Function at 0x100e4eb0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
jl 0x100e50e4
mov esi, dword [ebp + 0x1c]
cmp dword [esi + 0x2c], 0xffffffff
jge 0x100e4ef0
mov eax, dword [esi + 0x1b0]
test eax, eax
je 0x100e50e4
push eax
call sym.ExuiKrnln_X32.dll_DeleteTimerEx
mov dword [esi + 0x1b0], 0
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x1a0]
movzx ecx, ax
test eax, eax
jne 0x100e4fce
mov edi, dword [esi + 0x1b0]
test edi, edi
je 0x100e4f79
cmp byte [edi + 0x10], al
jne 0x100e4f6f
cmp dword [edi + 4], edi
jne 0x100e4f6f
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], eax
mov dword [edi + 8], eax
test ebx, ebx
je 0x100e4f43
push 0xea60
push 0xea60
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x101075e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1b0], 0
mov dword [esi + 0x1ac], 0xff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x100e50e4
cmp dword [esi + 0xe4], 0
jle 0x100e4fb2
inc dword [esi + 0xe0]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
or dword [esi + 0xd0], 1
push 1
push 0x1018a5b4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x1ac]
movsx ecx, cx
add eax, ecx
mov dword [esi + 0x1ac], eax
cmp eax, 0xfe
jle 0x100e507b
mov edi, dword [esi + 0x1b0]
mov dword [esi + 0x1ac], 0xff
test edi, edi
je 0x100e4f83
cmp byte [edi + 0x10], 0
jne 0x100e506c
cmp dword [edi + 4], edi
jne 0x100e506c
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], 0
mov dword [edi + 8], 0
test ebx, ebx
je 0x100e5040
push 0xea60
push 0xea60
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x101075e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1b0], 0
jmp 0x100e4f83
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x100e50b4
cmp dword [esi + 0xe4], 0
jle 0x100e50a0
inc dword [esi + 0xe0]
jmp 0x100e50b4
or dword [esi + 0xd0], 1
push 1
push 0x1018a5b4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [esi + 0x1b0], 0
jne 0x100e50e4
movsx eax, word [esi + 0x1a2]
mov ecx, 0x21
push 0
push 0
test eax, eax
push esi
cmove eax, ecx
push fcn.100e4eb0
push eax
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x1b0], eax
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18