Function at 0x1002d2b
Capabilities:
Check mutex on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
push ebx
push edi
xor edi, edi
cmp dword [0x10071b0], edi
mov dword [ebp - 4], edi
je 0x1002d71
call fcn.010026dc
test eax, eax
jne 0x1002d71
movzx eax, word [0x1007498]
push 0x11010
push eax
push edi
push 0xea66
push dword [ebp - 4]
call fcn.01001e69
add esp, 0x14
xor eax, eax
jmp 0x1002f96
push esi
push edi
lea eax, [ebp - 0x424]
push eax
push edi
push edi
push 0x1007b20
call fcn.01003c20
add esp, 0x14
push 0x1001494
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x21c]
push eax
xor esi, esi
inc esi
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
cmp eax, edi
mov dword [ebp - 0xc], eax
je 0x1002f6e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1002f6e
cmp dword [0x1007490], edi
jne 0x1002e36
lea eax, [ebp - 0x14]
push eax
push edi
lea eax, [ebp - 4]
push eax
push fcn.01002c66
push edi
push edi
mov dword [0x10074a0], esi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, edi
je 0x1002e19
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1002e1f
push edi
call fcn.01002c66
cmp dword [0x1007490], edi
jne 0x1002e36
jmp 0x1002e31
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 4], edi
je 0x1002e29
mov esi, dword [0x10074b4]
mov eax, dword [0x10074b0]
neg esi
sbb esi, esi
and esi, 8
neg eax
sbb eax, eax
and eax, 4
or esi, eax
mov eax, dword [0x10074ac]
neg eax
sbb eax, eax
and eax, 2
or esi, eax
xor eax, eax
cmp dword [0x10074b8], edi
push 0x7f02
setne al
push edi
or esi, eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov ebx, dword [sym.imp.USER32.dll_SetCursor]
push eax
call ebx
push edi
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push esi
push 0x1007b20
push 0x1007008
call sub.OCMANAGE.dll_OcInitialize
cmp eax, edi
push dword [ebp - 8]
mov dword [0x100749c], eax
jne 0x1002ecb
call ebx
cmp dword [ebp - 0x10], edi
je 0x1002f8a
movzx eax, word [0x1007498]
push 0x11010
push eax
push edi
push 0xea62
push dword [ebp - 4]
jmp 0x1002f82
push dword [ebp - 4]
push eax
call fcn.01003486
push dword [ebp - 8]
call ebx
push 0x7f02
push edi
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call ebx
cmp dword [0x1007490], edi
mov esi, eax
jne 0x1002f2c
lea eax, [ebp - 0x14]
push eax
push edi
lea eax, [ebp - 4]
push eax
push fcn.01002c66
push edi
push edi
mov dword [0x10074a0], edi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, edi
je 0x1002f26
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1002f2c
push edi
call fcn.01002c66
push 0x100749c
call sub.OCMANAGE.dll_OcTerminate
cmp dword [0x1007490], edi
jne 0x1002f5d
jmp 0x1002f48
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 4], edi
je 0x1002f40
push edi
push edi
push 0x8000
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call ebx
xor eax, eax
inc eax
jmp 0x1002f95
movzx eax, word [0x1007498]
push 0x11030
push eax
push edi
push 0xea64
push edi
call fcn.01001e69
add esp, 0x14
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor eax, eax
pop esi
pop edi
pop ebx
leave
ret