Function at 0x42be40
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d30a4
mov eax, dword fs:[0]
push eax
sub esp, 0x308
mov eax, dword [0x4f816c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x268], ebx
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x2ff
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
lea ecx, [ebx + 0x78]
call fcn.0045c760
lea ecx, [ebx + 0x78]
call fcn.00458e90
call fcn.0040e280
mov ecx, eax
test ecx, ecx
je 0x42d080
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x258], eax
mov dword [ebp - 4], 0
call fcn.0040e280
mov ecx, eax
test ecx, ecx
je 0x42d08a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 1
call fcn.0040e280
mov ecx, eax
test ecx, ecx
je 0x42d094
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x260], eax
mov byte [ebp - 4], 2
call fcn.0040e280
mov ecx, eax
test ecx, ecx
je 0x42d09e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 3
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 4
call fcn.0042b4b0
test eax, eax
je 0x42d0a8
mov ecx, dword [esi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x42bf79
test dx, dx
je 0x42bf75
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x42bf79
add ecx, 4
add eax, 4
test dx, dx
jne 0x42bf53
xor esi, esi
jmp 0x42bf7e
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 3
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42bfa2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x42c0a1
lea ecx, [ebp - 0x249]
call fcn.00426cf0
mov edx, eax
test edx, edx
jne 0x42bfbf
xor ecx, ecx
jmp 0x42bfd3
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42bfc4
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.0040ec80
lea ecx, [ebp - 0x249]
call fcn.0042a170
mov edx, eax
test edx, edx
jne 0x42bff5
xor ecx, ecx
jmp 0x42c00f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42c000
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.0040ec80
lea ecx, [ebp - 0x249]
call fcn.0042b670
mov edx, eax
test edx, edx
jne 0x42c031
xor ecx, ecx
jmp 0x42c045
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42c036
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.0040ec80
lea ecx, [ebp - 0x249]
call fcn.0042a790
mov edx, eax
test edx, edx
jne 0x42c077
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040ec80
jmp 0x42cc45
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42c080
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040ec80
jmp 0x42cc45
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 5
call fcn.0042a250
push eax
push esi
call fcn.00414b00
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x42c0fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x42c1f7
lea ecx, [ebp - 0x249]
call fcn.00427770
mov edx, eax
test edx, edx
jne 0x42c119
xor ecx, ecx
jmp 0x42c12f
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42c120
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.0040ec80
lea ecx, [ebp - 0x249]
call fcn.0042a870
mov edx, eax
test edx, edx
jne 0x42c151
xor ecx, ecx
jmp 0x42c165
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42c156
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.0040ec80
lea ecx, [ebp - 0x249]
call fcn.0042a330
mov edx, eax
test edx, edx
jne 0x42c187
xor ecx, ecx
jmp 0x42c19f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42c190
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.0040ec80
lea ecx, [ebp - 0x249]
call fcn.00429290
mov edx, eax
test edx, edx
jne 0x42c1d1
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040ec80
jmp 0x42cc45
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42c1d6
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040ec80
jmp 0x42cc45
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 6
call fcn.00429530
push eax
push esi
call fcn.00414b00
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x42c252
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x42c2b7
lea ecx, [ebp - 0x249]
call fcn.00427d90
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428b90
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042b910
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00427f50
push eax
lea ecx, [ebp - 0x25c]
call fcn.00414ab0
jmp 0x42cc45
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 7
call fcn.00426b30
push eax
push esi
call fcn.00414b00
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x42c312
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x42c377
lea ecx, [ebp - 0x249]
call fcn.0042ab10
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004273f0
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428c70
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042a090
push eax
lea ecx, [ebp - 0x25c]
call fcn.00414ab0
jmp 0x42cc45
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 8
call fcn.00428650
push eax
push esi
call fcn.00414b00
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x42c3d2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x42c437
lea ecx, [ebp - 0x249]
call fcn.00428d50
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042b130
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042adb0
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042a410
push eax
lea ecx, [ebp - 0x25c]
call fcn.00414ab0
jmp 0x42cc45
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 9
call fcn.004298b0
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c4cf
lea ecx, [ebp - 0x249]
call fcn.00427bd0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004290d0
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00427230
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00426970
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xa
call fcn.00426510
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c567
lea ecx, [ebp - 0x249]
call fcn.00426eb0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042a6b0
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004265f0
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00427af0
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xb
call fcn.00427e70
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c5ff
lea ecx, [ebp - 0x249]
call fcn.0042a950
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00426a50
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004282d0
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428f10
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xc
call fcn.00427690
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c697
lea ecx, [ebp - 0x249]
call fcn.004296f0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428ab0
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428810
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429fb0
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xd
call fcn.0042b2f0
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c72f
lea ecx, [ebp - 0x249]
call fcn.0042af70
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004275b0
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428570
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429610
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xe
call fcn.00426f90
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c7c7
lea ecx, [ebp - 0x249]
call fcn.00427cb0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004283b0
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429b50
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004288f0
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xf
call fcn.0042b210
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c85f
lea ecx, [ebp - 0x249]
call fcn.004266d0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428110
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00427070
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00427310
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x10
call fcn.00427150
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c8f7
lea ecx, [ebp - 0x249]
call fcn.00427a10
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429d10
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429370
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429450
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x11
call fcn.0042a4f0
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42c98f
lea ecx, [ebp - 0x249]
call fcn.004274d0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428730
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429ed0
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042a5d0
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x12
call fcn.0042aa30
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42ca27
lea ecx, [ebp - 0x249]
call fcn.00427850
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00427930
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429df0
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042b830
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x13
call fcn.0042b750
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42cabf
lea ecx, [ebp - 0x249]
call fcn.0042ae90
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00426890
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429a70
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428490
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x14
call fcn.0042b3d0
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
test bl, bl
je 0x42cb57
lea ecx, [ebp - 0x249]
call fcn.00426dd0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042b590
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00429990
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.004297d0
jmp 0x42cc36
lea eax, [ebp - 0x250]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x15
call fcn.004267b0
push eax
push esi
call fcn.00414b00
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409f40
lea ecx, [ebp - 0x249]
test bl, bl
je 0x42cbec
call fcn.00428e30
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428ff0
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042b050
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042acd0
jmp 0x42cc36
call fcn.004289d0
push eax
lea ecx, [ebp - 0x258]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00428030
push eax
lea ecx, [ebp - 0x254]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.0042abf0
push eax
lea ecx, [ebp - 0x260]
call fcn.00414ab0
lea ecx, [ebp - 0x249]
call fcn.00426c10
push eax
lea ecx, [ebp - 0x25c]
call fcn.00414ab0
or ebx, 0xffffffff
mov ax, word [0x4d763c]
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.004ad8d0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0x400000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push dword [ebp - 0x258]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edi, dword [ebp - 0x25c]
lea eax, [ebp - 0x218]
mov esi, dword [ebp - 0x260]
push eax
push edi
push esi
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp - 0x268]
push 0
push 0x493e0
push 0x3e8
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetTimer]
lea eax, [ebp - 0x26c]
push eax
call fcn.0041b0f0
mov ecx, eax
call fcn.00417d90
mov dword [ebp - 0x250], eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x16
call fcn.004291b0
mov ecx, eax
test ecx, ecx
je 0x42d0b2
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42cd4e
test dx, dx
je 0x42cd42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42cd4e
add eax, 4
add ecx, 4
test dx, dx
jne 0x42cd20
mov dword [ebp - 0x264], 0
jmp 0x42cd59
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42cd7a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x264], 0
jne 0x42cf30
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x274], 4
push eax
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x26c], 4
push eax
lea ecx, [ebp - 0x249]
call fcn.00429c30
push eax
lea ecx, [ebp - 0x249]
call fcn.004281f0
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov eax, dword [ebp - 0x264]
mov ecx, 0x1b7740
test eax, eax
cmovne ecx, eax
mov dword [ebp - 0x264], ecx
call fcn.0048a140
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x42cf26
push 0x4e
push str.d:jenkins.jenkinsworkspacepcmanage_helpercommonhelpermainwndmainwnd.cpp
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], al
call fcn.004105a0
push 3
push 0x4d8a0c
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.004105a0
mov byte [ebp - 4], 0x18
call fcn.0048a140
push dword [ebp - 0x264]
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x250]
push str.24h_check_time:__d
push 1
push eax
call fcn.0048a000
add esp, 0x10
push 0xed
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x314]
call fcn.00409570
mov ebx, eax
mov ecx, dword [ebp - 0x250]
mov edx, 0x4d8968
test ecx, ecx
mov byte [ebp - 4], 0x1a
cmovne edx, ecx
push edx
push ebx
call fcn.004084a0
mov ecx, dword [ebp - 0x27c]
add esp, 8
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x314]
call fcn.0040ad60
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 0x18
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42cf10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x230]
call fcn.00409ff0
lea ecx, [ebp - 0x248]
call fcn.00409ff0
push 0
push dword [ebp - 0x264]
jmp 0x42cf37
push 0
push 0x1b7740
mov eax, dword [ebp - 0x268]
push 0x3e9
push dword [eax + 4]
mov eax, dword [sym.imp.USER32.dll_SetTimer]
call eax
mov byte [ebp - 0x249], 0
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1b
push eax
call fcn.0045e569
lea eax, [ebp - 0x278]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x249]
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x270]
push eax
push 0x408750
push 0x5201c4
call fcn.0045f29a
add esp, 0x10
test eax, eax
je 0x42d060
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1d
push eax
call fcn.0045e5a3
mov ecx, dword [0x5201c0]
add esp, 4
mov byte [ebp - 4], 3
push 0
push 0
push 1
push 0
push 0x4da368
call fcn.00477420
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x42cfe6
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42d001
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x254]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d022
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x258]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x42d044
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048b51d
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1e
push eax
call fcn.0045e5c4
add esp, 4
mov byte [ebp - 4], 0x1c
test al, al
jne 0x42d0bc
call fcn.0045f2d8
push 0x80004005
call fcn.0040d960
push 0x80004005
call fcn.0040d960
push 0x80004005
call fcn.0040d960
push 0x80004005
call fcn.0040d960
push 0x80004005
call fcn.0040d960
push 0x80004005
call fcn.0040d960
sub esp, 8
lea eax, [ebp - 0x278]
mov ecx, esp
push eax
call fcn.00409b40
call fcn.00411880
int3