Function at 0x1003a450
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
cmp dword [esi + 0x12c], 0
jne 0x1003a4da
mov eax, dword [esi + 0x1d8]
test eax, eax
je 0x1003a484
push eax
call sym.ExuiKrnln_X32.dll_DeleteTimerEx
mov dword [esi + 0x1d8], 0
cmp byte [esi + 0xe8], 0
je 0x1003a912
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x1003a912
cmp dword [esi + 0xe4], 0
jle 0x1003a4bf
inc dword [esi + 0xe0]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or dword [esi + 0xd0], 1
push 1
push 0x101844c4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x1dc], 0
cmp edx, 1
jne 0x1003a6ba
mov eax, dword [esi + 0x1d8]
mov ebx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
test eax, eax
je 0x1003a53d
cmp byte [eax + 0x10], 0
jne 0x1003a53d
cmp dword [eax + 4], eax
jne 0x1003a53d
cmp dword [eax + 0x28], 0
je 0x1003a53d
mov edi, dword [eax + 8]
mov dword [eax + 0x28], 0
test edi, edi
je 0x1003a53d
push 0xea60
push 0xea60
push edi
push 0
mov dword [eax + 8], 0
call ebx
push 0
push edi
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
cmp dword [esi + 0x1a0], 0
mov eax, dword [esi + 0x19c]
mov edi, dword [esi + 0x1d8]
mov dword [esi + 0x1cc], eax
je 0x1003a625
cmp dword [esi + 0x198], 0
mov dword [esi + 0x1dc], 1
jne 0x1003a612
mov eax, dword [esi + 0x180]
mov dword [esi + 0x1d0], eax
mov eax, dword [esi + 0x1a4]
test edi, edi
je 0x1003a87b
cmp byte [edi + 0x10], 0
jne 0x1003a912
cmp dword [edi + 4], edi
jne 0x1003a912
cmp dword [edi + 0x28], eax
je 0x1003a912
mov dword [edi + 0x28], eax
lea ecx, [edi + 8]
mov esi, dword [ecx]
cmp eax, 1
jge 0x1003a5e6
test esi, esi
je 0x1003a912
push 0xea60
push 0xea60
push esi
push 0
mov dword [ecx], 0
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push 0
push esi
push 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x1003a5fc
push eax
push eax
push esi
push 0
call ebx
test eax, eax
jne 0x1003a912
lea ecx, [edi + 8]
push dword [edi + 0x2c]
mov eax, dword [edi + 0x28]
push eax
push eax
push edi
push 0x1010eb00
push 0
push ecx
jmp 0x1003a8ff
mov eax, dword [esi + 0x1a8]
test edi, edi
jne 0x1003a58d
jmp 0x1003a87b
mov dword [esi + 0x1dc], 0
test edi, edi
je 0x1003a912
cmp byte [edi + 0x10], 0
jne 0x1003a6a9
cmp dword [edi + 4], edi
jne 0x1003a6a9
mov eax, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], 0
mov dword [esp + 0x10], eax
mov dword [edi + 8], 0
test eax, eax
je 0x1003a67d
push 0xea60
push 0xea60
push eax
push 0
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push 0
push dword [esp + 0x14]
push 0
call eax
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x10102c50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1d8], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 2
jne 0x1003a735
cmp dword [esi + 0x198], 0
je 0x1003a912
mov eax, dword [esi + 0x1d8]
test eax, eax
je 0x1003a912
cmp byte [eax + 0x10], 0
jne 0x1003a912
cmp dword [eax + 4], eax
jne 0x1003a912
cmp dword [eax + 0x28], 0
je 0x1003a912
mov esi, dword [eax + 8]
mov dword [eax + 0x28], 0
test esi, esi
je 0x1003a912
push 0xea60
push 0xea60
push esi
push 0
mov dword [eax + 8], 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x1d8]
mov ecx, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
mov edx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
mov dword [esp + 0x10], ecx
test eax, eax
je 0x1003a793
cmp byte [eax + 0x10], 0
jne 0x1003a793
cmp dword [eax + 4], eax
jne 0x1003a793
cmp dword [eax + 0x28], 0
je 0x1003a793
mov ebx, dword [eax + 8]
mov dword [eax + 0x28], 0
test ebx, ebx
je 0x1003a793
push 0xea60
push 0xea60
push ebx
push 0
mov dword [eax + 8], 0
call edx
push 0
push ebx
push 0
call dword [esp + 0x1c]
mov edx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
cmp dword [esi + 0x198], 0
jne 0x1003a811
mov ecx, dword [esi + 0x12c]
test edi, edi
jns 0x1003a7d9
lea edi, [ecx - 1]
mov ecx, dword [esi + 0x180]
mov dword [esi + 0x1cc], 1
mov dword [esi + 0x1d0], ecx
mov dword [esi + 0x180], edi
cmp dword [esi + 0x184], 0
je 0x1003a809
mov edi, dword [esi + 0x1c0]
jmp 0x1003a861
cmp edi, ecx
jl 0x1003a7e1
xor edi, edi
jmp 0x1003a7e9
cmp edi, dword [esi + 0x180]
jle 0x1003a7a9
mov ecx, dword [esi + 0x180]
mov dword [esi + 0x1cc], 0
mov dword [esi + 0x1d0], ecx
mov dword [esi + 0x180], edi
xor edi, edi
jmp 0x1003a861
mov edi, dword [esi + 0x1bc]
jmp 0x1003a861
cmp dword [esi + 0x184], 0
je 0x1003a822
mov ecx, dword [esi + 0x1c0]
jmp 0x1003a828
mov ecx, dword [esi + 0x1bc]
mov eax, dword [esi + 0x1c8]
sub eax, ecx
test edi, edi
jns 0x1003a842
mov edi, eax
mov dword [esi + 0x1cc], 1
jmp 0x1003a861
cmp edi, eax
jl 0x1003a850
xor edi, edi
mov dword [esi + 0x1cc], edi
jmp 0x1003a861
xor eax, eax
cmp edi, dword [esi + 0x1c4]
setle al
mov dword [esi + 0x1cc], eax
mov eax, esi
mov ecx, 0x1c4
mov dword [ecx + eax], edi
mov edi, dword [esi + 0x1d8]
mov eax, dword [esi + 0x1a8]
test edi, edi
jne 0x1003a898
push 0
push 0
push esi
push 0x1003a060
push eax
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x1d8], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [edi + 0x10], 0
jne 0x1003a912
cmp dword [edi + 4], edi
jne 0x1003a912
cmp dword [edi + 0x28], eax
je 0x1003a912
mov esi, dword [edi + 8]
lea ebx, [edi + 8]
mov dword [edi + 0x28], eax
cmp eax, 1
jge 0x1003a8df
test esi, esi
je 0x1003a912
push 0xea60
push 0xea60
push esi
push 0
mov dword [ebx], 0
call edx
push 0
push esi
push 0
call dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x1003a8ee
push eax
push eax
push esi
push 0
call edx
test eax, eax
jne 0x1003a912
push dword [edi + 0x2c]
mov eax, dword [edi + 0x28]
push eax
push eax
push edi
push 0x1010eb00
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
cmp dword [edi + 0x14], 0xffffffff
jne 0x1003a912
mov dword [edi + 0x14], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret