Function at 0x10040d30
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
jl 0x10040f64
mov esi, dword [ebp + 0x1c]
cmp dword [esi + 0x2c], 0xffffffff
jne 0x10040d70
mov eax, dword [esi + 0x1b4]
test eax, eax
je 0x10040f64
push eax
call sym.ExuiKrnln_X32.dll_DeleteTimerEx
mov dword [esi + 0x1b4], 0
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x1a4]
movzx ecx, ax
test eax, eax
jne 0x10040e4e
mov edi, dword [esi + 0x1b4]
test edi, edi
je 0x10040df9
cmp byte [edi + 0x10], al
jne 0x10040def
cmp dword [edi + 4], edi
jne 0x10040def
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], eax
mov dword [edi + 8], eax
test ebx, ebx
je 0x10040dc3
push 0xea60
push 0xea60
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x101075e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1b4], 0
mov dword [esi + 0x1b0], 0xff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x10040f64
cmp dword [esi + 0xe4], 0
jle 0x10040e32
inc dword [esi + 0xe0]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
or dword [esi + 0xd0], 1
push 1
push 0x1018a5b4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x1b0]
movsx ecx, cx
add eax, ecx
mov dword [esi + 0x1b0], eax
cmp eax, 0xfe
jle 0x10040efb
mov edi, dword [esi + 0x1b4]
mov dword [esi + 0x1b0], 0xff
test edi, edi
je 0x10040e03
cmp byte [edi + 0x10], 0
jne 0x10040eec
cmp dword [edi + 4], edi
jne 0x10040eec
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], 0
mov dword [edi + 8], 0
test ebx, ebx
je 0x10040ec0
push 0xea60
push 0xea60
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x101075e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1b4], 0
jmp 0x10040e03
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x10040f34
cmp dword [esi + 0xe4], 0
jle 0x10040f20
inc dword [esi + 0xe0]
jmp 0x10040f34
or dword [esi + 0xd0], 1
push 1
push 0x1018a5b4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [esi + 0x1b4], 0
jne 0x10040f64
movsx eax, word [esi + 0x1a6]
mov ecx, 0x21
push 0
push 0
test eax, eax
push esi
cmove eax, ecx
push fcn.10040d30
push eax
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x1b4], eax
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18