Function at 0x1000a20c
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
xor ebx, ebx
mov dword [esp + 0x14], 0x80004005
push ebx
push ebx
push 1
mov edi, ecx
mov esi, ebx
push ebx
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [esp + 0x10], eax
test eax, eax
jne 0x1000a291
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a254
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a420
test byte [eax + 0x1c], 1
je 0x1000a420
cmp byte [eax + 0x19], 2
jb 0x1000a420
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xe
mov edx, 0x1000365c
pop ecx
call fcn.10004db8
jmp 0x1000a420
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [edi + 0x14], eax
test eax, eax
jne 0x1000a2e7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a2b8
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a420
test byte [eax + 0x1c], 1
je 0x1000a420
cmp byte [eax + 0x19], 2
jb 0x1000a420
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xf
jmp 0x1000a281
lea eax, [edi + 0xc]
push eax
push ebx
lea eax, [esp + 0x14]
push eax
push 0x1000a450
push ebx
push ebx
call dword [sym.imp.msvcrt.dll__beginthreadex]
add esp, 0x18
mov dword [edi + 0x10], eax
test eax, eax
jne 0x1000a34f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a31d
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a420
test byte [eax + 0x1c], 1
je 0x1000a420
cmp byte [eax + 0x19], 2
jb 0x1000a420
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x10
jmp 0x1000a281
push 0xffffffffffffffff
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1000a3a6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a374
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a420
test byte [eax + 0x1c], 1
je 0x1000a420
cmp byte [eax + 0x19], 2
jb 0x1000a420
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x11
jmp 0x1000a281
mov ecx, dword [esp + 0x14]
test ecx, ecx
jns 0x1000a3f5
mov esi, ecx
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a3dc
test byte [eax + 0x1c], 1
je 0x1000a3dc
cmp byte [eax + 0x19], 2
jb 0x1000a3dc
push ecx
push dword [eax + 0x14]
mov edx, 0x1000365c
push dword [eax + 0x10]
push 0x12
pop ecx
call fcn.10004db8
push 0xffffffffffffffff
push dword [edi + 0x10]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [edi + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x10], ebx
jmp 0x1000a420
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a420
test byte [eax + 0x1c], 1
je 0x1000a420
cmp byte [eax + 0x19], 5
jb 0x1000a420
push dword [eax + 0x14]
mov edx, 0x1000365c
push dword [eax + 0x10]
push 0x13
pop ecx
call fcn.10004d9a
cmp dword [esp + 0x10], ebx
je 0x1000a430
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jns 0x1000a445
cmp dword [edi + 0x14], ebx
je 0x1000a445
push dword [edi + 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x14], ebx
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret