Function at 0x44d6b0
Capabilities:
Create thread
Delete file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b263f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x280
mov eax, dword [0x4de080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
add esp, 4
call fcn.00434770
lea ecx, [ebp - 0x110]
call fcn.00433f10
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4e1698
call fcn.00441560
cmp dword [ebp - 0xfc], 0xf
lea edx, [ebp - 0x110]
push dword [ebp - 0x100]
cmova edx, dword [ebp - 0x110]
mov ecx, eax
call fcn.00450ff0
add esp, 4
mov edx, 0x4c8624
mov ecx, eax
call fcn.00441560
push eax
call fcn.00441800
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x88], vtable.InstalledProducts.0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 1
call fcn.0046c770
push 1
lea ecx, [ebp - 0x88]
call fcn.0046c770
cmp dword [0x4dedd4], 7
mov eax, 0x4dedc0
push str.MBRW_C
cmova eax, dword [0x4dedc0]
push eax
mov byte [ebp - 0x271], 0
call fcn.0048d3cc
add esp, 8
test eax, eax
je 0x44d806
cmp dword [0x4dedd4], 7
mov eax, 0x4dedc0
push str.MBRW_B
cmova eax, dword [0x4dedc0]
push eax
call fcn.0048d3cc
add esp, 8
test eax, eax
je 0x44d806
xor al, al
jmp 0x44d808
mov al, 1
xorps xmm0, xmm0
test al, al
je 0x44d97f
xor eax, eax
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x88]
call fcn.0046d960
mov esi, 0x4ded18
test al, al
je 0x44d8e6
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x88]
call fcn.0046dc90
test al, al
je 0x44d8e6
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x60]
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.0041bc40
add esp, 4
mov ecx, esi
push eax
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44d8db
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44d8d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ecf1
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.0042ea60
mov byte [ebp - 0x271], al
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44d924
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44d91a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ecf6
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp ecx, 7
jbe 0x44da6b
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44da61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ecf6
jmp 0x44da61
xor eax, eax
mov dword [ebp - 0x50], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.0046d440
mov esi, 0x4ded18
test al, al
je 0x44da2d
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x88]
call fcn.0046e410
test al, al
je 0x44da2d
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x60]
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.0041bc40
add esp, 4
mov ecx, esi
push eax
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44da22
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44da18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ecfb
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.0042ea60
mov byte [ebp - 0x271], al
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44da6b
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44da61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed00
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp byte [ebp - 0x271], 0
jne 0x44dcbf
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
xor eax, eax
mov dword [ebp - 0x4c], 7
movups xmmword [ebp - 0x60], xmm0
mov word [ebp - 0x60], ax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 6
call fcn.00433710
cmp dword [ebp - 0x50], 0
jne 0x44db69
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44dae3
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dad9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed0a
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d4f0
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44db46
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44db3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed0a
push ecx
push edx
call fcn.0048355d
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00483226
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x60]
call fcn.00451bf0
push eax
mov ecx, esi
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44dbc0
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dbb6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed05
push ecx
push edx
call fcn.0048355d
add esp, 8
call fcn.0042ea60
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 0x271], al
cmp ecx, 7
jbe 0x44dc0f
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dbff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed0a
push ecx
push edx
call fcn.0048355d
mov al, byte [ebp - 0x271]
add esp, 8
test al, al
jne 0x44dcbf
cmp esi, 0x4ded48
je 0x44dc40
cmp dword [0x4ded5c], 7
mov eax, 0x4ded48
push dword [0x4ded58]
cmova eax, dword [0x4ded48]
mov ecx, esi
push eax
call fcn.0040db20
call fcn.0042ea60
test al, al
jne 0x44dcbf
cmp byte [0x4e2757], al
jne 0x44dca3
push 0x130
lea eax, [ebp - 0x270]
push 0
push eax
call fcn.00485800
add esp, 8
lea ecx, [ebp - 0x270]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.004237a0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
lea ecx, [ebp - 0x270]
call fcn.0040ef30
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
add esp, 4
jmp 0x44ea98
mov ecx, dword [0x4dedd0]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x24
jb 0x44ecec
cmp dword [0x4dedd4], 7
mov eax, 0x4dedc0
push ecx
cmova eax, dword [0x4dedc0]
push eax
push 0x24
push str.Found_the_Service._Product_code_is:
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x78]
call fcn.00442380
mov byte [ebp - 4], 7
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 7
mov edx, 0x73d
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
cmova eax, dword [ebp - 0x78]
push eax
call fcn.00447130
add esp, 4
mov byte [ebp - 0x271], 0
cmp dword [0x4dedd4], 7
mov eax, 0x4dedc0
cmova eax, dword [0x4dedc0]
push str.MBAM_C
push eax
call fcn.0048d3cc
add esp, 8
or edi, 0xffffffff
test eax, eax
je 0x44dd8f
cmp dword [0x4dedd4], 7
mov eax, 0x4dedc0
push str.MDAM_B
cmova eax, dword [0x4dedc0]
push eax
call fcn.0048d3cc
add esp, 8
test eax, eax
je 0x44dd8f
push str.Not_an_MBAM_product_code
mov edx, 0x76e
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
add esp, 4
jmp 0x44dee0
push str.creating_MBAMService_instance
mov edx, 0x743
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
add esp, 4
lea ecx, [ebp - 0x90]
xorps xmm0, xmm0
movlpd qword [ebp - 0x90], xmm0
call fcn.00450ec0
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
mov ecx, dword [ebp - 0x90]
add esp, 4
push 1
call fcn.004203d0
mov esi, dword [ebp - 0x8c]
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
test al, al
je 0x44dea7
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x271], 1
call fcn.00447130
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x44de25
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00435d50
add esp, 8
test al, al
je 0x44de95
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x44de68
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00435f30
add esp, 8
test al, al
je 0x44ed0f
mov eax, str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
push eax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
jmp 0x44deb1
mov eax, str.No_need_to_prompt_for_password
mov edx, 0x75f
push eax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
jmp 0x44deb1
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.00447130
add esp, 4
mov byte [ebp - 4], 7
test esi, esi
je 0x44dee0
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x44dee0
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x44dee0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
push 0x4ded18
lea ecx, [ebp - 0xc8]
call fcn.0040d620
push 0x4c6bb4
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 9
call fcn.0040d6d0
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040d6d0
mov ecx, dword [ebp - 0xb8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0xe
jb 0x44ecec
cmp dword [ebp - 0xb4], 7
lea eax, [ebp - 0xc8]
push ecx
cmova eax, dword [ebp - 0xc8]
push eax
push 0xe
push str.ISvc_path_is:
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.00442380
mov ecx, dword [ebp - 0x64]
cmp ecx, 7
jbe 0x44df90
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44df86
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
movups xmm1, xmmword [ebp - 0xb0]
lea ecx, [ebp - 0x78]
mov edx, 0x776
movq xmm0, qword [ebp - 0xa0]
movq qword [ebp - 0x68], xmm0
cmp dword [ebp - 0x64], 7
movd eax, xmm1
movups xmmword [ebp - 0x78], xmm1
cmova ecx, eax
push ecx
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
add esp, 4
mov eax, 0x4dedc0
cmp dword [0x4dedd4], 7
cmova eax, dword [0x4dedc0]
push str.MBAM_C
push eax
call fcn.0048d3cc
add esp, 8
test eax, eax
je 0x44e017
cmp dword [0x4dedd4], 7
mov eax, 0x4dedc0
push str.MDAM_B
cmova eax, dword [0x4dedc0]
push eax
call fcn.0048d3cc
add esp, 8
test eax, eax
jne 0x44e20b
cmp byte [ebp - 0x271], 0
jne 0x44e20b
cmp dword [ebp - 0xb4], 7
lea eax, [ebp - 0xc8]
cmova eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44e20b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x16]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x44e052
push ecx
lea eax, [ebp - 0x16]
push eax
push esi
lea ecx, [ebp - 0x128]
call fcn.0041c7f0
push 6
push str.Error
push ecx
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xa
call fcn.0041c2a0
mov dword [ebp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x60], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x50], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push str._deleting_ISvc
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb0]
call fcn.004412c0
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44e12b
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e121
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed67
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x114]
cmp ecx, 7
jbe 0x44e183
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e179
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed67
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x9c], 7
mov edx, 0x780
mov word [ebp - 0x128], ax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x114], 7
cmova eax, dword [ebp - 0xb0]
push eax
call fcn.00447130
mov byte [ebp - 4], 9
add esp, 4
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44e20b
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e201
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed6c
push ecx
push edx
call fcn.0048355d
add esp, 8
lea ecx, [ebp - 0xf8]
call fcn.00445aa0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe0]
mov byte [ebp - 0x48], 0
mov edx, 0x4def70
push dword [ebp - 0x48]
call fcn.0041bc40
add esp, 4
push 0x2d
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 4], 0x10
call fcn.00481370
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.00442cb0
add esp, 8
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0xe0]
call fcn.0041c5e0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44e2ae
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e2a4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed71
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp dword [ebp - 0xe4], 7
lea ecx, [ebp - 0xf8]
push 2
cmova ecx, dword [ebp - 0xf8]
lea eax, [ebp - 0xe0]
cmp dword [ebp - 0xcc], 7
push ecx
cmova eax, dword [ebp - 0xe0]
push eax
call fcn.004814e3
push 0x4ded18
lea ecx, [ebp - 0xb0]
call fcn.0040d620
push 0x20
push str.Uninstalling_Malwarebytes_from:
push ecx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x12
call fcn.0041c2a0
xor ecx, ecx
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x64]
movq qword [ebp - 0x288], xmm1
movups xmmword [ebp - 0x58], xmm0
cmp ecx, 7
jbe 0x44e373
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e35d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed76
push ecx
push edx
call fcn.0048355d
movups xmm0, xmmword [ebp - 0x58]
add esp, 8
movq xmm1, qword [ebp - 0x288]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9c]
movq qword [ebp - 0x68], xmm1
movups xmmword [ebp - 0x78], xmm0
cmp ecx, 7
jbe 0x44e3c0
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e3b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed76
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp dword [ebp - 0x64], 7
lea eax, [ebp - 0x78]
mov edx, 0x78c
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
cmova eax, dword [ebp - 0x78]
push eax
call fcn.00447130
add esp, 4
call fcn.004558a0
push 0x4def70
lea ecx, [ebp - 0x140]
call fcn.0040d620
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x44]
call fcn.0040d620
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d620
push 0x30
mov byte [ebp - 4], 0x15
call fcn.00483776
movups xmm0, xmmword [ebp - 0x44]
xor ecx, ecx
mov dword [ebp - 0x48], eax
add esp, 4
mov word [ebp - 0x44], cx
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x34]
movq qword [eax + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
movups xmmword [eax + 0x18], xmm0
mov word [ebp - 0x2c], cx
movq xmm0, qword [ebp - 0x1c]
movq qword [eax + 0x28], xmm0
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x16
push ecx
push 0
push eax
push 0x4512f0
push 0
push 0
call fcn.00491594
add esp, 0x18
mov dword [ebp - 0x98], eax
test eax, eax
je 0x44eda0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x18
call fcn.0044fa80
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x44ed99
push eax
push dword [ebp - 0x98]
call fcn.0048219e
add esp, 8
test eax, eax
jne 0x44ed99
xorps xmm0, xmm0
movlpd qword [ebp - 0x98], xmm0
cmp byte [0x4e2757], al
jne 0x44e79a
mov byte [ebp - 4], 0x19
call fcn.00404d30
mov ecx, eax
test ecx, ecx
je 0x44ed7b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ecx, dword [0x4e2748]
mov esi, eax
test ecx, ecx
je 0x44e776
push 0x130
lea eax, [ebp - 0x270]
push 0
push eax
call fcn.00485800
add esp, 8
lea ecx, [ebp - 0x270]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.004237a0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
lea ecx, [ebp - 0x270]
call fcn.0040ef30
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x44e572
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x94], 0
jne 0x44ed85
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44e5bf
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e5b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44e5ff
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e5f5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44e65c
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e652
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44e6b9
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e6af
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44e710
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e706
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d4f0
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44eae7
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44eadd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
jmp 0x44eadd
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x44e788
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x94], 0
jne 0x44ed8f
jmp 0x44eaf1
mov al, byte [0x4e2747]
test al, al
jne 0x44e8d9
nop word [eax + eax]
lea ecx, [ebp - 0x290]
call fcn.00451360
mov edi, dword [ebp - 0x290]
mov esi, dword [ebp - 0x28c]
cmp edi, 0xc46535ff
jne 0x44e7d7
cmp esi, 0x7fffffff
je 0x44e7f4
cmp esi, 0x7fffffff
jg 0x44e7f4
jl 0x44e7e9
cmp edi, 0xc46535ff
jae 0x44e7f4
add edi, 0x3b9aca00
adc esi, 0
jmp 0x44e7fc
or edi, 0xffffffff
mov esi, 0x7fffffff
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x48], edi
lea ecx, [ebp - 0x288]
call fcn.00451360
mov ecx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x284]
cmp edi, ecx
jne 0x44e828
cmp esi, eax
je 0x44e8cc
cmp esi, eax
jl 0x44e8cc
jg 0x44e83a
cmp edi, ecx
jb 0x44e8cc
sub edi, ecx
mov dword [ebp - 0x278], edi
sbb esi, eax
mov dword [ebp - 0x27c], esi
call fcn.0048239e
push 0
push 0x64
push edx
push eax
call fcn.00483ea0
mov ecx, dword [ebp - 0x278]
mov edi, edx
mov edx, dword [ebp - 0x27c]
mov esi, eax
call fcn.004ad670
comisd xmm0, xmmword [0x4ce4c8]
jbe 0x44e887
add esi, 0xad160000
adc edi, 0x311cd
jmp 0x44e893
add esi, dword [ebp - 0x278]
adc edi, dword [ebp - 0x27c]
push 0
push 0x3b9aca00
push edi
push esi
call fcn.004ad190
mov dword [ebp - 0x58], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x54], edx
sub esi, eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x50], esi
call fcn.004821bc
mov esi, dword [ebp - 0x8c]
add esp, 4
mov edi, dword [ebp - 0x48]
jmp 0x44e805
mov al, byte [0x4e2747]
test al, al
je 0x44e7b0
mov eax, dword [0x4e2748]
test eax, eax
je 0x44e788
cmp dword [ebp - 0x94], 0
jne 0x44ed8f
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44e933
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e929
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44e973
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e969
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44e9d0
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e9c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44ea2d
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ea23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44ea84
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ea7a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d4f0
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44eae7
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44eadd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov eax, 3
jmp 0x44db4b
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44eb31
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eb27
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44eb71
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eb67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44ebce
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ebc4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44ec2b
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ec21
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44ec82
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ec78
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d4f0
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44ece5
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ecdb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed94
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
jmp 0x44db4b
call fcn.0040ddc0
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.00447130
lea ecx, [ebp - 0x270]
call fcn.0040f010
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x270]
call fcn.004237a0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
push 3
call fcn.0048e0d5
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
push 0x80004005
call fcn.00404ea0
call fcn.004912cb
call fcn.0048878f
call fcn.004912cb
call fcn.0048878f
push 1
call fcn.00482169
push 6
mov dword [ebp - 0x94], 0
call fcn.00482169
int3