Function at 0x1003a450
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
cmp dword [esi + 0x12c], 0
jne 0x1003a4e7
mov eax, dword [esi + 0x1e0]
test eax, eax
je 0x1003a484
push eax
call sym.ExuiKrnln_X32.dll_DeleteTimerEx
mov dword [esi + 0x1e0], 0
cmp byte [esi + 0xe8], 0
je 0x1003a91f
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x1003a91f
cmp dword [esi + 0xdc], 1
jl 0x1003a91f
cmp dword [esi + 0xe4], 0
jle 0x1003a4cc
inc dword [esi + 0xe0]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or dword [esi + 0xd0], 1
push 1
push 0x101916f4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x1e4], 0
cmp edx, 1
jne 0x1003a6c7
mov eax, dword [esi + 0x1e0]
mov ebx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
test eax, eax
je 0x1003a54a
cmp byte [eax + 0x10], 0
jne 0x1003a54a
cmp dword [eax + 4], eax
jne 0x1003a54a
cmp dword [eax + 0x28], 0
je 0x1003a54a
mov edi, dword [eax + 8]
mov dword [eax + 0x28], 0
test edi, edi
je 0x1003a54a
push 0xea60
push 0xea60
push edi
push 0
mov dword [eax + 8], 0
call ebx
push 0
push edi
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
cmp dword [esi + 0x1a8], 0
mov eax, dword [esi + 0x1a4]
mov edi, dword [esi + 0x1e0]
mov dword [esi + 0x1d4], eax
je 0x1003a632
cmp dword [esi + 0x1a0], 0
mov dword [esi + 0x1e4], 1
jne 0x1003a61f
mov eax, dword [esi + 0x188]
mov dword [esi + 0x1d8], eax
mov eax, dword [esi + 0x1ac]
test edi, edi
je 0x1003a888
cmp byte [edi + 0x10], 0
jne 0x1003a91f
cmp dword [edi + 4], edi
jne 0x1003a91f
cmp dword [edi + 0x28], eax
je 0x1003a91f
mov dword [edi + 0x28], eax
lea ecx, [edi + 8]
mov esi, dword [ecx]
cmp eax, 1
jge 0x1003a5f3
test esi, esi
je 0x1003a91f
push 0xea60
push 0xea60
push esi
push 0
mov dword [ecx], 0
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push 0
push esi
push 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x1003a609
push eax
push eax
push esi
push 0
call ebx
test eax, eax
jne 0x1003a91f
lea ecx, [edi + 8]
push dword [edi + 0x2c]
mov eax, dword [edi + 0x28]
push eax
push eax
push edi
push 0x10118230
push 0
push ecx
jmp 0x1003a90c
mov eax, dword [esi + 0x1b0]
test edi, edi
jne 0x1003a59a
jmp 0x1003a888
mov dword [esi + 0x1e4], 0
test edi, edi
je 0x1003a91f
cmp byte [edi + 0x10], 0
jne 0x1003a6b6
cmp dword [edi + 4], edi
jne 0x1003a6b6
mov eax, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], 0
mov dword [esp + 0x10], eax
mov dword [edi + 8], 0
test eax, eax
je 0x1003a68a
push 0xea60
push 0xea60
push eax
push 0
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push 0
push dword [esp + 0x14]
push 0
call eax
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x10109f80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1e0], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 2
jne 0x1003a742
cmp dword [esi + 0x1a0], 0
je 0x1003a91f
mov eax, dword [esi + 0x1e0]
test eax, eax
je 0x1003a91f
cmp byte [eax + 0x10], 0
jne 0x1003a91f
cmp dword [eax + 4], eax
jne 0x1003a91f
cmp dword [eax + 0x28], 0
je 0x1003a91f
mov esi, dword [eax + 8]
mov dword [eax + 0x28], 0
test esi, esi
je 0x1003a91f
push 0xea60
push 0xea60
push esi
push 0
mov dword [eax + 8], 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x1e0]
mov ecx, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
mov edx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
mov dword [esp + 0x10], ecx
test eax, eax
je 0x1003a7a0
cmp byte [eax + 0x10], 0
jne 0x1003a7a0
cmp dword [eax + 4], eax
jne 0x1003a7a0
cmp dword [eax + 0x28], 0
je 0x1003a7a0
mov ebx, dword [eax + 8]
mov dword [eax + 0x28], 0
test ebx, ebx
je 0x1003a7a0
push 0xea60
push 0xea60
push ebx
push 0
mov dword [eax + 8], 0
call edx
push 0
push ebx
push 0
call dword [esp + 0x1c]
mov edx, dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
cmp dword [esi + 0x1a0], 0
jne 0x1003a81e
mov ecx, dword [esi + 0x12c]
test edi, edi
jns 0x1003a7e6
lea edi, [ecx - 1]
mov ecx, dword [esi + 0x188]
mov dword [esi + 0x1d4], 1
mov dword [esi + 0x1d8], ecx
mov dword [esi + 0x188], edi
cmp dword [esi + 0x18c], 0
je 0x1003a816
mov edi, dword [esi + 0x1c8]
jmp 0x1003a86e
cmp edi, ecx
jl 0x1003a7ee
xor edi, edi
jmp 0x1003a7f6
cmp edi, dword [esi + 0x188]
jle 0x1003a7b6
mov ecx, dword [esi + 0x188]
mov dword [esi + 0x1d4], 0
mov dword [esi + 0x1d8], ecx
mov dword [esi + 0x188], edi
xor edi, edi
jmp 0x1003a86e
mov edi, dword [esi + 0x1c4]
jmp 0x1003a86e
cmp dword [esi + 0x18c], 0
je 0x1003a82f
mov ecx, dword [esi + 0x1c8]
jmp 0x1003a835
mov ecx, dword [esi + 0x1c4]
mov eax, dword [esi + 0x1d0]
sub eax, ecx
test edi, edi
jns 0x1003a84f
mov edi, eax
mov dword [esi + 0x1d4], 1
jmp 0x1003a86e
cmp edi, eax
jl 0x1003a85d
xor edi, edi
mov dword [esi + 0x1d4], edi
jmp 0x1003a86e
xor eax, eax
cmp edi, dword [esi + 0x1cc]
setle al
mov dword [esi + 0x1d4], eax
mov eax, esi
mov ecx, 0x1cc
mov dword [ecx + eax], edi
mov edi, dword [esi + 0x1e0]
mov eax, dword [esi + 0x1b0]
test edi, edi
jne 0x1003a8a5
push 0
push 0
push esi
push 0x10039ff0
push eax
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x1e0], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [edi + 0x10], 0
jne 0x1003a91f
cmp dword [edi + 4], edi
jne 0x1003a91f
cmp dword [edi + 0x28], eax
je 0x1003a91f
mov esi, dword [edi + 8]
lea ebx, [edi + 8]
mov dword [edi + 0x28], eax
cmp eax, 1
jge 0x1003a8ec
test esi, esi
je 0x1003a91f
push 0xea60
push 0xea60
push esi
push 0
mov dword [ebx], 0
call edx
push 0
push esi
push 0
call dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x1003a8fb
push eax
push eax
push esi
push 0
call edx
test eax, eax
jne 0x1003a91f
push dword [edi + 0x2c]
mov eax, dword [edi + 0x28]
push eax
push eax
push edi
push 0x10118230
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
cmp dword [edi + 0x14], 0xffffffff
jne 0x1003a91f
mov dword [edi + 0x14], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret