Function at 0x100aea50
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
jl 0x100aecb7
cmp byte [0x1015a414], 0
mov esi, dword [ebp + 0x1c]
jne 0x100aec1f
mov ecx, dword [esi + 0x190]
test ecx, ecx
je 0x100aec1f
cmp byte [esi + 0x184], 0
je 0x100aec1f
mov edx, dword [esi + 0x188]
cmp edx, 2
jl 0x100aec1f
mov eax, dword [esi + 0x18c]
inc eax
mov dword [esi + 0x18c], eax
cmp eax, edx
jl 0x100aeabb
mov dword [esi + 0x18c], 0
xor eax, eax
cmp byte [esi + 0xd4], 0
je 0x100aead4
push eax
push dword [esi + 0x1c0]
push dword [ecx + 4]
call dword [0x1015c354]
cmp dword [esi + 0x188], 0
je 0x100aebb7
mov ebx, dword [esi + 0x1c4]
test ebx, ebx
je 0x100aebb7
mov eax, dword [esi + 0x18c]
mov edi, dword [esi + 0x19c]
mov ebx, dword [ebx + eax*4]
test edi, edi
jne 0x100aeb1e
push 0x20
push edi
push edi
push esi
push fcn.100aea50
push ebx
push ebx
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x19c], eax
jmp 0x100aebb7
cmp byte [edi + 0xc], 0
jne 0x100aebb7
cmp dword [edi + 0x24], 0
mov ecx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
jle 0x100aeb5a
mov eax, dword [edi + 4]
test eax, eax
je 0x100aeb5a
mov dword [edi + 0x24], ebx
mov dword [edi + 0x20], ebx
test ebx, ebx
js 0x100aebe6
push ebx
push ebx
push eax
push 0
call ecx
test eax, eax
jne 0x100aebb7
mov ecx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
mov edx, dword [edi + 4]
lea eax, [edi + 4]
mov dword [edi + 0x24], ebx
mov dword [edi + 0x20], ebx
test edx, edx
je 0x100aeb9f
push 0x3a98
push 0x3a98
push edx
push 0
call ecx
push 0
push 0
push dword [edi + 4]
push 0x100ea350
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [edi + 4]
mov dword [eax], 0
test ebx, ebx
js 0x100aebb7
push dword [edi + 0x28]
push ebx
push ebx
push edi
push 0x100ea370
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
cmp byte [esi + 0xd4], 0
je 0x100aecb7
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
push esi
call sym.ExuiKrnln_X32.dll_ControlRedraw
call sym.ExuiKrnln_X32.dll_ControlUpdateCache
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
push 0x3a98
push 0x3a98
push eax
push 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push 0
push dword [edi + 4]
push 0x100ea350
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 4], 0
jmp 0x100aebb7
cmp byte [esi + 0xd4], 0
je 0x100aec64
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x100aec64
cmp byte [esi + 0xf1], 0
jne 0x100aec64
cmp dword [esi + 0xd0], 0
jle 0x100aec56
inc dword [esi + 0xcc]
jmp 0x100aec64
or dword [esi + 0xbc], 1
mov byte [0x1015a415], 1
mov edi, dword [esi + 0x19c]
test edi, edi
je 0x100aecb7
cmp byte [edi + 0xc], 0
jne 0x100aecad
mov eax, dword [edi + 4]
mov byte [edi + 0xc], 1
test eax, eax
je 0x100aecad
push 0x3a98
push 0x3a98
push eax
push 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push 0
push edi
push 0x100ea290
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x19c], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18