Function at 0x426940
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bd3dd
mov eax, dword fs:[0]
push eax
sub esp, 0x308
mov eax, dword [0x4e216c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x268], ebx
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x2ff
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
lea ecx, [ebx + 0x78]
call fcn.0044ae10
lea ecx, [ebx + 0x78]
call fcn.004482d0
call fcn.0040ce00
mov ecx, eax
test ecx, ecx
je 0x427888
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x258], eax
mov dword [ebp - 4], 0
call fcn.0040ce00
mov ecx, eax
test ecx, ecx
je 0x427892
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 1
call fcn.0040ce00
mov ecx, eax
test ecx, ecx
je 0x42789c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x260], eax
mov byte [ebp - 4], 2
call fcn.0040ce00
mov ecx, eax
test ecx, ecx
je 0x4278a6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 3
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 4
call fcn.00425fb0
test eax, eax
je 0x4278b0
mov ecx, dword [esi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x426a79
test dx, dx
je 0x426a75
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x426a79
add ecx, 4
add eax, 4
test dx, dx
jne 0x426a53
xor esi, esi
jmp 0x426a7e
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 3
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x426aa2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x426ba1
lea ecx, [ebp - 0x249]
call fcn.00425450
mov edx, eax
test edx, edx
jne 0x426abf
xor ecx, ecx
jmp 0x426ad3
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426ac4
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.0040d800
lea ecx, [ebp - 0x249]
call fcn.004225f0
mov edx, eax
test edx, edx
jne 0x426af5
xor ecx, ecx
jmp 0x426b0f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426b00
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.0040d800
lea ecx, [ebp - 0x249]
call fcn.004257d0
mov edx, eax
test edx, edx
jne 0x426b31
xor ecx, ecx
jmp 0x426b45
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426b36
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.0040d800
lea ecx, [ebp - 0x249]
call fcn.00422c10
mov edx, eax
test edx, edx
jne 0x426b77
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040d800
jmp 0x42744d
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426b80
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040d800
jmp 0x42744d
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 5
call fcn.00424b90
push eax
push esi
call fcn.00412b80
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x426bfc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x426cf7
lea ecx, [ebp - 0x249]
call fcn.00423f50
mov edx, eax
test edx, edx
jne 0x426c19
xor ecx, ecx
jmp 0x426c2f
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426c20
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.0040d800
lea ecx, [ebp - 0x249]
call fcn.004233f0
mov edx, eax
test edx, edx
jne 0x426c51
xor ecx, ecx
jmp 0x426c65
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426c56
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.0040d800
lea ecx, [ebp - 0x249]
call fcn.00424810
mov edx, eax
test edx, edx
jne 0x426c87
xor ecx, ecx
jmp 0x426c9f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426c90
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.0040d800
lea ecx, [ebp - 0x249]
call fcn.004258b0
mov edx, eax
test edx, edx
jne 0x426cd1
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040d800
jmp 0x42744d
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426cd6
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040d800
jmp 0x42744d
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 6
call fcn.004241f0
push eax
push esi
call fcn.00412b80
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x426d52
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x426db7
lea ecx, [ebp - 0x249]
call fcn.00423bd0
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423230
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00425df0
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00424ab0
push eax
lea ecx, [ebp - 0x25c]
call fcn.00412b30
jmp 0x42744d
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 7
call fcn.00424110
push eax
push esi
call fcn.00412b80
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x426e12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x426e77
lea ecx, [ebp - 0x249]
call fcn.00425a70
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00426330
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423d90
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423930
push eax
lea ecx, [ebp - 0x25c]
call fcn.00412b30
jmp 0x42744d
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 8
call fcn.004226d0
push eax
push esi
call fcn.00412b80
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x426ed2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x426f37
lea ecx, [ebp - 0x249]
call fcn.00423770
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00424030
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00424d50
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.004235b0
push eax
lea ecx, [ebp - 0x25c]
call fcn.00412b30
jmp 0x42744d
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 9
call fcn.00423310
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
test bl, bl
je 0x426fcf
lea ecx, [ebp - 0x249]
call fcn.00425530
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423cb0
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00426250
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00426170
jmp 0x42743e
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xa
call fcn.004248f0
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
test bl, bl
je 0x427067
lea ecx, [ebp - 0x249]
call fcn.00424650
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423850
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00425990
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00424c70
jmp 0x42743e
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xb
call fcn.00425b50
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
test bl, bl
je 0x4270ff
lea ecx, [ebp - 0x249]
call fcn.00422cf0
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00422a50
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.004242d0
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.004251b0
jmp 0x42743e
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xc
call fcn.00424ff0
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
test bl, bl
je 0x427197
lea ecx, [ebp - 0x249]
call fcn.00425d10
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423070
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00424730
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00425c30
jmp 0x42743e
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xd
call fcn.00422eb0
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
test bl, bl
je 0x42722f
lea ecx, [ebp - 0x249]
call fcn.00423e70
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.004227b0
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00426090
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00422f90
jmp 0x42743e
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xe
call fcn.004256f0
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
test bl, bl
je 0x4272c7
lea ecx, [ebp - 0x249]
call fcn.00425290
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00425610
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.004243b0
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00426410
jmp 0x42743e
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xf
call fcn.00424490
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
test bl, bl
je 0x42735f
lea ecx, [ebp - 0x249]
call fcn.00424e30
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00422970
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00424f10
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00425370
jmp 0x42743e
lea eax, [ebp - 0x250]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x10
call fcn.004250d0
push eax
push esi
call fcn.00412b80
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00408ac0
lea ecx, [ebp - 0x249]
test bl, bl
je 0x4273f4
call fcn.004249d0
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423a10
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423690
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00425ed0
jmp 0x42743e
call fcn.00422dd0
push eax
lea ecx, [ebp - 0x258]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.004234d0
push eax
lea ecx, [ebp - 0x254]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00423af0
push eax
lea ecx, [ebp - 0x260]
call fcn.00412b30
lea ecx, [ebp - 0x249]
call fcn.00422b30
push eax
lea ecx, [ebp - 0x25c]
call fcn.00412b30
or ebx, 0xffffffff
mov ax, word [0x4c163c]
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.00497c30
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0x400000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push dword [ebp - 0x258]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edi, dword [ebp - 0x25c]
lea eax, [ebp - 0x218]
mov esi, dword [ebp - 0x260]
push eax
push edi
push esi
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp - 0x268]
push 0
push 0x493e0
push 0x3e8
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetTimer]
lea eax, [ebp - 0x26c]
push eax
call fcn.00418230
mov ecx, eax
call fcn.004150f0
mov dword [ebp - 0x250], eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x11
call fcn.00422890
mov ecx, eax
test ecx, ecx
je 0x4278ba
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x427556
test dx, dx
je 0x42754a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x427556
add eax, 4
add ecx, 4
test dx, dx
jne 0x427528
mov dword [ebp - 0x264], 0
jmp 0x427561
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x427582
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x264], 0
jne 0x427738
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x274], 4
push eax
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x26c], 4
push eax
lea ecx, [ebp - 0x249]
call fcn.00423150
push eax
lea ecx, [ebp - 0x249]
call fcn.00424570
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov eax, dword [ebp - 0x264]
mov ecx, 0x1b7740
test eax, eax
cmovne ecx, eax
mov dword [ebp - 0x264], ecx
call fcn.00474550
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x42772e
push 0x47
push str.d:jenkins.jenkinsworkspace_birdhelper_birdhelpermainwndmainwnd.cpp
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], al
call fcn.0040f110
push 3
push 0x4c2a08
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.0040f110
mov byte [ebp - 4], 0x13
call fcn.00474550
push dword [ebp - 0x264]
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x250]
push str.24h_check_time:__d
push 1
push eax
call fcn.00474410
add esp, 0x10
push 0xca
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x314]
call fcn.004080f0
mov ebx, eax
mov ecx, dword [ebp - 0x250]
mov edx, 0x4c2968
test ecx, ecx
mov byte [ebp - 4], 0x15
cmovne edx, ecx
push edx
push ebx
call fcn.00407020
mov ecx, dword [ebp - 0x27c]
add esp, 8
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x314]
call fcn.004098e0
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 0x13
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x427718
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x230]
call fcn.00408b70
lea ecx, [ebp - 0x248]
call fcn.00408b70
push 0
push dword [ebp - 0x264]
jmp 0x42773f
push 0
push 0x1b7740
mov eax, dword [ebp - 0x268]
push 0x3e9
push dword [eax + 4]
mov eax, dword [sym.imp.USER32.dll_SetTimer]
call eax
mov byte [ebp - 0x249], 0
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x16
push eax
call fcn.0044cc19
lea eax, [ebp - 0x278]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x249]
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x270]
push eax
push 0x4072d0
push 0x50a1c4
call fcn.0044d947
add esp, 0x10
test eax, eax
je 0x427868
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x18
push eax
call fcn.0044cc53
mov ecx, dword [0x50a1c0]
add esp, 4
mov byte [ebp - 4], 3
push 0
push 0
push 1
push 0
push 0x4c4160
call fcn.00461f40
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4277ee
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x427809
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x254]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42782a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x258]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x42784c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047592d
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x19
push eax
call fcn.0044cc74
add esp, 4
mov byte [ebp - 4], 0x17
test al, al
jne 0x4278c4
call fcn.0044d985
push 0x80004005
call fcn.0040c4e0
push 0x80004005
call fcn.0040c4e0
push 0x80004005
call fcn.0040c4e0
push 0x80004005
call fcn.0040c4e0
push 0x80004005
call fcn.0040c4e0
push 0x80004005
call fcn.0040c4e0
sub esp, 8
lea eax, [ebp - 0x278]
mov ecx, esp
push eax
call fcn.004086c0
call fcn.004103f0
int3