Function at 0x100349f0
Capabilities:
Check if file exists
Copy file
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009fc45
mov eax, dword fs:[0]
push eax
sub esp, 0x4b0
mov eax, dword [0x100d07a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2f4], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x338], eax
call fcn.100689b0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10034bce
push 0x60
push str.d:jenkins.jenkinsworkspacelib_commonpop_popexpoppop_popexpoppop_taskbarserialrunner.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000a260
push 3
push 0x100a680c
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.1000a260
mov byte [ebp - 4], 1
call fcn.100689b0
mov edi, eax
lea ecx, [ebp - 0x3e0]
push 0x180
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.10004790
mov esi, eax
push str.LaunchTaskbarProcess_do_old
push esi
mov byte [ebp - 4], 2
call fcn.10005a70
add esp, 8
mov ecx, esi
push dword [ebp + 0x28]
call fcn.100058c0
mov eax, dword [edi]
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x3e0]
call fcn.10005bc0
mov edx, dword [ebp - 0x234]
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x10034b72
mov ecx, dword [ebp - 0x248]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034b68
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035aed
push edx
push ecx
call fcn.1006a15b
add esp, 8
mov edx, dword [ebp - 0x21c]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x10034bce
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034bc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035af2
push edx
push ecx
call fcn.1006a15b
add esp, 8
mov eax, dword [ebp - 0x31c]
push 0x208
push 0
mov dword [eax], 0
lea eax, [ebp - 0x218]
push eax
call fcn.10075650
add esp, 0xc
call fcn.10003000
mov ecx, eax
test ecx, ecx
je 0x10035af7
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2fc], eax
xor eax, eax
mov dword [ebp - 4], 3
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov byte [ebp - 4], 4
call fcn.10011650
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x10034d77
call fcn.10011850
lea eax, [ebp - 0x290]
push eax
call fcn.1000fd00
add esp, 4
mov edx, eax
cmp dword [edx + 0x14], 8
mov byte [ebp - 4], 5
jb 0x10034c6c
mov edx, dword [edx]
test edx, edx
jne 0x10034c74
xor ecx, ecx
jmp 0x10034c8f
mov ecx, edx
lea edi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10034c80
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x2fc]
call fcn.10003220
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 4
call fcn.100051b0
mov edi, dword [ebp - 0x2fc]
lea eax, [ebp - 0x218]
push edi
push eax
call esi
lea eax, [ebp - 0x290]
push eax
call fcn.1000fd00
add esp, 4
push 8
push 0x100a76d8
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.1000a0e0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x240], xmm0
movups xmmword [ebp - 0x230], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0x278]
movq qword [ebp - 0x328], xmm0
movq qword [ebp - 0x220], xmm0
call fcn.100051b0
movups xmm0, xmmword [ebp - 0x240]
xor eax, eax
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
movups xmmword [ebp - 0x278], xmm0
mov word [ebp - 0x230], ax
movq xmm0, qword [ebp - 0x328]
movq qword [ebp - 0x268], xmm0
call fcn.100051b0
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 4
call fcn.100051b0
jmp 0x10034ddd
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x100d32e4]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10034da5
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2fc]
call fcn.10003220
push str.UtilsPop.dll
lea ecx, [ebp - 0x278]
call fcn.1000d580
mov edi, dword [ebp - 0x2fc]
cmp byte [ebp + 0x28], 0
lea eax, [ebp - 0x218]
je 0x10034df0
push str.RunDll.exe
jmp 0x10034df5
push str.RunDll_New.exe
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.1004c350
add esp, 4
or esi, 0xffffffff
test eax, eax
jne 0x10034e1d
mov dword [ebp - 0x2f4], 0x80070005
jmp 0x10035a4d
call fcn.100847e1
cdq
mov ecx, 0x64
idiv ecx
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x48]
cmp edx, dword [eax + 0xc]
jge 0x10034f39
call fcn.100689b0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10034f25
push 0x60
push str.d:jenkins.jenkinsworkspacelib_commonpop_popexpoppop_popexpoppop_taskbarserialrunner.cpp
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], al
call fcn.1000a260
push 3
push 0x100a680c
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 7
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.1000a260
mov byte [ebp - 4], 8
call fcn.100689b0
mov dword [ebp - 0x2f4], eax
lea ecx, [ebp - 0x3e0]
push 0x1a5
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.10004790
mov esi, eax
push str.rand_check
push esi
mov byte [ebp - 4], 9
call fcn.10003800
mov eax, dword [ebp - 0x2f4]
add esp, 8
mov ecx, eax
mov edx, dword [eax]
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x3e0]
call fcn.10005bc0
lea ecx, [ebp - 0x230]
call fcn.10002b00
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 4
call fcn.10002b00
call fcn.10003000
mov ecx, eax
test ecx, ecx
je 0x10035b01
jmp 0x100350d0
call fcn.10011650
test eax, eax
je 0x10034f25
call fcn.10003000
mov ecx, eax
test ecx, ecx
je 0x10035b0b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2f4], eax
push edi
lea eax, [ebp - 0x2f4]
mov byte [ebp - 4], 0xa
push str._s_taskpop.exe
push eax
call fcn.10002ef0
mov esi, dword [ebp - 0x2f4]
lea eax, [ebp - 0x218]
add esp, 0xc
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1003520f
lea ecx, [ebp - 0x218]
mov eax, esi
mov edi, ecx
mov edx, 0x104
sub eax, edi
mov edi, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x10034fd0
movzx eax, word [edi + ecx]
test ax, ax
je 0x10034fd0
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x10034fb2
lea eax, [ecx - 2]
test edx, edx
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
call fcn.100689b0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1003520f
push 0x60
push str.d:jenkins.jenkinsworkspacelib_commonpop_popexpoppop_popexpoppop_taskbarserialrunner.cpp
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], al
call fcn.1000a260
push 3
push 0x100a680c
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.1000a260
mov byte [ebp - 4], 0xc
call fcn.100689b0
mov dword [ebp - 0x2f8], eax
lea ecx, [ebp - 0x3e0]
push 0x1b5
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.10004790
mov dword [ebp - 0x300], eax
push str.rand_check_Is36OSafeRunning
push eax
mov byte [ebp - 4], 0xd
call fcn.10003800
mov eax, dword [ebp - 0x2f8]
add esp, 8
mov ecx, eax
mov edx, dword [eax]
push dword [ebp - 0x300]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x3e0]
call fcn.10005bc0
lea ecx, [ebp - 0x230]
call fcn.10002b00
lea ecx, [ebp - 0x248]
call fcn.10002b00
jmp 0x1003520f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2f4], eax
mov byte [ebp - 4], 0xe
call fcn.100847e1
cdq
mov esi, 0x1a
idiv esi
add edx, 0x61
movzx eax, dx
mov dword [ebp - 0x2f8], eax
call fcn.100847e1
cdq
idiv esi
add edx, 0x61
movzx eax, dx
mov dword [ebp - 0x300], eax
call fcn.100847e1
cdq
idiv esi
add edx, 0x61
movzx eax, dx
mov dword [ebp - 0x308], eax
call fcn.100847e1
cdq
idiv esi
add edx, 0x61
movzx eax, dx
mov dword [ebp - 0x318], eax
call fcn.100847e1
cdq
idiv esi
add edx, 0x61
movzx eax, dx
mov dword [ebp - 0x30c], eax
call fcn.100847e1
cdq
idiv esi
add edx, 0x61
movzx esi, dx
call fcn.100847e1
cdq
mov ecx, 0x1a
idiv ecx
mov eax, dword [ebp - 0x2f8]
movzx eax, ax
add edx, 0x61
push eax
mov eax, dword [ebp - 0x300]
movzx eax, ax
push eax
mov eax, dword [ebp - 0x308]
movzx eax, ax
push eax
mov eax, dword [ebp - 0x318]
movzx eax, ax
push eax
mov eax, dword [ebp - 0x30c]
movzx eax, ax
push eax
push esi
movzx ecx, dx
lea eax, [ebp - 0x2f4]
push ecx
push edi
push str._s_c_c_c_c_c_c_c32.exe
push eax
call fcn.10002ef0
mov esi, dword [ebp - 0x2f4]
lea eax, [ebp - 0x218]
add esp, 0x28
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1003520f
lea ecx, [ebp - 0x218]
mov eax, esi
mov edi, ecx
mov edx, 0x104
sub eax, edi
mov edi, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x10035202
movzx eax, word [edi + ecx]
test ax, ax
je 0x10035202
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x100351e4
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
or eax, 0xffffffff
mov byte [ebp - 4], 4
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1003522b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.10003000
mov ecx, eax
test ecx, ecx
je 0x10035b15
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x314], eax
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 0xf
push str.ASYVtqiwK6lBtb5dFTHFA
push eax
call fcn.1000ffb0
mov dword [ebp - 0x2f4], eax
lea eax, [ebp - 0x2f0]
mov byte [ebp - 4], 0x10
push str.FgMhGktfS7WpbtnB5nl9vA
push eax
call fcn.1000ffb0
mov esi, eax
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 0x11
push str.OqKqQrPZZyXul_2s7EeA
push eax
call fcn.1000ffb0
mov dword [ebp - 0x30c], eax
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 0x12
push str.eLvDyefcnMI
push eax
call fcn.1000ffb0
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x13
push str.foWRosXjGdnzVNJSiQ_iA
push eax
call fcn.1000ffb0
mov dword [ebp - 0x324], eax
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x14
push str.OnlIWkMnEXs
push eax
call fcn.1000ffb0
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x15
push str.d8x2Uv9vY8tkg5c8TJlanMPgyYqJTQ
push eax
call fcn.1000ffb0
mov dword [ebp - 0x300], eax
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 0x16
push str.cvaszm4J6tM
push eax
call fcn.1000ffb0
add esp, 0x40
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f4]
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
jb 0x10035339
mov eax, dword [eax]
mov dword [ebp - 0x2f4], eax
cmp dword [esi + 0x14], 8
jb 0x10035341
mov esi, dword [esi]
mov eax, dword [ebp - 0x30c]
cmp dword [eax + 0x14], 8
jb 0x1003534f
mov eax, dword [eax]
mov ecx, dword [ebp - 0x318]
cmp dword [ecx + 0x14], 8
jb 0x1003535d
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x324]
cmp dword [edx + 0x14], 8
jb 0x1003536b
mov edx, dword [edx]
mov edi, dword [ebp - 0x308]
cmp dword [edi + 0x14], 8
jb 0x1003537f
mov edi, dword [edi]
mov dword [ebp - 0x308], edi
mov edi, dword [ebp - 0x300]
cmp dword [edi + 0x14], 8
jb 0x10035393
mov edi, dword [edi]
mov dword [ebp - 0x300], edi
cmp dword [ebp - 0x264], 8
lea edi, [ebp - 0x278]
cmovae edi, dword [ebp - 0x278]
mov dword [ebp - 0x324], edi
mov edi, dword [ebp - 0x2f8]
cmp dword [edi + 0x14], 8
mov edi, dword [ebp - 0x2fc]
jb 0x100353d3
mov edi, dword [ebp - 0x2f8]
mov edi, dword [edi]
mov dword [ebp - 0x2f8], edi
mov edi, dword [ebp - 0x2fc]
push dword [ebp - 0x32c]
push dword [ebp - 0x2f4]
push dword [ebp - 0x330]
push esi
push dword [ebp - 0x334]
push eax
push dword [ebp + 0x10]
lea eax, [ebp - 0x314]
push ecx
push dword [ebp - 0x310]
push edx
push dword [ebp - 0x304]
push dword [ebp - 0x308]
push dword [ebp - 0x300]
push dword [ebp - 0x324]
push dword [ebp - 0x2f8]
push str._s__s___s__s_p__s__s___s_u__s__s___s__s___s__s_
push eax
call fcn.10002ef0
add esp, 0x44
lea ecx, [ebp - 0x290]
call fcn.100051b0
lea ecx, [ebp - 0x260]
call fcn.100051b0
lea ecx, [ebp - 0x230]
call fcn.100051b0
lea ecx, [ebp - 0x248]
call fcn.100051b0
lea ecx, [ebp - 0x2c0]
call fcn.100051b0
lea ecx, [ebp - 0x2d8]
call fcn.100051b0
lea ecx, [ebp - 0x2f0]
call fcn.100051b0
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0xf
call fcn.100051b0
mov eax, dword [0x100d372c]
test al, 1
jne 0x100354bb
or eax, 1
mov dword [0x100d372c], eax
push str.8FA908C0_EAC5_47F9_8074_FFC5EBBEB255
mov ecx, 0x100d3728
mov byte [ebp - 4], 0x18
call fcn.10002930
push 0x100a4e10
call fcn.1006a4c5
add esp, 4
mov byte [ebp - 4], 0xf
cmp byte [ebp + 0x28], 0
jne 0x1003551a
lea eax, [ebp - 0x2a8]
push 0x20
push eax
call fcn.10010e80
add esp, 8
mov edx, eax
cmp dword [edx + 0x14], 8
mov byte [ebp - 4], 0x19
jb 0x100354e0
mov edx, dword [edx]
test edx, edx
jne 0x100354e8
xor ecx, ecx
jmp 0x100354ff
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100354f0
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, 0x100d3728
call fcn.10003220
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0xf
call fcn.100051b0
push 0x100d3728
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.1004fd90
add esp, 0xc
mov byte [ebp - 4], 0x1a
call fcn.10003000
mov ecx, eax
test ecx, ecx
je 0x10035b1f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2f8], eax
push str.940513FC_AF92_41C8_89EC_8371DF5938D4
push dword [0x100d3728]
lea eax, [ebp - 0x2f8]
mov byte [ebp - 4], 0x1b
push dword [ebp - 0x320]
push str.___et_s___yek_s___mod_s
push eax
call fcn.10002ef0
push 0x40
lea eax, [ebp - 0x420]
mov dword [ebp - 0x424], 0x44
push 0
push eax
call fcn.10075650
mov esi, dword [ebp - 0x2f8]
xorps xmm0, xmm0
add esp, 0x20
movups xmmword [ebp - 0x348], xmm0
cmp dword [esi - 4], 1
jle 0x100355c5
push dword [esi - 0xc]
lea ecx, [ebp - 0x2f8]
call fcn.10002e70
mov esi, dword [ebp - 0x2f8]
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x424]
push eax
push 0
push 0
push 0
push 1
push 0
push 0
push esi
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x310], eax
call fcn.100689b0
push 1
mov ecx, eax
mov edx, dword [eax]
mov edx, dword [edx + 8]
call edx
movzx ecx, al
sub ecx, 1
jne 0x1003574b
push 0x60
mov dword [ebp - 0x250], ecx
mov byte [ebp - 0x260], cl
lea ecx, [ebp - 0x260]
push str.d:jenkins.jenkinsworkspacelib_commonpop_popexpoppop_popexpoppop_taskbarserialrunner.cpp
mov dword [ebp - 0x24c], 0xf
call fcn.1000a260
push 3
push 0x100a680c
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.1000a260
mov byte [ebp - 4], 0x1d
call fcn.100689b0
mov dword [ebp - 0x304], eax
lea ecx, [ebp - 0x248]
xor eax, eax
mov dword [ebp - 0x238], 0
mov word [ebp - 0x248], ax
lea eax, [ebp - 0x218]
push eax
mov dword [ebp - 0x234], 7
call fcn.1000d580
push 0x1e8
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.10004790
mov dword [ebp - 0x2f4], eax
push str.LaunchTaskbarProcess_CreateProcessW_path:
push eax
mov byte [ebp - 4], 0x1f
call fcn.10005a70
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x248]
mov eax, 0x100a68c0
cmovae ecx, dword [ebp - 0x248]
test ecx, ecx
cmovne eax, ecx
push eax
push dword [ebp - 0x2f4]
call fcn.10003800
mov ecx, dword [ebp - 0x304]
add esp, 0x10
mov eax, dword [ecx]
push dword [ebp - 0x2f4]
call dword [eax + 0x1c]
lea ecx, [ebp - 0x3e0]
call fcn.10005bc0
lea ecx, [ebp - 0x248]
call fcn.100051b0
lea ecx, [ebp - 0x230]
call fcn.10002b00
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x1b
call fcn.10002b00
call fcn.100689b0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10035851
push 0x60
push str.d:jenkins.jenkinsworkspacelib_commonpop_popexpoppop_popexpoppop_taskbarserialrunner.cpp
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.1000a260
push 3
push 0x100a680c
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
call fcn.1000a260
mov byte [ebp - 4], 0x21
call fcn.100689b0
mov dword [ebp - 0x304], eax
lea ecx, [ebp - 0x3e0]
push 0x1e9
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.10004790
mov dword [ebp - 0x2f4], eax
push str.cmd_line:
push eax
mov byte [ebp - 4], 0x22
call fcn.10005a70
test esi, esi
mov eax, 0x100a68c0
cmovne eax, esi
push eax
push dword [ebp - 0x2f4]
call fcn.10003800
mov ecx, dword [ebp - 0x304]
add esp, 0x10
mov eax, dword [ecx]
push dword [ebp - 0x2f4]
call dword [eax + 0x1c]
lea ecx, [ebp - 0x3e0]
call fcn.10005bc0
lea ecx, [ebp - 0x260]
call fcn.10002b00
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x1b
call fcn.10002b00
cmp dword [ebp - 0x310], 0
jne 0x1003599e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x304], eax
call fcn.10024dc0
push 1
push 0
push str.launch_taskpop_rundll_fial
mov ecx, dword [eax]
push str.taskpop
push eax
call dword [ecx]
call fcn.100689b0
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10035983
push 0x60
push str.d:jenkins.jenkinsworkspacelib_commonpop_popexpoppop_popexpoppop_taskbarserialrunner.cpp
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], al
call fcn.1000a260
push 3
push 0x100a680c
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
call fcn.1000a260
mov byte [ebp - 4], 0x24
call fcn.100689b0
mov dword [ebp - 0x310], eax
lea ecx, [ebp - 0x4bc]
push 0x1ee
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.10004790
mov dword [ebp - 0x2f4], eax
push str.LaunchTaskbarProcess_CreateProcessW_fail__errno_
push eax
mov byte [ebp - 4], 0x25
call fcn.10005a70
mov ecx, dword [ebp - 0x2f4]
add esp, 8
push dword [ebp - 0x304]
call fcn.1000e2e0
mov ecx, dword [ebp - 0x310]
push dword [ebp - 0x2f4]
mov eax, dword [ecx]
call dword [eax + 0x1c]
lea ecx, [ebp - 0x4bc]
call fcn.10005bc0
lea ecx, [ebp - 0x260]
call fcn.10002b00
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x1b
call fcn.10002b00
lea eax, [ebp - 0x218]
push eax
call fcn.100408a0
add esp, 4
mov dword [ebp - 0x2f4], 0x80004005
jmp 0x100359ed
push dword [ebp - 0x344]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x31c]
lea edx, [ebp - 0x218]
mov eax, dword [ebp - 0x348]
mov dword [ecx], eax
lea ecx, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x100359c1
sub edx, ecx
lea eax, [ebp - 0x218]
mov ecx, dword [ebp - 0x338]
sar edx, 1
push edx
push eax
call fcn.10003220
mov dword [ebp - 0x2f4], 0
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0x1a
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10035a0b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x320]
mov eax, esi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10035a2c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x314]
mov eax, esi
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10035a4d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x264]
mov byte [ebp - 4], 3
cmp edx, 8
jb 0x10035a91
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10035a87
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035b29
push edx
push ecx
call fcn.1006a15b
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
add edi, 0xfffffff0
mov word [ebp - 0x278], ax
mov dword [ebp - 4], 0xffffffff
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x10035aca
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006a4da
mov esp, ebp
pop ebp
ret 0x24
call fcn.10078889
call fcn.10078889
push 0x80004005
call fcn.10002c70
push 0x80004005
call fcn.10002c70
push 0x80004005
call fcn.10002c70
push 0x80004005
call fcn.10002c70
push 0x80004005
call fcn.10002c70
call fcn.10078889
int3