Function at 0x1003a850
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
cmp dword [esi + 0x12c], 0
jne 0x1003a8da
mov eax, dword [esi + 0x1e0]
test eax, eax
je 0x1003a884
push eax
call sym.ExuiKrnln_X32.dll_DeleteTimerEx
mov dword [esi + 0x1e0], 0
cmp byte [esi + 0xe8], 0
je 0x1003ad12
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x1003ad12
cmp dword [esi + 0xe4], 0
jle 0x1003a8bf
inc dword [esi + 0xe0]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or dword [esi + 0xd0], 1
push 1
push 0x1018a5b4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x1e4], 0
cmp edx, 1
jne 0x1003aaba
mov eax, dword [esi + 0x1e0]
mov ebx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
test eax, eax
je 0x1003a93d
cmp byte [eax + 0x10], 0
jne 0x1003a93d
cmp dword [eax + 4], eax
jne 0x1003a93d
cmp dword [eax + 0x28], 0
je 0x1003a93d
mov edi, dword [eax + 8]
mov dword [eax + 0x28], 0
test edi, edi
je 0x1003a93d
push 0xea60
push 0xea60
push edi
push 0
mov dword [eax + 8], 0
call ebx
push 0
push edi
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
cmp dword [esi + 0x1a8], 0
mov eax, dword [esi + 0x1a4]
mov edi, dword [esi + 0x1e0]
mov dword [esi + 0x1d4], eax
je 0x1003aa25
cmp dword [esi + 0x1a0], 0
mov dword [esi + 0x1e4], 1
jne 0x1003aa12
mov eax, dword [esi + 0x188]
mov dword [esi + 0x1d8], eax
mov eax, dword [esi + 0x1ac]
test edi, edi
je 0x1003ac7b
cmp byte [edi + 0x10], 0
jne 0x1003ad12
cmp dword [edi + 4], edi
jne 0x1003ad12
cmp dword [edi + 0x28], eax
je 0x1003ad12
mov dword [edi + 0x28], eax
lea ecx, [edi + 8]
mov esi, dword [ecx]
cmp eax, 1
jge 0x1003a9e6
test esi, esi
je 0x1003ad12
push 0xea60
push 0xea60
push esi
push 0
mov dword [ecx], 0
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push 0
push esi
push 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x1003a9fc
push eax
push eax
push esi
push 0
call ebx
test eax, eax
jne 0x1003ad12
lea ecx, [edi + 8]
push dword [edi + 0x2c]
mov eax, dword [edi + 0x28]
push eax
push eax
push edi
push 0x10113680
push 0
push ecx
jmp 0x1003acff
mov eax, dword [esi + 0x1b0]
test edi, edi
jne 0x1003a98d
jmp 0x1003ac7b
mov dword [esi + 0x1e4], 0
test edi, edi
je 0x1003ad12
cmp byte [edi + 0x10], 0
jne 0x1003aaa9
cmp dword [edi + 4], edi
jne 0x1003aaa9
mov eax, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], 0
mov dword [esp + 0x10], eax
mov dword [edi + 8], 0
test eax, eax
je 0x1003aa7d
push 0xea60
push 0xea60
push eax
push 0
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push 0
push dword [esp + 0x14]
push 0
call eax
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x101075e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1e0], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 2
jne 0x1003ab35
cmp dword [esi + 0x1a0], 0
je 0x1003ad12
mov eax, dword [esi + 0x1e0]
test eax, eax
je 0x1003ad12
cmp byte [eax + 0x10], 0
jne 0x1003ad12
cmp dword [eax + 4], eax
jne 0x1003ad12
cmp dword [eax + 0x28], 0
je 0x1003ad12
mov esi, dword [eax + 8]
mov dword [eax + 0x28], 0
test esi, esi
je 0x1003ad12
push 0xea60
push 0xea60
push esi
push 0
mov dword [eax + 8], 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x1e0]
mov ecx, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
mov edx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
mov dword [esp + 0x10], ecx
test eax, eax
je 0x1003ab93
cmp byte [eax + 0x10], 0
jne 0x1003ab93
cmp dword [eax + 4], eax
jne 0x1003ab93
cmp dword [eax + 0x28], 0
je 0x1003ab93
mov ebx, dword [eax + 8]
mov dword [eax + 0x28], 0
test ebx, ebx
je 0x1003ab93
push 0xea60
push 0xea60
push ebx
push 0
mov dword [eax + 8], 0
call edx
push 0
push ebx
push 0
call dword [esp + 0x1c]
mov edx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
cmp dword [esi + 0x1a0], 0
jne 0x1003ac11
mov ecx, dword [esi + 0x12c]
test edi, edi
jns 0x1003abd9
lea edi, [ecx - 1]
mov ecx, dword [esi + 0x188]
mov dword [esi + 0x1d4], 1
mov dword [esi + 0x1d8], ecx
mov dword [esi + 0x188], edi
cmp dword [esi + 0x18c], 0
je 0x1003ac09
mov edi, dword [esi + 0x1c8]
jmp 0x1003ac61
cmp edi, ecx
jl 0x1003abe1
xor edi, edi
jmp 0x1003abe9
cmp edi, dword [esi + 0x188]
jle 0x1003aba9
mov ecx, dword [esi + 0x188]
mov dword [esi + 0x1d4], 0
mov dword [esi + 0x1d8], ecx
mov dword [esi + 0x188], edi
xor edi, edi
jmp 0x1003ac61
mov edi, dword [esi + 0x1c4]
jmp 0x1003ac61
cmp dword [esi + 0x18c], 0
je 0x1003ac22
mov ecx, dword [esi + 0x1c8]
jmp 0x1003ac28
mov ecx, dword [esi + 0x1c4]
mov eax, dword [esi + 0x1d0]
sub eax, ecx
test edi, edi
jns 0x1003ac42
mov edi, eax
mov dword [esi + 0x1d4], 1
jmp 0x1003ac61
cmp edi, eax
jl 0x1003ac50
xor edi, edi
mov dword [esi + 0x1d4], edi
jmp 0x1003ac61
xor eax, eax
cmp edi, dword [esi + 0x1cc]
setle al
mov dword [esi + 0x1d4], eax
mov eax, esi
mov ecx, 0x1cc
mov dword [ecx + eax], edi
mov edi, dword [esi + 0x1e0]
mov eax, dword [esi + 0x1b0]
test edi, edi
jne 0x1003ac98
push 0
push 0
push esi
push 0x1003a400
push eax
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x1e0], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [edi + 0x10], 0
jne 0x1003ad12
cmp dword [edi + 4], edi
jne 0x1003ad12
cmp dword [edi + 0x28], eax
je 0x1003ad12
mov esi, dword [edi + 8]
lea ebx, [edi + 8]
mov dword [edi + 0x28], eax
cmp eax, 1
jge 0x1003acdf
test esi, esi
je 0x1003ad12
push 0xea60
push 0xea60
push esi
push 0
mov dword [ebx], 0
call edx
push 0
push esi
push 0
call dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x1003acee
push eax
push eax
push esi
push 0
call edx
test eax, eax
jne 0x1003ad12
push dword [edi + 0x2c]
mov eax, dword [edi + 0x28]
push eax
push eax
push edi
push 0x10113680
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
cmp dword [edi + 0x14], 0xffffffff
jne 0x1003ad12
mov dword [edi + 0x14], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret