Function at 0x42cbb0
Capabilities:
Read file via mapping

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x44d558]
mov dword [ebp - 0x18], eax
push esi
push edi
mov ecx, 0xa
mov esi, str.CreateSharedJobList
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ax, word [0x44ecd8]
mov word [ebp - 0x248], ax
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x246]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
cmp dword [0x44de90], 0
je 0x42cc32
push 0x44f000
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x42cc70
push 0x44f000
call dword [0x44e628]
test eax, eax
jne 0x42cc70
cmp dword [0x44de94], 0
je 0x42cc65
cmp dword [0x450a88], 0
je 0x42cc65
lea ecx, [ebp - 0x40]
push ecx
push 0x44af6c
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
push 0x44f000
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x44de94], 0
je 0x42cc94
cmp dword [0x450a88], 0
je 0x42cc94
lea edx, [ebp - 0x40]
push edx
push 0x44afa8
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
cmp dword [ebp + 0xc], 0
je 0x42cca6
mov dword [ebp - 0x24c], 1
jmp 0x42ccb1
mov eax, dword [0x44f1e8]
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
imul ecx, ecx, 0x24c
add ecx, 4
mov dword [ebp - 8], ecx
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x42ccd7
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push str.SQLServerAgentJobListMemory
push pe_nt_image_headers32
lea edx, [ebp - 0x248]
push edx
call fcn.004233a0
add esp, 0x10
lea eax, [ebp - 0x248]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0
push 4
mov edx, dword [0x44ef44]
push edx
push 0xffffffffffffffff
mov eax, dword [0x450d4c]
call dword [eax + 0x9c]
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x42cf77
push 0
push 0
push 0
push 6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x42cd77
push 0x44f000
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44de94], 0
je 0x42cd72
cmp dword [0x450a88], 0
je 0x42cd72
lea edx, [ebp - 0x40]
push edx
push 0x44b014
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
jmp 0x42cf77
mov eax, dword [ebp - 0x10]
mov dword [eax], 0
mov ecx, dword [ebp - 0x10]
add ecx, 4
mov dword [ebp - 0xc], ecx
cmp dword [ebp + 0xc], 0
je 0x42cdc0
lea edx, [ebp - 4]
push edx
push 0x417d00
mov eax, dword [ebp + 0xc]
push eax
push 0
push 0
push 0
push 0x44f1e0
call dword [sym.imp.SQLSVC.dll_SHRecMemBSLocate]
add esp, 0x1c
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x42cdbb
jmp 0x42ce00
jmp 0x42cf3e
mov dword [ebp - 0x14], 0
jmp 0x42cdd2
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
cmp edx, dword [0x44f1e8]
jge 0x42cf3e
mov eax, dword [ebp - 0x14]
push eax
push 0x44f1e0
call dword [sym.imp.SQLSVC.dll_SHRecMemLock]
add esp, 8
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x42cf39
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x44]
add edx, 0x160
push edx
mov eax, dword [ebp - 0xc]
add eax, 0x10
push eax
call dword [sym.imp.MSVCR71.dll_wcscpy]
add esp, 8
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x290]
mov dword [ecx + 0x118], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x294]
mov dword [ecx + 0x11c], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x298]
mov dword [ecx + 0x120], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x29c]
mov dword [ecx + 0x124], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x4f0]
mov dword [ecx + 0x128], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x2c0]
mov dword [ecx + 0x12c], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x2c4]
mov dword [ecx + 0x130], eax
mov ecx, dword [ebp - 0x44]
add ecx, 0x2c8
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x134
push edx
call dword [sym.imp.MSVCR71.dll_wcscpy]
add esp, 8
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + 0x4e0]
mov dword [eax + 0x23c], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + 0x4e4]
mov dword [eax + 0x240], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + 0x4e8]
mov dword [eax + 0x244], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + 0x4ec]
mov dword [eax + 0x248], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x10]
mov dword [edx], ecx
cmp dword [ebp + 0xc], 0
je 0x42cf2e
jmp 0x42cf3e
mov eax, dword [ebp - 0xc]
add eax, 0x24c
mov dword [ebp - 0xc], eax
jmp 0x42cdc9
push 0x44f000
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44de94], 0
je 0x42cf6d
cmp dword [0x450a88], 0
je 0x42cf6d
lea ecx, [ebp - 0x40]
push ecx
push 0x44b048
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov ecx, dword [ebp - 0x18]
call fcn.00434de1
pop edi
pop esi
mov esp, ebp
pop ebp
ret