Function at 0x42a98b
Capabilities:
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
push esi
push edi
mov ecx, 0xa
mov esi, str.CreateSharedJobList
lea edi, [ebp - 0x28]
rep movsd dword es:[edi], dword [esi]
mov ax, word [0x44bee8]
mov word [ebp - 0x234], ax
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x232]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
cmp dword [0x44b08c], 0
je 0x42aa0c
push 0x44c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x42aa4a
push 0x44c200
call dword [0x44b824]
test eax, eax
jne 0x42aa4a
cmp dword [0x44b090], 0
je 0x42aa3f
cmp dword [0x44dc84], 0
je 0x42aa3f
lea ecx, [ebp - 0x28]
push ecx
push 0x447e90
call dword [sym.imp.MSVCRT.dll_wprintf]
add esp, 8
push 0x44c200
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x44b090], 0
je 0x42aa6e
cmp dword [0x44dc84], 0
je 0x42aa6e
lea edx, [ebp - 0x28]
push edx
push 0x447ecc
call dword [sym.imp.MSVCRT.dll_wprintf]
add esp, 8
cmp dword [ebp + 0xc], 0
je 0x42aa80
mov dword [ebp - 0x244], 1
jmp 0x42aa8b
mov eax, dword [0x44c3e8]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
imul ecx, ecx, 0x24c
add ecx, 4
mov dword [ebp - 0x238], ecx
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x42aab4
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push str.SQLServerAgentJobListMemory
push 0x100
lea edx, [ebp - 0x234]
push edx
call fcn.00421862
add esp, 0x10
lea eax, [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x238]
push ecx
push 0
push 4
mov edx, dword [0x44c144]
push edx
push 0xffffffffffffffff
mov eax, dword [0x44df4c]
call dword [eax + 0x9c]
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x42ad90
push 0
push 0
push 0
push 6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x42ab57
push 0x44c200
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44b090], 0
je 0x42ab52
cmp dword [0x44dc84], 0
je 0x42ab52
lea edx, [ebp - 0x28]
push edx
push 0x447f38
call dword [sym.imp.MSVCRT.dll_wprintf]
add esp, 8
jmp 0x42ad90
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
mov ecx, dword [ebp - 0x2c]
add ecx, 4
mov dword [ebp - 0x30], ecx
cmp dword [ebp + 0xc], 0
je 0x42aba9
lea edx, [ebp - 0x240]
push edx
push 0x416867
mov eax, dword [ebp + 0xc]
push eax
push 0
push 0
push 0
push 0x44c3e0
call dword [sym.imp.SQLSVC.dll_SHRecMemBSLocate]
add esp, 0x1c
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x42aba4
jmp 0x42abef
jmp 0x42ad57
mov dword [ebp - 0x34], 0
jmp 0x42abbb
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
cmp edx, dword [0x44c3e8]
jge 0x42ad57
mov eax, dword [ebp - 0x34]
push eax
push 0x44c3e0
call dword [sym.imp.SQLSVC.dll_SHRecMemLock]
add esp, 8
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x42ad52
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x30]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x23c]
add edx, 0x160
push edx
mov eax, dword [ebp - 0x30]
add eax, 0x10
push eax
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x290]
mov dword [ecx + 0x118], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x294]
mov dword [ecx + 0x11c], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x298]
mov dword [ecx + 0x120], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x29c]
mov dword [ecx + 0x124], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x4f0]
mov dword [ecx + 0x128], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x2c0]
mov dword [ecx + 0x12c], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x2c4]
mov dword [ecx + 0x130], eax
mov ecx, dword [ebp - 0x23c]
add ecx, 0x2c8
push ecx
mov edx, dword [ebp - 0x30]
add edx, 0x134
push edx
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0x4e0]
mov dword [eax + 0x23c], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0x4e4]
mov dword [eax + 0x240], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0x4e8]
mov dword [eax + 0x244], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0x4ec]
mov dword [eax + 0x248], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x2c]
mov dword [edx], ecx
cmp dword [ebp + 0xc], 0
je 0x42ad47
jmp 0x42ad57
mov eax, dword [ebp - 0x30]
add eax, 0x24c
mov dword [ebp - 0x30], eax
jmp 0x42abb2
push 0x44c200
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44b090], 0
je 0x42ad86
cmp dword [0x44dc84], 0
je 0x42ad86
lea ecx, [ebp - 0x28]
push ecx
push 0x447f6c
call dword [sym.imp.MSVCRT.dll_wprintf]
add esp, 8
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
pop edi
pop esi
mov esp, ebp
pop ebp
ret