Function at 0x10026470
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d1973
mov eax, dword fs:[0]
push eax
mov eax, 0x1240
call fcn.1007f420
mov eax, dword [0x10111404]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov dword [ebp - 0x123c], esi
mov dword [ebp - 0x1234], 0
call fcn.10004450
mov ecx, eax
test ecx, ecx
je 0x10027269
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1240], eax
mov edi, dword [esi]
mov dword [ebp - 4], 0
cmp dword [edi - 0xc], 0
je 0x10026d58
lea eax, [ebp - 0x1224]
mov dword [ebp - 0x1228], eax
test edi, edi
jne 0x10026503
xor edx, edx
mov dword [ebp - 0x1228], edx
jmp 0x100265f2
mov ecx, edi
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10026510
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea esi, [eax*4]
mov dword [ebp - 0x1230], eax
lea eax, [ebp - 0x1224]
push eax
lea eax, [ebp - 0x1228]
push esi
push eax
call fcn.100049c0
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x1228]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push dword [ebp - 0x1230]
push edi
push 0
push 0
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x1234], ecx
test eax, eax
jne 0x100265e4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x100265de
push 0
push 0
push 0
push 0
push dword [ebp - 0x1230]
push edi
push 0
push 0
call esi
mov esi, eax
lea eax, [ebp - 0x1224]
push 0x80
push eax
lea eax, [ebp - 0x1228]
push esi
push eax
call fcn.100049c0
mov eax, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x1228]
push dword [ebp - 0x1230]
push edi
push 0
push 0
call eax
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x100265e4
mov ecx, dword [ebp - 0x1234]
test ecx, ecx
jne 0x10027273
mov edx, dword [ebp - 0x1228]
mov ecx, edx
mov byte [ebp - 4], 1
mov dword [ebp - 0x1060], 0
mov dword [ebp - 0x105c], 0xf
mov byte [ebp - 0x1070], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026616
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1070]
call fcn.100057a0
mov eax, dword [ebp - 0x1228]
lea ecx, [ebp - 0x1224]
mov byte [ebp - 4], 3
cmp eax, ecx
je 0x10026649
push eax
call fcn.100a974e
add esp, 4
call fcn.10054a00
mov edi, eax
lea eax, [ebp - 0x1120]
mov dword [ebp - 0x1124], eax
test edi, edi
jne 0x1002666d
xor edx, edx
mov dword [ebp - 0x1124], edx
jmp 0x10026754
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10026672
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea esi, [eax*4]
mov dword [ebp - 0x1230], eax
lea eax, [ebp - 0x1120]
push eax
lea eax, [ebp - 0x1124]
push esi
push eax
call fcn.100049c0
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x1124]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push dword [ebp - 0x1230]
push edi
push 0
push 0
call esi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x1234], ecx
test eax, eax
jne 0x10026746
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10026740
push 0
push 0
push 0
push 0
push dword [ebp - 0x1230]
push edi
push 0
push 0
call esi
mov esi, eax
lea eax, [ebp - 0x1120]
push 0x80
push eax
lea eax, [ebp - 0x1124]
push esi
push eax
call fcn.100049c0
mov eax, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x1124]
push dword [ebp - 0x1230]
push edi
push 0
push 0
call eax
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x10026746
mov ecx, dword [ebp - 0x1234]
test ecx, ecx
jne 0x10027292
mov edx, dword [ebp - 0x1124]
mov ecx, edx
mov byte [ebp - 4], 4
mov dword [ebp - 0x1048], 0
mov dword [ebp - 0x1044], 0xf
mov byte [ebp - 0x1058], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026778
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1058]
call fcn.100057a0
mov eax, dword [ebp - 0x1124]
lea ecx, [ebp - 0x1120]
cmp eax, ecx
je 0x100267a7
push eax
call fcn.100a974e
add esp, 4
mov dword [ebp - 0x1078], 0
mov dword [ebp - 0x1074], 0xf
mov byte [ebp - 0x1088], 0
lea eax, [ebp - 0x1088]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x1058]
push eax
lea eax, [ebp - 0x1070]
push eax
call fcn.100055b0
add esp, 0xc
test eax, eax
jne 0x10026811
lea ecx, [ebp - 0x1088]
call fcn.10003e30
lea ecx, [ebp - 0x1058]
call fcn.10003e30
lea ecx, [ebp - 0x1070]
mov byte [ebp - 4], 0
call fcn.10003e30
jmp 0x10026d58
mov ecx, dword [ebp - 0x1048]
mov byte [ebp - 4], 8
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1014], 0xf
lea edi, [ecx + 1]
mov byte [ebp - 0x1028], 0
mov dword [ebp - 0x1234], 1
cmp edi, 0xf
jbe 0x100268a5
cmp edi, 0x7fffffff
ja 0x100272b1
mov esi, edi
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x10026868
mov esi, 0x7fffffff
jmp 0x10026872
mov eax, 0x16
cmp esi, eax
cmovb esi, eax
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x1028]
call fcn.10004750
mov cl, byte [ebp - 0x1028]
mov dword [ebp - 0x1014], esi
mov byte [eax], cl
mov ecx, dword [ebp - 0x1048]
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x1018], 0
cmp dword [ebp - 0x1044], 0x10
lea eax, [ebp - 0x1058]
push ecx
cmovae eax, dword [ebp - 0x1058]
lea ecx, [ebp - 0x1028]
push eax
call fcn.100047b0
push 1
push 0x100e011c
lea ecx, [ebp - 0x1028]
call fcn.100047b0
cmp dword [ebp - 0x1074], 0x10
lea eax, [ebp - 0x1088]
push dword [ebp - 0x1078]
cmovae eax, dword [ebp - 0x1088]
lea ecx, [ebp - 0x1028]
push eax
call fcn.100047b0
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1040], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1030], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x1014]
mov byte [ebp - 4], 0xa
cmp edx, 0x10
jb 0x10026978
mov ecx, dword [ebp - 0x1028]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002696e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100272b6
push edx
push ecx
call fcn.1007f042
add esp, 8
mov dword [ebp - 0x1090], 0
mov dword [ebp - 0x108c], 0xf
mov byte [ebp - 0x10a0], 0
push 0x24
push 0x100e1a70
lea ecx, [ebp - 0x1028]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1014], 0xf
mov byte [ebp - 0x1028], 0
call fcn.100057a0
lea eax, [ebp - 0x10a0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x1028]
push eax
lea eax, [ebp - 0x1040]
push eax
call fcn.100055b0
mov edx, dword [ebp - 0x1014]
add esp, 0xc
test eax, eax
mov byte [ebp - 4], 0xb
sete al
mov byte [ebp - 0x1229], al
cmp edx, 0x10
jb 0x10026a34
mov ecx, dword [ebp - 0x1028]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026a24
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100272bb
push edx
push ecx
call fcn.1007f042
mov al, byte [ebp - 0x1229]
add esp, 8
test al, al
je 0x10026a78
lea ecx, [ebp - 0x10a0]
call fcn.10003e30
lea ecx, [ebp - 0x1040]
call fcn.10003e30
lea ecx, [ebp - 0x1088]
call fcn.10003e30
lea ecx, [ebp - 0x1058]
call fcn.10003e30
lea ecx, [ebp - 0x1070]
mov byte [ebp - 4], 0
call fcn.10003e30
jmp 0x10026d58
cmp dword [ebp - 0x108c], 0x10
lea edi, [ebp - 0x10a0]
lea eax, [ebp - 0x11a0]
cmovae edi, dword [ebp - 0x10a0]
mov dword [ebp - 0x11a4], eax
test edi, edi
jne 0x10026aa9
xor edx, edx
mov dword [ebp - 0x11a4], edx
jmp 0x10026b70
mov ecx, edi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026ab0
sub ecx, edx
lea eax, [ebp - 0x11a0]
push 0x80
push eax
lea eax, [ebp - 0x11a4]
lea esi, [ecx + 1]
push esi
push eax
mov dword [ebp - 0x1234], esi
call fcn.10004a40
add esp, 0x10
push esi
push dword [ebp - 0x11a4]
push esi
push edi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x1230], ecx
test eax, eax
jne 0x10026b62
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10026b5c
push 0
push 0
push esi
push edi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
lea eax, [ebp - 0x11a0]
push 0x80
push eax
lea eax, [ebp - 0x11a4]
push esi
push eax
call fcn.10004a40
add esp, 0x10
push esi
push dword [ebp - 0x11a4]
push dword [ebp - 0x1234]
push edi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x10026b62
mov ecx, dword [ebp - 0x1230]
test ecx, ecx
jne 0x100272c0
mov edx, dword [ebp - 0x11a4]
mov byte [ebp - 4], 0xd
test edx, edx
jne 0x10026b7c
xor ecx, ecx
jmp 0x10026b90
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10026b81
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x1240]
call fcn.100045a0
mov eax, dword [ebp - 0x11a4]
lea ecx, [ebp - 0x11a0]
cmp eax, ecx
je 0x10026bb6
push eax
call fcn.100a974e
add esp, 4
mov edx, dword [ebp - 0x108c]
mov byte [ebp - 4], 0xa
cmp edx, 0x10
jb 0x10026bf4
mov ecx, dword [ebp - 0x10a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026bea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100272df
push edx
push ecx
call fcn.1007f042
add esp, 8
mov edx, dword [ebp - 0x102c]
mov dword [ebp - 0x1090], 0
mov dword [ebp - 0x108c], 0xf
mov byte [ebp - 0x10a0], 0
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x10026c4d
mov ecx, dword [ebp - 0x1040]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026c43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100272e4
push edx
push ecx
call fcn.1007f042
add esp, 8
mov edx, dword [ebp - 0x1074]
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 0xf
mov byte [ebp - 0x1040], 0
mov byte [ebp - 4], 6
cmp edx, 0x10
jb 0x10026ca6
mov ecx, dword [ebp - 0x1088]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026c9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100272e9
push edx
push ecx
call fcn.1007f042
add esp, 8
mov edx, dword [ebp - 0x1044]
mov dword [ebp - 0x1078], 0
mov dword [ebp - 0x1074], 0xf
mov byte [ebp - 0x1088], 0
mov byte [ebp - 4], 3
cmp edx, 0x10
jb 0x10026cff
mov ecx, dword [ebp - 0x1058]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026cf5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100272ee
push edx
push ecx
call fcn.1007f042
add esp, 8
mov edx, dword [ebp - 0x105c]
mov dword [ebp - 0x1048], 0
mov dword [ebp - 0x1044], 0xf
mov byte [ebp - 0x1058], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x10026d58
mov ecx, dword [ebp - 0x1070]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026d4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100272f3
push edx
push ecx
call fcn.1007f042
add esp, 8
call fcn.10004450
mov ecx, eax
test ecx, ecx
je 0x100272f8
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1230], eax
push str.url0
lea ecx, [ebp - 0x1230]
mov byte [ebp - 4], 0xe
call fcn.10004160
test al, al
jne 0x10026da1
push 4
push str.url0
lea ecx, [ebp - 0x1230]
call fcn.100045a0
mov byte [ebp - 4], 0xf
call fcn.1000ab10
lea ecx, [ebp - 0x1240]
push ecx
lea ecx, [ebp - 0x1230]
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0x14]
mov edx, dword [ebp - 0x1230]
or edi, 0xffffffff
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10026de3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x1000
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1248], 1
push 0
push eax
call fcn.100a5d20
add esp, 0xc
mov dword [ebp - 0x1244], 0x800
lea eax, [ebp - 0x1244]
lea ecx, [ebp - 0x1229]
push eax
lea eax, [ebp - 0x1010]
push eax
lea eax, [ebp - 0x1248]
push eax
push str.url0
call fcn.100251f0
push eax
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov esi, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
test eax, eax
jne 0x10026e74
mov ecx, dword [ebp - 0x1240]
mov eax, dword [ecx - 0xc]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.url0
lea ecx, [ebp - 0x1229]
call fcn.10024fb0
push eax
push 0x80000001
call esi
call fcn.10060490
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10026fef
push 0x6a
push str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145homepagelockhelper.cpp
lea ecx, [ebp - 0x1070]
mov dword [ebp - 0x1060], eax
mov dword [ebp - 0x105c], 0xf
mov byte [ebp - 0x1070], al
call fcn.100057a0
push 3
push 0x100e01bc
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 0xf
mov byte [ebp - 0x1040], 0
call fcn.100057a0
mov byte [ebp - 4], 0x11
call fcn.10060490
mov edi, eax
lea ecx, [ebp - 0x1138]
push 0x65
lea eax, [ebp - 0x1070]
push eax
lea eax, [ebp - 0x1040]
push eax
call fcn.10008360
mov esi, eax
push str.set_url0:
push esi
mov byte [ebp - 4], 0x12
call fcn.10009a40
mov ecx, dword [ebp - 0x123c]
mov edx, 0x100dffb4
mov ecx, dword [ecx]
test ecx, ecx
cmovne edx, ecx
push edx
push esi
call fcn.10006d80
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x1138]
call fcn.10009f30
mov edx, dword [ebp - 0x102c]
mov byte [ebp - 4], 0x10
cmp edx, 0x10
jb 0x10026f8d
mov ecx, dword [ebp - 0x1040]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026f83
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027302
push edx
push ecx
call fcn.1007f042
add esp, 8
mov edx, dword [ebp - 0x105c]
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 0xf
mov byte [ebp - 0x1040], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x10026fe6
mov ecx, dword [ebp - 0x1070]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10026fdc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027307
push edx
push ecx
call fcn.1007f042
add esp, 8
mov esi, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
or edi, 0xffffffff
lea eax, [ebp - 0x1244]
mov dword [ebp - 0x1248], 4
push eax
lea eax, [ebp - 0x124c]
mov dword [ebp - 0x124c], 0
push eax
lea eax, [ebp - 0x1248]
mov dword [ebp - 0x1244], 0x800
push eax
push str.user_unlock
lea ecx, [ebp - 0x1229]
call fcn.10025150
push eax
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x1002707b
mov eax, dword [ebp - 0x123c]
xor ecx, ecx
push 4
mov eax, dword [eax]
cmp dword [eax - 0xc], ecx
lea eax, [ebp - 0x1234]
push eax
sete cl
push 4
mov dword [ebp - 0x1234], ecx
lea ecx, [ebp - 0x1229]
push str.user_unlock
call fcn.10024e70
push eax
push 0x80000001
call esi
mov eax, dword [ebp - 0x123c]
mov ecx, dword [eax]
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
push 1
push 0x100e1b70
lea ecx, [ebp - 0x1229]
call fcn.10025050
push eax
push 0x80000001
call esi
mov ecx, dword [ebp - 0x123c]
mov esi, 0x100e1b68
mov eax, dword [ecx]
mov ecx, 0x100e1b6c
cmp dword [eax - 0xc], 0
cmovne esi, ecx
mov dword [ebp - 0x1234], esi
call fcn.10004450
mov ecx, eax
test ecx, ecx
je 0x1002730c
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1238], eax
push esi
lea ecx, [ebp - 0x1238]
mov byte [ebp - 4], 0x13
call fcn.10004160
test al, al
jne 0x1002717a
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea esi, [eax - 1]
test esi, esi
jle 0x1002716f
mov ecx, dword [ebp - 0x1238]
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or eax, edx
jge 0x1002713b
push esi
lea ecx, [ebp - 0x1238]
call fcn.10004500
mov ecx, dword [ebp - 0x1238]
push esi
push ecx
push 0xffffffffffffffff
push dword [ebp - 0x1234]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x1238]
cmp esi, dword [eax - 8]
jg 0x10027316
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x1238]
mov word [eax + esi*2], cx
jmp 0x1002717a
lea ecx, [ebp - 0x1238]
call fcn.1000a4a0
mov byte [ebp - 4], 0x14
call fcn.10004450
mov ecx, eax
test ecx, ecx
je 0x10027320
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x123c], eax
push str.user_unlock
lea ecx, [ebp - 0x123c]
mov byte [ebp - 4], 0x15
call fcn.10004160
test al, al
jne 0x100271c7
push 0xb
push str.user_unlock
lea ecx, [ebp - 0x123c]
call fcn.100045a0
mov byte [ebp - 4], 0x16
call fcn.1000ab10
lea ecx, [ebp - 0x1238]
push ecx
lea ecx, [ebp - 0x123c]
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0x14]
mov edx, dword [ebp - 0x123c]
mov eax, edi
mov byte [ebp - 4], 0x14
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10027206
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1238]
mov eax, edi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10027227
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x1240]
mov dword [ebp - 4], 0xffffffff
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x10027249
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007f3c1
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10003fe0
push 0x80
lea eax, [ebp - 0x1224]
push eax
push dword [ebp - 0x1228]
call fcn.10004ac0
add esp, 0xc
call fcn.10004cc0
push 0x80
lea eax, [ebp - 0x1120]
push eax
push dword [ebp - 0x1124]
call fcn.10004ac0
add esp, 0xc
call fcn.10004cc0
call fcn.10004740
call fcn.100a9b45
call fcn.100a9b45
push 0x80
lea eax, [ebp - 0x11a0]
push eax
push dword [ebp - 0x11a4]
call fcn.10004ac0
add esp, 0xc
call fcn.10004cc0
call fcn.100a9b45
call fcn.100a9b45
call fcn.100a9b45
call fcn.100a9b45
call fcn.100a9b45
push 0x80004005
call fcn.10003fe0
call fcn.100a9b45
call fcn.100a9b45
push 0x80004005
call fcn.10003fe0
push 0x80070057
call fcn.10003fe0
push 0x80004005
call fcn.10003fe0
int3