Function at 0x414b10
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x57e7c0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
push str.Global5D44F9F7_AE43_4F4A_B8D0_5EC9195D270E
push 1
push 0
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x7c], ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov dword [ebp - 0x70], edi
test edi, edi
je 0x414b7d
call esi
cmp eax, 0xb7
je 0x414b5e
cmp eax, 5
jne 0x414b7d
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004bf660
mov esp, ebp
pop ebp
ret 0x10
push str.tabxtray.log
call fcn.0042b860
add esp, 4
call fcn.00412b10
mov ecx, eax
call fcn.0040e110
mov edi, eax
mov dword [ebp - 0x74], edi
call fcn.00436bb0
push 1
mov ecx, eax
mov edx, dword [eax]
mov edx, dword [edx + 8]
call edx
movzx ecx, al
sub ecx, 1
jne 0x414c56
push 0x34
mov dword [ebp - 0x24], ecx
mov byte [ebp - 0x34], cl
lea ecx, [ebp - 0x34]
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
mov dword [ebp - 0x20], 0xf
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0x22
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.restarts_times:
push esi
call fcn.00408e40
add esp, 8
mov ecx, esi
push dword [ebp - 0x74]
call fcn.00411de0
mov edx, dword [edi]
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [ebp - 0x74]
cmp edi, 2
jg 0x414ec2
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x414d9d
lea eax, [ebp - 0x78]
mov byte [ebp - 0x69], 1
push eax
push 0x20
mov dword [ebp - 0x78], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov ebx, eax
xorps xmm0, xmm0
lea eax, [ebp - 0x40]
neg ebx
push eax
push str.SeImpersonatePrivilege
sbb bl, bl
and bl, byte [ebp - 0x69]
movups xmmword [ebp - 0x44], xmm0
push 0
mov dword [ebp - 0x44], 1
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
push 0
push 0
push 0
lea eax, [ebp - 0x44]
mov dword [ebp - 0x38], 2
push eax
push 0
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
call esi
test eax, eax
je 0x414d89
call fcn.00436bb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x414d87
push 0x34
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0xb7
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.SE_IMPERSONATE_NAME_adjust_failed
push esi
call fcn.00406f20
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
mov edi, dword [ebp - 0x74]
xor bl, bl
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
mov ebx, dword [ebp - 0x7c]
jne 0x414ec2
lea eax, [edi + 1]
push eax
call fcn.00412b10
mov ecx, eax
call fcn.0040e2f0
mov esi, dword [ebp - 0x70]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call fcn.0042a700
add esp, 4
mov bl, al
call fcn.00436bb0
push 1
mov ecx, eax
mov edx, dword [eax]
mov edx, dword [edx + 8]
call edx
movzx ecx, al
sub ecx, 1
jne 0x415c8c
push 0x34
mov dword [ebp - 0x54], ecx
mov byte [ebp - 0x64], cl
lea ecx, [ebp - 0x64]
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
mov dword [ebp - 0x50], 0xf
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
mov dword [ebp - 0xc], 0
test bl, bl
mov dword [ebp - 8], 0xf
mov edx, 0x53b25c
mov byte [ebp - 0x1c], 0
mov eax, str.failed
cmove edx, eax
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414e48
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1c]
call fcn.0040c320
push 0x28
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x158]
call fcn.00407db0
mov esi, eax
push str.Adjustprivilege_start
push esi
call fcn.00408e40
cmp dword [ebp - 8], 0x10
lea ecx, [ebp - 0x1c]
cmovae ecx, dword [ebp - 0x1c]
push ecx
push esi
call fcn.00408e40
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
lea ecx, [ebp - 0x64]
call fcn.00408860
jmp 0x415c8c
push 0
call fcn.00412b10
mov ecx, eax
call fcn.0040e2f0
call fcn.00436bb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x414f78
push 0x34
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0x2e
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.running_on_admin
push esi
call fcn.00408e40
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
push 0
push str.tabxtray
lea ecx, [ebp - 0x6a]
call fcn.0040fc50
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 8
push eax
mov dword [ebp - 0x7c], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0
push dword [ebp - 0x68]
mov ecx, 0x5850cc
push 0
call fcn.00412d10
push ebx
call fcn.00412a80
mov ecx, eax
call fcn.0040de40
call fcn.00436bb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x41508c
push 0x34
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0x37
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.cmd:
push esi
call fcn.00406f20
test ebx, ebx
mov ecx, 0x539cd0
cmovne ecx, ebx
push ecx
push esi
call fcn.00406f20
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
push str.http:__s.tabxexplorer.com_tabx_pidpidtypetypeactionactionappappappverappvermidmidmid2mid2modvermodver
lea ecx, [ebp - 0x88]
call fcn.0040f610
push ecx
lea eax, [ebp - 0x88]
mov ecx, esp
push eax
call fcn.00411c70
lea eax, [ebp - 0x84]
push eax
call fcn.0041ebf0
add esp, 8
push dword [ebp - 0x84]
push str.operate
push 0
call fcn.00412ba0
mov ecx, eax
call fcn.00437be0
push 0
push 0
push 1
push 0
push str.start
call fcn.00412ba0
mov ecx, eax
call fcn.00437c00
push dword [ebp - 0x68]
call fcn.00454ca0
add esp, 4
call fcn.0042b6e0
push eax
lea ecx, [ebp - 0x68]
call fcn.0040f610
mov ecx, dword [0x585118]
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ecx, ecx
jne 0x415161
push 0x57e0f0
call edi
cmp dword [0x585118], 0
jne 0x415154
push 0xc8
call fcn.004bf694
add esp, 4
test eax, eax
je 0x415145
mov ecx, eax
call fcn.00416960
jmp 0x415147
xor eax, eax
xor edx, edx
lea ecx, [ebp - 0x7c]
lock or dword [ecx], edx
mov dword [0x585118], eax
push 0x57e0f0
call esi
mov ecx, dword [0x585118]
push 0
lea eax, [ebp - 0x68]
push eax
call fcn.00417610
mov edx, dword [ebp - 0x68]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x415187
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0041e8a0
test al, al
je 0x415199
push ebx
call fcn.00413ee0
add esp, 4
xor eax, eax
mov dword [ebp - 0x3c], 0
push 4
push 0x53b3c8
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], ax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
call fcn.0040c410
mov ecx, dword [0x58510c]
test ecx, ecx
jne 0x415217
push 0x57e09c
call edi
cmp dword [0x58510c], 0
jne 0x41520a
push 0x34
call fcn.004bf694
add esp, 4
test eax, eax
je 0x4151fb
mov ecx, eax
call fcn.0040dd10
jmp 0x4151fd
xor eax, eax
xor edx, edx
lea ecx, [ebp - 0x68]
lock or dword [ecx], edx
mov dword [0x58510c], eax
push 0x57e09c
call esi
mov ecx, dword [0x58510c]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040de30
mov edx, dword [ebp - 8]
cmp edx, 8
jb 0x41525e
mov ecx, dword [ebp - 0x1c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415254
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415ca1
push edx
push ecx
call fcn.004bf3aa
add esp, 8
mov edi, dword [ebp - 0x38]
lea esi, [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp edi, 8
mov ecx, dword [ebp - 0x3c]
cmovae esi, eax
cmp ecx, 4
jne 0x415299
mov edx, ecx
mov ecx, str.task
sub esi, ecx
nop
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x415293
add ecx, 2
sub edx, 1
jne 0x415280
jmp 0x4152dc
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x3c]
cmp edi, 8
lea esi, [ebp - 0x4c]
cmovae esi, eax
cmp ecx, 3
jne 0x4152c3
mov edx, ecx
mov ecx, 0x53b3e0
sub esi, ecx
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x4152c3
add ecx, 2
sub edx, 1
jne 0x4152b0
jmp 0x4152dc
lea eax, [ebp - 0x4c]
push 0x53b3e8
push eax
call fcn.00411c10
add esp, 8
test al, al
je 0x415421
mov ecx, dword [0x585110]
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test ecx, ecx
jne 0x415337
push 0x57e0b8
call edi
cmp dword [0x585110], 0
jne 0x415322
push 8
call fcn.004bf694
add esp, 4
test eax, eax
je 0x415313
mov ecx, eax
call fcn.0040df20
jmp 0x415315
xor eax, eax
xor edx, edx
lea ecx, [ebp - 0x68]
lock or dword [ecx], edx
mov dword [0x585110], eax
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x57e0b8
call esi
mov ecx, dword [0x585110]
jmp 0x41533d
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.0040e0f0
test eax, eax
jne 0x41542d
call fcn.00436bb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4153f2
push 0x34
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0x52
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.user_do_not_autorun__exit
push esi
call fcn.00406f20
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
push 0
push str.autoitem
push 0
push 0
push str.autooff
call fcn.00412ba0
mov ecx, eax
call fcn.00437c00
lea ecx, [ebp - 0x4c]
call fcn.004088b0
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x415b49
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
call fcn.0042b3c0
add esp, 4
test eax, eax
jne 0x415515
call fcn.00436bb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4154e6
push 0x34
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0x59
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.CheckEnableAutoRun_False__exit
push esi
call fcn.00406f20
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
push 0
push str.operate
push 0
push 0
push str.no_active
call fcn.00412ba0
mov ecx, eax
call fcn.00437c00
lea ecx, [ebp - 0x4c]
call fcn.004088b0
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x415b49
call fcn.00412c30
mov ecx, eax
call fcn.00429680
test eax, eax
je 0x4157c2
mov ecx, ebx
mov dword [ebp - 0x54], 0
xor eax, eax
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415542
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x64]
call fcn.0040c410
xor eax, eax
mov dword [ebp - 0xc], 0
push 4
push 0x53b3c8
lea ecx, [ebp - 0x34]
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
call fcn.0040c410
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00412a80
mov ecx, eax
call fcn.0040de30
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x4155da
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4155d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415ca6
push edx
push ecx
call fcn.004bf3aa
add esp, 8
xor eax, eax
mov dword [ebp - 0x24], 0
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x1c]
push str.tabx
push eax
mov dword [ebp - 0x20], 7
call fcn.00411c10
add esp, 8
test al, al
je 0x41562a
push 0xd
push str.___entrymain
lea ecx, [ebp - 0x64]
call fcn.0040c410
cmp dword [ebp - 0x50], 8
lea eax, [ebp - 0x64]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.00412c30
mov ecx, eax
call fcn.00429bf0
call fcn.00412c30
mov ecx, eax
call fcn.004298b0
mov edx, dword [ebp - 8]
test eax, eax
setne bl
cmp edx, 8
jb 0x415675
mov ecx, dword [ebp - 0x1c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41566b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415ca6
push edx
push ecx
call fcn.004bf3aa
add esp, 8
mov edx, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
cmp edx, 8
jb 0x4156c3
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4156b9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415ca6
push edx
push ecx
call fcn.004bf3aa
add esp, 8
xor eax, eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
test bl, bl
je 0x4157c2
call fcn.00436bb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x415787
push 0x34
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0x61
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.update__exit
push esi
call fcn.00406f20
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
push 0
push str.operate
push 0
push 0
push str.has_update
call fcn.00412ba0
mov ecx, eax
call fcn.00437c00
mov esi, dword [ebp - 0x70]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
lea ecx, [ebp - 0x4c]
call fcn.004088b0
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x415b52
call fcn.00412c30
mov ecx, eax
call fcn.00429470
mov ecx, dword [0x585108]
test ecx, ecx
jne 0x41581b
push 0x57e080
call edi
cmp dword [0x585108], 0
jne 0x41580e
push 4
call fcn.004bf694
add esp, 4
test eax, eax
je 0x4157ff
mov ecx, eax
call fcn.00437b60
jmp 0x415801
xor eax, eax
xor edx, edx
lea ecx, [ebp - 0x68]
lock or dword [ecx], edx
mov dword [0x585108], eax
push 0x57e080
call esi
mov ecx, dword [0x585108]
push 0
push 0
push 1
push 0
push 0x53b4d0
call fcn.00437c00
mov edi, dword [0x5849fc]
xorps xmm0, xmm0
add edi, 0x10
mov dword [ebp - 0xc0], 0x53b17c
push edi
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [0x585100]
mov ebx, eax
push 4
mov ecx, dword [esi + 8]
inc ecx
push ecx
push dword [esi]
call fcn.00508f26
add esp, 0xc
test eax, eax
je 0x4158c7
mov dword [esi], eax
mov eax, dword [esi + 8]
push 4
inc eax
push eax
push dword [esi + 4]
call fcn.00508f26
add esp, 0xc
test eax, eax
je 0x4158c7
mov ecx, dword [esi + 8]
mov dword [esi + 4], eax
lea edx, [ecx*4]
mov ecx, dword [esi]
add ecx, edx
je 0x4158b8
mov dword [ecx], ebx
mov eax, dword [esi + 4]
add eax, edx
je 0x4158c4
lea ecx, [ebp - 0xc0]
mov dword [eax], ecx
inc dword [esi + 8]
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x220]
call fcn.00421b80
lea ecx, [ebp - 0x220]
call fcn.00423260
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
test ebx, ebx
je 0x415921
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xa4]
push eax
call edi
test eax, eax
jne 0x415921
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0xc0]
push esi
call dword [eax + 4]
inc esi
test eax, eax
jne 0x4158f5
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x4158f1
test eax, eax
je 0x4159b7
lea eax, [ebp - 0xa4]
push eax
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0xc0]
call dword [eax]
test eax, eax
jne 0x415970
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0xa0]
cmp eax, 0x118
ja 0x41598b
je 0x4159a7
cmp eax, 0xf
je 0x4159a7
cmp eax, 0xa0
jmp 0x415990
cmp eax, 0x200
je 0x4159a7
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4158f1
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4158f1
mov eax, dword [0x5849fc]
add eax, 0x10
push eax
mov dword [ebp - 0x68], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, dword [0x585100]
xor esi, esi
mov ecx, eax
mov edx, dword [edi + 8]
test edx, edx
jle 0x415a97
mov ebx, dword [edi]
mov eax, ebx
cmp dword [eax], ecx
je 0x4159f9
inc esi
add eax, 4
cmp esi, edx
jl 0x4159e8
jmp 0x415a97
cmp esi, 0xffffffff
je 0x415a97
test esi, esi
js 0x415a97
cmp esi, edx
jge 0x415a97
lea eax, [edx - 1]
cmp esi, eax
je 0x415a53
sub edx, esi
lea ecx, [ebx + esi*4]
shl edx, 2
lea eax, [edx - 4]
push eax
lea eax, [ecx + 4]
push eax
push edx
push ecx
call fcn.00414a80
mov edx, dword [edi + 8]
mov eax, dword [edi + 4]
sub edx, esi
shl edx, 2
lea ecx, [eax + esi*4]
lea eax, [edx - 4]
push eax
lea eax, [ecx + 4]
push eax
push edx
push ecx
call fcn.00414a80
mov edx, dword [edi + 8]
add esp, 0x20
push 4
lea eax, [edx - 1]
push eax
push dword [edi]
call fcn.00508f26
mov ecx, eax
add esp, 0xc
mov eax, dword [edi + 8]
test ecx, ecx
jne 0x415a71
cmp eax, 1
jne 0x415a73
mov dword [edi], ecx
push 4
dec eax
push eax
push dword [edi + 4]
call fcn.00508f26
mov ecx, eax
add esp, 0xc
mov eax, dword [edi + 8]
test ecx, ecx
jne 0x415a90
cmp eax, 1
jne 0x415a93
mov dword [edi + 4], ecx
dec eax
mov dword [edi + 8], eax
push dword [ebp - 0x68]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call ebx
lea ecx, [ebp - 0x220]
call fcn.00422040
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x415aca
push eax
call fcn.00505686
add esp, 4
mov dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
test eax, eax
je 0x415afb
push eax
call fcn.00505686
add esp, 4
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
cmp edx, 8
jb 0x415b49
mov ecx, dword [ebp - 0x4c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415b3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415cab
push edx
push ecx
call fcn.004bf3aa
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x70]
cmp dword [0x58510c], 0
je 0x415b87
push 0x57e09c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x58510c]
test ecx, ecx
je 0x415b80
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x58510c], 0
push 0x57e09c
call ebx
push esi
call edi
call fcn.00436bb0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x415c32
push 0x34
push str.d:jenkins.jenkinsworkspace_tabx_tabxtraymain.cpp
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.0040c320
push 3
push 0x53a1dc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.0040c320
call fcn.00436bb0
mov edi, eax
lea ecx, [ebp - 0x158]
push 0x73
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407db0
mov esi, eax
push str.quit_CLdsStatistic
push esi
call fcn.00408e40
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x158]
call fcn.00409010
lea ecx, [ebp - 0x1c]
call fcn.00408860
lea ecx, [ebp - 0x34]
call fcn.00408860
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00412ba0
mov ecx, eax
call fcn.00437c40
mov edx, dword [ebp - 0x84]
or ebx, 0xffffffff
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x415c69
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x88]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x415c84
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x6a]
call fcn.00406e60
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bf660
mov esp, ebp
pop ebp
ret 0x10
call fcn.005055a9
call fcn.005055a9
call fcn.005055a9
int3