Function at 0x414a70
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bbb7d
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x50b080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x20c], edi
mov al, byte [0x50f92c]
lea ecx, [ebp - 0x120]
mov esi, dword [0x50f928]
mov edx, dword [ebp + 8]
mov byte [ebp - 0x1ff], al
mov byte [ebp - 0x234], al
mov al, byte [0x50f93c]
mov byte [ebp - 0x1fd], al
mov al, byte [0x50f94d]
mov byte [ebp - 0x204], 0
push dword [ebp - 0x204]
mov dword [ebp - 0x22c], esi
mov byte [ebp - 0x200], al
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0x50c4f0
call fcn.0041bdd0
add esp, 4
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040d620
mov byte [ebp - 0x204], 0
lea ecx, [ebp - 0x224]
push dword [ebp - 0x204]
mov byte [ebp - 4], 1
call fcn.0041c2b0
add esp, 4
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xc0]
call fcn.0041c770
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x414b9c
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414b92
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160b6
push ecx
push edx
call fcn.004906cd
add esp, 8
cmp byte [ebp - 0x1fd], 0
je 0x414c6d
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0xc0]
call fcn.0041cca0
test al, al
jne 0x414c6d
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414bdc
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0x44
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Could_not_find_local_installer_service__downloading_it_instead
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x414c66
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414c5c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160bb
push ecx
push edx
call fcn.004906cd
add esp, 8
mov byte [ebp - 0x1fd], 0
mov ecx, edi
call fcn.00416100
test al, al
jne 0x414c82
mov esi, 0xb
jmp 0x415ffe
xor al, al
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
cmp byte [ebp - 0x1fd], al
je 0x414d56
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414cb6
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0x4f
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Using_local_installer_service:
mov ecx, eax
call fcn.00411050
lea edx, [ebp - 0xc0]
mov ecx, eax
call fcn.0041bd20
push eax
call fcn.004113d0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x4158f3
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414d47
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160c0
push ecx
push edx
call fcn.004906cd
add esp, 8
jmp 0x4158f3
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
lea eax, [edi + 0x98]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x70]
call fcn.0040d620
mov byte [ebp - 4], 7
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0x5c]
lea esi, [ebp - 0x70]
mov edi, dword [ebp - 0x60]
lea ecx, [ebp - 0x70]
cmp edx, 7
cmova eax, dword [ebp - 0x70]
cmova esi, dword [ebp - 0x70]
cmova ecx, dword [ebp - 0x70]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414df6
sub ecx, esi
mov edi, ecx
movzx eax, word [esi]
push eax
call fcn.0049aea9
mov word [edi + esi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414dd5
mov edx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20c]
cmp dword [eax + 0xa8], 0
je 0x414e59
cmp edx, 7
lea esi, [ebp - 0x70]
cmova esi, dword [ebp - 0x70]
cmp edi, 7
jne 0x414e36
mov edx, str.release
test edi, edi
je 0x414e59
sub esi, edx
nop
movzx ecx, word [edx + esi]
movzx eax, word [edx]
cmp cx, ax
jne 0x414e36
add edx, 2
sub edi, 1
jne 0x414e20
jmp 0x414e59
push 1
push 0x4eb8e4
lea ecx, [ebp - 0x28]
call fcn.0040db20
mov eax, dword [ebp - 0x20c]
lea ecx, [ebp - 0x28]
add eax, 0x98
push eax
call fcn.0040dab0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x58]
call fcn.0040d620
mov byte [ebp - 4], 8
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x44]
lea esi, [ebp - 0x58]
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0x58]
cmp edx, 7
cmova eax, dword [ebp - 0x58]
cmova esi, dword [ebp - 0x58]
cmova ecx, dword [ebp - 0x58]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414ec1
sub ecx, esi
mov edi, ecx
nop dword [eax + eax]
movzx eax, word [esi]
push eax
call fcn.0049aea9
mov word [edi + esi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414ea0
mov edx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x48]
cmp edx, 7
lea esi, [ebp - 0x58]
cmova esi, dword [ebp - 0x58]
cmp edi, 9
jne 0x414f03
mov edx, 0x4eb8e8
test edi, edi
je 0x414ef4
sub esi, edx
nop dword [eax + eax]
movzx ecx, word [edx + esi]
movzx eax, word [edx]
cmp cx, ax
jne 0x414f03
add edx, 2
sub edi, 1
jne 0x414ee0
push 0
push 0x4eaca4
lea ecx, [ebp - 0x28]
call fcn.0040db20
push 0x4eb8fc
lea ecx, [ebp - 0x28]
call fcn.0040d6d0
mov eax, dword [ebp - 0x20c]
lea ecx, [ebp - 0xa0]
cmp dword [eax + 0xc0], 0
jne 0x414f2e
push 7
push str.release
jmp 0x414f4a
add eax, 0xb0
cmp ecx, eax
je 0x414f4f
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x414f42
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040db20
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040d620
mov byte [ebp - 4], 9
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x2c]
lea esi, [ebp - 0x40]
mov edi, dword [ebp - 0x30]
lea ecx, [ebp - 0x40]
cmp edx, 7
cmova eax, dword [ebp - 0x40]
cmova esi, dword [ebp - 0x40]
cmova ecx, dword [ebp - 0x40]
lea eax, [eax + edi*2]
mov dword [ebp - 0x208], eax
cmp esi, eax
je 0x414fb2
sub ecx, esi
mov edi, ecx
movzx eax, word [esi]
push eax
call fcn.0049aea9
mov word [esi + edi], ax
add esp, 4
add esi, 2
cmp esi, dword [ebp - 0x208]
jne 0x414f91
mov edx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
cmp edx, 7
lea esi, [ebp - 0x40]
cmova esi, dword [ebp - 0x40]
cmp edi, 7
jne 0x414fe8
mov edx, str.release
test edi, edi
je 0x414fe4
sub esi, edx
nop dword [eax]
movzx ecx, word [edx + esi]
movzx eax, word [edx]
cmp cx, ax
jne 0x414fe8
add edx, 2
sub edi, 1
jne 0x414fd0
xor al, al
jmp 0x414fea
mov al, 1
mov esi, dword [ebp - 0x20c]
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
cmp dword [esi + 0xd8], 0
je 0x41503b
mov al, 1
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x228], al
lea eax, [esi + 0xc8]
cmp ecx, eax
je 0x41503b
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x41502e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040db20
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0xa0]
mov ecx, dword [ebp - 0x18]
cmp eax, 7
mov edi, dword [ebp - 0x90]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0xa0]
cmova edx, eax
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x14]
sub eax, ecx
mov dword [ebp - 0x230], ecx
cmp edi, eax
ja 0x4150af
cmp dword [ebp - 0x14], 7
lea eax, [ecx + edi]
lea esi, [ebp - 0x28]
mov dword [ebp - 0x18], eax
cmova esi, dword [ebp - 0x28]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.004923e0
mov eax, dword [ebp - 0x230]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
mov esi, dword [ebp - 0x20c]
jmp 0x4150d8
push edi
push edx
push dword [ebp - 0x234]
lea ecx, [ebp - 0x28]
push edi
call fcn.0040d970
mov edi, dword [ebp - 0x8c]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x208], edi
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4150f2
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0x8b
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Modifier:
mov ecx, eax
call fcn.00411050
cmp dword [ebp - 0x14], 7
lea edx, [ebp - 0x28]
push dword [ebp - 0x18]
cmova edx, dword [ebp - 0x28]
mov ecx, eax
call fcn.00412550
push eax
call fcn.004113d0
mov byte [ebp - 4], 9
add esp, 8
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415194
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41518a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160c5
push ecx
push edx
call fcn.004906cd
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
xor eax, eax
mov dword [ebp - 0xf4], 7
movups xmmword [ebp - 0x108], xmm0
mov word [ebp - 0x108], ax
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.00416d90
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
push str.MBSetup
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x74], 0
movups xmmword [ebp - 0x88], xmm0
call fcn.0040df90
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x28]
push eax
movzx eax, byte [esi + 5]
push ecx
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00469960
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x41528b
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415281
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
cmp byte [ebp - 0x1ff], 0
je 0x4152a9
sub esp, 8
push dword [ebp - 0x22c]
push ecx
lea ecx, [ebp - 0x1fc]
call fcn.00469d80
push str.Downloading_installer_service
mov edx, 0x96
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupInstallerServiceFactory.cpp
call fcn.004474b0
mov edx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
xor cl, cl
mov dword [ebp - 0x238], edx
xor esi, esi
mov eax, esi
inc esi
mov dword [ebp - 0x230], esi
cmp eax, 0xa
jge 0x41562d
push 0x5dc
call edx
mov edx, esi
lea ecx, [ebp - 0x224]
call fcn.0041ca60
push 0x17
push str.ISvc_download_attempt:
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.0041c430
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov byte [ebp - 4], 0x12
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x41538c
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415382
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160b6
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0x214], 0
cmp dword [ebp - 0x74], 7
mov edx, 0x9e
mov word [ebp - 0x224], ax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupInstallerServiceFactory.cpp
lea eax, [ebp - 0x88]
mov dword [ebp - 0x210], 7
cmova eax, dword [ebp - 0x88]
push eax
call fcn.004474b0
add esp, 4
mov esi, str.mbam_c.isvc.64bitv5
cmp byte [ebp - 0x200], 0
mov edi, str.Intel_x64
je 0x4153ec
mov esi, str.mbam_c.isvc.32bitv5
mov edi, str.Intel_x86
jmp 0x415404
mov eax, 0xaa64
cmp word [0x50f920], ax
jne 0x415404
mov esi, str.mbam_c.isvc.arm64v5
mov edi, 0x4ebae0
lea ecx, [ebp - 0x250]
call fcn.00467d30
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x41541e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0xb0
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Getting_installer_service_for
mov ecx, eax
call fcn.00411050
mov edx, edi
mov ecx, eax
call fcn.0041ba80
push eax
call fcn.004113d0
mov byte [ebp - 4], 0x12
add esp, 4
mov ecx, dword [ebp - 0x23c]
cmp ecx, 7
jbe 0x4154b4
mov edx, dword [ebp - 0x250]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4154aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160b6
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, esi
mov dword [ebp - 0x240], 0
xorps xmm0, xmm0
mov dword [ebp - 0x23c], 0
movups xmmword [ebp - 0x250], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4154d7
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x250]
call fcn.0040df90
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x268]
call fcn.0040d620
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.0046be80
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x254]
mov byte [ebp - 0x1ff], al
cmp ecx, 7
jbe 0x415570
mov edx, dword [ebp - 0x268]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415566
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160b6
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 7
mov word [ebp - 0x268], ax
cmp ecx, 7
jbe 0x4155d1
mov edx, dword [ebp - 0x250]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4155c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160b6
push ecx
push edx
call fcn.004906cd
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x415612
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415608
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160b6
push ecx
push edx
call fcn.004906cd
add esp, 8
mov cl, byte [ebp - 0x1ff]
test cl, cl
jne 0x415635
mov esi, dword [ebp - 0x230]
mov edx, dword [ebp - 0x238]
jmp 0x4152d0
test cl, cl
je 0x41594b
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x41564f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0xb6
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Obtained_installer_service
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x4156dc
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4156d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160ca
push ecx
push edx
call fcn.004906cd
add esp, 8
mov edi, dword [ebp - 0x20c]
lea ecx, [ebp - 0x1fc]
call fcn.00469ad0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x415731
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415727
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xf4]
cmp ecx, 7
jbe 0x415775
mov edx, dword [ebp - 0x108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41576b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 7
jbe 0x4157b3
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4157a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp ecx, 7
jbe 0x415805
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4157fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp ecx, 7
jbe 0x415857
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41584d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x208]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp ecx, 7
jbe 0x4158af
mov edx, dword [ebp - 0x204]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4158a5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x4158ed
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4158e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov esi, dword [ebp - 0x22c]
push 0x50bd18
lea ecx, [ebp - 0xd8]
call fcn.0040d620
push str.MBAMInstallerService_old.exe
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x19
call fcn.0040d6d0
cmp dword [ebp - 0xc4], 7
lea eax, [ebp - 0xd8]
cmova eax, dword [ebp - 0xd8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [ebp - 0x1fd], 0
je 0x415ada
mov byte [ebp - 0x228], 1
jmp 0x415ae7
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415965
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0xb9
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Could_not_obtain_installer_service
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x4159f2
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4159e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160cf
push ecx
push edx
call fcn.004906cd
add esp, 8
mov edi, dword [ebp - 0x20c]
cmp byte [edi + 0x15b], 0
je 0x415e0a
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0xc0]
call fcn.0041cca0
test al, al
je 0x415e0a
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415a38
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0xbf
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4eb7a8
mov ecx, eax
call fcn.00411050
mov edx, str.Using_local_installer_service_for_uninstall
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0xf
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x4156e2
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415acb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160d4
push ecx
push edx
call fcn.004906cd
add esp, 8
jmp 0x4156e2
cmp byte [ebp - 0x1fe], 0
je 0x415b8e
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 0x1a
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415b01
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0xd4
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Will_use_local_installer_service_for_uninstall
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0x19
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415b8e
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415b84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160d9
push ecx
push edx
call fcn.004906cd
add esp, 8
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x224]
call fcn.0040d620
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x1b
push eax
call fcn.00416940
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x210]
mov byte [ebp - 0x200], al
cmp ecx, 7
jbe 0x415c00
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415bf0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160ed
push ecx
push edx
call fcn.004906cd
mov al, byte [ebp - 0x200]
add esp, 8
test al, al
je 0x415da3
push 0x50bf40
push 0x50bf28
push esi
push 0x50bf10
push dword [ebp - 0x234]
mov ecx, edi
push dword [ebp - 0x228]
call fcn.00417880
cmp byte [edi + 0x1c6], 0
je 0x415d9a
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x415c52
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0xde
mov ecx, eax
call fcn.0040f7e0
mov edx, str._TEST__Pausing_before_starting_ISvc_...
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0x19
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415cdf
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415cd5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160de
push ecx
push edx
call fcn.004906cd
add esp, 8
push 0
push str.TESTING
push str.Click_OK_to_continue.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x224]
call fcn.00467d30
mov byte [ebp - 4], 0x1d
cmp dword [eax + 0x14], 7
mov esi, dword [eax + 0x10]
jbe 0x415d0d
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x50e6d0
call fcn.00412550
add esp, 4
mov edx, 0x4eb858
mov ecx, eax
call fcn.00411050
mov edx, 0x4eb568
mov ecx, eax
call fcn.00411050
push 0xe0
mov ecx, eax
call fcn.0040f7e0
mov edx, str._TEST__Resuming_after_OK_button_clicked__starting_ISvc
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov byte [ebp - 4], 0x19
add esp, 4
mov ecx, dword [ebp - 0x210]
cmp ecx, 7
jbe 0x415d9a
mov edx, dword [ebp - 0x224]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415d90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e3
push ecx
push edx
call fcn.004906cd
add esp, 8
call fcn.0041a000
xor esi, esi
jmp 0x415da8
mov esi, 0xa
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x415de8
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415dde
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160ed
push ecx
push edx
call fcn.004906cd
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
jmp 0x415ffe
lea ecx, [ebp - 0x1fc]
call fcn.00469ad0
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x415e55
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415e4b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0xf4]
cmp ecx, 7
jbe 0x415e95
mov edx, dword [ebp - 0x108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415e8b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 7
jbe 0x415ecf
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415ec5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp ecx, 7
jbe 0x415f1d
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415f13
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp ecx, 7
jbe 0x415f6b
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415f61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov edi, dword [ebp - 0x208]
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp edi, 7
jbe 0x415fbf
lea ecx, [edi*2 + 2]
mov edi, dword [ebp - 0x204]
mov eax, edi
cmp ecx, 0x1000
jb 0x415fb5
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edi
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x415ff9
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x415fef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160e8
push ecx
push edx
call fcn.004906cd
add esp, 8
mov esi, 9
mov ecx, dword [ebp - 0xac]
cmp ecx, 7
jbe 0x41603e
mov edx, dword [ebp - 0xc0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x416034
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160ed
push ecx
push edx
call fcn.004906cd
add esp, 8
mov ecx, dword [ebp - 0x10c]
xor eax, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
cmp ecx, 7
jbe 0x416097
mov edx, dword [ebp - 0x120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41608d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4160ed
push ecx
push edx
call fcn.004906cd
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00490396
mov esp, ebp
pop ebp
ret 0x20
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
call fcn.004958ff
int3