Function at 0x44da30
Capabilities:
Create thread
Delete file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bf91f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x280
mov eax, dword [0x50b080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
add esp, 4
call fcn.004349e0
lea ecx, [ebp - 0x110]
call fcn.00434180
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x50e880
call fcn.004418e0
cmp dword [ebp - 0xfc], 0xf
lea edx, [ebp - 0x110]
push dword [ebp - 0x100]
cmova edx, dword [ebp - 0x110]
mov ecx, eax
call fcn.00451390
add esp, 4
mov edx, 0x4f27d4
mov ecx, eax
call fcn.004418e0
push eax
call fcn.00441b80
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x88], vtable.InstalledProducts.0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 1
call fcn.0046d690
push 1
lea ecx, [ebp - 0x88]
call fcn.0046d690
cmp dword [0x50bdd4], 7
mov eax, 0x50bdc0
push str.MBRW_C
cmova eax, dword [0x50bdc0]
push eax
mov byte [ebp - 0x271], 0
call fcn.0049a53c
add esp, 8
test eax, eax
je 0x44db86
cmp dword [0x50bdd4], 7
mov eax, 0x50bdc0
push str.MBRW_B
cmova eax, dword [0x50bdc0]
push eax
call fcn.0049a53c
add esp, 8
test eax, eax
je 0x44db86
xor al, al
jmp 0x44db88
mov al, 1
xorps xmm0, xmm0
test al, al
je 0x44dcff
xor eax, eax
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x88]
call fcn.0046e8c0
mov esi, 0x50bd18
test al, al
je 0x44dc66
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x88]
call fcn.0046ebf0
test al, al
je 0x44dc66
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x60]
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.0041bdd0
add esp, 4
mov ecx, esi
push eax
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44dc5b
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dc51
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f071
push ecx
push edx
call fcn.004906cd
add esp, 8
call fcn.0042ec20
mov byte [ebp - 0x271], al
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44dca4
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dc9a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f076
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp ecx, 7
jbe 0x44ddeb
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dde1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f076
jmp 0x44dde1
xor eax, eax
mov dword [ebp - 0x50], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.0046e3a0
mov esi, 0x50bd18
test al, al
je 0x44ddad
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x88]
call fcn.0046f370
test al, al
je 0x44ddad
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x60]
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.0041bdd0
add esp, 4
mov ecx, esi
push eax
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44dda2
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dd98
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f07b
push ecx
push edx
call fcn.004906cd
add esp, 8
call fcn.0042ec20
mov byte [ebp - 0x271], al
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44ddeb
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dde1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f080
push ecx
push edx
call fcn.004906cd
add esp, 8
cmp byte [ebp - 0x271], 0
jne 0x44e03f
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
xor eax, eax
mov dword [ebp - 0x4c], 7
movups xmmword [ebp - 0x60], xmm0
mov word [ebp - 0x60], ax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 6
call fcn.00433980
cmp dword [ebp - 0x50], 0
jne 0x44dee9
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44de63
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44de59
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f08a
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d760
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44dec6
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44debc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f08a
push ecx
push edx
call fcn.004906cd
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00490396
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x60]
call fcn.00451f90
push eax
mov ecx, esi
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44df40
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44df36
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f085
push ecx
push edx
call fcn.004906cd
add esp, 8
call fcn.0042ec20
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 0x271], al
cmp ecx, 7
jbe 0x44df8f
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44df7f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f08a
push ecx
push edx
call fcn.004906cd
mov al, byte [ebp - 0x271]
add esp, 8
test al, al
jne 0x44e03f
cmp esi, 0x50bd48
je 0x44dfc0
cmp dword [0x50bd5c], 7
mov eax, 0x50bd48
push dword [0x50bd58]
cmova eax, dword [0x50bd48]
mov ecx, esi
push eax
call fcn.0040db20
call fcn.0042ec20
test al, al
jne 0x44e03f
cmp byte [0x50f942], al
jne 0x44e023
push 0x130
lea eax, [ebp - 0x270]
push 0
push eax
call fcn.00492970
add esp, 8
lea ecx, [ebp - 0x270]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.00423940
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
lea ecx, [ebp - 0x270]
call fcn.0040ef30
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
add esp, 4
jmp 0x44ee18
mov ecx, dword [0x50bdd0]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x24
jb 0x44f06c
cmp dword [0x50bdd4], 7
mov eax, 0x50bdc0
push ecx
cmova eax, dword [0x50bdc0]
push eax
push 0x24
push str.Found_the_Service._Product_code_is:
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x78]
call fcn.00442700
mov byte [ebp - 4], 7
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 7
mov edx, 0x73d
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
cmova eax, dword [ebp - 0x78]
push eax
call fcn.004474b0
add esp, 4
mov byte [ebp - 0x271], 0
cmp dword [0x50bdd4], 7
mov eax, 0x50bdc0
cmova eax, dword [0x50bdc0]
push str.MBAM_C
push eax
call fcn.0049a53c
add esp, 8
or edi, 0xffffffff
test eax, eax
je 0x44e10f
cmp dword [0x50bdd4], 7
mov eax, 0x50bdc0
push str.MDAM_B
cmova eax, dword [0x50bdc0]
push eax
call fcn.0049a53c
add esp, 8
test eax, eax
je 0x44e10f
push str.Not_an_MBAM_product_code
mov edx, 0x76e
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
add esp, 4
jmp 0x44e260
push str.creating_MBAMService_instance
mov edx, 0x743
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
add esp, 4
lea ecx, [ebp - 0x90]
xorps xmm0, xmm0
movlpd qword [ebp - 0x90], xmm0
call fcn.00451260
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
mov ecx, dword [ebp - 0x90]
add esp, 4
push 1
call fcn.00420570
mov esi, dword [ebp - 0x8c]
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
test al, al
je 0x44e227
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x271], 1
call fcn.004474b0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x44e1a5
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.004360e0
add esp, 8
test al, al
je 0x44e215
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x44e1e8
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.004362c0
add esp, 8
test al, al
je 0x44f08f
mov eax, str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
push eax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
jmp 0x44e231
mov eax, str.No_need_to_prompt_for_password
mov edx, 0x75f
push eax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
jmp 0x44e231
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.004474b0
add esp, 4
mov byte [ebp - 4], 7
test esi, esi
je 0x44e260
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x44e260
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x44e260
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
push 0x50bd18
lea ecx, [ebp - 0xc8]
call fcn.0040d620
push 0x4f0d64
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 9
call fcn.0040d6d0
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040d6d0
mov ecx, dword [ebp - 0xb8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0xe
jb 0x44f06c
cmp dword [ebp - 0xb4], 7
lea eax, [ebp - 0xc8]
push ecx
cmova eax, dword [ebp - 0xc8]
push eax
push 0xe
push str.ISvc_path_is:
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.00442700
mov ecx, dword [ebp - 0x64]
cmp ecx, 7
jbe 0x44e310
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e306
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
movups xmm1, xmmword [ebp - 0xb0]
lea ecx, [ebp - 0x78]
mov edx, 0x776
movq xmm0, qword [ebp - 0xa0]
movq qword [ebp - 0x68], xmm0
cmp dword [ebp - 0x64], 7
movd eax, xmm1
movups xmmword [ebp - 0x78], xmm1
cmova ecx, eax
push ecx
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
add esp, 4
mov eax, 0x50bdc0
cmp dword [0x50bdd4], 7
cmova eax, dword [0x50bdc0]
push str.MBAM_C
push eax
call fcn.0049a53c
add esp, 8
test eax, eax
je 0x44e397
cmp dword [0x50bdd4], 7
mov eax, 0x50bdc0
push str.MDAM_B
cmova eax, dword [0x50bdc0]
push eax
call fcn.0049a53c
add esp, 8
test eax, eax
jne 0x44e58b
cmp byte [ebp - 0x271], 0
jne 0x44e58b
cmp dword [ebp - 0xb4], 7
lea eax, [ebp - 0xc8]
cmova eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44e58b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x16]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x44e3d2
push ecx
lea eax, [ebp - 0x16]
push eax
push esi
lea ecx, [ebp - 0x128]
call fcn.0041c980
push 6
push str.Error
push ecx
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xa
call fcn.0041c430
mov dword [ebp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x60], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x50], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push str._deleting_ISvc
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb0]
call fcn.00441640
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44e4ab
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e4a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0e7
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x114]
cmp ecx, 7
jbe 0x44e503
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e4f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0e7
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x9c], 7
mov edx, 0x780
mov word [ebp - 0x128], ax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x114], 7
cmova eax, dword [ebp - 0xb0]
push eax
call fcn.004474b0
mov byte [ebp - 4], 9
add esp, 4
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44e58b
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e581
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0ec
push ecx
push edx
call fcn.004906cd
add esp, 8
lea ecx, [ebp - 0xf8]
call fcn.00445e20
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe0]
mov byte [ebp - 0x48], 0
mov edx, 0x50bf70
push dword [ebp - 0x48]
call fcn.0041bdd0
add esp, 4
push 0x2d
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 4], 0x10
call fcn.0048e410
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.00443030
add esp, 8
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0xe0]
call fcn.0041c770
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44e62e
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e624
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0f1
push ecx
push edx
call fcn.004906cd
add esp, 8
cmp dword [ebp - 0xe4], 7
lea ecx, [ebp - 0xf8]
push 2
cmova ecx, dword [ebp - 0xf8]
lea eax, [ebp - 0xe0]
cmp dword [ebp - 0xcc], 7
push ecx
cmova eax, dword [ebp - 0xe0]
push eax
call fcn.0048e583
push 0x50bd18
lea ecx, [ebp - 0xb0]
call fcn.0040d620
push 0x20
push str.Uninstalling_Malwarebytes_from:
push ecx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x12
call fcn.0041c430
xor ecx, ecx
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x64]
movq qword [ebp - 0x288], xmm1
movups xmmword [ebp - 0x58], xmm0
cmp ecx, 7
jbe 0x44e6f3
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e6dd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0f6
push ecx
push edx
call fcn.004906cd
movups xmm0, xmmword [ebp - 0x58]
add esp, 8
movq xmm1, qword [ebp - 0x288]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9c]
movq qword [ebp - 0x68], xmm1
movups xmmword [ebp - 0x78], xmm0
cmp ecx, 7
jbe 0x44e740
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e736
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f0f6
push ecx
push edx
call fcn.004906cd
add esp, 8
cmp dword [ebp - 0x64], 7
lea eax, [ebp - 0x78]
mov edx, 0x78c
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
cmova eax, dword [ebp - 0x78]
push eax
call fcn.004474b0
add esp, 4
call fcn.00455c40
push 0x50bf70
lea ecx, [ebp - 0x140]
call fcn.0040d620
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x44]
call fcn.0040d620
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d620
push 0x30
mov byte [ebp - 4], 0x15
call fcn.004908e6
movups xmm0, xmmword [ebp - 0x44]
xor ecx, ecx
mov dword [ebp - 0x48], eax
add esp, 4
mov word [ebp - 0x44], cx
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x34]
movq qword [eax + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
movups xmmword [eax + 0x18], xmm0
mov word [ebp - 0x2c], cx
movq xmm0, qword [ebp - 0x1c]
movq qword [eax + 0x28], xmm0
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x16
push ecx
push 0
push eax
push 0x451690
push 0
push 0
call fcn.0049e703
add esp, 0x18
mov dword [ebp - 0x98], eax
test eax, eax
je 0x44f120
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x18
call fcn.0044fe00
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x44f119
push eax
push dword [ebp - 0x98]
call fcn.0048f30e
add esp, 8
test eax, eax
jne 0x44f119
xorps xmm0, xmm0
movlpd qword [ebp - 0x98], xmm0
cmp byte [0x50f942], al
jne 0x44eb1a
mov byte [ebp - 4], 0x19
call fcn.00404d30
mov ecx, eax
test ecx, ecx
je 0x44f0fb
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ecx, dword [0x50f934]
mov esi, eax
test ecx, ecx
je 0x44eaf6
push 0x130
lea eax, [ebp - 0x270]
push 0
push eax
call fcn.00492970
add esp, 8
lea ecx, [ebp - 0x270]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.00423940
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
lea ecx, [ebp - 0x270]
call fcn.0040ef30
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x44e8f2
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x94], 0
jne 0x44f105
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44e93f
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e935
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f10a
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44e97f
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e975
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f10a
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44e9dc
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e9d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f10a
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44ea39
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ea2f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f10a
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44ea90
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ea86
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f10a
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d760
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44ee67
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ee5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f10a
jmp 0x44ee5d
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x44eb08
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x94], 0
jne 0x44f10f
jmp 0x44ee71
mov al, byte [0x50f932]
test al, al
jne 0x44ec59
nop word [eax + eax]
lea ecx, [ebp - 0x290]
call fcn.00451700
mov edi, dword [ebp - 0x290]
mov esi, dword [ebp - 0x28c]
cmp edi, 0xc46535ff
jne 0x44eb57
cmp esi, 0x7fffffff
je 0x44eb74
cmp esi, 0x7fffffff
jg 0x44eb74
jl 0x44eb69
cmp edi, 0xc46535ff
jae 0x44eb74
add edi, 0x3b9aca00
adc esi, 0
jmp 0x44eb7c
or edi, 0xffffffff
mov esi, 0x7fffffff
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x48], edi
lea ecx, [ebp - 0x288]
call fcn.00451700
mov ecx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x284]
cmp edi, ecx
jne 0x44eba8
cmp esi, eax
je 0x44ec4c
cmp esi, eax
jl 0x44ec4c
jg 0x44ebba
cmp edi, ecx
jb 0x44ec4c
sub edi, ecx
mov dword [ebp - 0x278], edi
sbb esi, eax
mov dword [ebp - 0x27c], esi
call fcn.0048f50e
push 0
push 0x64
push edx
push eax
call fcn.00491010
mov ecx, dword [ebp - 0x278]
mov edi, edx
mov edx, dword [ebp - 0x27c]
mov esi, eax
call fcn.004ba8e0
comisd xmm0, xmmword [0x4fb6e8]
jbe 0x44ec07
add esi, 0xad160000
adc edi, 0x311cd
jmp 0x44ec13
add esi, dword [ebp - 0x278]
adc edi, dword [ebp - 0x27c]
push 0
push 0x3b9aca00
push edi
push esi
call fcn.004ba400
mov dword [ebp - 0x58], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x54], edx
sub esi, eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x50], esi
call fcn.0048f32c
mov esi, dword [ebp - 0x8c]
add esp, 4
mov edi, dword [ebp - 0x48]
jmp 0x44eb85
mov al, byte [0x50f932]
test al, al
je 0x44eb30
mov eax, dword [0x50f934]
test eax, eax
je 0x44eb08
cmp dword [ebp - 0x94], 0
jne 0x44f10f
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44ecb3
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eca9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44ecf3
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ece9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44ed50
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ed46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44edad
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eda3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44ee04
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44edfa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d760
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44ee67
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ee5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov eax, 3
jmp 0x44decb
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44eeb1
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eea7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44eef1
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eee7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44ef4e
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ef44
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44efab
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44efa1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44f002
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eff8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d760
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44f065
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f05b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f114
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
jmp 0x44decb
call fcn.0040ddc0
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004474b0
lea ecx, [ebp - 0x270]
call fcn.0040f010
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x270]
call fcn.00423940
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
push 3
call fcn.0049b244
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
push 0x80004005
call fcn.00404ea0
call fcn.0049e43a
call fcn.004958ff
call fcn.0049e43a
call fcn.004958ff
push 1
call fcn.0048f2d9
push 6
mov dword [ebp - 0x94], 0
call fcn.0048f2d9
int3