Function at 0x10014090
Capabilities:
Check mutex on windows
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e4edc
mov eax, dword fs:[0]
push eax
sub esp, 0x2e4
mov eax, dword [0x101214c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x29c], ecx
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 4], 0
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 0x2b4], 0
call fcn.10008cc0
mov ecx, eax
test ecx, ecx
je 0x100158eb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esi], eax
push 0x208
lea eax, [ebp - 0x218]
mov dword [ebp - 4], 0
push 0
push eax
mov dword [ebp - 0x2b4], 1
call fcn.100bd130
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push dword [0x10124d9c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push str.LogRecommend.log
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x218]
push eax
call fcn.1001b600
call fcn.1001b300
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x100142d1
push 0x65
push str.d:jenkins.jenkinsworkspace_aicleaner_setup_pop_recommend_setup_pop_recommend_setuppop_setuppop.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000ef30
push 3
push 0x100edf64
lea ecx, [ebp - 0x260]
mov dword [ebp - 4], 1
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
call fcn.1000ef30
mov byte [ebp - 4], 2
call fcn.1001b300
mov edi, eax
lea ecx, [ebp - 0xa8]
push 0x15
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.1000c070
mov esi, eax
push str.start_CSetupPop::Start
push esi
mov byte [ebp - 4], 3
call fcn.1000afd0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.1000ce10
mov edx, dword [ebp - 0x24c]
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x10014278
mov ecx, dword [ebp - 0x260]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1001426e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100158f5
push edx
push ecx
call fcn.1007ee10
add esp, 8
mov edx, dword [ebp - 0x21c]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x100142d1
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100142c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100158fa
push edx
push ecx
call fcn.1007ee10
add esp, 8
mov esi, dword [ebp - 0x29c]
cmp dword [esi + 4], 0
jne 0x10014324
push dword [ebp - 0x2b8]
lea eax, [esi + 0x20]
push eax
push 0x10120040
push section..data
push 0x101253f0
call fcn.10012ea0
movzx edi, ax
add esp, 0x14
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x1001441e
call fcn.10017153
mov dword [esi + 0x14], eax
test eax, eax
jne 0x1001441e
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x100144b4
call fcn.1001b300
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10014414
push 0x65
push str.d:jenkins.jenkinsworkspace_aicleaner_setup_pop_recommend_setup_pop_recommend_setuppop_setuppop.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000ef30
push 3
push 0x100edf64
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 4
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.1000ef30
mov byte [ebp - 4], 5
call fcn.1001b300
mov edi, eax
lea ecx, [ebp - 0xa8]
push 0x1c
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.1000c070
mov esi, eax
push str.Isnt_window
push esi
mov byte [ebp - 4], 6
call fcn.1000afd0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.1000ce10
lea ecx, [ebp - 0x248]
call fcn.10008390
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.10008390
push str.fail_create
jmp 0x100158a2
push 0
push 0
push eax
call fcn.10017255
test di, di
je 0x10014324
add esi, 8
je 0x100158ff
mov ecx, dword [ebp - 0x29c]
mov dword [esi], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x10120004
mov dword [esi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x1012001c]
mov dword [esi + 8], eax
push 0x10120004
mov dword [0x1012001c], esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x10120030]
mov eax, dword [0x10120038]
mov edx, dword [0x1012002c]
sub eax, ecx
push 0
push dword [0x101253f4]
push 0
push 0
push eax
mov eax, dword [0x10120034]
sub eax, edx
push eax
push ecx
push edx
push SysReAllocStringLen
push 0
push edi
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, dword [ebp - 0x29c]
jmp 0x10014324
test ebx, ebx
je 0x100157ad
cmp word [ebx], 0
je 0x100157ad
call fcn.1001b300
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1001464d
push 0x65
push str.d:jenkins.jenkinsworkspace_aicleaner_setup_pop_recommend_setup_pop_recommend_setuppop_setuppop.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000ef30
push 3
push 0x100edf64
lea ecx, [ebp - 0x260]
mov dword [ebp - 4], 7
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
call fcn.1000ef30
mov byte [ebp - 4], 8
call fcn.1001b300
mov edi, eax
lea ecx, [ebp - 0xa8]
push 0xb5
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.1000c070
mov esi, eax
push str.Run_cmd_
push esi
mov byte [ebp - 4], 9
call fcn.1000afd0
push ebx
push esi
call fcn.1000afd0
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.1000ce10
mov edx, dword [ebp - 0x24c]
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x100145d3
mov ecx, dword [ebp - 0x260]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100145c9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001590b
push edx
push ecx
call fcn.1007ee10
add esp, 8
mov edx, dword [ebp - 0x21c]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x1001462c
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10014622
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015910
push edx
push ecx
call fcn.1007ee10
add esp, 8
mov esi, dword [ebp - 0x29c]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
push ebx
lea ecx, [ebp - 0x248]
call fcn.10010e40
lea eax, [ebp - 0x248]
mov dword [ebp - 4], 0xa
lea edi, [esi + 0x30]
push eax
mov ecx, edi
call fcn.1009ec50
mov edx, dword [ebp - 0x234]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x100146b5
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100146ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015915
push edx
push ecx
call fcn.1007ee10
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
push 0x100ee870
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.10010e40
add esi, 0x60
mov dword [ebp - 4], 0xb
push esi
lea eax, [ebp - 0x278]
mov ecx, edi
push eax
call fcn.1009eb10
mov edx, dword [ebp - 0x264]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x1001473f
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10014735
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001591a
push edx
push ecx
call fcn.1007ee10
add esp, 8
mov ecx, dword [ebp - 0x29c]
cmp dword [ecx + 0x70], 0
je 0x100157ad
lea ecx, [ebp - 0x2b0]
call fcn.10024400
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x27a], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x10
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x294], eax
lea eax, [ebp - 0x27a]
mov dword [ebp - 0x290], eax
lea eax, [ebp - 0x294]
push eax
push 0x10007c30
push 0x10124d88
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x10015791
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x12
push eax
call fcn.10017b43
mov ecx, dword [0x10124d84]
add esp, 4
mov byte [ebp - 4], 0xf
push 1
call fcn.10013980
test eax, eax
jne 0x100148db
call fcn.1001b300
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x100148b9
push 0x65
push str.d:jenkins.jenkinsworkspace_aicleaner_setup_pop_recommend_setup_pop_recommend_setuppop_setuppop.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000ef30
push 3
push 0x100edf64
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.1000ef30
mov byte [ebp - 4], 0x16
call fcn.1001b300
mov edi, eax
lea ecx, [ebp - 0xa8]
push 0x2b
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.1000c070
mov esi, eax
push str.InitNet_failed
push esi
mov byte [ebp - 4], 0x17
call fcn.1000afd0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.1000ce10
lea ecx, [ebp - 0x248]
call fcn.10008390
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xf
call fcn.10008390
push str.fail_init_net
mov esi, dword [ebp - 0x2a0]
mov ecx, esi
call fcn.10013f40
lea ecx, [ebp - 0x2b0]
call fcn.10024460
jmp 0x100158af
cmp dword [esi + 0x14], 8
jb 0x100148e3
mov esi, dword [esi]
push ecx
mov edi, esp
mov dword [ebp - 0x298], esp
mov dword [ebp - 0x290], edi
call fcn.10008cc0
mov ecx, eax
test ecx, ecx
je 0x1001591f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x18
test esi, esi
je 0x10014928
test esi, 0xffff0000
jne 0x10014928
movzx eax, si
mov ecx, edi
push eax
call fcn.10009e80
jmp 0x10014930
push esi
mov ecx, edi
call fcn.10013f40
mov byte [ebp - 0x27a], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x1a
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x27a]
mov dword [ebp - 0x2a8], eax
lea eax, [ebp - 0x2ac]
push eax
push 0x10010a10
push 0x10124e08
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x10015775
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x1c
push eax
call fcn.10017b43
mov ecx, dword [0x10124e04]
add esp, 4
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0xf
call fcn.10008da0
test al, al
jne 0x10014a94
call fcn.1001b300
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10014a8a
push 0x65
push str.d:jenkins.jenkinsworkspace_aicleaner_setup_pop_recommend_setup_pop_recommend_setuppop_setuppop.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000ef30
push 3
push 0x100edf64
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.1000ef30
mov byte [ebp - 4], 0x20
call fcn.1001b300
mov edi, eax
lea ecx, [ebp - 0xa8]
push 0x32
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.1000c070
mov esi, eax
push str.request_fail
push esi
mov byte [ebp - 4], 0x21
call fcn.1000afd0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.1000ce10
lea ecx, [ebp - 0x248]
call fcn.10008390
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xf
call fcn.10008390
push str.fail_init_config
jmp 0x100148be
call fcn.10008cc0
mov ecx, eax
test ecx, ecx
je 0x10015929
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2a4], eax
mov eax, str.http:__ss.pccleaner.cn_url3_pidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionactionex_ary_app_aicleanerapp
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2a4]
test eax, 0xffff0000
jne 0x10014ad2
movzx eax, ax
push eax
call fcn.10009e80
jmp 0x10014adc
push str.http:__ss.pccleaner.cn_url3_pidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionactionex_ary_app_aicleanerapp
call fcn.10013f40
mov byte [ebp - 0x27a], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x24
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x27a]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x10010a10
push 0x10124e08
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x10015759
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x26
push eax
call fcn.10017b43
mov esi, dword [0x10124e04]
add esp, 4
add esi, 8
mov byte [ebp - 4], 0x23
cmp dword [esi + 0x14], 8
jb 0x10014b54
mov esi, dword [esi]
test esi, esi
jne 0x10014b5c
xor ecx, ecx
jmp 0x10014b70
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10014b61
sub ecx, edx
sar ecx, 1
mov edi, dword [ebp - 0x2a4]
mov eax, esi
sub eax, edi
sar eax, 1
mov dword [ebp - 0x298], eax
mov ebx, dword [edi - 0xc]
mov dword [ebp - 0x2a8], ebx
test ecx, ecx
js 0x10015933
test esi, esi
jne 0x10014ba1
xor edx, edx
mov dword [ebp - 0x290], edx
jmp 0x10014bb3
push ecx
push esi
call fcn.100c064c
add esp, 8
mov dword [ebp - 0x290], eax
mov edx, eax
mov ecx, Ordinal_1
sub ecx, edx
cmp ecx, ebx
jl 0x1001593d
add ebx, edx
js 0x10015947
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, ebx
or eax, ecx
jge 0x10014bf3
push ebx
lea ecx, [ebp - 0x2a4]
call fcn.1000a220
mov edi, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x2a8]
cmp eax, ecx
ja 0x10014c06
lea esi, [edi + eax*2]
push edx
push esi
push edx
lea eax, [edi + ecx*2]
push eax
call fcn.10013850
add esp, 0x10
cmp ebx, dword [edi - 8]
jg 0x10015933
xor eax, eax
mov dword [edi - 0xc], ebx
mov word [edi + ebx*2], ax
mov eax, dword [0x10124ed8]
test al, 1
jne 0x10014c42
or eax, 1
mov dword [0x10124ed4], 0
mov dword [0x10124ed8], eax
mov byte [ebp - 0x27a], 0
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 0x29
push eax
call fcn.10017b09
lea eax, [ebp - 0x294]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x27a]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x100130f0
push 0x10124ed4
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x1001572a
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 0x2b
push eax
call fcn.10017b43
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x2e
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x2a8], eax
lea eax, [ebp - 0x2ac]
push eax
push 0x10010680
push 0x10124dfc
call fcn.10017f95
add esp, 0x14
test eax, eax
je 0x1001570e
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x30
push eax
call fcn.10017b43
mov ecx, dword [0x10124df8]
add esp, 4
mov byte [ebp - 4], 0x23
push edi
push 0x10124edc
push 1
call fcn.1001c4a0
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x33
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x10010680
push 0x10124dfc
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x100156f2
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x35
push eax
call fcn.10017b43
mov ecx, dword [0x10124df8]
add esp, 4
mov byte [ebp - 4], 0x23
push 0
push 0
push 1
push 0
push str.start
call fcn.1001c4c0
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x38
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x10010a10
push 0x10124e08
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x100156d6
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x3a
push eax
call fcn.10017b43
mov eax, dword [0x10124e04]
mov byte [ebp - 4], 0x23
push dword [eax + 0xec]
call fcn.10016cc0
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x3d
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x10010a10
push 0x10124e08
call fcn.10017f95
add esp, 0x18
test eax, eax
je 0x100156ba
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x3f
push eax
call fcn.10017b43
mov eax, dword [0x10124e04]
add esp, 4
mov byte [ebp - 4], 0x23
mov al, byte [eax]
test al, al
jne 0x10014fa3
call fcn.1001b300
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10014f61
push 0x65
push str.d:jenkins.jenkinsworkspace_aicleaner_setup_pop_recommend_setup_pop_recommend_setuppop_setuppop.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000ef30
push 3
push 0x100edf64
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.1000ef30
mov byte [ebp - 4], 0x43
call fcn.1001b300
mov ebx, eax
lea ecx, [ebp - 0xa8]
push 0x48
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.1000c070
mov esi, eax
push str.enable__false__exit
push esi
mov byte [ebp - 4], 0x44
call fcn.1000afd0
mov edx, dword [ebx]
add esp, 8
mov ecx, ebx
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.1000ce10
lea ecx, [ebp - 0x248]
call fcn.10008390
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x23
call fcn.10008390
mov esi, dword [ebp - 0x2a0]
mov ecx, esi
push str.no_enable
call fcn.10013f40
mov byte [ebp - 4], 0xf
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x100148cb
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2b0]
call fcn.10024460
jmp 0x100158af
mov eax, dword [0x10124f04]
test al, 1
jne 0x10014fbe
or eax, 1
mov dword [0x10124f00], 0
mov dword [0x10124f04], eax
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x45
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x100130a0
push 0x10124f00
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x1001569e
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x47
push eax
call fcn.10017b43
add esp, 4
mov byte [ebp - 4], 0x23
call fcn.10008cc0
mov ecx, eax
test ecx, ecx
je 0x10015951
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2a8], eax
mov eax, 0x10124f08
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a8]
test eax, 0xffff0000
jne 0x10015063
movzx eax, ax
push eax
call fcn.10009e80
jmp 0x1001506d
push 0x10124f08
call fcn.10013f40
push dword [ebp - 0x2a8]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x298], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
or ebx, 0xffffffff
cmp eax, 0xb7
jne 0x10015226
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x4d
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x10010680
push 0x10124dfc
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x100153b4
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x4f
push eax
call fcn.10017b43
mov ecx, dword [0x10124df8]
add esp, 4
mov byte [ebp - 4], 0x4c
push 0
push 0
push 1
push 0
push str.full_ad_exists
call fcn.1001c4c0
mov eax, dword [0x10124f70]
test al, 1
jne 0x10015131
or eax, 1
mov dword [0x10124f6c], 0
mov dword [0x10124f70], eax
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x52
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x100131b0
push 0x10124f6c
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x10015390
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x54
push eax
call fcn.10017b43
add esp, 4
mov byte [ebp - 4], 0x4c
call fcn.10008cc0
mov ecx, eax
test ecx, ecx
je 0x1001595b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x290], eax
mov eax, 0x10124f78
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x290]
test eax, 0xffff0000
jne 0x100151d6
movzx eax, ax
push eax
call fcn.10009e80
jmp 0x100151e0
push 0x10124f78
call fcn.10013f40
mov edi, dword [ebp - 0x290]
push edi
push 0
push 2
mov byte [ebp - 4], 0x4c
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov esi, eax
test esi, esi
je 0x10015209
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x10015220
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x2a4]
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x58
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x10010680
push 0x10124dfc
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x10015682
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x5a
push eax
call fcn.10017b43
mov ecx, dword [0x10124df8]
add esp, 4
mov byte [ebp - 4], 0x4c
push 0
push 0
push 1
push 0
push str.ready_create
call fcn.1001c4c0
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov esi, eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax + 0x28]
test eax, eax
je 0x100152c9
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x29c]
mov dword [eax + 0x28], esi
lea eax, [ebp - 0x290]
push eax
call fcn.10013200
mov esi, dword [ebp - 0x29c]
add esp, 4
add esi, 0x2c
cmp esi, eax
je 0x10015305
mov edx, dword [eax]
mov dword [eax], 0
mov ecx, dword [esi]
mov dword [esi], edx
test ecx, ecx
je 0x10015305
mov eax, dword [ecx]
push 1
call dword [eax + 0x18]
mov ecx, dword [ebp - 0x290]
test ecx, ecx
je 0x10015316
mov eax, dword [ecx]
push 1
call dword [eax + 0x18]
cmp dword [esi], 0
jne 0x100153cd
mov esi, dword [ebp - 0x2a0]
mov ecx, esi
push str.fail_create
call fcn.10013f40
mov eax, dword [ebp - 0x298]
test eax, eax
je 0x10015342
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x2a8]
mov eax, ebx
mov byte [ebp - 4], 0x23
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10015363
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x100148cb
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2b0]
call fcn.10024460
jmp 0x100158af
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x55
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x53
test al, al
je 0x1001597b
jmp 0x10015965
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x50
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x4e
jmp 0x100153a7
mov byte [ebp - 0x279], 0
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x5d
push eax
call fcn.10017b09
lea eax, [ebp - 0x284]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x279]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
push 0x10010a10
push 0x10124e08
call fcn.10017f95
add esp, 0x10
test eax, eax
je 0x10015666
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x5f
push eax
call fcn.10017b43
mov eax, dword [0x10124e04]
mov byte [ebp - 4], 0x4c
push dword [eax + 0xec]
call fcn.10016cc0
mov ebx, dword [ebp - 0x29c]
add esp, 8
mov ecx, dword [esi]
push dword [ebx + 0x28]
push dword [ebx + 4]
call fcn.10011930
push 0
push 0x1388
push 0x40a
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
xorps xmm0, xmm0
mov dword [ebp - 0x2f0], 0x100ee3d4
movups xmmword [ebp - 0x2ec], xmm0
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 0
mov ebx, dword [sym.imp.USER32.dll_PeekMessageW]
mov edx, 1
mov byte [ebp - 4], 0x62
xor esi, esi
mov dword [ebp - 0x290], edx
nop dword [eax + eax]
test edx, edx
je 0x100154e4
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x2d4]
push eax
call ebx
test eax, eax
jne 0x100154e4
mov eax, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x2f0]
push esi
call dword [eax + 4]
inc esi
test eax, eax
jne 0x100154b4
mov dword [ebp - 0x290], eax
push 0
push 0
push 0
lea eax, [ebp - 0x2d4]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
mov edx, dword [ebp - 0x290]
cmp eax, 0xffffffff
je 0x100154b0
test eax, eax
je 0x10015590
lea eax, [ebp - 0x2d4]
push eax
mov eax, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x2f0]
call dword [eax]
test eax, eax
jne 0x1001553d
lea eax, [ebp - 0x2d4]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x2d4]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x2d0]
cmp eax, 0x118
ja 0x10015558
je 0x1001557a
cmp eax, 0xf
je 0x1001557a
cmp eax, 0xa0
jmp 0x1001555d
cmp eax, 0x200
je 0x1001557a
mov ecx, 1
xor eax, eax
test ecx, ecx
mov edx, ecx
mov dword [ebp - 0x290], edx
cmove eax, esi
mov esi, eax
jmp 0x100154b0
mov edx, dword [ebp - 0x290]
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x100154b0
mov ecx, dword [ebp - 0x2a0]
push str.succ
call fcn.10013f40
mov eax, dword [ebp - 0x2e0]
test eax, eax
je 0x100155bd
push eax
call fcn.100c31f1
add esp, 4
mov dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 0
test eax, eax
je 0x100155ee
push eax
call fcn.100c31f1
add esp, 4
mov dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 0
test eax, eax
je 0x10015613
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x2a8]
or esi, 0xffffffff
mov byte [ebp - 4], 0x23
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10015637
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x10015650
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2b0]
call fcn.10024460
mov esi, dword [ebp - 0x2a0]
jmp 0x100158af
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x60
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x5e
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x5b
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x59
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x48
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x46
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x40
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x3e
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x3b
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x39
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x36
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x34
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x31
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x2f
jmp 0x100153a7
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 0x2c
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x2a
test al, al
je 0x1001597b
sub esp, 8
lea eax, [ebp - 0x294]
mov ecx, esp
jmp 0x10015970
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x27
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x25
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x1d
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x1b
jmp 0x100153a7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x13
push eax
call fcn.10017b64
add esp, 4
mov byte [ebp - 4], 0x11
jmp 0x100153a7
call fcn.1001b300
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1001589d
push 0x65
push str.d:jenkins.jenkinsworkspace_aicleaner_setup_pop_recommend_setup_pop_recommend_setuppop_setuppop.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000ef30
push 3
push 0x100edf64
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.1000ef30
mov byte [ebp - 4], 0xd
call fcn.1001b300
mov edi, eax
lea ecx, [ebp - 0xa8]
push 0x23
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.1000c070
mov esi, eax
push str.parse_params_failed__cmd:
push esi
mov byte [ebp - 4], 0xe
call fcn.1000afd0
test ebx, ebx
mov ecx, 0x100edec8
cmovne ecx, ebx
push ecx
push esi
call fcn.1000afd0
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.1000ce10
lea ecx, [ebp - 0x248]
call fcn.10008390
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.10008390
push str.fail_params
mov esi, dword [ebp - 0x2a0]
mov ecx, esi
call fcn.10013f40
mov ebx, dword [ebp - 0x29c]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100158cb
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007f181
mov esp, ebp
pop ebp
ret 8
push 0x80004005
call fcn.100088c0
call fcn.100c0449
call fcn.100c0449
push 1
push 0xc0000005
call fcn.1000db80
call fcn.100c0449
call fcn.100c0449
call fcn.100c0449
call fcn.100c0449
push 0x80004005
call fcn.100088c0
push 0x80004005
call fcn.100088c0
push 0x80070057
call fcn.100088c0
push 0x80070057
call fcn.100088c0
push 0x80070057
call fcn.100088c0
push 0x80004005
call fcn.100088c0
push 0x80004005
call fcn.100088c0
sub esp, 8
lea eax, [ebp - 0x284]
mov ecx, esp
push eax
call fcn.100081e0
call fcn.1000adf0
call fcn.10017fd6
int3