Function at 0x4032f0
Capabilities:
Persist via windows service
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x463a40
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x483068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0x22
xor eax, eax
mov dword [ebp - 0x18], 0
push str.SystemCurrentControlSetServices_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.00409520
push 0x14
push str.MBAMInstallerService
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0
call fcn.004053f0
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x30]
push ecx
push 4
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test edi, edi
je 0x403436
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403396
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0xda
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_open_service_registry:
mov ecx, eax
call fcn.004073d0
push edi
mov ecx, eax
call fcn.004057b0
push eax
call fcn.00407a20
mov edx, dword [ebp - 0x48]
add esp, 4
cmp edx, 8
jb 0x4044c2
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403427
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404516
push edx
push ecx
call fcn.004290dc
add esp, 8
jmp 0x4044c2
push 0
lea eax, [ebp - 0x2c]
push eax
push 0
push 2
push 0
push 0
push 0
push 0x47718c
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov edi, eax
test edi, edi
je 0x40351a
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403475
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0xe1
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_create_service_parameters_registry:
mov ecx, eax
call fcn.004073d0
push edi
mov ecx, eax
call fcn.004057b0
push eax
call fcn.00407a20
mov edx, dword [ebp - 0x48]
add esp, 4
cmp edx, 8
jb 0x40350c
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403502
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40451b
push edx
push ecx
call fcn.004290dc
add esp, 8
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4044c2
lea eax, [ebp - 0x40]
mov dword [ebp - 0x3c], 0
push eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
call dword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
cmp eax, 1
je 0x403645
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x40355f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0xea
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_get_proxy_data:
mov ecx, eax
call fcn.004073d0
mov ebx, eax
test ebx, ebx
jne 0x4035b5
xor ecx, ecx
jmp 0x4035bc
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
add ecx, ebx
mov eax, dword [ecx + 0x14]
and eax, 0xfffff9ff
or eax, 0x800
mov dword [ecx + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, ebx
call fcn.00405610
mov edx, eax
test edx, edx
jne 0x4035e4
xor ecx, ecx
jmp 0x4035eb
mov eax, dword [edx]
mov ecx, dword [eax + 4]
add ecx, edx
mov eax, dword [ecx + 0x14]
and eax, 0xfffff3ff
or eax, 0x200
mov dword [ecx + 0x14], eax
push edx
call fcn.00407a20
mov byte [ebp - 4], 0
add esp, 4
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x4037f2
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4037e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404520
jmp 0x4037e8
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x403737
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403653
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push dword [ebp - 0x38]
push 1
push str.Proxy
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403737
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x40369c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0xf3
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Proxy_value:
mov ecx, eax
call fcn.004073d0
push ebx
mov ecx, eax
call fcn.004057b0
push eax
call fcn.00407a20
mov byte [ebp - 4], 0
add esp, 4
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x403737
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40372d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404525
push edx
push ecx
call fcn.004290dc
add esp, 8
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x4037f2
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403745
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push dword [ebp - 0x34]
push 1
push str.ProxyBypass
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x4037f2
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x40378e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0xfa
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Proxy_value:
mov ecx, eax
call fcn.004073d0
push ebx
mov ecx, eax
call fcn.004057b0
push eax
jmp 0x4035fc
push edx
push ecx
call fcn.004290dc
add esp, 8
mov eax, dword [ebp - 0x3c]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalFree]
test eax, eax
je 0x403802
push eax
call ebx
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x40380c
push ecx
call ebx
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x403816
push ecx
call ebx
mov eax, dword [esi + 0x30]
test eax, eax
je 0x403904
cmp dword [esi + 0x34], 8
lea ecx, [esi + 0x20]
jb 0x40382c
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.ProductCode
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403904
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x403864
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x106
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_ProductCode_value:
mov ecx, eax
call fcn.004073d0
push ebx
mov ecx, eax
call fcn.004057b0
push eax
call fcn.00407a20
mov edx, dword [ebp - 0x48]
add esp, 4
cmp edx, 8
jb 0x4044b2
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4038f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404520
push edx
push ecx
call fcn.004290dc
add esp, 8
jmp 0x4044b2
cmp dword [esi + 0x30], 0
je 0x4039aa
cmp dword [esi + 0x34], 8
lea eax, [esi + 0x20]
jb 0x403919
mov eax, dword [eax]
push eax
push str.MDAM_B
call fcn.004440f3
add esp, 8
test eax, eax
jne 0x4039aa
push 0x12
push str.business
push 1
push str.ProductBuild
push eax
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x4039aa
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403960
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x111
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_ProductBuild_value:
jmp 0x4038a9
mov eax, dword [esi + 0x48]
test eax, eax
je 0x403a3e
cmp dword [esi + 0x4c], 8
lea ecx, [esi + 0x38]
jb 0x4039c0
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.ProgramDirectory
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403a3e
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4039f4
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x11c
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_ProgramDirectory_value:
jmp 0x4038a9
mov eax, dword [esi + 0x60]
test eax, eax
je 0x403ad2
cmp dword [esi + 0x64], 8
lea ecx, [esi + 0x50]
jb 0x403a54
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.DataDirectory
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403ad2
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403a88
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x127
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_DataDirectory_value:
jmp 0x4038a9
mov eax, dword [esi + 0x78]
test eax, eax
je 0x403b66
cmp dword [esi + 0x7c], 8
lea ecx, [esi + 0x68]
jb 0x403ae8
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.Build
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403b66
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403b1c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x132
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Build_value:
jmp 0x4038a9
mov eax, dword [esi + 0x90]
test eax, eax
je 0x403c03
cmp dword [esi + 0x94], 8
lea ecx, [esi + 0x80]
jb 0x403b85
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.Channel
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403c03
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403bb9
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x13d
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Channel_value:
jmp 0x4038a9
mov eax, dword [esi + 0xa8]
test eax, eax
je 0x403ca0
cmp dword [esi + 0xac], 8
lea ecx, [esi + 0x98]
jb 0x403c22
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push 0x4773b4
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403ca0
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0xc
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403c56
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x148
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Key_value:
jmp 0x4038a9
mov eax, dword [esi + 0x18]
test eax, eax
je 0x403d34
cmp dword [esi + 0x1c], 8
lea ecx, [esi + 8]
jb 0x403cb6
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.Installer
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x403d34
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403cea
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x153
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_installer_Path_value:
jmp 0x4038a9
mov cl, byte [esi + 0xb0]
xor eax, eax
test cl, cl
mov ebx, 0x477414
mov edx, 0x477420
sete al
test cl, cl
lea eax, [eax*2 + 0xa]
push eax
mov eax, ebx
cmove eax, edx
push eax
push 1
push str.Silent
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x403ddb
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403d87
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x15d
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Silent_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x4038b1
mov cl, byte [esi + 0xb1]
xor eax, eax
test cl, cl
sete al
test cl, cl
mov ecx, 0x477420
lea eax, [eax*2 + 0xa]
push eax
mov eax, ebx
cmove eax, ecx
push eax
push 1
push str.Reboot
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x403e7d
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403e29
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x166
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Reboot_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x4038b1
mov cl, byte [esi + 5]
xor eax, eax
test cl, cl
sete al
test cl, cl
mov ecx, 0x477420
lea eax, [eax*2 + 0xa]
push eax
mov eax, ebx
cmove eax, ecx
push eax
push 1
push str.Staging
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x403f1c
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403ec8
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x16f
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Staging_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x4038b1
mov cl, byte [esi + 0xb2]
xor eax, eax
test cl, cl
sete al
test cl, cl
mov ecx, 0x477420
lea eax, [eax*2 + 0xa]
push eax
mov eax, ebx
cmove eax, ecx
push eax
push 1
push str.CreateIcon
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x403fbe
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403f6a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x178
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_CreateIcon_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x40449a
cmp byte [esi + 0xb3], 0
je 0x404052
push 0xa
push 0x477414
push 1
push str.Uninstall
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x404052
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x403ffe
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x182
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_uninstall_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x40449a
cmp byte [esi + 0xb4], 0
je 0x4040e6
push 0xa
push 0x477414
push 1
push str.BifucationShown
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x4040e6
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x404092
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x18d
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_bifurcationShown_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x40449a
mov cl, byte [esi + 0xb5]
xor eax, eax
test cl, cl
sete al
test cl, cl
mov ecx, 0x477420
lea eax, [eax*2 + 0xa]
push eax
mov eax, ebx
cmove eax, ecx
push eax
push 1
push str.Trial
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x404188
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x404134
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x197
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_start_trial_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x40449a
mov cl, byte [esi + 0xb6]
xor eax, eax
test cl, cl
sete al
test cl, cl
mov ecx, 0x477420
lea eax, [eax*2 + 0xa]
push eax
mov eax, ebx
cmove eax, ecx
push eax
push 1
push str.SkipOnboarding
push 0
push dword [ebp - 0x2c]
call edi
mov dword [ebp - 0x44], eax
test eax, eax
je 0x40422a
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4041d6
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x1a0
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_skip_onboarding_value:
mov ecx, eax
call fcn.004073d0
push dword [ebp - 0x44]
jmp 0x40449a
mov cl, byte [esi + 0xb7]
xor eax, eax
test cl, cl
sete al
test cl, cl
lea eax, [eax*2 + 0xa]
push eax
mov eax, 0x477420
cmove ebx, eax
push ebx
push 1
push str.LanguageSet
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x4042c7
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x404275
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x1a9
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_Language_set_value:
mov ecx, eax
call fcn.004073d0
push ebx
jmp 0x40449a
cmp dword [esi + 0xcc], 8
lea ecx, [esi + 0xb8]
mov eax, dword [esi + 0xc8]
jb 0x4042de
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.Language
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x404364
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x404312
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x1b2
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_language_code:
mov ecx, eax
call fcn.004073d0
push ebx
jmp 0x40449a
cmp dword [esi + 0xe4], 8
lea ecx, [esi + 0xd0]
mov eax, dword [esi + 0xe0]
jb 0x40437b
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push 1
push str.Affiliate
push 0
push dword [ebp - 0x2c]
call edi
mov ebx, eax
test ebx, ebx
je 0x404401
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4043af
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x1bb
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_affiliate_name:
mov ecx, eax
call fcn.004073d0
push ebx
jmp 0x40449a
mov eax, dword [esi + 0xf8]
add esi, 0xe8
cmp dword [esi + 0x14], 8
jb 0x404415
mov esi, dword [esi]
lea eax, [eax*2 + 2]
push eax
push esi
push 1
push str.AffiliateId
push 0
push dword [ebp - 0x2c]
call edi
mov esi, eax
test esi, esi
je 0x4044b2
lea ecx, [ebp - 0x5c]
call fcn.0041f060
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x40444d
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x1c3
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Failed_to_set_affiliate_id:
mov ecx, eax
call fcn.004073d0
push esi
mov ecx, eax
call fcn.004057b0
push eax
call fcn.00407a20
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.00401c90
push dword [ebp - 0x2c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
push dword [ebp - 0x30]
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4044f8
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4044ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404520
push edx
push ecx
call fcn.004290dc
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004290a8
mov esp, ebp
pop ebp
ret
call fcn.00443bfc
call fcn.00443bfc
call fcn.00443bfc
call fcn.00443bfc
int3