Function at 0x425c70
Capabilities:
Accept command line arguments
Get common file path
Get system information on windows
Hide graphical window
Query or enumerate registry value
Set current directory

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4af870
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa68
mov eax, dword [0x4de080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x8a8]
mov edi, dword [ebx + 0x10]
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x828], 0
call fcn.00445aa0
push 0xb
push str.mbsetup.log
call fcn.00481370
mov edx, eax
lea ecx, [ebp - 0xa5c]
call fcn.00442cb0
add esp, 8
lea eax, [ebp - 0xa5c]
lea ecx, [ebp - 0x8a8]
push eax
call fcn.0041c5e0
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x425d40
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x425d36
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ac7
push ecx
push edx
call fcn.0048355d
add esp, 8
push 0xb0
lea eax, [ebp - 0xa40]
push 0
push eax
call fcn.00485800
cmp dword [ebp - 0x894], 7
lea eax, [ebp - 0x8a8]
lea ecx, [ebp - 0xa40]
cmova eax, dword [ebp - 0x8a8]
add esp, 4
push 0xa
push eax
call fcn.00440590
mov eax, dword [ebp - 0xa40]
push 0xb0
push 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xa44], eax
lea eax, [ebp - 0x990]
push eax
call fcn.00485800
cmp dword [ebp - 0x894], 7
lea eax, [ebp - 0x8a8]
lea ecx, [ebp - 0x990]
cmova eax, dword [ebp - 0x8a8]
push eax
call fcn.00441ea0
mov eax, dword [ebp - 0x990]
push 0
push 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x990]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x994], eax
mov eax, dword [0x4e1698]
mov ecx, dword [eax + 4]
lea eax, [ebp - 0xa3c]
add ecx, 0x4e1698
mov dword [ecx + 0x38], eax
call fcn.00413a80
mov eax, dword [0x4e14e8]
push 0
push 0
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x98c]
add ecx, 0x4e14e8
mov dword [ecx + 0x38], eax
call fcn.00413a80
push 0x4e14e8
call fcn.004113c0
add esp, 4
mov edx, str._Install_started
mov ecx, eax
call fcn.0041b8f0
lea ecx, [ebp - 0xa5c]
mov esi, eax
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x425e6a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, esi
call fcn.00412510
add esp, 4
mov edx, 0x4c3230
mov ecx, eax
call fcn.0041b8f0
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x425ecc
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x425ec2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427acc
push ecx
push edx
call fcn.0048355d
add esp, 8
mov dword [ebp - 4], 0
call fcn.00404d30
mov ecx, eax
test ecx, ecx
je 0x427abd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 4], 0xffffffff
mov ecx, 1
sub ecx, dword [eax + 0xc]
lea esi, [eax + 0x10]
mov eax, dword [esi - 8]
sub eax, 0x104
mov dword [ebp - 0xa44], esi
or eax, ecx
mov dword [ebp - 0x824], esi
jge 0x425f2f
push 0x104
lea ecx, [ebp - 0x824]
call fcn.00404a30
mov esi, dword [ebp - 0x824]
mov dword [ebp - 0xa44], esi
cmp dword [esi - 8], 0x104
jl 0x427b4e
push 0x104
xor eax, eax
mov dword [esi - 0xc], 0x104
push esi
mov word [esi + 0x208], ax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push dword [esi - 8]
push esi
call fcn.004889d3
add esp, 8
test eax, eax
js 0x427b4e
cmp eax, dword [esi - 8]
jg 0x427b4e
xor ecx, ecx
mov dword [esi - 0xc], eax
push esi
mov word [esi + eax*2], cx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x425f9b
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c32b8
mov ecx, eax
call fcn.0041b8f0
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd0
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c3270
mov ecx, eax
call fcn.0041b8f0
cmp dword [esi - 4], 1
mov dword [ebp - 0x81c], eax
jle 0x426007
push dword [esi - 0xc]
lea ecx, [ebp - 0x824]
call fcn.00404930
mov esi, dword [ebp - 0x824]
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0xa44], esi
mov edx, esi
mov ecx, eax
call fcn.0041b8f0
mov edx, 0x4c326c
mov ecx, eax
call fcn.0041b8f0
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426065
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42605b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ad1
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.00448840
mov eax, dword [ebp - 0x820]
push 2
push 0
mov dword [0x4e2768], eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426084
sub ecx, edx
sar ecx, 1
push ecx
push edi
mov ecx, 0x4dedd8
call fcn.0040db20
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4260b5
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xda
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c1738
mov ecx, eax
call fcn.00411040
mov edx, str.Parsing_Command_Line:
mov ecx, eax
call fcn.0041b8f0
mov edx, edi
mov ecx, eax
call fcn.0041b8f0
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426153
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426149
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ad6
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, edi
mov dword [ebp - 0x830], 0
xorps xmm0, xmm0
mov dword [ebp - 0x82c], 0
movups xmmword [ebp - 0x840], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426176
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x840]
call fcn.0040df90
lea ecx, [ebp - 0x840]
call fcn.0042f220
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x4261dd
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4261d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427adb
push ecx
push edx
call fcn.0048355d
add esp, 8
lea eax, [ebp - 0x890]
mov dword [ebp - 0x890], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
test edi, edi
je 0x42644b
mov edx, dword [edi]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x81c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426212
sub ecx, dword [ebp - 0x81c]
xorps xmm0, xmm0
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x848], 0
movups xmmword [ebp - 0x858], xmm0
mov dword [ebp - 0x844], 0
call fcn.0040df90
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0xa5c]
push eax
lea ecx, [ebp - 0x858]
call fcn.00444bd0
push eax
lea ecx, [ebp - 0x840]
call fcn.0040d620
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x4262b5
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4262ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ae0
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp dword [ebp - 0x82c], 7
lea eax, [ebp - 0x840]
push str.mbuns.exe
cmova eax, dword [ebp - 0x840]
push eax
call fcn.0048d3cc
add esp, 8
test eax, eax
je 0x426305
cmp dword [ebp - 0x82c], 7
lea eax, [ebp - 0x840]
push str.unins000.exe
cmova eax, dword [ebp - 0x840]
push eax
call fcn.0048d3cc
add esp, 8
test eax, eax
jne 0x4263ab
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x42631b
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xe9
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Uninstall_implied_by_filename
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4263a4
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42639a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ae5
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [0x4e2756], 1
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x4263eb
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4263e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427aea
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x844]
xor eax, eax
mov dword [ebp - 0x830], 0
mov dword [ebp - 0x82c], 7
mov word [ebp - 0x840], ax
cmp ecx, 7
jbe 0x4264fa
mov edx, dword [ebp - 0x858]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4264f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427aea
jmp 0x4264f0
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426461
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xef
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_CommandLineToArgvW_failed:
mov ecx, eax
call fcn.00411040
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, edi
call fcn.0041b4e0
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4264fa
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4264f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427aef
push ecx
push edx
call fcn.0048355d
add esp, 8
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426510
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xf2
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_MBSetup_mode_:
mov ecx, eax
call fcn.00411040
cmp byte [0x4e2756], 0
mov ecx, str.installing
mov edx, str.uninstalling
cmove edx, ecx
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4265b4
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4265aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427af4
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.00427c00
call fcn.0043b9b0
cmp byte [0x4e2757], 0
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x8b0], 0
mov dword [ebp - 0x8ac], 0
mov dword [ebp - 0x85c], 0
jne 0x42668a
lea eax, [ebp - 0x848]
mov dword [ebp - 0x848], 8
push eax
mov dword [ebp - 0x844], 0x8000
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
sub esp, 0xc
call fcn.00444a80
push 0
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x85c]
push eax
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0xb
lea ecx, [ebp - 0x820]
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x824], 0
call fcn.004522a0
push 0xa
lea ecx, [ebp - 0x824]
call fcn.004522a0
mov eax, dword [ebp - 0x824]
mov edi, dword [sym.imp.GDI32.dll_RemoveFontMemResourceEx]
test eax, eax
je 0x42667d
push eax
call edi
mov eax, dword [ebp - 0x820]
test eax, eax
je 0x42668a
push eax
call edi
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4266a0
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x12c
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_This_is_an_ONLINE_installer_build.
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426729
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42671f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427af9
push ecx
push edx
call fcn.0048355d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x864], 0
xor eax, eax
mov dword [ebp - 0x860], 7
movups xmmword [ebp - 0x874], xmm0
lea ecx, [ebp - 0x874]
mov word [ebp - 0x874], ax
call fcn.00433710
cmp dword [ebp - 0x860], 7
lea eax, [ebp - 0x874]
push dword [ebp - 0x864]
cmova eax, dword [ebp - 0x874]
mov ecx, 0x4dece8
push eax
call fcn.0040db20
cmp dword [ebp - 0x864], 0
je 0x426a3c
lea eax, [ebp - 0xa5c]
push eax
lea ecx, [ebp - 0x874]
call fcn.00444570
push eax
lea ecx, [ebp - 0x88c]
call fcn.0040d620
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x4267eb
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4267e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427afe
push ecx
push edx
call fcn.0048355d
add esp, 8
mov edi, dword [ebp - 0x878]
lea ecx, [ebp - 0x88c]
mov eax, dword [ebp - 0x87c]
lea edx, [ebp - 0x88c]
cmp edi, 7
cmova ecx, dword [ebp - 0x88c]
cmova edx, dword [ebp - 0x88c]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x88c]
mov dword [ebp - 0x820], eax
lea eax, [ebp - 0x88c]
cmova eax, ecx
cmp eax, dword [ebp - 0x820]
je 0x42686f
mov esi, dword [ebp - 0x820]
sub edx, eax
nop dword [eax]
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x42684d
cmp ecx, 0x3a
jne 0x426852
mov ecx, 0x5f
mov word [eax + edx], cx
add eax, 2
cmp eax, esi
jne 0x426840
mov edi, dword [ebp - 0x878]
mov esi, dword [ebp - 0xa44]
mov ecx, dword [ebp - 0x88c]
cmp edi, 7
lea eax, [ebp - 0x88c]
cmova eax, ecx
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x81c], eax
test edi, edi
jne 0x426997
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4268b2
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x139
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c1738
mov ecx, eax
call fcn.00411040
mov edx, str.Error_obtaining_mutex__installing
mov ecx, eax
call fcn.0041b8f0
push dword [ebp - 0x81c]
mov ecx, eax
call fcn.0041b4e0
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426954
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42694a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b03
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x878]
cmp ecx, 7
jbe 0x426a3c
mov edx, dword [ebp - 0x88c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426a32
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b08
jmp 0x426a32
cmp eax, 0xb7
jne 0x426954
push 0x4c34d0
push str.32770
call dword [sym.imp.USER32.dll_FindWindowW]
mov edi, eax
push 5
push edi
mov dword [ebp - 0x828], edi
call dword [sym.imp.USER32.dll_ShowWindow]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
call edi
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push dword [ebp - 0x828]
call edi
mov ecx, dword [ebp - 0x878]
cmp ecx, 7
jbe 0x426a28
mov edx, dword [ebp - 0x88c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426a1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b08
push ecx
push edx
call fcn.0048355d
add esp, 8
mov edi, 1
jmp 0x4278f4
push ecx
push edx
call fcn.0048355d
add esp, 8
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426a52
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x145
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_MBSetup_version_5.2.0.112
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426adb
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426ad1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b0d
push ecx
push edx
call fcn.0048355d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x8bc], 0
lea eax, [ebp - 0x8dc]
push eax
movups xmmword [ebp - 0x8dc], xmm0
movups xmmword [ebp - 0x8cc], xmm0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov ax, word [ebp - 0x8dc]
test ax, ax
je 0x426b19
cmp ax, 5
je 0x426b19
xor al, al
jmp 0x426b1b
mov al, 1
cmp byte [0x4e274d], 0
mov byte [0x4e2762], al
je 0x426d7d
push str.Doing_MB5_migration_checks.
mov edx, 0xffa
mov ecx, 0x4c32b8
call fcn.00447130
add esp, 4
mov dword [ebp - 0x830], 0
xorps xmm0, xmm0
mov dword [ebp - 0x82c], 7
xor eax, eax
lea edx, [ebp - 0x840]
movups xmmword [ebp - 0x840], xmm0
mov word [ebp - 0x840], ax
call fcn.00428fc0
test al, al
jne 0x426bdb
push str._MB5_migration_check__Error_getting_installation_directory
mov edx, 0xfff
mov ecx, 0x4c32b8
call fcn.00447130
mov ecx, dword [ebp - 0x82c]
add esp, 4
cmp ecx, 7
jbe 0x426bd1
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426bc7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b12
push ecx
push edx
call fcn.0048355d
add esp, 8
mov edi, 0x2a
jmp 0x4278f4
mov ecx, 0x4def70
call fcn.0042bd00
test eax, eax
je 0x426c47
push str._MB5_migration_check__Prerequisie_check_failed
mov edx, 0x1006
mov ecx, 0x4c32b8
call fcn.00447130
mov ecx, dword [ebp - 0x82c]
add esp, 4
cmp ecx, 7
jbe 0x426bd1
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426c36
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b12
push ecx
push edx
call fcn.0048355d
mov edi, 0x2a
jmp 0x4278f1
push 0
lea ecx, [ebp - 0x850]
mov dword [ebp - method.InstalledProducts.virtual_0], vtable.InstalledProducts.0
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 0
call fcn.0046c770
push 1
lea ecx, [ebp - 0x850]
call fcn.0046c770
lea ecx, [ebp - 0x850]
call fcn.0046db10
mov ecx, 0x4c32b8
test al, al
je 0x426d0f
push str._MB5_migration_check__Privacy_VPN_is_installed
mov edx, 0x100d
call fcn.00447130
add esp, 4
mov dword [ebp - method.InstalledProducts.virtual_0], vtable.InstalledProducts.0
lea ecx, [ebp - 0x84c]
call fcn.0045d4f0
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x426bd1
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426cfe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b12
push ecx
push edx
call fcn.0048355d
mov edi, 0x2a
jmp 0x4278f1
push str._MB5_migration_check__OK_to_proceed_with_MB5_migration
mov edx, 0x1011
call fcn.00447130
add esp, 4
mov dword [ebp - method.InstalledProducts.virtual_0], vtable.InstalledProducts.0
lea ecx, [ebp - 0x84c]
call fcn.0045d4f0
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x426d76
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426d6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b12
push ecx
push edx
call fcn.0048355d
add esp, 8
xor edi, edi
jmp 0x4278f4
push 0x43
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov edi, eax
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0x844], edi
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426da3
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x15b
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c1738
mov ecx, eax
call fcn.00411040
cmp byte [0x4e2762], 0
mov ecx, str.64_Bit_Processor.
mov edx, str.32_Bit_Processor.
cmove edx, ecx
mov ecx, eax
call fcn.0041b8f0
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x426e3e
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426e34
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b17
push ecx
push edx
call fcn.0048355d
add esp, 8
mov edx, str.32_Bit_Process.
mov ecx, 0x4e14e8
call fcn.0041b8f0
cmp edi, 3
ja case.default.0x426e56
jmp dword [edi*4 + 0x427b58]
mov edx, str.Windows_Booted_Normally.
mov ecx, 0x4e14e8
call fcn.0041b8f0
push 0x4e14e8
call fcn.004113c0
add esp, 4
jmp 0x426f17
mov edx, str.Windows_Booted_in_Safe_Mode.
mov ecx, 0x4e14e8
call fcn.0041b8f0
push 0x4e14e8
call fcn.004113c0
add esp, 4
jmp 0x426f12
mov edx, str.Windows_Booted_in_Safe_Mode_with_Networking.
mov ecx, 0x4e14e8
call fcn.0041b8f0
push 0x4e14e8
call fcn.004113c0
add esp, 4
jmp 0x426f12
mov edx, str.Windows_Booted_in_Directory_Services_Restore_Repair_Mode.
mov ecx, 0x4e14e8
call fcn.0041b8f0
push 0x4e14e8
call fcn.004113c0
add esp, 4
jmp 0x426f17
mov edx, str.Unknown_Windows_Boot_Mode_
mov ecx, 0x4e14e8
call fcn.0041b8f0
push edi
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c16c8
mov ecx, eax
call fcn.00411040
push 0x4e14e8
call fcn.004113c0
add esp, 4
cmp edi, 1
je 0x426f12
cmp edi, 2
jne 0x426f17
call fcn.00434ed0
cmp byte [0x4e275a], 0
jne 0x42703f
push 0x400
lea eax, [ebp - 0x818]
push eax
push 0x81
push dword [0x4e2768]
call dword [sym.imp.USER32.dll_LoadStringW]
lea ecx, [ebp - 0x818]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426f50
sub ecx, edx
lea eax, [ebp - 0x818]
sar ecx, 1
push ecx
push eax
mov ecx, 0x4deee0
call fcn.0040db20
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426f87
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x17f
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c1738
mov ecx, eax
call fcn.00411040
mov edx, str.Supported_language_is:
mov ecx, eax
call fcn.0041b8f0
cmp dword [0x4deef4], 7
mov edx, 0x4deee0
push dword [0x4deef0]
cmova edx, dword [0x4deee0]
mov ecx, eax
call fcn.00412510
add esp, 4
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x42703f
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427035
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b1c
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp byte [0x4e2756], 0
jne 0x4271fa
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x830], 0
push 0x4c0c34
lea ecx, [ebp - 0x840]
mov dword [ebp - 0x82c], 0
movups xmmword [ebp - 0x840], xmm0
call fcn.0040df90
lea eax, [ebp - 0x840]
xor dl, dl
push eax
xor cl, cl
call fcn.004315d0
mov ecx, dword [ebp - 0x82c]
add esp, 4
cmp ecx, 7
jbe 0x4270cf
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4270c5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b21
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp byte [0x4e2757], 0
je 0x4271f5
xorps xmm0, xmm0
mov dword [ebp - 0x830], 0
xor eax, eax
mov dword [ebp - 0x82c], 7
movups xmmword [ebp - 0x840], xmm0
lea ecx, [ebp - 0x840]
mov word [ebp - 0x840], ax
call fcn.0045ce60
mov byte [0x4e2734], al
test al, al
je 0x4271b5
lea eax, [ebp - 0x820]
mov dword [ebp - 0x81c], 0
push eax
lea eax, [ebp - 0xa44]
mov dword [ebp - 0x824], 0
push eax
lea eax, [ebp - 0x824]
mov dword [ebp - 0xa44], 0
push eax
lea edx, [ebp - 0x81c]
mov dword [ebp - 0x820], 0
lea ecx, [ebp - 0x840]
call fcn.00454940
add esp, 0xc
test al, al
je 0x4271a4
movzx eax, word [ebp - 0x820]
push eax
movzx eax, word [ebp - 0xa44]
push eax
movzx eax, word [ebp - 0x824]
push eax
movzx eax, word [ebp - 0x81c]
push eax
push str._hu._hu._hu._hu
push 0x4e27d0
call fcn.004412a0
add esp, 0x18
jmp 0x4271b5
push 7
push 0x4c55cc
mov ecx, 0x4e27d0
call fcn.00404630
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x4271f5
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4271eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b26
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.00455d50
call fcn.004355e0
test al, al
je 0x427488
mov dword [ebp - 4], 3
call fcn.00404d30
mov ecx, eax
test ecx, ecx
je 0x427abd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 4], 0xffffffff
mov edx, 0xc8
mov dword [ebp - 0x81c], eax
lea ecx, [ebp - 0x828]
call fcn.004557c0
push dword [eax]
lea eax, [ebp - 0x81c]
push str._s___cant_run_on_ARM
push eax
call fcn.004412a0
mov edx, dword [ebp - 0x828]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x427278
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x42728e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x199
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c1738
mov ecx, eax
call fcn.00411040
mov edi, dword [ebp - 0x81c]
mov ecx, eax
mov edx, edi
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x427326
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42731c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b2b
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp byte [0x4e2756], 0
jne 0x427338
xor edx, edx
mov ecx, edi
call fcn.00457a60
cmp byte [0x4e2757], 0
jne 0x427393
push 0x130
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.00485800
add esp, 8
lea ecx, [ebp - 0x148]
push 0
push 0x6a6
push 0x233c
push 0x80
push 1
call fcn.004237a0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x148]
call fcn.0040f9b0
lea ecx, [ebp - 0x148]
call fcn.0040ef30
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4273ab
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, 0xc8
mov eax, dword [ebp - 0x844]
cmp eax, 1
je 0x4273c0
cmp eax, 2
jne 0x4273c5
call fcn.00435260
cmp byte [0x4e2757], 0
jne 0x4273da
push dword [ebp - 0x85c]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, str._Install_finished__
mov ecx, 0x4e14e8
call fcn.0041b8f0
push edi
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c37e0
mov ecx, eax
call fcn.00411040
lea ecx, [ebp - 0xa74]
mov dword [ebp - 0x844], eax
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x42741f
mov eax, dword [eax]
push ecx
mov ecx, dword [ebp - 0x844]
mov edx, eax
call fcn.00412510
add esp, 4
mov edx, 0x4c3230
mov ecx, eax
call fcn.0041b8f0
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa60]
add esp, 4
cmp ecx, 7
jbe 0x4278f4
mov edx, dword [ebp - 0xa74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4278ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b30
jmp 0x4278ea
cmp byte [0x4e2756], 0
je 0x42749d
call fcn.0042eb80
mov edi, eax
jmp 0x4273b0
cmp dword [0x4deec4], 7
mov ecx, 0x4deeb0
mov edi, dword [0x4deec0]
cmova ecx, dword [0x4deeb0]
cmp edi, 4
jne 0x4274fc
mov eax, edi
mov edx, str.2060
mov dword [ebp - 0x81c], eax
test eax, eax
je 0x42753f
sub ecx, edx
mov dword [ebp - 0x820], ecx
movzx ecx, word [edx + ecx]
movzx eax, word [edx]
cmp cx, ax
jne 0x4274fc
mov eax, dword [ebp - 0x81c]
add edx, 2
mov ecx, dword [ebp - 0x820]
dec eax
mov dword [ebp - 0x81c], eax
test eax, eax
jne 0x4274d4
jmp 0x42753f
cmp dword [0x4deec4], 7
mov eax, 0x4deeb0
cmova eax, dword [0x4deeb0]
cmp edi, 4
jne 0x427548
mov edx, 0x4c31bc
test edi, edi
je 0x42753f
sub eax, edx
mov dword [ebp - 0x81c], eax
movzx ecx, word [eax + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x427548
mov eax, dword [ebp - 0x81c]
add edx, 2
sub edi, 1
jne 0x427525
xor al, al
mov ecx, 0x4deb51
xchg byte [ecx], al
call fcn.004368c0
cmp byte [0x4e2754], 0
mov byte [0x4e273f], al
jne 0x42758d
lea eax, [ebp - 0x874]
push eax
lea ecx, [ebp - 0xa5c]
call fcn.0040d620
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0x828], 1
call fcn.00428920
test al, al
jne 0x42758d
mov ecx, 1
jmp 0x427595
mov ecx, dword [ebp - 0x828]
mov al, 1
mov byte [0x4e2755], al
test cl, 1
je 0x4275df
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x4275df
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4275d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b35
push ecx
push edx
call fcn.0048355d
add esp, 8
lea eax, [ebp - 0xa44]
mov dword [ebp - 0xa44], 0
push eax
push 0x20019
push 0
push str.SOFTWAREMalwarebytesmbam
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x42765b
mov dword [ebp - 0x828], eax
lea eax, [ebp - 0x81c]
push eax
lea eax, [ebp - 0x828]
mov dword [ebp - 0x81c], 4
push eax
push 0
push 0
push str.dtopicon
push dword [ebp - 0xa44]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x42764f
cmp dword [ebp - 0x828], eax
setne byte [0x4deb52]
push dword [ebp - 0xa44]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.0042c910
mov edi, eax
lea ecx, [ebp - 0xa5c]
mov edx, edi
call fcn.0041c8d0
push 0x1e
push str.DoInstall_complete._Returned:
push ecx
mov ecx, eax
call fcn.0041c2a0
mov dword [ebp - 0x830], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x840], xmm0
mov dword [ebp - 0x82c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x840], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x830], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x427706
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4276fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b3a
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp dword [ebp - 0x82c], 7
lea eax, [ebp - 0x840]
mov edx, 0x1bf
mov ecx, 0x4c32b8
cmova eax, dword [ebp - 0x840]
push eax
call fcn.00447130
add esp, 4
cmp byte [0x4e273e], 0
je 0x4277b1
push 0x11
xorps xmm0, xmm0
mov dword [ebp - 0xa4c], 0
push str.__useDevEndpoints
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0xa48], 0
movups xmmword [ebp - 0xa5c], xmm0
call fcn.0040df90
lea ecx, [ebp - 0xa5c]
call fcn.0045af40
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x4277b1
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4277a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b44
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.00448c20
test al, al
jne 0x42785d
lea ecx, [ebp - 0xa5c]
call fcn.00467c30
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4277d4
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x1ca
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Problem_saving_state_of_create_desktop_icon_option
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x42785d
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427853
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b3f
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp dword [0x4ded88], 0
je 0x42787f
cmp dword [0x4ded8c], 7
mov eax, 0x4ded78
cmova eax, dword [0x4ded78]
push eax
call fcn.004819f6
cmp dword [0x4deda0], 0
je 0x4278a1
cmp dword [0x4deda4], 7
mov eax, 0x4ded90
cmova eax, dword [0x4ded90]
push eax
call fcn.004819f6
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x4273b0
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4278db
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b44
push ecx
push edx
call fcn.0048355d
add esp, 8
jmp 0x4273b0
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x860]
cmp ecx, 7
jbe 0x427934
mov edx, dword [ebp - 0x874]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42792a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b49
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x864], 0
mov word [ebp - 0x874], ax
add esi, 0xfffffff0
mov dword [ebp - 0x860], 7
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x427969
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x990]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x990]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x994], eax
lea ecx, [ebp - 0x98c]
call fcn.0043da60
mov eax, dword [ebp - 0x990]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x990]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x994], eax
lea eax, [ebp - 0x928]
mov dword [ebp - 4], 4
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00481c5b
mov eax, dword [ebp - 0xa40]
add esp, 4
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xa44], eax
lea ecx, [ebp - 0xa3c]
call fcn.0043ecf0
mov eax, dword [ebp - 0xa40]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0xa44], eax
lea eax, [ebp - 0x9d8]
mov dword [ebp - 4], 5
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00481c5b
mov ecx, dword [ebp - 0x894]
add esp, 4
cmp ecx, 7
jbe 0x427a9b
mov edx, dword [ebp - 0x8a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427a91
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b49
push ecx
push edx
call fcn.0048355d
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00483226
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
push 0x80004005
call fcn.00404ea0
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
push 0x80070057
call fcn.00404ea0
pop ebp
outsb dx, byte [esi]
inc edx
add byte [esi + 0x6e], bh
inc edx
add byte [esi + ebp*2 + 0x6eba0042], bl
inc edx
add ah, cl
int3