Function at 0x1000a2dc
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
xor ebx, ebx
mov dword [esp + 0x14], 0x80004005
push ebx
push ebx
push 1
mov edi, ecx
mov esi, ebx
push ebx
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [esp + 0x10], eax
test eax, eax
jne 0x1000a361
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a324
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a4f0
test byte [eax + 0x1c], 4
je 0x1000a4f0
cmp byte [eax + 0x19], 2
jb 0x1000a4f0
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xe
mov edx, 0x1000365c
pop ecx
call fcn.10004dbb
jmp 0x1000a4f0
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [edi + 0x14], eax
test eax, eax
jne 0x1000a3b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a388
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a4f0
test byte [eax + 0x1c], 4
je 0x1000a4f0
cmp byte [eax + 0x19], 2
jb 0x1000a4f0
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xf
jmp 0x1000a351
lea eax, [edi + 0xc]
push eax
push ebx
lea eax, [esp + 0x14]
push eax
push 0x1000a520
push ebx
push ebx
call dword [sym.imp.msvcrt.dll__beginthreadex]
add esp, 0x18
mov dword [edi + 0x10], eax
test eax, eax
jne 0x1000a41f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a3ed
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a4f0
test byte [eax + 0x1c], 4
je 0x1000a4f0
cmp byte [eax + 0x19], 2
jb 0x1000a4f0
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x10
jmp 0x1000a351
push 0xffffffffffffffff
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1000a476
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1000a444
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a4f0
test byte [eax + 0x1c], 4
je 0x1000a4f0
cmp byte [eax + 0x19], 2
jb 0x1000a4f0
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x11
jmp 0x1000a351
mov ecx, dword [esp + 0x14]
test ecx, ecx
jns 0x1000a4c5
mov esi, ecx
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a4ac
test byte [eax + 0x1c], 4
je 0x1000a4ac
cmp byte [eax + 0x19], 2
jb 0x1000a4ac
push ecx
push dword [eax + 0x14]
mov edx, 0x1000365c
push dword [eax + 0x10]
push 0x12
pop ecx
call fcn.10004dbb
push 0xffffffffffffffff
push dword [edi + 0x10]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [edi + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x10], ebx
jmp 0x1000a4f0
mov eax, dword [section..data]
cmp eax, section..data
je 0x1000a4f0
test byte [eax + 0x1c], 4
je 0x1000a4f0
cmp byte [eax + 0x19], 5
jb 0x1000a4f0
push dword [eax + 0x14]
mov edx, 0x1000365c
push dword [eax + 0x10]
push 0x13
pop ecx
call fcn.10004d9d
cmp dword [esp + 0x10], ebx
je 0x1000a500
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jns 0x1000a515
cmp dword [edi + 0x14], ebx
je 0x1000a515
push dword [edi + 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x14], ebx
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret