Function at 0x1002d080
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d759f
mov eax, dword fs:[0]
push eax
sub esp, 0x308
mov eax, dword [0x100fd16c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x268], ebx
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x2ff
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
lea ecx, [ebx + 0x78]
call fcn.10060410
lea ecx, [ebx + 0x78]
call fcn.1005c850
call fcn.1000e7b0
mov ecx, eax
test ecx, ecx
je 0x1002e358
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x258], eax
mov dword [ebp - 4], 0
call fcn.1000e7b0
mov ecx, eax
test ecx, ecx
je 0x1002e362
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 1
call fcn.1000e7b0
mov ecx, eax
test ecx, ecx
je 0x1002e36c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x260], eax
mov byte [ebp - 4], 2
call fcn.1000e7b0
mov ecx, eax
test ecx, ecx
je 0x1002e376
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 3
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 4
call fcn.1002c6f0
test eax, eax
je 0x1002e380
mov ecx, dword [esi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1002d1b9
test dx, dx
je 0x1002d1b5
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1002d1b9
add ecx, 4
add eax, 4
test dx, dx
jne 0x1002d193
xor esi, esi
jmp 0x1002d1be
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 3
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d1e2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x1002d2e1
lea ecx, [ebp - 0x249]
call fcn.10027c90
mov edx, eax
test edx, edx
jne 0x1002d1ff
xor ecx, ecx
jmp 0x1002d213
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d204
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.1000f1b0
lea ecx, [ebp - 0x249]
call fcn.1002b1f0
mov edx, eax
test edx, edx
jne 0x1002d235
xor ecx, ecx
jmp 0x1002d24f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d240
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.1000f1b0
lea ecx, [ebp - 0x249]
call fcn.1002c8b0
mov edx, eax
test edx, edx
jne 0x1002d271
xor ecx, ecx
jmp 0x1002d285
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d276
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.1000f1b0
lea ecx, [ebp - 0x249]
call fcn.1002b810
mov edx, eax
test edx, edx
jne 0x1002d2b7
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.1000f1b0
jmp 0x1002df1d
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d2c0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.1000f1b0
jmp 0x1002df1d
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 5
call fcn.1002b2d0
push eax
push esi
call fcn.10015260
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x1002d33c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x1002d437
lea ecx, [ebp - 0x249]
call fcn.100287f0
mov edx, eax
test edx, edx
jne 0x1002d359
xor ecx, ecx
jmp 0x1002d36f
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d360
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.1000f1b0
lea ecx, [ebp - 0x249]
call fcn.1002b8f0
mov edx, eax
test edx, edx
jne 0x1002d391
xor ecx, ecx
jmp 0x1002d3a5
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d396
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.1000f1b0
lea ecx, [ebp - 0x249]
call fcn.1002b3b0
mov edx, eax
test edx, edx
jne 0x1002d3c7
xor ecx, ecx
jmp 0x1002d3df
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d3d0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.1000f1b0
lea ecx, [ebp - 0x249]
call fcn.1002a310
mov edx, eax
test edx, edx
jne 0x1002d411
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.1000f1b0
jmp 0x1002df1d
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002d416
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.1000f1b0
jmp 0x1002df1d
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 6
call fcn.1002a5b0
push eax
push esi
call fcn.10015260
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x1002d492
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x1002d4f7
lea ecx, [ebp - 0x249]
call fcn.10028fd0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029cf0
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002cb50
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029190
push eax
lea ecx, [ebp - 0x25c]
call fcn.10015210
jmp 0x1002df1d
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 7
call fcn.10027ad0
push eax
push esi
call fcn.10015260
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x1002d552
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x1002d5b7
lea ecx, [ebp - 0x249]
call fcn.1002bc70
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10028470
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029dd0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002b110
push eax
lea ecx, [ebp - 0x25c]
call fcn.10015210
jmp 0x1002df1d
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 8
call fcn.100297b0
push eax
push esi
call fcn.10015260
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x1002d612
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x1002d677
lea ecx, [ebp - 0x249]
call fcn.10029eb0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002c290
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002be30
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002b490
push eax
lea ecx, [ebp - 0x25c]
call fcn.10015210
jmp 0x1002df1d
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 9
call fcn.1002aa10
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002d70f
lea ecx, [ebp - 0x249]
call fcn.10028d30
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a230
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.100282b0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10027910
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xa
call fcn.100272f0
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002d7a7
lea ecx, [ebp - 0x249]
call fcn.10027e50
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002b730
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.100274b0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10028c50
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xb
call fcn.100290b0
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002d83f
lea ecx, [ebp - 0x249]
call fcn.1002b9d0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.100279f0
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029430
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a070
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xc
call fcn.10028710
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002d8d7
lea ecx, [ebp - 0x249]
call fcn.1002a850
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029c10
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029970
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002b030
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xd
call fcn.1002c530
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002d96f
lea ecx, [ebp - 0x249]
call fcn.1002c0d0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10028630
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.100296d0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a690
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xe
call fcn.10027f30
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002da07
lea ecx, [ebp - 0x249]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029510
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002acb0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029a50
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xf
call fcn.1002c370
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002da9f
lea ecx, [ebp - 0x249]
call fcn.10027590
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029270
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.100280f0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10028390
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x10
call fcn.100281d0
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002db37
lea ecx, [ebp - 0x249]
call fcn.10028b70
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002ad90
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a3f0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a4d0
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x11
call fcn.1002b570
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002dbcf
lea ecx, [ebp - 0x249]
call fcn.10028550
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029890
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002af50
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002b650
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x12
call fcn.1002bab0
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002dc67
lea ecx, [ebp - 0x249]
call fcn.100289b0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10028a90
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002ae70
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002ca70
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x13
call fcn.1002c990
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002dcff
lea ecx, [ebp - 0x249]
call fcn.1002bf10
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10027830
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002abd0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.100295f0
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x14
call fcn.1002c610
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002dd97
lea ecx, [ebp - 0x249]
call fcn.10027d70
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002c7d0
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002aaf0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a930
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x15
call fcn.10027750
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
test bl, bl
je 0x1002de2f
lea ecx, [ebp - 0x249]
call fcn.10029f90
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a150
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002c1b0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002bd50
jmp 0x1002df0e
lea eax, [ebp - 0x250]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x16
call fcn.10029b30
push eax
push esi
call fcn.10015260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.1000a470
lea ecx, [ebp - 0x249]
test bl, bl
je 0x1002dec4
call fcn.10027bb0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002a770
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002bff0
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10029350
jmp 0x1002df0e
call fcn.100288d0
push eax
lea ecx, [ebp - 0x258]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10027670
push eax
lea ecx, [ebp - 0x254]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.10028010
push eax
lea ecx, [ebp - 0x260]
call fcn.10015210
lea ecx, [ebp - 0x249]
call fcn.1002bb90
push eax
lea ecx, [ebp - 0x25c]
call fcn.10015210
or ebx, 0xffffffff
mov ax, word [0x100dc63c]
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.100b24f0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0x10000000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push dword [ebp - 0x258]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edi, dword [ebp - 0x25c]
lea eax, [ebp - 0x218]
mov esi, dword [ebp - 0x260]
push eax
push edi
push esi
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp - 0x268]
push 0
push 0x493e0
push 0x3e8
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetTimer]
lea eax, [ebp - 0x26c]
push eax
call fcn.1001bb60
mov ecx, eax
call fcn.10018790
mov dword [ebp - 0x250], eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x17
call fcn.1002c450
mov ecx, eax
test ecx, ecx
je 0x1002e38a
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1002e026
test dx, dx
je 0x1002e01a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1002e026
add eax, 4
add ecx, 4
test dx, dx
jne 0x1002dff8
mov dword [ebp - 0x264], 0
jmp 0x1002e031
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002e052
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x264], 0
jne 0x1002e208
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x274], 4
push eax
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x26c], 4
push eax
lea ecx, [ebp - 0x249]
call fcn.10028e10
push eax
lea ecx, [ebp - 0x249]
call fcn.100273d0
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov eax, dword [ebp - 0x264]
mov ecx, 0x1b7740
test eax, eax
cmovne ecx, eax
mov dword [ebp - 0x264], ecx
call fcn.1008ecb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1002e1fe
push 0x4f
push str.d:jenkins.jenkinsworkspacedefragger_helpercommonhelpermainwndmainwnd.cpp
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], al
call fcn.10010ac0
push 3
push 0x100dda10
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.10010ac0
mov byte [ebp - 4], 0x19
call fcn.1008ecb0
push dword [ebp - 0x264]
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x250]
push str.24h_check_time:__d
push 1
push eax
call fcn.1008eb70
add esp, 0x10
push 0xf4
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x314]
call fcn.10009a90
mov ebx, eax
mov ecx, dword [ebp - 0x250]
mov edx, 0x100dd968
test ecx, ecx
mov byte [ebp - 4], 0x1b
cmovne edx, ecx
push edx
push ebx
call fcn.100089c0
mov ecx, dword [ebp - 0x27c]
add esp, 8
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x314]
call fcn.1000b290
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002e1e8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x230]
call fcn.1000a520
lea ecx, [ebp - 0x248]
call fcn.1000a520
push 0
push dword [ebp - 0x264]
jmp 0x1002e20f
push 0
push 0x1b7740
mov eax, dword [ebp - 0x268]
push 0x3e9
push dword [eax + 4]
mov eax, dword [sym.imp.USER32.dll_SetTimer]
call eax
mov byte [ebp - 0x249], 0
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1c
push eax
call fcn.10062219
lea eax, [ebp - 0x278]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x249]
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x270]
push eax
push 0x10008c70
push 0x101251b4
call fcn.10062f47
add esp, 0x10
test eax, eax
je 0x1002e338
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1e
push eax
call fcn.10062253
mov ecx, dword [0x101251b0]
add esp, 4
mov byte [ebp - 4], 3
push 0
push 0
push 1
push 0
push 0x100df3c8
call fcn.1007be40
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x1002e2be
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1002e2d9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x254]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002e2fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x258]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x1002e31c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10090156
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1f
push eax
call fcn.10062274
add esp, 4
mov byte [ebp - 4], 0x1d
test al, al
jne 0x1002e394
call fcn.10062f85
push 0x80004005
call fcn.1000de90
push 0x80004005
call fcn.1000de90
push 0x80004005
call fcn.1000de90
push 0x80004005
call fcn.1000de90
push 0x80004005
call fcn.1000de90
push 0x80004005
call fcn.1000de90
sub esp, 8
lea eax, [ebp - 0x278]
mov ecx, esp
push eax
call fcn.1000a070
call fcn.10011da0
int3