Function at 0x418300
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d7795
mov eax, dword fs:[0]
push eax
sub esp, 0xc
mov eax, dword [0x65f018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
call fcn.00451de2
push 1
mov ecx, ebx
call fcn.004523bc
push 0xffffff
push dword [ebx + 0x110]
lea ecx, [ebx + 0x6a8]
push 0x2bc
push 0xc
push 4
push 4
push dword [ebx + 0x780]
call fcn.00426fe0
push 0xffffff
push dword [ebx + 0x114]
lea ecx, [ebx + 0x788]
push 0x2bc
push 0xc
push 4
push 4
push dword [ebx + 0x860]
call fcn.00426fe0
xor eax, eax
mov ecx, 5
cmp byte [ebx + 0x4a8], al
cmovne eax, ecx
lea ecx, [ebx + 0x788]
push eax
call fcn.0045091b
call fcn.0044712b
mov ecx, eax
test ecx, ecx
je 0x418600
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov eax, str.Run_Checkup
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x14]
test eax, 0xffff0000
jne 0x4183e0
movzx eax, ax
push eax
call fcn.00403100
jmp 0x4183ec
push 0xb
push str.Run_Checkup
call fcn.00403300
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x14]
mov edx, dword [ebp - 0x14]
push 0x100
call fcn.0040c590
add esp, 4
lea ecx, [ebx + 0x518]
push 0x8000
push dword [ebx + 0x100]
push dword [ebx + 0x10c]
sub esp, 8
push dword [ebp - 0x14]
call fcn.00427780
push 0
lea ecx, [ebx + 0x518]
call fcn.0045091b
push 5
push str.CHECK
lea ecx, [ebp - 0x14]
call fcn.00403300
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
push 0x11b
call fcn.0040c590
mov esi, dword [ebp - 0x14]
lea ecx, [ebx + 0x5e0]
add esp, 4
push 0x8002
push 0xffffff
push dword [ebx + 0x10c]
sub esp, 8
push esi
call fcn.00427780
push ecx
lea ecx, [ebx + 0x5e0]
call fcn.00427b30
push 0
lea ecx, [ebx + 0x5e0]
call fcn.0045091b
cmp dword [ebx + 0x1a4], 0xed
lea edi, [ebx + 0x118]
mov eax, dword [ebx + 0x100]
je 0x4184e4
lea edx, [edi + 0x88]
mov dword [edi + 0x8c], 0xed
mov ecx, 0xed
mov dword [edi + 0x90], eax
call fcn.0040b920
cmp dword [edi + 0x20], 0
je 0x4184e4
mov ecx, edi
call fcn.00426aa0
push 1
push 0
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0
mov ecx, edi
call fcn.0045091b
mov edi, dword [0x669ac8]
test edi, edi
je 0x41858f
mov eax, dword [edi]
lea ecx, [ebp - 0x18]
push ecx
push edi
mov dword [ebp - 0x18], 0
call dword [eax + 0x124]
test eax, eax
jns 0x41851f
push 0x629b58
push edi
push eax
call fcn.00591020
mov eax, dword [ebp - 0x18]
mov dword [ebx + 0x890], eax
test eax, eax
je 0x418599
mov ecx, ebx
call fcn.0041b1a0
mov eax, dword [ebx + 0xd0]
test eax, eax
jne 0x418571
push eax
push eax
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push ebx
push 0x41b120
push 0
push 0
mov dword [ebx + 0xd0], eax
call fcn.005ae60d
add esp, 0x18
test eax, eax
je 0x418578
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x418578
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0
push 0xbb8
push 0x7d3
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x418599
mov dword [ebx + 0x890], 0
mov ecx, ebx
call fcn.004186d0
mov ecx, ebx
call fcn.0041b390
mov eax, dword [ebx + 0xfc]
test eax, eax
je 0x4185c0
push 0
push 0
push 5
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4185df
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058fc43
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00403700
int3