Function at 0x100e7b50
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
jl 0x100e7d9e
mov esi, dword [ebp + 0x1c]
cmp dword [esi + 0x2c], 0xffffffff
jge 0x100e7b90
mov eax, dword [esi + 0x1b0]
test eax, eax
je 0x100e7d9e
push eax
call sym.ExuiKrnln_X32.dll_DeleteTimerEx
mov dword [esi + 0x1b0], 0
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x1a0]
movzx ecx, ax
test eax, eax
jne 0x100e7c7b
mov edi, dword [esi + 0x1b0]
test edi, edi
je 0x100e7c19
cmp byte [edi + 0x10], al
jne 0x100e7c0f
cmp dword [edi + 4], edi
jne 0x100e7c0f
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], eax
mov dword [edi + 8], eax
test ebx, ebx
je 0x100e7be3
push 0xea60
push 0xea60
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x10109f80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1b0], 0
mov dword [esi + 0x1ac], 0xff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x100e7d9e
cmp dword [esi + 0xdc], 1
jl 0x100e7d9e
cmp dword [esi + 0xe4], 0
jle 0x100e7c5f
inc dword [esi + 0xe0]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
or dword [esi + 0xd0], 1
push 1
push 0x101916f4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x1ac]
movsx ecx, cx
add eax, ecx
mov dword [esi + 0x1ac], eax
cmp eax, 0xfe
jle 0x100e7d2c
mov edi, dword [esi + 0x1b0]
mov dword [esi + 0x1ac], 0xff
test edi, edi
je 0x100e7c23
cmp byte [edi + 0x10], 0
jne 0x100e7d1d
cmp dword [edi + 4], edi
jne 0x100e7d1d
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], 0
mov dword [edi + 8], 0
test ebx, ebx
je 0x100e7cf1
push 0xea60
push 0xea60
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x10109f80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1b0], 0
jmp 0x100e7c23
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x100e7d6e
cmp dword [esi + 0xdc], 1
jl 0x100e7d6e
cmp dword [esi + 0xe4], 0
jle 0x100e7d5a
inc dword [esi + 0xe0]
jmp 0x100e7d6e
or dword [esi + 0xd0], 1
push 1
push 0x101916f4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [esi + 0x1b0], 0
jne 0x100e7d9e
movsx eax, word [esi + 0x1a2]
mov ecx, 0x21
push 0
push 0
test eax, eax
push esi
cmove eax, ecx
push fcn.100e7b50
push eax
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x1b0], eax
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18