Function at 0x44d730
Capabilities:
Create thread
Delete file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c01bf
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x280
mov eax, dword [0x50c080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
add esp, 4
call fcn.00434800
lea ecx, [ebp - 0x110]
call fcn.00433fa0
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x50f880
call fcn.004415e0
cmp dword [ebp - 0xfc], 0xf
lea edx, [ebp - 0x110]
push dword [ebp - 0x100]
cmova edx, dword [ebp - 0x110]
mov ecx, eax
call fcn.00451070
add esp, 4
mov edx, 0x4f3694
mov ecx, eax
call fcn.004415e0
push eax
call fcn.00441880
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x88], vtable.InstalledProducts.0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 1
call fcn.0046d650
push 1
lea ecx, [ebp - 0x88]
call fcn.0046d650
cmp dword [0x50cdd4], 7
mov eax, 0x50cdc0
push str.MBRW_C
cmova eax, dword [0x50cdc0]
push eax
mov byte [ebp - 0x271], 0
call fcn.0049adec
add esp, 8
test eax, eax
je 0x44d886
cmp dword [0x50cdd4], 7
mov eax, 0x50cdc0
push str.MBRW_B
cmova eax, dword [0x50cdc0]
push eax
call fcn.0049adec
add esp, 8
test eax, eax
je 0x44d886
xor al, al
jmp 0x44d888
mov al, 1
xorps xmm0, xmm0
test al, al
je 0x44d9ff
xor eax, eax
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x88]
call fcn.0046e870
mov esi, 0x50cd18
test al, al
je 0x44d966
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x88]
call fcn.0046eba0
test al, al
je 0x44d966
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x60]
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.0041bcf0
add esp, 4
mov ecx, esi
push eax
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44d95b
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44d951
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed71
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.0042eaf0
mov byte [ebp - 0x271], al
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44d9a4
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44d99a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed76
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp ecx, 7
jbe 0x44daeb
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dae1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed76
jmp 0x44dae1
xor eax, eax
mov dword [ebp - 0x50], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.0046e350
mov esi, 0x50cd18
test al, al
je 0x44daad
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x88]
call fcn.0046f320
test al, al
je 0x44daad
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x60]
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.0041bcf0
add esp, 4
mov ecx, esi
push eax
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44daa2
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44da98
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed7b
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.0042eaf0
mov byte [ebp - 0x271], al
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44daeb
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dae1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed80
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp byte [ebp - 0x271], 0
jne 0x44dd3f
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
xor eax, eax
mov dword [ebp - 0x4c], 7
movups xmmword [ebp - 0x60], xmm0
mov word [ebp - 0x60], ax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 6
call fcn.00433790
cmp dword [ebp - 0x50], 0
jne 0x44dbe9
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44db63
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44db59
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d580
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44dbc6
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44dbbc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00490c46
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x60]
call fcn.00451c70
push eax
mov ecx, esi
call fcn.0040dce0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44dc40
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dc36
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed85
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.0042eaf0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 0x271], al
cmp ecx, 7
jbe 0x44dc8f
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dc7f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed8a
push ecx
push edx
call fcn.00490f7d
mov al, byte [ebp - 0x271]
add esp, 8
test al, al
jne 0x44dd3f
cmp esi, 0x50cd48
je 0x44dcc0
cmp dword [0x50cd5c], 7
mov eax, 0x50cd48
push dword [0x50cd58]
cmova eax, dword [0x50cd48]
mov ecx, esi
push eax
call fcn.0040db20
call fcn.0042eaf0
test al, al
jne 0x44dd3f
cmp byte [0x51093f], al
jne 0x44dd23
push 0x130
lea eax, [ebp - 0x270]
push 0
push eax
call fcn.00493220
add esp, 8
lea ecx, [ebp - 0x270]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.00423840
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
lea ecx, [ebp - 0x270]
call fcn.0040ef30
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
add esp, 4
jmp 0x44eb18
mov ecx, dword [0x50cdd0]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x24
jb 0x44ed6c
cmp dword [0x50cdd4], 7
mov eax, 0x50cdc0
push ecx
cmova eax, dword [0x50cdc0]
push eax
push 0x24
push str.Found_the_Service._Product_code_is:
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x78]
call fcn.00442400
mov byte [ebp - 4], 7
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 7
mov edx, 0x73d
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
cmova eax, dword [ebp - 0x78]
push eax
call fcn.004471b0
add esp, 4
mov byte [ebp - 0x271], 0
cmp dword [0x50cdd4], 7
mov eax, 0x50cdc0
cmova eax, dword [0x50cdc0]
push str.MBAM_C
push eax
call fcn.0049adec
add esp, 8
or edi, 0xffffffff
test eax, eax
je 0x44de0f
cmp dword [0x50cdd4], 7
mov eax, 0x50cdc0
push str.MDAM_B
cmova eax, dword [0x50cdc0]
push eax
call fcn.0049adec
add esp, 8
test eax, eax
je 0x44de0f
push str.Not_an_MBAM_product_code
mov edx, 0x76e
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
add esp, 4
jmp 0x44df60
push str.creating_MBAMService_instance
mov edx, 0x743
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
add esp, 4
lea ecx, [ebp - 0x90]
xorps xmm0, xmm0
movlpd qword [ebp - 0x90], xmm0
call fcn.00450f40
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
mov ecx, dword [ebp - 0x90]
add esp, 4
push 1
call fcn.00420470
mov esi, dword [ebp - 0x8c]
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
test al, al
je 0x44df27
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x271], 1
call fcn.004471b0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x44dea5
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00435de0
add esp, 8
test al, al
je 0x44df15
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x44dee8
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00435fc0
add esp, 8
test al, al
je 0x44ed8f
mov eax, str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
push eax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
jmp 0x44df31
mov eax, str.No_need_to_prompt_for_password
mov edx, 0x75f
push eax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
jmp 0x44df31
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.004471b0
add esp, 4
mov byte [ebp - 4], 7
test esi, esi
je 0x44df60
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x44df60
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x44df60
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
push 0x50cd18
lea ecx, [ebp - 0xc8]
call fcn.0040d620
push 0x4f1c24
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 9
call fcn.0040d6d0
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040d6d0
mov ecx, dword [ebp - 0xb8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0xe
jb 0x44ed6c
cmp dword [ebp - 0xb4], 7
lea eax, [ebp - 0xc8]
push ecx
cmova eax, dword [ebp - 0xc8]
push eax
push 0xe
push str.ISvc_path_is:
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb0]
call fcn.00442400
mov ecx, dword [ebp - 0x64]
cmp ecx, 7
jbe 0x44e010
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e006
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
movups xmm1, xmmword [ebp - 0xb0]
lea ecx, [ebp - 0x78]
mov edx, 0x776
movq xmm0, qword [ebp - 0xa0]
movq qword [ebp - 0x68], xmm0
cmp dword [ebp - 0x64], 7
movd eax, xmm1
movups xmmword [ebp - 0x78], xmm1
cmova ecx, eax
push ecx
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
add esp, 4
mov eax, 0x50cdc0
cmp dword [0x50cdd4], 7
cmova eax, dword [0x50cdc0]
push str.MBAM_C
push eax
call fcn.0049adec
add esp, 8
test eax, eax
je 0x44e097
cmp dword [0x50cdd4], 7
mov eax, 0x50cdc0
push str.MDAM_B
cmova eax, dword [0x50cdc0]
push eax
call fcn.0049adec
add esp, 8
test eax, eax
jne 0x44e28b
cmp byte [ebp - 0x271], 0
jne 0x44e28b
cmp dword [ebp - 0xb4], 7
lea eax, [ebp - 0xc8]
cmova eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44e28b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x16]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x44e0d2
push ecx
lea eax, [ebp - 0x16]
push eax
push esi
lea ecx, [ebp - 0x128]
call fcn.0041c8a0
push 6
push str.Error
push ecx
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xa
call fcn.0041c350
mov dword [ebp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x60], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x50], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push str._deleting_ISvc
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb0]
call fcn.00441340
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x44e1ab
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e1a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ede7
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x114]
cmp ecx, 7
jbe 0x44e203
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e1f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ede7
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x9c], 7
mov edx, 0x780
mov word [ebp - 0x128], ax
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x114], 7
cmova eax, dword [ebp - 0xb0]
push eax
call fcn.004471b0
mov byte [ebp - 4], 9
add esp, 4
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44e28b
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e281
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44edec
push ecx
push edx
call fcn.00490f7d
add esp, 8
lea ecx, [ebp - 0xf8]
call fcn.00445b20
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe0]
mov byte [ebp - 0x48], 0
mov edx, 0x50cf70
push dword [ebp - 0x48]
call fcn.0041bcf0
add esp, 4
push 0x2d
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 4], 0x10
call fcn.0048ecc0
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.00442d30
add esp, 8
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0xe0]
call fcn.0041c690
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9c]
cmp ecx, 7
jbe 0x44e32e
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e324
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44edf1
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp dword [ebp - 0xe4], 7
lea ecx, [ebp - 0xf8]
push 2
cmova ecx, dword [ebp - 0xf8]
lea eax, [ebp - 0xe0]
cmp dword [ebp - 0xcc], 7
push ecx
cmova eax, dword [ebp - 0xe0]
push eax
call fcn.0048ee33
push 0x50cd18
lea ecx, [ebp - 0xb0]
call fcn.0040d620
push 0x20
push str.Uninstalling_Malwarebytes_from:
push ecx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x12
call fcn.0041c350
xor ecx, ecx
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x64]
movq qword [ebp - 0x288], xmm1
movups xmmword [ebp - 0x58], xmm0
cmp ecx, 7
jbe 0x44e3f3
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e3dd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44edf6
push ecx
push edx
call fcn.00490f7d
movups xmm0, xmmword [ebp - 0x58]
add esp, 8
movq xmm1, qword [ebp - 0x288]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9c]
movq qword [ebp - 0x68], xmm1
movups xmmword [ebp - 0x78], xmm0
cmp ecx, 7
jbe 0x44e440
mov edx, dword [ebp - 0xb0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e436
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44edf6
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp dword [ebp - 0x64], 7
lea eax, [ebp - 0x78]
mov edx, 0x78c
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
cmova eax, dword [ebp - 0x78]
push eax
call fcn.004471b0
add esp, 4
call fcn.00455920
push 0x50cf70
lea ecx, [ebp - 0x140]
call fcn.0040d620
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x44]
call fcn.0040d620
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d620
push 0x30
mov byte [ebp - 4], 0x15
call fcn.00491196
movups xmm0, xmmword [ebp - 0x44]
xor ecx, ecx
mov dword [ebp - 0x48], eax
add esp, 4
mov word [ebp - 0x44], cx
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x34]
movq qword [eax + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
movups xmmword [eax + 0x18], xmm0
mov word [ebp - 0x2c], cx
movq xmm0, qword [ebp - 0x1c]
movq qword [eax + 0x28], xmm0
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x16
push ecx
push 0
push eax
push 0x451370
push 0
push 0
call fcn.0049efb5
add esp, 0x18
mov dword [ebp - 0x98], eax
test eax, eax
je 0x44ee20
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x18
call fcn.0044fb00
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x44ee19
push eax
push dword [ebp - 0x98]
call fcn.0048fbbe
add esp, 8
test eax, eax
jne 0x44ee19
xorps xmm0, xmm0
movlpd qword [ebp - 0x98], xmm0
cmp byte [0x51093f], al
jne 0x44e81a
mov byte [ebp - 4], 0x19
call fcn.00404d30
mov ecx, eax
test ecx, ecx
je 0x44edfb
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ecx, dword [0x510930]
mov esi, eax
test ecx, ecx
je 0x44e7f6
push 0x130
lea eax, [ebp - 0x270]
push 0
push eax
call fcn.00493220
add esp, 8
lea ecx, [ebp - 0x270]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.00423840
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
lea ecx, [ebp - 0x270]
call fcn.0040ef30
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x44e5f2
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x94], 0
jne 0x44ee05
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44e63f
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e635
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee0a
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44e67f
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e675
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee0a
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44e6dc
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e6d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee0a
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44e739
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e72f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee0a
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44e790
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e786
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee0a
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d580
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44eb67
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44eb5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee0a
jmp 0x44eb5d
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x44e808
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x94], 0
jne 0x44ee0f
jmp 0x44eb71
mov al, byte [0x51092f]
test al, al
jne 0x44e959
nop word [eax + eax]
lea ecx, [ebp - 0x290]
call fcn.004513e0
mov edi, dword [ebp - 0x290]
mov esi, dword [ebp - 0x28c]
cmp edi, 0xc46535ff
jne 0x44e857
cmp esi, 0x7fffffff
je 0x44e874
cmp esi, 0x7fffffff
jg 0x44e874
jl 0x44e869
cmp edi, 0xc46535ff
jae 0x44e874
add edi, 0x3b9aca00
adc esi, 0
jmp 0x44e87c
or edi, 0xffffffff
mov esi, 0x7fffffff
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x48], edi
lea ecx, [ebp - 0x288]
call fcn.004513e0
mov ecx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x284]
cmp edi, ecx
jne 0x44e8a8
cmp esi, eax
je 0x44e94c
cmp esi, eax
jl 0x44e94c
jg 0x44e8ba
cmp edi, ecx
jb 0x44e94c
sub edi, ecx
mov dword [ebp - 0x278], edi
sbb esi, eax
mov dword [ebp - 0x27c], esi
call fcn.0048fdbe
push 0
push 0x64
push edx
push eax
call fcn.004918c0
mov ecx, dword [ebp - 0x278]
mov edi, edx
mov edx, dword [ebp - 0x27c]
mov esi, eax
call fcn.004bb1a0
comisd xmm0, xmmword [0x4fc6a0]
jbe 0x44e907
add esi, 0xad160000
adc edi, 0x311cd
jmp 0x44e913
add esi, dword [ebp - 0x278]
adc edi, dword [ebp - 0x27c]
push 0
push 0x3b9aca00
push edi
push esi
call fcn.004bacc0
mov dword [ebp - 0x58], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x54], edx
sub esi, eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x50], esi
call fcn.0048fbdc
mov esi, dword [ebp - 0x8c]
add esp, 4
mov edi, dword [ebp - 0x48]
jmp 0x44e885
mov al, byte [0x51092f]
test al, al
je 0x44e830
mov eax, dword [0x510930]
test eax, eax
je 0x44e808
cmp dword [ebp - 0x94], 0
jne 0x44ee0f
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44e9b3
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e9a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44e9f3
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e9e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44ea50
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ea46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44eaad
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eaa3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44eb04
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eafa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d580
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44eb67
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44eb5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov eax, 3
jmp 0x44dbcb
mov ecx, dword [ebp - 0x12c]
cmp ecx, 7
jbe 0x44ebb1
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eba7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x44ebf1
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ebe7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x44ec4e
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ec44
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp ecx, 7
jbe 0x44ecab
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44eca1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x44ed02
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44ecf8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x88], vtable.InstalledProducts.0
call fcn.0045d580
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44ed65
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ed5b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ee14
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
jmp 0x44dbcb
call fcn.0040ddc0
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
mov ecx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBUtils.cpp
call fcn.004471b0
lea ecx, [ebp - 0x270]
call fcn.0040f010
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x270]
call fcn.00423840
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f9b0
push 3
call fcn.0049baf4
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
push 0x80004005
call fcn.00404ea0
call fcn.0049ecea
call fcn.004961af
call fcn.0049ecea
call fcn.004961af
push 1
call fcn.0048fb89
push 6
mov dword [ebp - 0x94], 0
call fcn.0048fb89
int3