Function at 0x1004e9d0
Capabilities:
Check if file exists
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017e082
mov eax, dword fs:[0]
push eax
sub esp, 0x278
mov eax, dword [0x101ed40c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x250], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 4], 0
call fcn.10043000
mov ecx, eax
test ecx, ecx
je 0x1004f5ec
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x23c], esi
mov byte [ebp - 4], 1
call fcn.10043000
mov ecx, eax
test ecx, ecx
je 0x1004f5f6
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x234], edi
mov ebx, dword [0x101f3228]
mov eax, dword [0x101f322c]
mov byte [ebp - 4], 2
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x238], eax
cmp ebx, eax
je 0x1004eb19
nop dword [eax + eax]
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x1004f5ec
push eax
push dword [ebx]
call fcn.10155520
add esp, 8
test eax, eax
jne 0x1004eb04
mov ecx, dword [ebx + 4]
lea ebx, [esi - 0x10]
lea edx, [ecx - 0x10]
cmp edx, ebx
je 0x1004eafe
cmp dword [ebx + 0xc], eax
lea esi, [ebx + 0xc]
jl 0x1004eae9
mov eax, dword [edx]
cmp eax, dword [ebx]
jne 0x1004eae9
push edx
call fcn.10042e70
add esp, 4
mov dword [ebp - 0x240], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x1004eade
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x240]
lea esi, [eax + 0x10]
mov dword [ebp - 0x23c], esi
jmp 0x1004eafe
push dword [ecx - 0xc]
push ecx
lea ecx, [ebp - 0x23c]
call fcn.10043c10
mov esi, dword [ebp - 0x23c]
mov ebx, dword [ebp - 0x244]
add ebx, 8
mov dword [ebp - 0x244], ebx
cmp ebx, dword [ebp - 0x238]
jne 0x1004ea80
cmp dword [esi - 0xc], 0
je 0x1004eb94
add esi, 0xfffffff0
push esi
call fcn.10042e70
mov ecx, dword [ebp - 0x24c]
add eax, 0x10
or ebx, 0xffffffff
mov byte [ebp - 4], 1
add esp, 4
add edi, 0xfffffff0
mov dword [ecx], eax
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x1004eb54
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1004eb6c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], 0xffffffff
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x1004f5c8
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
jmp 0x1004f5c8
lea eax, [ebp - 0x234]
push eax
push ecx
mov edi, esp
mov dword [ebp - 0x238], edi
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
push eax
call fcn.10042e70
mov ecx, dword [ebp - 0x250]
add esp, 4
add eax, 0x10
mov dword [edi], eax
call fcn.10053c00
call fcn.100ca860
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov edi, dword [ebp - 0x234]
movzx eax, al
sub eax, 1
jne 0x1004ed43
push 0x5e
push str.d:jenkins.jenkinsworkspacepcmanage_ownpop_native_rightsplugindefaultappdefaultappmgr.cpp
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0xf
mov byte [ebp - 0x26c], 0
call fcn.10044b60
push 3
push 0x1019eb18
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 3
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.10044b60
mov byte [ebp - 4], 4
call fcn.100ca860
mov dword [ebp - 0x238], eax
lea ecx, [ebp - 0xa8]
push 0x1df
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100461a0
mov ebx, eax
push str.strExePath
push ebx
mov byte [ebp - 4], 5
call fcn.10047780
test edi, edi
mov ecx, 0x1019ea04
cmovne ecx, edi
push ecx
push ebx
call fcn.100450a0
mov ecx, dword [ebp - 0x238]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.100478a0
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 3
cmp edx, 0x10
jb 0x1004ecea
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004ece0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004f600
push edx
push ecx
call fcn.1012659a
add esp, 8
mov edx, dword [ebp - 0x258]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
mov byte [ebp - 4], 2
cmp edx, 0x10
jb 0x1004ed43
mov ecx, dword [ebp - 0x26c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004ed39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004f605
push edx
push ecx
call fcn.1012659a
add esp, 8
cmp dword [edi - 0xc], 0
je 0x1004eeaa
push ecx
mov esi, esp
mov dword [ebp - 0x240], esp
mov dword [ebp - 0x244], esi
call fcn.10043000
mov ecx, eax
test ecx, ecx
je 0x1004f60a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esi], eax
push str.ProductName
mov ecx, esi
mov byte [ebp - 4], 6
call fcn.10042d30
test al, al
jne 0x1004ed97
push 0xb
push str.ProductName
mov ecx, esi
call fcn.10043c10
push ecx
mov ecx, esp
mov byte [ebp - 4], 7
push edi
call fcn.10041f60
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 2
push eax
call fcn.10097c90
add esp, 0xc
push eax
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 8
call fcn.1004e420
mov edx, dword [ebp - 0x238]
or ebx, 0xffffffff
mov byte [ebp - 4], 2
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1004edeb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x23c]
push str.Microsoft
push esi
call fcn.10155520
add esp, 8
test eax, eax
jne 0x1004eead
push ecx
mov esi, esp
mov dword [ebp - 0x240], esp
mov dword [ebp - 0x244], esi
call fcn.10043000
mov ecx, eax
test ecx, ecx
je 0x1004f614
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esi], eax
push str.FileDescription
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.10042d30
test al, al
jne 0x1004ee51
push 0xf
push str.FileDescription
mov ecx, esi
call fcn.10043c10
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xa
push edi
call fcn.10041f60
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 2
push eax
call fcn.10097c90
add esp, 0xc
push eax
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0xb
call fcn.1004e420
mov edx, dword [ebp - 0x238]
mov eax, ebx
mov byte [ebp - 4], 2
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1004eea2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x23c]
jmp 0x1004eead
or ebx, 0xffffffff
cmp dword [esi - 0xc], 0
je 0x1004eecf
add esi, 0xfffffff0
push esi
call fcn.10042e70
mov ecx, dword [ebp - 0x24c]
add esp, 4
add eax, 0x10
mov dword [ecx], eax
jmp 0x1004f576
push dword [ebp + 0xc]
mov dword [ebp - 0x254], 0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x254]
call fcn.10041f60
push ecx
mov ebx, esp
mov dword [ebp - 0x238], esp
mov dword [ebp - 0x240], ebx
mov eax, dword [ebp - 0x254]
add eax, 0xfffffff0
mov byte [ebp - 4], 0xc
push eax
mov dword [ebp - 0x248], 0
call fcn.10042e70
add eax, 0x10
mov dword [ebx], eax
mov ebx, esp
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x240], ebx
call fcn.10043000
mov ecx, eax
test ecx, ecx
je 0x1004f61e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
push str.Applications_
mov ecx, ebx
mov byte [ebp - 4], 0xe
call fcn.10042d30
test al, al
jne 0x1004ef66
push 0xd
push str.Applications_
mov ecx, ebx
call fcn.10043c10
mov ecx, dword [ebp - 0x250]
lea eax, [ebp - 0x284]
push SysReAllocString
mov byte [ebp - 4], 0xd
push eax
mov byte [ebp - 4], 0xc
call fcn.100521e0
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xf
jb 0x1004ef91
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x248]
call fcn.10041f60
mov edx, dword [ebp - 0x270]
mov byte [ebp - 4], 0x11
cmp edx, 8
jb 0x1004efe1
mov ecx, dword [ebp - 0x284]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1004efd7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004f628
push edx
push ecx
call fcn.1012659a
add esp, 8
xor eax, eax
mov dword [ebp - 0x274], 0
mov word [ebp - 0x284], ax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x270], 7
cmp dword [eax - 0xc], 0
jne 0x1004f0dd
push ecx
mov ebx, esp
mov dword [ebp - 0x238], esp
mov dword [ebp - 0x240], ebx
mov eax, dword [ebp - 0x254]
add eax, 0xfffffff0
push eax
call fcn.10042e70
add eax, 0x10
mov dword [ebx], eax
mov ebx, esp
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x240], ebx
call fcn.10043000
mov ecx, eax
test ecx, ecx
je 0x1004f62d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
push 0x1019e5ec
mov ecx, ebx
mov byte [ebp - 4], 0x13
call fcn.10042d30
test al, al
jne 0x1004f078
push 0
push 0x1019e5ec
mov ecx, ebx
call fcn.10043c10
mov ecx, dword [ebp - 0x250]
lea eax, [ebp - 0x26c]
push SysReAllocString
mov byte [ebp - 4], 0x12
push eax
mov byte [ebp - 4], 0x11
call fcn.100521e0
mov edx, eax
cmp dword [edx + 0x14], 8
mov byte [ebp - 4], 0x14
jb 0x1004f0a5
mov edx, dword [edx]
test edx, edx
jne 0x1004f0ad
xor ecx, ecx
jmp 0x1004f0c1
mov ecx, edx
lea ebx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1004f0b2
sub ecx, ebx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x248]
call fcn.10043c10
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x11
call fcn.100424a0
call fcn.100ca860
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1004f258
push 0x5e
push str.d:jenkins.jenkinsworkspacepcmanage_ownpop_native_rightsplugindefaultappdefaultappmgr.cpp
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], 0xf
mov byte [ebp - 0x26c], al
call fcn.10044b60
push 3
push 0x1019eb18
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.10044b60
mov byte [ebp - 4], 0x16
call fcn.100ca860
mov dword [ebp - 0x238], eax
lea ecx, [ebp - 0xa8]
push 0x1f3
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100461a0
mov ebx, eax
push str.strCommand
push ebx
mov byte [ebp - 4], 0x17
call fcn.10047780
mov ecx, dword [ebp - 0x248]
mov eax, 0x1019ea04
test ecx, ecx
cmovne eax, ecx
push eax
push ebx
call fcn.100450a0
mov ecx, dword [ebp - 0x238]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.100478a0
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 0x15
cmp edx, 0x10
jb 0x1004f1ff
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004f1f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004f637
push edx
push ecx
call fcn.1012659a
add esp, 8
mov edx, dword [ebp - 0x258]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
mov byte [ebp - 4], 0x11
cmp edx, 0x10
jb 0x1004f258
mov ecx, dword [ebp - 0x26c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004f24e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004f63c
push edx
push ecx
call fcn.1012659a
add esp, 8
mov eax, dword [ebp - 0x248]
cmp dword [eax - 0xc], 0
je 0x1004f422
mov edx, eax
mov dword [ebp - 0x220], 0
xor ecx, ecx
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], cx
lea ebx, [edx + 2]
nop word [eax + eax]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x1004f290
sub edx, ebx
lea ecx, [ebp - 0x230]
sar edx, 1
push edx
push eax
call fcn.10044c60
push 0x208
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x18
push 0
push eax
call fcn.1014de30
add esp, 0xc
lea ecx, [ebp - 0x218]
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push 0x104
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1004f413
push ecx
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.ProductName
call fcn.10041f60
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push ecx
cmovae eax, dword [ebp - 0x230]
mov ecx, esp
push eax
mov byte [ebp - 4], 0x19
call fcn.10041f60
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 0x18
push eax
call fcn.10097c90
add esp, 0xc
push eax
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x1a
call fcn.1004e420
mov edx, dword [ebp - 0x238]
or ebx, 0xffffffff
mov byte [ebp - 4], 0x18
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1004f37d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x23c]
push str.Microsoft
push esi
call fcn.10155520
add esp, 8
test eax, eax
jne 0x1004f413
push ecx
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.FileDescription
call fcn.10041f60
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push ecx
cmovae eax, dword [ebp - 0x230]
mov ecx, esp
push eax
mov byte [ebp - 4], 0x1b
call fcn.10041f60
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 0x18
push eax
call fcn.10097c90
add esp, 0xc
push eax
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x1c
call fcn.1004e420
mov edx, dword [ebp - 0x238]
mov eax, ebx
mov byte [ebp - 4], 0x18
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1004f40d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x23c]
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x11
call fcn.100424a0
cmp dword [esi - 0xc], 0
jne 0x1004f51a
call fcn.100ca860
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1004f51a
push 0x5e
push str.d:jenkins.jenkinsworkspacepcmanage_ownpop_native_rightsplugindefaultappdefaultappmgr.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.10044b60
push 3
push 0x1019eb18
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0xf
mov byte [ebp - 0x26c], 0
call fcn.10044b60
mov byte [ebp - 4], 0x1e
call fcn.100ca860
mov dword [ebp - 0x238], eax
lea ecx, [ebp - 0xa8]
push 0x207
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.100461a0
mov ebx, eax
push str.strAppName
push ebx
mov byte [ebp - 4], 0x1f
call fcn.10047780
push edi
push ebx
call fcn.100450a0
mov ecx, dword [ebp - 0x238]
add esp, 0x10
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.100478a0
lea ecx, [ebp - 0x26c]
call fcn.10042450
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x11
call fcn.10042450
add esi, 0xfffffff0
push esi
call fcn.10042e70
mov ecx, dword [ebp - 0x24c]
add eax, 0x10
mov edx, dword [ebp - 0x248]
or ebx, 0xffffffff
add esp, 4
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
mov dword [ecx], eax
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1004f555
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x254]
mov eax, ebx
mov byte [ebp - 4], 2
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1004f576
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, ebx
mov byte [ebp - 4], 1
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x1004f591
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, ebx
mov byte [ebp - 4], 0
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1004f5a9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x1004f5c8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10126919
mov esp, ebp
pop ebp
ret 8
push 0x80004005
call fcn.10042d10
push 0x80004005
call fcn.10042d10
call fcn.101513dc
call fcn.101513dc
push 0x80004005
call fcn.10042d10
push 0x80004005
call fcn.10042d10
push 0x80004005
call fcn.10042d10
call fcn.101513dc
push 0x80004005
call fcn.10042d10
call fcn.101513dc
call fcn.101513dc
int3