Function at 0x429a60
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca8ce
mov eax, dword fs:[0]
push eax
sub esp, 0x308
mov eax, dword [0x4f016c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x268], ebx
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x2ff
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
lea ecx, [ebx + 0x78]
call fcn.00455fb0
lea ecx, [ebx + 0x78]
call fcn.00452b80
call fcn.0040d860
mov ecx, eax
test ecx, ecx
je 0x42ab70
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x258], eax
mov dword [ebp - 4], 0
call fcn.0040d860
mov ecx, eax
test ecx, ecx
je 0x42ab7a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 1
call fcn.0040d860
mov ecx, eax
test ecx, ecx
je 0x42ab84
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x260], eax
mov byte [ebp - 4], 2
call fcn.0040d860
mov ecx, eax
test ecx, ecx
je 0x42ab8e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 3
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 4
call fcn.00426970
test eax, eax
je 0x42ab98
mov ecx, dword [esi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x429b99
test dx, dx
je 0x429b95
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x429b99
add ecx, 4
add eax, 4
test dx, dx
jne 0x429b73
xor esi, esi
jmp 0x429b9e
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 3
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x429bc2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x429cc1
lea ecx, [ebp - 0x249]
call fcn.004259b0
mov edx, eax
test edx, edx
jne 0x429bdf
xor ecx, ecx
jmp 0x429bf3
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429be4
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.0040e260
lea ecx, [ebp - 0x249]
call fcn.00426dd0
mov edx, eax
test edx, edx
jne 0x429c15
xor ecx, ecx
jmp 0x429c2f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429c20
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.0040e260
lea ecx, [ebp - 0x249]
call fcn.00424e50
mov edx, eax
test edx, edx
jne 0x429c51
xor ecx, ecx
jmp 0x429c65
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429c56
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.0040e260
lea ecx, [ebp - 0x249]
call fcn.004283b0
mov edx, eax
test edx, edx
jne 0x429c97
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040e260
jmp 0x42a735
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429ca0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040e260
jmp 0x42a735
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 5
call fcn.00428f10
push eax
push esi
call fcn.00413c70
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x429d1c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x429e17
lea ecx, [ebp - 0x249]
call fcn.004288f0
mov edx, eax
test edx, edx
jne 0x429d39
xor ecx, ecx
jmp 0x429d4f
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429d40
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x258]
call fcn.0040e260
lea ecx, [ebp - 0x249]
call fcn.00425390
mov edx, eax
test edx, edx
jne 0x429d71
xor ecx, ecx
jmp 0x429d85
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429d76
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x254]
call fcn.0040e260
lea ecx, [ebp - 0x249]
call fcn.004258d0
mov edx, eax
test edx, edx
jne 0x429da7
xor ecx, ecx
jmp 0x429dbf
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429db0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.0040e260
lea ecx, [ebp - 0x249]
call fcn.00426a50
mov edx, eax
test edx, edx
jne 0x429df1
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040e260
jmp 0x42a735
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429df6
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040e260
jmp 0x42a735
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 6
call fcn.004265f0
push eax
push esi
call fcn.00413c70
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x429e72
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x429ed7
lea ecx, [ebp - 0x249]
call fcn.004249f0
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00425d30
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428650
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004289d0
push eax
lea ecx, [ebp - 0x25c]
call fcn.00413c20
jmp 0x42a735
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 7
call fcn.00429530
push eax
push esi
call fcn.00413c70
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x429f32
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x429f97
lea ecx, [ebp - 0x249]
call fcn.004257f0
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004281f0
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00424d70
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00425e10
push eax
lea ecx, [ebp - 0x25c]
call fcn.00413c20
jmp 0x42a735
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 8
call fcn.00426510
push eax
push esi
call fcn.00413c70
mov edx, dword [ebp - 0x250]
add esp, 8
mov byte [ebp - 0x249], al
add edx, 0xfffffff0
mov byte [ebp - 4], 3
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x429ff2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0x249]
test al, al
je 0x42a057
lea ecx, [ebp - 0x249]
call fcn.00429290
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427770
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00425470
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00426270
push eax
lea ecx, [ebp - 0x25c]
call fcn.00413c20
jmp 0x42a735
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 9
call fcn.00426cf0
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a0ef
lea ecx, [ebp - 0x249]
call fcn.004290d0
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00429370
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428810
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427f50
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xa
call fcn.00426890
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a187
lea ecx, [ebp - 0x249]
call fcn.00427230
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428c70
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004274d0
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004275b0
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xb
call fcn.00425b70
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a21f
lea ecx, [ebp - 0x249]
call fcn.00425fd0
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428ab0
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428b90
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00424bb0
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xc
call fcn.004282d0
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a2b7
lea ecx, [ebp - 0x249]
call fcn.00426f90
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427150
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428ff0
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00425a90
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xd
call fcn.00424ad0
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a34f
lea ecx, [ebp - 0x249]
call fcn.00428030
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428d50
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004250f0
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004252b0
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xe
call fcn.00425550
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a3e7
lea ecx, [ebp - 0x249]
call fcn.00427310
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427af0
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004266d0
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00425710
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0xf
call fcn.00426c10
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a47f
lea ecx, [ebp - 0x249]
call fcn.004251d0
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427bd0
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004260b0
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427cb0
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x10
call fcn.004273f0
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a517
lea ecx, [ebp - 0x249]
call fcn.00429450
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00426eb0
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00426b30
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428e30
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x11
call fcn.00425c50
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a5af
lea ecx, [ebp - 0x249]
call fcn.00426350
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427070
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427d90
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428570
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x12
call fcn.00427690
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
test bl, bl
je 0x42a647
lea ecx, [ebp - 0x249]
call fcn.00427a10
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00426190
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00425010
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00425630
jmp 0x42a726
lea eax, [ebp - 0x250]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov esi, eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x13
call fcn.00428490
push eax
push esi
call fcn.00413c70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
mov bl, al
call fcn.00409520
lea ecx, [ebp - 0x249]
test bl, bl
je 0x42a6dc
call fcn.00426430
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00424f30
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00424c90
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427930
jmp 0x42a726
call fcn.00428730
push eax
lea ecx, [ebp - 0x258]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.004291b0
push eax
lea ecx, [ebp - 0x254]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00428110
push eax
lea ecx, [ebp - 0x260]
call fcn.00413c20
lea ecx, [ebp - 0x249]
call fcn.00427e70
push eax
lea ecx, [ebp - 0x25c]
call fcn.00413c20
or ebx, 0xffffffff
mov ax, word [0x4cf63c]
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.004a5110
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0x400000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push dword [ebp - 0x258]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edi, dword [ebp - 0x25c]
lea eax, [ebp - 0x218]
mov esi, dword [ebp - 0x260]
push eax
push edi
push esi
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp - 0x268]
push 0
push 0x493e0
push 0x3e8
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetTimer]
lea eax, [ebp - 0x26c]
push eax
call fcn.00419c50
mov ecx, eax
call fcn.004169c0
mov dword [ebp - 0x250], eax
lea ecx, [ebp - 0x249]
mov byte [ebp - 4], 0x14
call fcn.00425ef0
mov ecx, eax
test ecx, ecx
je 0x42aba2
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42a83e
test dx, dx
je 0x42a832
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42a83e
add eax, 4
add ecx, 4
test dx, dx
jne 0x42a810
mov dword [ebp - 0x264], 0
jmp 0x42a849
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42a86a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x264], 0
jne 0x42aa20
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x274], 4
push eax
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x26c], 4
push eax
lea ecx, [ebp - 0x249]
call fcn.004267b0
push eax
lea ecx, [ebp - 0x249]
call fcn.00427850
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov eax, dword [ebp - 0x264]
mov ecx, 0x1b7740
test eax, eax
cmovne ecx, eax
mov dword [ebp - 0x264], ecx
call fcn.004819d0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x42aa16
push 0x51
push str.d:jenkins.jenkinsworkspace_syscleaner_helperccmousehelpermainwndmainwnd.cpp
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], al
call fcn.0040fb70
push 3
push 0x4d0a10
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.0040fb70
mov byte [ebp - 4], 0x16
call fcn.004819d0
push dword [ebp - 0x264]
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x250]
push str.24h_check_time:__d
push 1
push eax
call fcn.00481890
add esp, 0x10
push 0xdf
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x314]
call fcn.00408b50
mov ebx, eax
mov ecx, dword [ebp - 0x250]
mov edx, 0x4d0968
test ecx, ecx
mov byte [ebp - 4], 0x18
cmovne edx, ecx
push edx
push ebx
call fcn.00407a80
mov ecx, dword [ebp - 0x27c]
add esp, 8
mov eax, dword [ecx]
push ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x314]
call fcn.0040a340
mov edx, dword [ebp - 0x250]
or ebx, 0xffffffff
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42aa00
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x230]
call fcn.004095d0
lea ecx, [ebp - 0x248]
call fcn.004095d0
push 0
push dword [ebp - 0x264]
jmp 0x42aa27
push 0
push 0x1b7740
mov eax, dword [ebp - 0x268]
push 0x3e9
push dword [eax + 4]
mov eax, dword [sym.imp.USER32.dll_SetTimer]
call eax
mov byte [ebp - 0x249], 0
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x19
push eax
call fcn.00457db9
lea eax, [ebp - 0x278]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x249]
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x270]
push eax
push 0x407d30
push 0x5181c4
call fcn.00458ae7
add esp, 0x10
test eax, eax
je 0x42ab50
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1b
push eax
call fcn.00457df3
mov ecx, dword [0x5181c0]
add esp, 4
mov byte [ebp - 4], 3
push 0
push 0
push 1
push 0
push 0x4d22ac
call fcn.0046f170
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x42aad6
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42aaf1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x254]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42ab12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x258]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x42ab34
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00482dad
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x1c
push eax
call fcn.00457e14
add esp, 4
mov byte [ebp - 4], 0x1a
test al, al
jne 0x42abac
call fcn.00458b25
push 0x80004005
call fcn.0040cf40
push 0x80004005
call fcn.0040cf40
push 0x80004005
call fcn.0040cf40
push 0x80004005
call fcn.0040cf40
push 0x80004005
call fcn.0040cf40
push 0x80004005
call fcn.0040cf40
sub esp, 8
lea eax, [ebp - 0x278]
mov ecx, esp
push eax
call fcn.00409120
call fcn.00410e50
int3