Function at 0x414a80
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bc432
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x50c080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x20c], edi
mov al, byte [0x510925]
lea ecx, [ebp - 0x120]
mov esi, dword [0x510928]
mov edx, dword [ebp + 8]
mov byte [ebp - 0x1ff], al
mov byte [ebp - 0x234], al
mov al, byte [0x510939]
mov byte [ebp - 0x1fd], al
mov al, byte [0x51094a]
mov byte [ebp - 0x204], 0
push dword [ebp - 0x204]
mov dword [ebp - 0x22c], esi
mov byte [ebp - 0x200], al
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0x50d4f0
call fcn.0041bcf0
add esp, 4
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040d620
mov byte [ebp - 0x204], 0
lea ecx, [ebp - 0x224]
push dword [ebp - 0x204]
mov byte [ebp - 4], 1
call fcn.0041c1d0
add esp, 4
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xc0]
call fcn.0041c690
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x414bac
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414ba2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415fe9
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp byte [ebp - 0x1fd], 0
je 0x414c7d
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0xc0]
call fcn.0041cbc0
test al, al
jne 0x414c7d
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414bec
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x44
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Could_not_find_local_installer_service__downloading_it_instead
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x414c76
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414c6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415fee
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov byte [ebp - 0x1fd], 0
mov ecx, edi
call fcn.00416030
test al, al
jne 0x414c92
mov esi, 0xb
jmp 0x415f31
xor al, al
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
cmp byte [ebp - 0x1fd], al
je 0x414d66
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414cc6
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x4f
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Using_local_installer_service:
mov ecx, eax
call fcn.00411050
lea edx, [ebp - 0xc0]
mov ecx, eax
call fcn.0041bc40
push eax
call fcn.004113d0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415826
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414d57
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415ff3
push ecx
push edx
call fcn.00490f7d
add esp, 8
jmp 0x415826
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
lea eax, [edi + 0x98]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x70]
call fcn.0040d620
mov byte [ebp - 4], 7
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0x5c]
lea esi, [ebp - 0x70]
mov edi, dword [ebp - 0x60]
lea ecx, [ebp - 0x70]
cmp edx, 7
cmova eax, dword [ebp - 0x70]
cmova esi, dword [ebp - 0x70]
cmova ecx, dword [ebp - 0x70]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414e06
sub ecx, esi
mov edi, ecx
movzx eax, word [esi]
push eax
call fcn.0049b759
mov word [esi + edi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414de5
mov edx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20c]
cmp dword [eax + 0xa8], 0
je 0x414e69
cmp edx, 7
lea esi, [ebp - 0x70]
cmova esi, dword [ebp - 0x70]
cmp edi, 7
jne 0x414e46
mov edx, str.release
test edi, edi
je 0x414e69
sub esi, edx
nop
movzx ecx, word [esi + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x414e46
add edx, 2
sub edi, 1
jne 0x414e30
jmp 0x414e69
push 1
push 0x4ec8e4
lea ecx, [ebp - 0x28]
call fcn.0040db20
mov eax, dword [ebp - 0x20c]
lea ecx, [ebp - 0x28]
add eax, 0x98
push eax
call fcn.0040dab0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x58]
call fcn.0040d620
mov byte [ebp - 4], 8
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x44]
lea esi, [ebp - 0x58]
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0x58]
cmp edx, 7
cmova eax, dword [ebp - 0x58]
cmova esi, dword [ebp - 0x58]
cmova ecx, dword [ebp - 0x58]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414ed1
sub ecx, esi
mov edi, ecx
nop dword [eax + eax]
movzx eax, word [esi]
push eax
call fcn.0049b759
mov word [edi + esi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414eb0
mov edx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x48]
cmp edx, 7
lea esi, [ebp - 0x58]
cmova esi, dword [ebp - 0x58]
cmp edi, 9
jne 0x414f13
mov edx, 0x4ec8e8
test edi, edi
je 0x414f04
sub esi, edx
nop dword [eax + eax]
movzx ecx, word [esi + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x414f13
add edx, 2
sub edi, 1
jne 0x414ef0
push 0
push 0x4ebca4
lea ecx, [ebp - 0x28]
call fcn.0040db20
push 0x4ec8fc
lea ecx, [ebp - 0x28]
call fcn.0040d6d0
mov eax, dword [ebp - 0x20c]
lea ecx, [ebp - 0xa0]
cmp dword [eax + 0xc0], 0
jne 0x414f3e
push 7
push str.release
jmp 0x414f5a
add eax, 0xb0
cmp ecx, eax
je 0x414f5f
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414f52
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040db20
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040d620
mov byte [ebp - 4], 9
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x2c]
lea esi, [ebp - 0x40]
mov edi, dword [ebp - 0x30]
lea ecx, [ebp - 0x40]
cmp edx, 7
cmova eax, dword [ebp - 0x40]
cmova esi, dword [ebp - 0x40]
cmova ecx, dword [ebp - 0x40]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414fc2
sub ecx, esi
mov edi, ecx
movzx eax, word [esi]
push eax
call fcn.0049b759
mov word [edi + esi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414fa1
mov edx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
cmp edx, 7
lea esi, [ebp - 0x40]
cmova esi, dword [ebp - 0x40]
cmp edi, 7
jne 0x414ff8
mov edx, str.release
test edi, edi
je 0x414ff4
sub esi, edx
nop dword [eax]
movzx ecx, word [esi + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x414ff8
add edx, 2
sub edi, 1
jne 0x414fe0
xor al, al
jmp 0x414ffa
mov al, 1
mov esi, dword [ebp - 0x20c]
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
cmp dword [esi + 0xd8], 0
je 0x41504b
mov al, 1
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
lea eax, [esi + 0xc8]
cmp ecx, eax
je 0x41504b
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x41503e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040db20
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0xa0]
mov ecx, dword [ebp - 0x18]
cmp eax, 7
mov edi, dword [ebp - 0x90]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0xa0]
cmova edx, eax
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x14]
sub eax, ecx
mov dword [ebp - 0x230], ecx
cmp edi, eax
ja 0x4150bf
cmp dword [ebp - 0x14], 7
lea eax, [edi + ecx]
lea esi, [ebp - 0x28]
mov dword [ebp - 0x18], eax
cmova esi, dword [ebp - 0x28]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.00492c90
mov eax, dword [ebp - 0x230]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
mov esi, dword [ebp - 0x20c]
jmp 0x4150e8
push edi
push edx
push dword [ebp - 0x234]
lea ecx, [ebp - 0x28]
push edi
call fcn.0040d970
mov edi, dword [ebp - 0x8c]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x208], edi
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415102
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x8b
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Modifier:
mov ecx, eax
call fcn.00411050
cmp dword [ebp - 0x14], 7
lea edx, [ebp - 0x28]
push dword [ebp - 0x18]
cmova edx, dword [ebp - 0x28]
mov ecx, eax
call fcn.00412550
push eax
call fcn.004113d0
mov byte [ebp - 4], 9
add esp, 8
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x4151a4
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41519a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415ff8
push ecx
push edx
call fcn.00490f7d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
xor eax, eax
mov dword [ebp - 0xf4], 7
movups xmmword [ebp - 0x108], xmm0
mov word [ebp - 0x108], ax
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.00416cc0
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
push str.MBSetup
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x74], 0
movups xmmword [ebp - 0x88], xmm0
call fcn.0040df90
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x28]
push eax
movzx eax, byte [esi + 5]
push ecx
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00469920
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x41529b
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415291
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp byte [ebp - 0x1ff], 0
je 0x4152b9
sub esp, 8
push dword [ebp - 0x22c]
push ecx
lea ecx, [ebp - 0x1fc]
call fcn.00469d40
push str.Downloading_installer_service
mov edx, 0x96
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupInstallerServiceFactory.cpp
call fcn.004471b0
mov edx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
xor cl, cl
mov dword [ebp - 0x230], edx
xor esi, esi
mov eax, esi
mov edi, str.mbam_c.isvc.64bitv5
inc esi
cmp eax, 0xa
jge 0x415560
push 0x5dc
call edx
mov edx, esi
lea ecx, [ebp - 0x224]
call fcn.0041c980
push 0x17
push str.ISvc_download_attempt:
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.0041c350
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov byte [ebp - 4], 0x12
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x41539b
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415391
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415fe9
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x214], 0
cmp dword [ebp - 0x74], 7
mov edx, 0x9e
mov word [ebp - 0x224], ax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupInstallerServiceFactory.cpp
lea eax, [ebp - 0x88]
mov dword [ebp - 0x210], 7
cmova eax, dword [ebp - 0x88]
push eax
call fcn.004471b0
add esp, 4
mov dword [ebp - 0x254], 0
cmp byte [ebp - 0x200], 0
mov edx, str.mbam_c.isvc.32bitv5
xorps xmm0, xmm0
mov dword [ebp - 0x250], 0
cmove edx, edi
mov ecx, edx
movups xmmword [ebp - 0x264], xmm0
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415410
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x264]
call fcn.0040df90
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x24c]
call fcn.0040d620
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.0046be40
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x238]
mov byte [ebp - 0x1ff], al
cmp ecx, 7
jbe 0x4154a9
mov edx, dword [ebp - 0x24c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41549f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415fe9
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x250]
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
cmp ecx, 7
jbe 0x41550a
mov edx, dword [ebp - 0x264]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415500
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415fe9
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x41554b
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415541
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415fe9
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov cl, byte [ebp - 0x1ff]
test cl, cl
jne 0x415568
mov edx, dword [ebp - 0x230]
jmp 0x4152e0
test cl, cl
je 0x41587e
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415582
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xa8
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Obtained_installer_service
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x41560f
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415605
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415ffd
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov edi, dword [ebp - 0x20c]
lea ecx, [ebp - 0x1fc]
call fcn.00469a90
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x415664
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41565a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xf4]
cmp ecx, 7
jbe 0x4156a8
mov edx, dword [ebp - 0x108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41569e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 7
jbe 0x4156e6
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4156dc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp ecx, 7
jbe 0x415738
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41572e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp ecx, 7
jbe 0x41578a
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415780
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x208]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp ecx, 7
jbe 0x4157e2
mov edx, dword [ebp - 0x204]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4157d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x415820
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415816
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov esi, dword [ebp - 0x22c]
push 0x50cd18
lea ecx, [ebp - 0xd8]
call fcn.0040d620
push str.MBAMInstallerService_old.exe
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x18
call fcn.0040d6d0
cmp dword [ebp - 0xc4], 7
lea eax, [ebp - 0xd8]
cmova eax, dword [ebp - 0xd8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [ebp - 0x1fd], 0
je 0x415a0d
mov byte [ebp - 0x228], 1
jmp 0x415a1a
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415898
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xab
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Could_not_obtain_installer_service
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415925
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41591b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416002
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov edi, dword [ebp - 0x20c]
cmp byte [edi + 0x15b], 0
je 0x415d3d
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0xc0]
call fcn.0041cbc0
test al, al
je 0x415d3d
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x41596b
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xb1
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ec7a8
mov ecx, eax
call fcn.00411050
mov edx, str.Using_local_installer_service_for_uninstall
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415615
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4159fe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416007
push ecx
push edx
call fcn.00490f7d
add esp, 8
jmp 0x415615
cmp byte [ebp - 0x1fe], 0
je 0x415ac1
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415a34
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xc6
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Will_use_local_installer_service_for_uninstall
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0x18
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415ac1
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415ab7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41600c
push ecx
push edx
call fcn.00490f7d
add esp, 8
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x224]
call fcn.0040d620
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x1a
push eax
call fcn.00416870
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x210]
mov byte [ebp - 0x200], al
cmp ecx, 7
jbe 0x415b33
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415b23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416020
push ecx
push edx
call fcn.00490f7d
mov al, byte [ebp - 0x200]
add esp, 8
test al, al
je 0x415cd6
push 0x50cf40
push 0x50cf28
push esi
push 0x50cf10
push dword [ebp - 0x234]
mov ecx, edi
push dword [ebp - 0x228]
call fcn.004177a0
cmp byte [edi + 0x1c6], 0
je 0x415ccd
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415b85
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xd0
mov ecx, eax
call fcn.0040f7e0
mov edx, str._TEST__Pausing_before_starting_ISvc_...
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0x18
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415c12
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415c08
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416011
push ecx
push edx
call fcn.00490f7d
add esp, 8
push 0
push str.TESTING
push str.Click_OK_to_continue.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x224]
call fcn.00467cf0
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x14], 7
mov esi, dword [eax + 0x10]
jbe 0x415c40
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec858
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xd2
mov ecx, eax
call fcn.0040f7e0
mov edx, str._TEST__Resuming_after_OK_button_clicked__starting_ISvc
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0x18
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415ccd
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415cc3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416016
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.00419f20
xor esi, esi
jmp 0x415cdb
mov esi, 0xa
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x415d1b
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415d11
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416020
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
jmp 0x415f31
lea ecx, [ebp - 0x1fc]
call fcn.00469a90
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x415d88
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415d7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xf4]
cmp ecx, 7
jbe 0x415dc8
mov edx, dword [ebp - 0x108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415dbe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 7
jbe 0x415e02
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415df8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp ecx, 7
jbe 0x415e50
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415e46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp ecx, 7
jbe 0x415e9e
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415e94
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov edi, dword [ebp - 0x208]
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp edi, 7
jbe 0x415ef2
lea ecx, [edi*2 + 2]
mov edi, dword [ebp - 0x204]
mov eax, edi
cmp ecx, 0x1000
jb 0x415ee8
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edi
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x415f2c
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415f22
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41601b
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov esi, 9
mov ecx, dword [ebp - 0xac]
cmp ecx, 7
jbe 0x415f71
mov edx, dword [ebp - 0xc0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415f67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416020
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x10c]
xor eax, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
cmp ecx, 7
jbe 0x415fca
mov edx, dword [ebp - 0x120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415fc0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416020
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00490c46
mov esp, ebp
pop ebp
ret 0x20
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
int3