Function at 0x4149d0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ae8c2
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x4de080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x20c], edi
mov al, byte [0x4e273d]
lea ecx, [ebp - 0x120]
mov esi, dword [0x4e2740]
mov edx, dword [ebp + 8]
mov byte [ebp - 0x1ff], al
mov byte [ebp - 0x234], al
mov al, byte [0x4e2751]
mov byte [ebp - 0x1fd], al
mov al, byte [0x4e2762]
mov byte [ebp - 0x204], 0
push dword [ebp - 0x204]
mov dword [ebp - 0x22c], esi
mov byte [ebp - 0x200], al
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0x4df4f0
call fcn.0041bc40
add esp, 4
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040d620
mov byte [ebp - 0x204], 0
lea ecx, [ebp - 0x224]
push dword [ebp - 0x204]
mov byte [ebp - 4], 1
call fcn.0041c120
add esp, 4
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xc0]
call fcn.0041c5e0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x414afc
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414af2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f39
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp byte [ebp - 0x1fd], 0
je 0x414bcd
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0xc0]
call fcn.0041cb10
test al, al
jne 0x414bcd
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414b3c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x44
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Could_not_find_local_installer_service__downloading_it_instead
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x414bc6
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414bbc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f3e
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 0x1fd], 0
mov ecx, edi
call fcn.00415f80
test al, al
jne 0x414be2
mov esi, 0xb
jmp 0x415e81
xor al, al
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
cmp byte [ebp - 0x1fd], al
je 0x414cb6
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414c16
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x4f
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Using_local_installer_service:
mov ecx, eax
call fcn.00411040
lea edx, [ebp - 0xc0]
mov ecx, eax
call fcn.0041bb90
push eax
call fcn.004113c0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415776
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414ca7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f43
push ecx
push edx
call fcn.0048355d
add esp, 8
jmp 0x415776
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
lea eax, [edi + 0x98]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x70]
call fcn.0040d620
mov byte [ebp - 4], 7
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0x5c]
lea esi, [ebp - 0x70]
mov edi, dword [ebp - 0x60]
lea ecx, [ebp - 0x70]
cmp edx, 7
cmova eax, dword [ebp - 0x70]
cmova esi, dword [ebp - 0x70]
cmova ecx, dword [ebp - 0x70]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414d56
sub ecx, esi
mov edi, ecx
movzx eax, word [esi]
push eax
call fcn.0048dd39
mov word [esi + edi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414d35
mov edx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20c]
cmp dword [eax + 0xa8], 0
je 0x414db9
cmp edx, 7
lea esi, [ebp - 0x70]
cmova esi, dword [ebp - 0x70]
cmp edi, 7
jne 0x414d96
mov edx, str.release
test edi, edi
je 0x414db9
sub esi, edx
nop
movzx ecx, word [esi + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x414d96
add edx, 2
sub edi, 1
jne 0x414d80
jmp 0x414db9
push 1
push 0x4c1874
lea ecx, [ebp - 0x28]
call fcn.0040db20
mov eax, dword [ebp - 0x20c]
lea ecx, [ebp - 0x28]
add eax, 0x98
push eax
call fcn.0040dab0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x58]
call fcn.0040d620
mov byte [ebp - 4], 8
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x44]
lea esi, [ebp - 0x58]
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0x58]
cmp edx, 7
cmova eax, dword [ebp - 0x58]
cmova esi, dword [ebp - 0x58]
cmova ecx, dword [ebp - 0x58]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414e21
sub ecx, esi
mov edi, ecx
nop dword [eax + eax]
movzx eax, word [esi]
push eax
call fcn.0048dd39
mov word [edi + esi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414e00
mov edx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x48]
cmp edx, 7
lea esi, [ebp - 0x58]
cmova esi, dword [ebp - 0x58]
cmp edi, 9
jne 0x414e63
mov edx, 0x4c1878
test edi, edi
je 0x414e54
sub esi, edx
nop dword [eax + eax]
movzx ecx, word [esi + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x414e63
add edx, 2
sub edi, 1
jne 0x414e40
push 0
push 0x4c0c34
lea ecx, [ebp - 0x28]
call fcn.0040db20
push 0x4c188c
lea ecx, [ebp - 0x28]
call fcn.0040d6d0
mov eax, dword [ebp - 0x20c]
lea ecx, [ebp - 0xa0]
cmp dword [eax + 0xc0], 0
jne 0x414e8e
push 7
push str.release
jmp 0x414eaa
add eax, 0xb0
cmp ecx, eax
je 0x414eaf
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414ea2
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040db20
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040d620
mov byte [ebp - 4], 9
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x2c]
lea esi, [ebp - 0x40]
mov edi, dword [ebp - 0x30]
lea ecx, [ebp - 0x40]
cmp edx, 7
cmova eax, dword [ebp - 0x40]
cmova esi, dword [ebp - 0x40]
cmova ecx, dword [ebp - 0x40]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414f12
sub ecx, esi
mov edi, ecx
movzx eax, word [esi]
push eax
call fcn.0048dd39
mov word [edi + esi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414ef1
mov edx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
cmp edx, 7
lea esi, [ebp - 0x40]
cmova esi, dword [ebp - 0x40]
cmp edi, 7
jne 0x414f48
mov edx, str.release
test edi, edi
je 0x414f44
sub esi, edx
nop dword [eax]
movzx ecx, word [esi + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x414f48
add edx, 2
sub edi, 1
jne 0x414f30
xor al, al
jmp 0x414f4a
mov al, 1
mov esi, dword [ebp - 0x20c]
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
cmp dword [esi + 0xd8], 0
je 0x414f9b
mov al, 1
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
lea eax, [esi + 0xc8]
cmp ecx, eax
je 0x414f9b
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414f8e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040db20
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0xa0]
mov ecx, dword [ebp - 0x18]
cmp eax, 7
mov edi, dword [ebp - 0x90]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0xa0]
cmova edx, eax
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x14]
sub eax, ecx
mov dword [ebp - 0x230], ecx
cmp edi, eax
ja 0x41500f
cmp dword [ebp - 0x14], 7
lea eax, [edi + ecx]
lea esi, [ebp - 0x28]
mov dword [ebp - 0x18], eax
cmova esi, dword [ebp - 0x28]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.00485270
mov eax, dword [ebp - 0x230]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
mov esi, dword [ebp - 0x20c]
jmp 0x415038
push edi
push edx
push dword [ebp - 0x234]
lea ecx, [ebp - 0x28]
push edi
call fcn.0040d970
mov edi, dword [ebp - 0x8c]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x208], edi
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415052
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0x8b
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Modifier:
mov ecx, eax
call fcn.00411040
cmp dword [ebp - 0x14], 7
lea edx, [ebp - 0x28]
push dword [ebp - 0x18]
cmova edx, dword [ebp - 0x28]
mov ecx, eax
call fcn.00412510
push eax
call fcn.004113c0
mov byte [ebp - 4], 9
add esp, 8
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x4150f4
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4150ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f48
push ecx
push edx
call fcn.0048355d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
xor eax, eax
mov dword [ebp - 0xf4], 7
movups xmmword [ebp - 0x108], xmm0
mov word [ebp - 0x108], ax
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.00416c10
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
push str.MBSetup
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x74], 0
movups xmmword [ebp - 0x88], xmm0
call fcn.0040df90
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x28]
push eax
movzx eax, byte [esi + 5]
push ecx
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00468b00
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x4151eb
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4151e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp byte [ebp - 0x1ff], 0
je 0x415209
sub esp, 8
push dword [ebp - 0x22c]
push ecx
lea ecx, [ebp - 0x1fc]
call fcn.00468f30
push str.Downloading_installer_service
mov edx, 0x96
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupInstallerServiceFactory.cpp
call fcn.00447130
mov edx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
xor cl, cl
mov dword [ebp - 0x230], edx
xor esi, esi
mov eax, esi
mov edi, str.mbam_c.isvc.64bitv5
inc esi
cmp eax, 0xa
jge 0x4154b0
push 0x5dc
call edx
mov edx, esi
lea ecx, [ebp - 0x224]
call fcn.0041c8d0
push 0x17
push str.ISvc_download_attempt:
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.0041c2a0
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov byte [ebp - 4], 0x12
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x4152eb
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4152e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f39
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x214], 0
cmp dword [ebp - 0x74], 7
mov edx, 0x9e
mov word [ebp - 0x224], ax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupInstallerServiceFactory.cpp
lea eax, [ebp - 0x88]
mov dword [ebp - 0x210], 7
cmova eax, dword [ebp - 0x88]
push eax
call fcn.00447130
add esp, 4
mov dword [ebp - 0x254], 0
cmp byte [ebp - 0x200], 0
mov edx, str.mbam_c.isvc.32bitv5
xorps xmm0, xmm0
mov dword [ebp - 0x250], 0
cmove edx, edi
mov ecx, edx
movups xmmword [ebp - 0x264], xmm0
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415360
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x264]
call fcn.0040df90
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x24c]
call fcn.0040d620
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.0046b030
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x238]
mov byte [ebp - 0x1ff], al
cmp ecx, 7
jbe 0x4153f9
mov edx, dword [ebp - 0x24c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4153ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f39
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x250]
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
cmp ecx, 7
jbe 0x41545a
mov edx, dword [ebp - 0x264]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415450
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f39
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x41549b
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415491
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f39
push ecx
push edx
call fcn.0048355d
add esp, 8
mov cl, byte [ebp - 0x1ff]
test cl, cl
jne 0x4154b8
mov edx, dword [ebp - 0x230]
jmp 0x415230
test cl, cl
je 0x4157ce
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4154d2
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xa8
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Obtained_installer_service
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x41555f
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415555
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f4d
push ecx
push edx
call fcn.0048355d
add esp, 8
mov edi, dword [ebp - 0x20c]
lea ecx, [ebp - 0x1fc]
call fcn.00468c70
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x4155b4
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4155aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xf4]
cmp ecx, 7
jbe 0x4155f8
mov edx, dword [ebp - 0x108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4155ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 7
jbe 0x415636
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41562c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp ecx, 7
jbe 0x415688
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41567e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp ecx, 7
jbe 0x4156da
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4156d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x208]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp ecx, 7
jbe 0x415732
mov edx, dword [ebp - 0x204]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415728
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x415770
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415766
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov esi, dword [ebp - 0x22c]
push 0x4ded18
lea ecx, [ebp - 0xd8]
call fcn.0040d620
push str.MBAMInstallerService_old.exe
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x18
call fcn.0040d6d0
cmp dword [ebp - 0xc4], 7
lea eax, [ebp - 0xd8]
cmova eax, dword [ebp - 0xd8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [ebp - 0x1fd], 0
je 0x41595d
mov byte [ebp - 0x228], 1
jmp 0x41596a
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4157e8
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xab
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Could_not_obtain_installer_service
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415875
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41586b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f52
push ecx
push edx
call fcn.0048355d
add esp, 8
mov edi, dword [ebp - 0x20c]
cmp byte [edi + 0x15b], 0
je 0x415c8d
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0xc0]
call fcn.0041cb10
test al, al
je 0x415c8d
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4158bb
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xb1
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4c1738
mov ecx, eax
call fcn.00411040
mov edx, str.Using_local_installer_service_for_uninstall
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415565
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41594e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f57
push ecx
push edx
call fcn.0048355d
add esp, 8
jmp 0x415565
cmp byte [ebp - 0x1fe], 0
je 0x415a11
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415984
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xc6
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Will_use_local_installer_service_for_uninstall
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 0x18
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415a11
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415a07
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f5c
push ecx
push edx
call fcn.0048355d
add esp, 8
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x224]
call fcn.0040d620
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004167c0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x210]
mov byte [ebp - 0x200], al
cmp ecx, 7
jbe 0x415a83
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415a73
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f70
push ecx
push edx
call fcn.0048355d
mov al, byte [ebp - 0x200]
add esp, 8
test al, al
je 0x415c26
push 0x4def40
push 0x4def28
push esi
push 0x4def10
push dword [ebp - 0x234]
mov ecx, edi
push dword [ebp - 0x228]
call fcn.004176f0
cmp byte [edi + 0x1c6], 0
je 0x415c1d
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415ad5
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd0
mov ecx, eax
call fcn.0040f7e0
mov edx, str._TEST__Pausing_before_starting_ISvc_...
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 0x18
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415b62
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415b58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f61
push ecx
push edx
call fcn.0048355d
add esp, 8
push 0
push str.TESTING
push str.Click_OK_to_continue.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x224]
call fcn.00467c30
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x14], 7
mov esi, dword [eax + 0x10]
jbe 0x415b90
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, 0x4c17e8
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd2
mov ecx, eax
call fcn.0040f7e0
mov edx, str._TEST__Resuming_after_OK_button_clicked__starting_ISvc
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 0x18
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415c1d
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415c13
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f66
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.00419e70
xor esi, esi
jmp 0x415c2b
mov esi, 0xa
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x415c6b
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415c61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f70
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
jmp 0x415e81
lea ecx, [ebp - 0x1fc]
call fcn.00468c70
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x415cd8
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415cce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xf4]
cmp ecx, 7
jbe 0x415d18
mov edx, dword [ebp - 0x108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415d0e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 7
jbe 0x415d52
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415d48
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp ecx, 7
jbe 0x415da0
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415d96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp ecx, 7
jbe 0x415dee
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415de4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov edi, dword [ebp - 0x208]
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp edi, 7
jbe 0x415e42
lea ecx, [edi*2 + 2]
mov edi, dword [ebp - 0x204]
mov eax, edi
cmp ecx, 0x1000
jb 0x415e38
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edi
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x415e7c
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415e72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f6b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov esi, 9
mov ecx, dword [ebp - 0xac]
cmp ecx, 7
jbe 0x415ec1
mov edx, dword [ebp - 0xc0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415eb7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f70
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x10c]
xor eax, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
cmp ecx, 7
jbe 0x415f1a
mov edx, dword [ebp - 0x120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415f10
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415f70
push ecx
push edx
call fcn.0048355d
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00483226
mov esp, ebp
pop ebp
ret 0x20
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
int3