Function at 0x413860
Capabilities:
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x73c
mov eax, dword [0x557768]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov edi, dword [ebp + 8]
push str.Global2BF0F328_0B44_4325_9452_16FC8058D2E8
push 1
push 0
mov dword [ebp - 0x24], ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
mov dword [ebp - 0x6a0], esi
test esi, esi
je 0x413bc1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x413bc1
mov ecx, ebx
mov dword [ebp - 0xc], 0
xor eax, eax
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4138d0
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0040af10
cmp dword [ebp - 8], 8
lea edi, [ebp - 0x1c]
lea eax, [ebp - 0x724]
cmovae edi, dword [ebp - 0x1c]
mov dword [ebp - 0x728], eax
test edi, edi
jne 0x413911
xor edx, edx
mov dword [ebp - 0x728], edx
jmp 0x4139e3
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413916
sub ecx, edx
lea eax, [ebp - 0x724]
sar ecx, 1
push 0x80
push eax
lea eax, [ebp - 0x728]
lea ebx, [ecx + 1]
lea esi, [ebx*4]
mov dword [ebp - 0x69c], ebx
push esi
push eax
call fcn.00410840
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x728]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ebx
push edi
push 0
push 3
call esi
xor ebx, ebx
test eax, eax
sete bl
test eax, eax
jne 0x4139d2
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4139d2
mov ebx, dword [ebp - 0x69c]
push 0
push 0
push 0
push 0
push ebx
push edi
push 0
push 3
call esi
mov esi, eax
lea eax, [ebp - 0x724]
push 0x80
push eax
lea eax, [ebp - 0x728]
push esi
push eax
call fcn.00410840
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x728]
push ebx
push edi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
test ebx, ebx
jne 0x414a32
mov edx, dword [ebp - 0x728]
mov ebx, dword [ebp - 0x24]
mov ecx, edx
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413a03
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0040ae10
mov eax, dword [ebp - 0x728]
lea ecx, [ebp - 0x724]
cmp eax, ecx
je 0x413a32
push eax
call fcn.004e7c41
add esp, 4
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x698]
push str.downloadWeb:
push eax
call fcn.00410670
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0xa8]
cmp eax, esi
je 0x413a88
mov ecx, eax
call fcn.00407250
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x698]
call fcn.00407250
call fcn.004116e0
push ebx
mov ecx, eax
call fcn.0040d0d0
mov ecx, ebx
mov dword [ebp - 0x48], 0
xor eax, eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413ac0
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x58]
call fcn.0040af10
mov eax, dword [ebp - 0x48]
add eax, eax
mov dword [ebp - 0x34], 0x2716
cmp dword [ebp - 0x44], 8
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push 0
push 0x519988
mov dword [ebp - 0x2c], eax
call dword [sym.imp.USER32.dll_FindWindowW]
push 0
push 0x1388
push 1
lea ecx, [ebp - 0x34]
push ecx
push 0
push 0x4a
push eax
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
call fcn.004116e0
mov esi, eax
mov dword [ebp - 0x688], 0
push 7
xor eax, eax
mov dword [ebp - 0x684], 7
push str.autorun
lea ecx, [ebp - 0x698]
mov word [ebp - 0x698], ax
call fcn.0040af10
push 0
lea eax, [ebp - 0x698]
mov ecx, esi
push eax
call fcn.0040cc70
lea ecx, [ebp - 0x698]
mov esi, eax
call fcn.004072a0
test esi, esi
jne 0x413b81
lea eax, [ebp - 0xa8]
push eax
call fcn.00410010
add esp, 4
mov esi, dword [ebp - 0x6a0]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x58]
call fcn.004072a0
lea ecx, [ebp - 0xa8]
call fcn.00407250
lea ecx, [ebp - 0x1c]
call fcn.004072a0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a2820
mov esp, ebp
pop ebp
ret 0x10
push str.ADBlockMaster_tray.log
call fcn.00425990
add esp, 4
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x413ca9
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0042e780
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x413c9b
push 0x2a
push str.e:workspace_adblock_adblock_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], al
call fcn.0040ae10
push 3
push 0x518114
lea ecx, [ebp - 0x698]
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 0xf
mov byte [ebp - 0x698], 0
call fcn.0040ae10
push 0x33
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x73c]
call fcn.004068d0
mov esi, eax
push str.will_adjust_privilege
push esi
call fcn.00405970
add esp, 8
call fcn.0042e780
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x73c]
call fcn.004079a0
lea ecx, [ebp - 0x698]
call fcn.00407250
lea ecx, [ebp - 0x1c]
call fcn.00407250
push ebx
call fcn.00425020
add esp, 4
jmp 0x414a1d
call fcn.0042e780
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x413d61
push 0x2a
push str.e:workspace_adblock_adblock_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], al
call fcn.0040ae10
push 3
push 0x518114
lea ecx, [ebp - 0x698]
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 0xf
mov byte [ebp - 0x698], 0
call fcn.0040ae10
push 0x39
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x73c]
call fcn.004068d0
mov esi, eax
push str.run_in_admin
push esi
call fcn.00405970
add esp, 8
call fcn.0042e780
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x73c]
call fcn.004079a0
lea ecx, [ebp - 0x698]
call fcn.00407250
lea ecx, [ebp - 0x1c]
call fcn.00407250
push 0
push str.adbktray
lea ecx, [ebp - 0x1d]
call fcn.0040ec80
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 8
push eax
mov dword [ebp - 0x24], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0
push edi
push 0
mov ecx, 0x55d8c4
call fcn.00411970
call fcn.004116e0
push ebx
mov ecx, eax
call fcn.0040d0d0
call fcn.0042e780
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x413e83
push 0x2a
push str.e:workspace_adblock_adblock_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], al
call fcn.0040ae10
push 3
push 0x518114
lea ecx, [ebp - 0x698]
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 0xf
mov byte [ebp - 0x698], 0
call fcn.0040ae10
push 0x42
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x73c]
call fcn.004068d0
mov esi, eax
push str.cmd:
push esi
call fcn.00405970
test ebx, ebx
mov ecx, 0x517c14
cmovne ecx, ebx
push ecx
push esi
call fcn.00405970
add esp, 0x10
call fcn.0042e780
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x73c]
call fcn.004079a0
lea ecx, [ebp - 0x698]
call fcn.00407250
lea ecx, [ebp - 0x1c]
call fcn.00407250
mov ecx, dword [0x55d904]
test ecx, ecx
jne 0x413ee7
push 0x5570fc
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x55d904], 0
jne 0x413ed6
push 0x34
call fcn.004a2854
mov esi, eax
add esp, 4
test esi, esi
je 0x413ec7
push 0x34
push 0
push esi
call fcn.004e4230
add esp, 0xc
mov ecx, esi
call fcn.00429a90
jmp 0x413ec9
xor eax, eax
xor edx, edx
lea ecx, [ebp - 0x24]
lock or dword [ecx], edx
mov dword [0x55d904], eax
push 0x5570fc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x55d904]
push reloc.OLEAUT32.dll_SysReAllocString
push str.SOFTWAREADBlockMaster
push str.ADBlockMaster.exe
call fcn.0042ab60
push 0
push 0
push 0
push str.adbk
lea eax, [ebp - 0x698]
mov dword [ebp - 0x6a4], 0
push str.http:__s.91toolbox.com_adbk_pidpidtypetypeactionactionappappappverappvermidmidmid2mid2modvermodver
push eax
call fcn.0042ac00
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x413f2c
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x6a4]
call fcn.0040d940
lea ecx, [ebp - 0x698]
call fcn.004072a0
call fcn.00411840
push dword [ebp - 0x6a4]
mov ecx, eax
push str.operate
call fcn.00428f70
push edi
call fcn.00437a80
push 0x84
lea eax, [ebp - 0x12c]
push 0
push eax
call fcn.004e4230
lea eax, [ebp - 0x12c]
push eax
call fcn.00433360
add esp, 0x14
lea ecx, [ebp - 0x12c]
push str.skin
call fcn.0042fbd0
lea ecx, [ebp - 0x12c]
call fcn.00416500
push eax
call fcn.00437d00
push 1
push str.adblocktray.zip
call fcn.00437dc0
mov esi, dword [0x55d908]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
test esi, esi
jne 0x414029
push 0x557118
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x55d908], esi
jne 0x414018
push 0x34
call fcn.004a2854
mov esi, eax
add esp, 4
test esi, esi
je 0x414009
push 0x34
push 0
push esi
call fcn.004e4230
add esp, 0xc
mov ecx, esi
call fcn.0040c8e0
jmp 0x41400b
xor eax, eax
xor edx, edx
lea ecx, [ebp - 0x24]
lock or dword [ecx], edx
mov dword [0x55d908], eax
push 0x557118
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [0x55d908]
push 4
xor eax, eax
mov dword [ebp - 0xc], 0
push 0x519ca0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
call fcn.0040af10
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040cc60
mov edx, dword [ebp - 8]
cmp edx, 8
jb 0x414095
mov ecx, dword [ebp - 0x1c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41408b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414a51
push edx
push ecx
call fcn.004a256a
add esp, 8
mov eax, dword [ebp - 0x2c]
lea edi, [ebp - 0x40]
cmp eax, 8
cmovae edi, dword [ebp - 0x40]
cmp dword [ebp - 0x30], 4
jne 0x4140de
movzx ecx, word [edi]
mov esi, 0x74
mov edx, 4
mov eax, str.task
cmp ecx, esi
jb 0x4140db
sub edi, eax
cmp cx, si
ja 0x4140db
cmp edx, 1
je 0x41413a
movzx ecx, word [eax + edi + 2]
add eax, 2
dec edx
movzx esi, word [eax]
cmp cx, si
jae 0x4140c3
mov eax, dword [ebp - 0x2c]
cmp eax, 8
lea edi, [ebp - 0x40]
cmovae edi, dword [ebp - 0x40]
cmp dword [ebp - 0x30], 3
jne 0x414121
movzx ecx, word [edi]
mov esi, 0x73
mov edx, 3
mov eax, 0x519cb8
cmp ecx, esi
jb 0x414121
sub edi, eax
cmp cx, si
ja 0x414121
cmp edx, 1
je 0x41413a
movzx ecx, word [eax + edi + 2]
add eax, 2
dec edx
movzx esi, word [eax]
cmp cx, si
jae 0x414109
lea eax, [ebp - 0x40]
push 0x519cc0
push eax
call fcn.00410600
add esp, 8
test al, al
je 0x414295
mov ecx, dword [0x55d90c]
test ecx, ecx
jne 0x414195
push 0x557134
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x55d90c], 0
jne 0x414184
push 4
call fcn.004a2854
add esp, 4
test eax, eax
je 0x414175
mov ecx, eax
mov dword [eax], 0
call fcn.0040d480
jmp 0x414177
xor eax, eax
xor edx, edx
lea ecx, [ebp - 0x24]
lock or dword [ecx], edx
mov dword [0x55d90c], eax
push 0x557134
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x55d90c]
call fcn.0040d630
test eax, eax
jne 0x414295
call fcn.0042e780
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x41425a
push 0x2a
push str.e:workspace_adblock_adblock_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], al
call fcn.0040ae10
push 3
push 0x518114
lea ecx, [ebp - 0x698]
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 0xf
mov byte [ebp - 0x698], 0
call fcn.0040ae10
push 0x5f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x73c]
call fcn.004068d0
mov esi, eax
push str.user_do_not_autorun__exit
push esi
call fcn.00405970
add esp, 8
call fcn.0042e780
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x73c]
call fcn.004079a0
lea ecx, [ebp - 0x698]
call fcn.00407250
lea ecx, [ebp - 0x1c]
call fcn.00407250
call fcn.00411840
sub esp, 0x28
mov ecx, esp
push 0
push str.autoitem
push 1
push 0
mov dword [ecx + 0x24], 0
mov ecx, eax
push str.autooff
call fcn.00429220
lea ecx, [ebp - 0x40]
call fcn.004072a0
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4149aa
push ebx
call fcn.004252d0
add esp, 4
test eax, eax
jne 0x414399
call fcn.00411840
sub esp, 0x28
mov ecx, esp
push 0
push str.operate
push 0
push 0
mov dword [ecx + 0x24], 0
mov ecx, eax
push str.no_active
call fcn.00429220
call fcn.0042e780
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x414386
push 0x2a
push str.e:workspace_adblock_adblock_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], al
call fcn.0040ae10
push 3
push 0x518114
lea ecx, [ebp - 0x698]
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 0xf
mov byte [ebp - 0x698], 0
call fcn.0040ae10
push 0x67
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x73c]
call fcn.004068d0
mov esi, eax
push str.CheckEnableAutoRun_False__exit
push esi
call fcn.00405970
add esp, 8
call fcn.0042e780
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x73c]
call fcn.004079a0
lea ecx, [ebp - 0x698]
call fcn.00407250
lea ecx, [ebp - 0x1c]
call fcn.00407250
lea ecx, [ebp - 0x40]
call fcn.004072a0
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4149aa
call fcn.00411790
mov ecx, eax
call fcn.004243f0
test eax, eax
je 0x41466f
xor eax, eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
call fcn.004116e0
mov esi, eax
mov dword [ebp - 0x48], 0
push 4
xor eax, eax
mov dword [ebp - 0x44], 7
push 0x519ca0
lea ecx, [ebp - 0x58]
mov word [ebp - 0x58], ax
call fcn.0040af10
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040cc60
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x414434
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41442a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414a56
push edx
push ecx
call fcn.004a256a
add esp, 8
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.004116e0
lea ecx, [ebp - 0x698]
push ecx
mov ecx, eax
call fcn.0040cc40
mov esi, eax
cmp dword [esi + 0x14], 8
jb 0x414465
mov esi, dword [esi]
call fcn.004051e0
mov ecx, eax
test ecx, ecx
je 0x414a5b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x69c]
push esi
mov dword [ebp - 0x69c], eax
call fcn.00404db0
test al, al
jne 0x41449e
push esi
lea ecx, [ebp - 0x69c]
call fcn.004048e0
mov edx, dword [ebp - 0x684]
cmp edx, 8
jb 0x4144de
mov ecx, dword [ebp - 0x698]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4144d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414a65
push edx
push ecx
call fcn.004a256a
add esp, 8
xor eax, eax
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 7
mov word [ebp - 0x698], ax
call fcn.00411790
mov esi, dword [ebp - 0x69c]
mov edi, eax
cmp dword [esi - 4], 1
jle 0x414522
push dword [esi - 0xc]
lea ecx, [ebp - 0x69c]
call fcn.00405060
mov esi, dword [ebp - 0x69c]
push esi
mov ecx, edi
call fcn.004248f0
call fcn.00411790
mov ecx, eax
call fcn.00424600
test eax, eax
setne bl
or edi, 0xffffffff
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x414555
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 8]
cmp edx, 8
jb 0x41458f
mov ecx, dword [ebp - 0x1c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414585
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414a65
push edx
push ecx
call fcn.004a256a
add esp, 8
test bl, bl
je 0x41466f
call fcn.0042e780
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x41464f
push 0x2a
push str.e:workspace_adblock_adblock_traymain.cpp
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], al
call fcn.0040ae10
push 3
push 0x518114
lea ecx, [ebp - 0x698]
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 0xf
mov byte [ebp - 0x698], 0
call fcn.0040ae10
push 0x6d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x698]
push eax
lea ecx, [ebp - 0x73c]
call fcn.004068d0
mov esi, eax
push str.update__exit
push esi
call fcn.00405970
add esp, 8
call fcn.0042e780
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x73c]
call fcn.004079a0
lea ecx, [ebp - 0x698]
call fcn.00407250
lea ecx, [ebp - 0x1c]
call fcn.00407250
mov esi, dword [ebp - 0x6a0]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x40]
call fcn.004072a0
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4149b3
mov ebx, dword [0x55d1f4]
xorps xmm0, xmm0
add ebx, 0x10
movlpd qword [ebp - 0x74], xmm0
push ebx
movlpd qword [ebp - 0x6c], xmm0
movlpd qword [ebp - 0x64], xmm0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x90], 0x519978
movups xmmword [ebp - 0x8c], xmm0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x55d8f8]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [esi + 8]
xor edx, edx
add ecx, 1
mov edi, eax
push 4
setb dl
neg edx
or edx, ecx
push edx
push dword [esi]
call fcn.004eb1db
add esp, 0xc
test eax, eax
je 0x41472f
mov dword [esi], eax
xor ecx, ecx
mov eax, dword [esi + 8]
add eax, 1
push 4
setb cl
neg ecx
or ecx, eax
push ecx
push dword [esi + 4]
call fcn.004eb1db
add esp, 0xc
test eax, eax
je 0x41472f
mov ecx, dword [esi + 8]
mov dword [esi + 4], eax
lea edx, [ecx*4]
mov ecx, dword [esi]
add ecx, edx
je 0x414720
mov dword [ecx], edi
mov eax, dword [esi + 4]
add eax, edx
je 0x41472c
lea ecx, [ebp - 0x90]
mov dword [eax], ecx
inc dword [esi + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x554
lea eax, [ebp - 0x680]
push 0
push eax
call fcn.004e4230
add esp, 0xc
lea ecx, [ebp - 0x680]
call fcn.0041c530
lea ecx, [ebp - 0x680]
call fcn.0041d1f0
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
nop
test ebx, ebx
je 0x41479f
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x74]
push eax
call edi
test eax, eax
jne 0x41479f
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x90]
push esi
inc esi
mov edx, dword [eax + 4]
call edx
test eax, eax
jne 0x414774
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x414770
test eax, eax
je 0x414826
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x90]
call dword [eax]
test eax, eax
jne 0x4147e2
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x70]
cmp eax, 0x118
ja 0x4147fa
je 0x414816
cmp eax, 0xf
je 0x414816
cmp eax, 0xa0
jmp 0x4147ff
cmp eax, 0x200
je 0x414816
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x414770
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x414770
mov eax, dword [0x55d1f4]
add eax, 0x10
push eax
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [0x55d8f8]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edx, dword [edi + 8]
xor esi, esi
test edx, edx
jle 0x414904
mov ebx, dword [edi]
mov ecx, ebx
cmp dword [ecx], eax
je 0x414866
inc esi
add ecx, 4
cmp esi, edx
jl 0x414855
jmp 0x414904
cmp esi, 0xffffffff
je 0x414904
test esi, esi
js 0x414904
cmp esi, edx
jge 0x414904
lea eax, [edx - 1]
cmp esi, eax
je 0x4148c0
sub edx, esi
lea ecx, [ebx + esi*4]
shl edx, 2
lea eax, [edx - 4]
push eax
lea eax, [ecx + 4]
push eax
push edx
push ecx
call fcn.004137e0
mov edx, dword [edi + 8]
mov eax, dword [edi + 4]
sub edx, esi
shl edx, 2
lea ecx, [eax + esi*4]
lea eax, [edx - 4]
push eax
lea eax, [ecx + 4]
push eax
push edx
push ecx
call fcn.004137e0
mov edx, dword [edi + 8]
add esp, 0x20
push 4
lea eax, [edx - 1]
push eax
push dword [edi]
call fcn.004eb1db
mov ecx, eax
add esp, 0xc
mov eax, dword [edi + 8]
test ecx, ecx
jne 0x4148de
cmp eax, 1
jne 0x4148e0
mov dword [edi], ecx
push 4
dec eax
push eax
push dword [edi + 4]
call fcn.004eb1db
mov ecx, eax
add esp, 0xc
mov eax, dword [edi + 8]
test ecx, ecx
jne 0x4148fd
cmp eax, 1
jne 0x414900
mov dword [edi + 4], ecx
dec eax
mov dword [edi + 8], eax
push dword [ebp - 0x24]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call ebx
lea ecx, [ebp - 0x680]
call fcn.0041c8e0
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x414931
push eax
call fcn.004e7c41
add esp, 4
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
test eax, eax
je 0x41495c
push eax
call fcn.004e7c41
add esp, 4
mov dword [ebp - 0x8c], 0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
cmp edx, 8
jb 0x4149aa
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4149a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414a6a
push edx
push ecx
call fcn.004a256a
add esp, 8
mov esi, dword [ebp - 0x6a0]
or edi, 0xffffffff
cmp dword [0x55d908], 0
je 0x4149e8
push 0x557118
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x55d908]
test ecx, ecx
je 0x4149e1
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x55d908], 0
push 0x557118
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x12c]
call fcn.00425000
mov edx, dword [ebp - 0x6a4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x414a15
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1d]
call fcn.004058b0
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a2820
mov esp, ebp
pop ebp
ret 0x10
push 0x80
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x728]
call fcn.004108c0
add esp, 0xc
call fcn.00411300
call fcn.004e75c9
call fcn.004e75c9
push 0x80004005
call fcn.00404d90
call fcn.004e75c9
call fcn.004e75c9
int3