mov ecx, dword [0x211530f8]
push eax
push str.AIL_stop_timer__lu__r_n
push ecx
call fcn.2112ed34
add esp, 0xc
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21103444
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x2110343b
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21103429
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x2110345d
lea edx, [esp + 4]
mov ecx, 0x68
call fcn.21102670
jmp 0x21103467
mov edx, dword [esp + 4]
push edx
call fcn.21101b40
mov eax, dword [0x2114e89c]
test eax, eax
je 0x2110347c
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret 4
Function at 0x21103490
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x211034da
cmp word [0x2114fa34], 1
je 0x211034b5
cmp word [0x2114fa32], 0
je 0x211034da
call fcn.211023e0
test eax, eax
jne 0x211034da
call fcn.21102230
test eax, eax
je 0x211034da
mov eax, dword [0x211530f8]
push str.AIL_stop_all_timers___r_n
push eax
call fcn.2112ed34
add esp, 8
mov eax, dword [0x2114e89c]
test eax, eax
je 0x2110350e
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21103505
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x211034f3
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x21103525
xor edx, edx
mov ecx, 0x69
call fcn.21102670
jmp 0x2110352a
call fcn.21101b70
mov eax, dword [0x2114e89c]
test eax, eax
je 0x21103540
mov ecx, dword [0x2114fa38]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret

Function at 0x21103550
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x211035a0
cmp word [0x2114fa34], 1
je 0x21103575
cmp word [0x2114fa32], 0
je 0x211035a0
call fcn.211023e0
test eax, eax
jne 0x211035a0
call fcn.21102230
test eax, eax
je 0x211035a0
mov eax, dword [esp + 4]
mov ecx, dword [0x211530f8]
push eax
push str.AIL_release_timer_handle__lu__r_n
push ecx
call fcn.2112ed34
add esp, 0xc
mov eax, dword [0x2114e89c]
test eax, eax
je 0x211035d4
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x211035cb
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x211035b9
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x211035ed
lea edx, [esp + 4]
mov ecx, 0x6a
call fcn.21102670
jmp 0x211035f7
mov edx, dword [esp + 4]
push edx
call fcn.21101b90
mov eax, dword [0x2114e89c]
test eax, eax
je 0x2110360c
mov eax, dword [0x2114fa38]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret 4
Function at 0x21103620
Capabilities:
Check mutex on windows

Disassembly:
inc word [0x2114fa34]
cmp word [0x2114fa30], 0
je 0x2110366a
cmp word [0x2114fa34], 1
je 0x21103645
cmp word [0x2114fa32], 0
je 0x2110366a
call fcn.211023e0
test eax, eax
jne 0x2110366a
call fcn.21102230
test eax, eax
je 0x2110366a
mov eax, dword [0x211530f8]
push str.AIL_release_all_timers___r_n
push eax
call fcn.2112ed34
add esp, 8
mov eax, dword [0x2114e89c]
test eax, eax
je 0x2110369e
mov eax, dword [0x2114fa38]
test eax, eax
jne 0x21103695
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
call esi
test eax, eax
mov dword [0x2114fa38], eax
je 0x21103683
pop esi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x2114fa40]
test eax, eax
je 0x211036b5
xor edx, edx
mov ecx, 0x6b
call fcn.21102670
jmp 0x211036ba
call fcn.21101bb0
mov eax, dword [0x2114e89c]
test eax, eax
je 0x211036d0
mov ecx, dword [0x2114fa38]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec word [0x2114fa34]
ret