Function at 0x1009d7c0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
jl 0x1009d9f4
mov esi, dword [ebp + 0x1c]
cmp dword [esi + 0x2c], 0xffffffff
jge 0x1009d800
mov eax, dword [esi + 0x1a0]
test eax, eax
je 0x1009d9f4
push eax
call sym.ExuiKrnln_X32.dll_DeleteTimerEx
mov dword [esi + 0x1a0], 0
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x18c]
movzx ecx, ax
test eax, eax
jne 0x1009d8de
mov edi, dword [esi + 0x1a0]
test edi, edi
je 0x1009d889
cmp byte [edi + 0x10], al
jne 0x1009d87f
cmp dword [edi + 4], edi
jne 0x1009d87f
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], eax
mov dword [edi + 8], eax
test ebx, ebx
je 0x1009d853
push 0xea60
push 0xea60
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x101075e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1a0], 0
mov dword [esi + 0x19c], 0xff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x1009d9f4
cmp dword [esi + 0xe4], 0
jle 0x1009d8c2
inc dword [esi + 0xe0]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
or dword [esi + 0xd0], 1
push 1
push 0x1018a5b4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18
mov eax, dword [esi + 0x19c]
movsx ecx, cx
add eax, ecx
mov dword [esi + 0x19c], eax
cmp eax, 0xfe
jle 0x1009d98b
mov edi, dword [esi + 0x1a0]
mov dword [esi + 0x19c], 0xff
test edi, edi
je 0x1009d893
cmp byte [edi + 0x10], 0
jne 0x1009d97c
cmp dword [edi + 4], edi
jne 0x1009d97c
mov ebx, dword [edi + 8]
mov byte [edi + 0x10], 1
mov dword [edi + 4], 0
mov dword [edi + 8], 0
test ebx, ebx
je 0x1009d950
push 0xea60
push 0xea60
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push dword [edi + 0x20]
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
call eax
push 0
push 0
push edi
push 0x101075e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x1a0], 0
jmp 0x1009d893
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
cmp dword [esi + 0x2c], 1
jl 0x1009d9c4
cmp dword [esi + 0xe4], 0
jle 0x1009d9b0
inc dword [esi + 0xe0]
jmp 0x1009d9c4
or dword [esi + 0xd0], 1
push 1
push 0x1018a5b4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [esi + 0x1a0], 0
jne 0x1009d9f4
movsx eax, word [esi + 0x18e]
mov ecx, 0x21
push 0
push 0
test eax, eax
push esi
cmove eax, ecx
push fcn.1009d7c0
push eax
call sym.ExuiKrnln_X32.dll_CreateTimerEx
mov dword [esi + 0x1a0], eax
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0x18