Function at 0x40a05c
Capabilities:
Create process on windows

Disassembly:
push 0x27c
mov eax, 0x4abc36
call fcn.0043d05b
mov eax, dword [ebp + 0x18]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp + 0x24]
push 0x208
mov dword [ebp - 0x22c], eax
lea eax, [ebp - 0x218]
push 0
push eax
mov dword [ebp - 0x228], 1
call fcn.0043f630
push 0
lea eax, [ebp - 0x224]
mov dword [ebp - 0x224], 0x208
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x228]
push eax
push str.Install_Dir
push str.SOFTWAREMcAfeeUPDMGRInstallSettings
push 0x80000002
call fcn.00409d65
add esp, 0x28
mov dword [ebp - 0x21c], eax
test eax, eax
jne 0x40a31d
cmp dword [ebp - 0x224], eax
je 0x40a31d
push str.mcupdutl.exe
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
jne 0x40a15c
push 4
call fcn.0042c3e0
pop ecx
test eax, eax
je 0x40a34e
lea eax, [ebp - 0x218]
push eax
push str.mcupdutl.exe
push str.Unable_to_append_filename__s_to_path__s
push 0x86
push str.RunTelemetryReport
push str...includeCommonUtil.cpp
push 4
call fcn.00408ed2
add esp, 0x1c
jmp 0x40a34e
lea eax, [ebp - 0x218]
push eax
call fcn.0043237a
mov dword [ebp - 0x21c], eax
pop ecx
test eax, eax
je 0x40a1ae
push 4
call fcn.0042c3e0
pop ecx
test eax, eax
je 0x40a34e
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x218]
push eax
push str.Failed_to_validate_file__s__Error_d
push 0x8d
push str.RunTelemetryReport
push str...includeCommonUtil.cpp
push 4
call fcn.0042594a
jmp 0x40a154
call fcn.004041d0
push eax
lea ecx, [ebp - 0x21c]
call fcn.00408efe
mov eax, dword [ebp - 0x22c]
and dword [ebp - 4], 0
push dword [eax]
mov eax, dword [ebp - 0x230]
push dword [eax]
mov eax, dword [ebp - 0x234]
push dword [eax]
mov eax, dword [ebp - 0x220]
push dword [eax]
lea eax, [ebp - 0x218]
push dword [ebx]
push dword [ebp + 0x10]
push dword [edi]
push dword [esi]
push str._telemetryreport
push eax
lea eax, [ebp - 0x21c]
push str.__s___s__s__s__d___s____s____s____s____s_
push eax
call fcn.004092d4
push 1
call fcn.0042c3e0
mov esi, dword [ebp - 0x21c]
add esp, 0x34
test eax, eax
je 0x40a248
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], esi
push eax
push str.Run_telemetry_report_command_line:__s
push 0x9d
push str.RunTelemetryReport
push str...includeCommonUtil.cpp
push 1
call fcn.00402fc0
add esp, 0x18
push 0x44
pop edi
push edi
xor ebx, ebx
lea eax, [ebp - 0x288]
push ebx
push eax
call fcn.0043f630
push 0x10
lea eax, [ebp - 0x244]
push ebx
push eax
call fcn.0043f630
add esp, 0x18
mov dword [ebp - 0x288], edi
cmp dword [esi - 4], 1
jle 0x40a28d
push dword [esi - 0xc]
lea ecx, [ebp - 0x21c]
call fcn.00409268
mov esi, dword [ebp - 0x21c]
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x288]
push eax
push ebx
push ebx
push 0x20
push ebx
push ebx
push ebx
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x40a2ed
push 4
call fcn.0042c3e0
pop ecx
test eax, eax
je 0x40a313
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x220]
push eax
push str.CreateProcess_failed:__d
push 0xab
push str.RunTelemetryReport
push str...includeCommonUtil.cpp
push 4
call fcn.00402fc0
add esp, 0x18
jmp 0x40a313
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x240], ebx
je 0x40a303
push dword [ebp - 0x240]
call edi
cmp dword [ebp - 0x244], ebx
je 0x40a313
push dword [ebp - 0x244]
call edi
lea ecx, [esi - 0x10]
call fcn.0040a044
jmp 0x40a34e
push 4
call fcn.0042c3e0
pop ecx
test eax, eax
je 0x40a34e
lea eax, [ebp - 0x21c]
push eax
push str.Failed_to_get_update_manager_install_path__Error_d
push 0x80
push str.RunTelemetryReport
push str...includeCommonUtil.cpp
push 4
call fcn.00402fc0
add esp, 0x18
call fcn.0043d005
ret