Function at 0x425d72
Capabilities:
Accept command line arguments
Get common file path
Get system information on windows
Hide graphical window
Query or enumerate registry value
Set current directory

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bd3e0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa68
mov eax, dword [0x50c080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x8a8]
mov edi, dword [ebx + 0x10]
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x828], 0
call fcn.00445b20
push 0xb
push str.mbsetup.log
call fcn.0048ecc0
mov edx, eax
lea ecx, [ebp - 0xa5c]
call fcn.00442d30
add esp, 8
lea eax, [ebp - 0xa5c]
lea ecx, [ebp - 0x8a8]
push eax
call fcn.0041c690
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x425de0
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x425dd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b67
push ecx
push edx
call fcn.00490f7d
add esp, 8
push 0xb0
lea eax, [ebp - 0xa40]
push 0
push eax
call fcn.00493220
cmp dword [ebp - 0x894], 7
lea eax, [ebp - 0x8a8]
lea ecx, [ebp - 0xa40]
cmova eax, dword [ebp - 0x8a8]
add esp, 4
push 0xa
push eax
call fcn.00440610
mov eax, dword [ebp - 0xa40]
push 0xb0
push 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xa44], eax
lea eax, [ebp - 0x990]
push eax
call fcn.00493220
cmp dword [ebp - 0x894], 7
lea eax, [ebp - 0x8a8]
lea ecx, [ebp - 0x990]
cmova eax, dword [ebp - 0x8a8]
push eax
call fcn.00441f20
mov eax, dword [ebp - 0x990]
push 0
push 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x990]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x994], eax
mov eax, dword [0x50f880]
mov ecx, dword [eax + 4]
lea eax, [ebp - 0xa3c]
add ecx, 0x50f880
mov dword [ecx + 0x38], eax
call fcn.00413b00
mov eax, dword [0x50f6d0]
push 0
push 0
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x98c]
add ecx, 0x50f6d0
mov dword [ecx + 0x38], eax
call fcn.00413b00
push 0x50f6d0
call fcn.004113d0
add esp, 4
mov edx, str._Install_started
mov ecx, eax
call fcn.0041b9a0
lea ecx, [ebp - 0xa5c]
mov esi, eax
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x425f0a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, esi
call fcn.00412550
add esp, 4
mov edx, 0x4ee2a0
mov ecx, eax
call fcn.0041b9a0
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x425f6c
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x425f62
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b6c
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov dword [ebp - 4], 0
call fcn.00404d30
mov ecx, eax
test ecx, ecx
je 0x427b5d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 4], 0xffffffff
mov ecx, 1
sub ecx, dword [eax + 0xc]
lea esi, [eax + 0x10]
mov eax, dword [esi - 8]
sub eax, 0x104
mov dword [ebp - 0xa44], esi
or eax, ecx
mov dword [ebp - 0x824], esi
jge 0x425fcf
push 0x104
lea ecx, [ebp - 0x824]
call fcn.00404a30
mov esi, dword [ebp - 0x824]
mov dword [ebp - 0xa44], esi
cmp dword [esi - 8], 0x104
jl 0x427bee
push 0x104
xor eax, eax
mov dword [esi - 0xc], 0x104
push esi
mov word [esi + 0x208], ax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push dword [esi - 8]
push esi
call fcn.004963f3
add esp, 8
test eax, eax
js 0x427bee
cmp eax, dword [esi - 8]
jg 0x427bee
xor ecx, ecx
mov dword [esi - 0xc], eax
push esi
mov word [esi + eax*2], cx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x42603b
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ee328
mov ecx, eax
call fcn.0041b9a0
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xd0
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ee2e0
mov ecx, eax
call fcn.0041b9a0
cmp dword [esi - 4], 1
mov dword [ebp - 0x81c], eax
jle 0x4260a7
push dword [esi - 0xc]
lea ecx, [ebp - 0x824]
call fcn.00404930
mov esi, dword [ebp - 0x824]
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0xa44], esi
mov edx, esi
mov ecx, eax
call fcn.0041b9a0
mov edx, 0x4ee2dc
mov ecx, eax
call fcn.0041b9a0
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426105
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4260fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b71
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.004488c0
mov eax, dword [ebp - 0x820]
push 2
push 0
mov dword [0x510950], eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426124
sub ecx, edx
sar ecx, 1
push ecx
push edi
mov ecx, 0x50cdd8
call fcn.0040db20
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426155
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xda
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ec7a8
mov ecx, eax
call fcn.00411050
mov edx, str.Parsing_Command_Line:
mov ecx, eax
call fcn.0041b9a0
mov edx, edi
mov ecx, eax
call fcn.0041b9a0
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4261f3
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4261e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b76
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, edi
mov dword [ebp - 0x830], 0
xorps xmm0, xmm0
mov dword [ebp - 0x82c], 0
movups xmmword [ebp - 0x840], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426216
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x840]
call fcn.0040df90
lea ecx, [ebp - 0x840]
call fcn.0042f2a0
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x42627d
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426273
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b7b
push ecx
push edx
call fcn.00490f7d
add esp, 8
lea eax, [ebp - 0x890]
mov dword [ebp - 0x890], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
test edi, edi
je 0x4264eb
mov edx, dword [edi]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x81c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4262b2
sub ecx, dword [ebp - 0x81c]
xorps xmm0, xmm0
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x848], 0
movups xmmword [ebp - 0x858], xmm0
mov dword [ebp - 0x844], 0
call fcn.0040df90
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0xa5c]
push eax
lea ecx, [ebp - 0x858]
call fcn.00444c50
push eax
lea ecx, [ebp - 0x840]
call fcn.0040d620
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x426355
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42634b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b80
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp dword [ebp - 0x82c], 7
lea eax, [ebp - 0x840]
push str.mbuns.exe
cmova eax, dword [ebp - 0x840]
push eax
call fcn.0049adec
add esp, 8
test eax, eax
je 0x4263a5
cmp dword [ebp - 0x82c], 7
lea eax, [ebp - 0x840]
push str.unins000.exe
cmova eax, dword [ebp - 0x840]
push eax
call fcn.0049adec
add esp, 8
test eax, eax
jne 0x42644b
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4263bb
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xe9
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Uninstall_implied_by_filename
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426444
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42643a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b85
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov byte [0x51093e], 1
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x42648b
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426481
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b8a
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x844]
xor eax, eax
mov dword [ebp - 0x830], 0
mov dword [ebp - 0x82c], 7
mov word [ebp - 0x840], ax
cmp ecx, 7
jbe 0x42659a
mov edx, dword [ebp - 0x858]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426590
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b8a
jmp 0x426590
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426501
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xef
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_CommandLineToArgvW_failed:
mov ecx, eax
call fcn.00411050
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, edi
call fcn.0041b590
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x42659a
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426590
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b8f
push ecx
push edx
call fcn.00490f7d
add esp, 8
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4265b0
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xf2
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_MBSetup_mode_:
mov ecx, eax
call fcn.00411050
cmp byte [0x51093e], 0
mov ecx, str.installing
mov edx, str.uninstalling
cmove edx, ecx
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426654
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42664a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b94
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.00427ca0
call fcn.0043ba30
cmp byte [0x51093f], 0
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x8b0], 0
mov dword [ebp - 0x8ac], 0
mov dword [ebp - 0x85c], 0
jne 0x42672a
lea eax, [ebp - 0x848]
mov dword [ebp - 0x848], 8
push eax
mov dword [ebp - 0x844], 0x8000
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
sub esp, 0xc
call fcn.00444b00
push 0
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x85c]
push eax
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0xb
lea ecx, [ebp - 0x820]
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x824], 0
call fcn.00452320
push 0xa
lea ecx, [ebp - 0x824]
call fcn.00452320
mov eax, dword [ebp - 0x824]
mov edi, dword [sym.imp.GDI32.dll_RemoveFontMemResourceEx]
test eax, eax
je 0x42671d
push eax
call edi
mov eax, dword [ebp - 0x820]
test eax, eax
je 0x42672a
push eax
call edi
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426740
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x12c
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_This_is_an_ONLINE_installer_build.
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4267c9
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4267bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b99
push ecx
push edx
call fcn.00490f7d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x864], 0
xor eax, eax
mov dword [ebp - 0x860], 7
movups xmmword [ebp - 0x874], xmm0
lea ecx, [ebp - 0x874]
mov word [ebp - 0x874], ax
call fcn.00433790
cmp dword [ebp - 0x860], 7
lea eax, [ebp - 0x874]
push dword [ebp - 0x864]
cmova eax, dword [ebp - 0x874]
mov ecx, 0x50cce8
push eax
call fcn.0040db20
cmp dword [ebp - 0x864], 0
je 0x426adc
lea eax, [ebp - 0xa5c]
push eax
lea ecx, [ebp - 0x874]
call fcn.004445f0
push eax
lea ecx, [ebp - 0x88c]
call fcn.0040d620
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x42688b
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426881
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427b9e
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov edi, dword [ebp - 0x878]
lea ecx, [ebp - 0x88c]
mov eax, dword [ebp - 0x87c]
lea edx, [ebp - 0x88c]
cmp edi, 7
cmova ecx, dword [ebp - 0x88c]
cmova edx, dword [ebp - 0x88c]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x88c]
mov dword [ebp - 0x820], eax
lea eax, [ebp - 0x88c]
cmova eax, ecx
cmp eax, dword [ebp - 0x820]
je 0x42690f
mov esi, dword [ebp - 0x820]
sub edx, eax
nop dword [eax]
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x4268ed
cmp ecx, 0x3a
jne 0x4268f2
mov ecx, 0x5f
mov word [eax + edx], cx
add eax, 2
cmp eax, esi
jne 0x4268e0
mov edi, dword [ebp - 0x878]
mov esi, dword [ebp - 0xa44]
mov ecx, dword [ebp - 0x88c]
cmp edi, 7
lea eax, [ebp - 0x88c]
cmova eax, ecx
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x81c], eax
test edi, edi
jne 0x426a37
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426952
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x139
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ec7a8
mov ecx, eax
call fcn.00411050
mov edx, str.Error_obtaining_mutex__installing
mov ecx, eax
call fcn.0041b9a0
push dword [ebp - 0x81c]
mov ecx, eax
call fcn.0041b590
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4269f4
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4269ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ba3
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x878]
cmp ecx, 7
jbe 0x426adc
mov edx, dword [ebp - 0x88c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426ad2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ba8
jmp 0x426ad2
cmp eax, 0xb7
jne 0x4269f4
push 0x4ee540
push str.32770
call dword [sym.imp.USER32.dll_FindWindowW]
mov edi, eax
push 5
push edi
mov dword [ebp - 0x828], edi
call dword [sym.imp.USER32.dll_ShowWindow]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
call edi
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push dword [ebp - 0x828]
call edi
mov ecx, dword [ebp - 0x878]
cmp ecx, 7
jbe 0x426ac8
mov edx, dword [ebp - 0x88c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426abe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427ba8
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov edi, 1
jmp 0x427994
push ecx
push edx
call fcn.00490f7d
add esp, 8
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426af2
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x145
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_MBSetup_version_5.2.1.115
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x426b7b
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426b71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bad
push ecx
push edx
call fcn.00490f7d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x8bc], 0
lea eax, [ebp - 0x8dc]
push eax
movups xmmword [ebp - 0x8dc], xmm0
movups xmmword [ebp - 0x8cc], xmm0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov ax, word [ebp - 0x8dc]
test ax, ax
je 0x426bb9
cmp ax, 5
je 0x426bb9
xor al, al
jmp 0x426bbb
mov al, 1
cmp byte [0x510935], 0
mov byte [0x51094a], al
je 0x426e1d
push str.Doing_MB5_migration_checks.
mov edx, 0xffa
mov ecx, 0x4ee328
call fcn.004471b0
add esp, 4
mov dword [ebp - 0x830], 0
xorps xmm0, xmm0
mov dword [ebp - 0x82c], 7
xor eax, eax
lea edx, [ebp - 0x840]
movups xmmword [ebp - 0x840], xmm0
mov word [ebp - 0x840], ax
call fcn.00429060
test al, al
jne 0x426c7b
push str._MB5_migration_check__Error_getting_installation_directory
mov edx, 0xfff
mov ecx, 0x4ee328
call fcn.004471b0
mov ecx, dword [ebp - 0x82c]
add esp, 4
cmp ecx, 7
jbe 0x426c71
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426c67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bb2
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov edi, 0x2a
jmp 0x427994
mov ecx, 0x50cf70
call fcn.0042bd90
test eax, eax
je 0x426ce7
push str._MB5_migration_check__Prerequisie_check_failed
mov edx, 0x1006
mov ecx, 0x4ee328
call fcn.004471b0
mov ecx, dword [ebp - 0x82c]
add esp, 4
cmp ecx, 7
jbe 0x426c71
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426cd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bb2
push ecx
push edx
call fcn.00490f7d
mov edi, 0x2a
jmp 0x427991
push 0
lea ecx, [ebp - 0x850]
mov dword [ebp - method.InstalledProducts.virtual_0], vtable.InstalledProducts.0
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 0
call fcn.0046d650
push 1
lea ecx, [ebp - 0x850]
call fcn.0046d650
lea ecx, [ebp - 0x850]
call fcn.0046ea20
mov ecx, 0x4ee328
test al, al
je 0x426daf
push str._MB5_migration_check__Privacy_VPN_is_installed
mov edx, 0x100d
call fcn.004471b0
add esp, 4
mov dword [ebp - method.InstalledProducts.virtual_0], vtable.InstalledProducts.0
lea ecx, [ebp - 0x84c]
call fcn.0045d580
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x426c71
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426d9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bb2
push ecx
push edx
call fcn.00490f7d
mov edi, 0x2a
jmp 0x427991
push str._MB5_migration_check__OK_to_proceed_with_MB5_migration
mov edx, 0x1011
call fcn.004471b0
add esp, 4
mov dword [ebp - method.InstalledProducts.virtual_0], vtable.InstalledProducts.0
lea ecx, [ebp - 0x84c]
call fcn.0045d580
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x426e16
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426e0c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bb2
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor edi, edi
jmp 0x427994
push 0x43
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov edi, eax
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0x844], edi
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x426e43
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x15b
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ec7a8
mov ecx, eax
call fcn.00411050
cmp byte [0x51094a], 0
mov ecx, str.64_Bit_Processor.
mov edx, str.32_Bit_Processor.
cmove edx, ecx
mov ecx, eax
call fcn.0041b9a0
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x426ede
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x426ed4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bb7
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov edx, str.32_Bit_Process.
mov ecx, 0x50f6d0
call fcn.0041b9a0
cmp edi, 3
ja case.default.0x426ef6
jmp dword [edi*4 + 0x427bf8]
mov edx, str.Windows_Booted_Normally.
mov ecx, 0x50f6d0
call fcn.0041b9a0
push 0x50f6d0
call fcn.004113d0
add esp, 4
jmp 0x426fb7
mov edx, str.Windows_Booted_in_Safe_Mode.
mov ecx, 0x50f6d0
call fcn.0041b9a0
push 0x50f6d0
call fcn.004113d0
add esp, 4
jmp 0x426fb2
mov edx, str.Windows_Booted_in_Safe_Mode_with_Networking.
mov ecx, 0x50f6d0
call fcn.0041b9a0
push 0x50f6d0
call fcn.004113d0
add esp, 4
jmp 0x426fb2
mov edx, str.Windows_Booted_in_Directory_Services_Restore_Repair_Mode.
mov ecx, 0x50f6d0
call fcn.0041b9a0
push 0x50f6d0
call fcn.004113d0
add esp, 4
jmp 0x426fb7
mov edx, str.Unknown_Windows_Boot_Mode_
mov ecx, 0x50f6d0
call fcn.0041b9a0
push edi
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ec738
mov ecx, eax
call fcn.00411050
push 0x50f6d0
call fcn.004113d0
add esp, 4
cmp edi, 1
je 0x426fb2
cmp edi, 2
jne 0x426fb7
call fcn.00434f60
cmp byte [0x510942], 0
jne 0x4270df
push 0x400
lea eax, [ebp - 0x818]
push eax
push 0x81
push dword [0x510950]
call dword [sym.imp.USER32.dll_LoadStringW]
lea ecx, [ebp - 0x818]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426ff0
sub ecx, edx
lea eax, [ebp - 0x818]
sar ecx, 1
push ecx
push eax
mov ecx, 0x50cee0
call fcn.0040db20
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x427027
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x17f
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ec7a8
mov ecx, eax
call fcn.00411050
mov edx, str.Supported_language_is:
mov ecx, eax
call fcn.0041b9a0
cmp dword [0x50cef4], 7
mov edx, 0x50cee0
push dword [0x50cef0]
cmova edx, dword [0x50cee0]
mov ecx, eax
call fcn.00412550
add esp, 4
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4270df
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4270d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bbc
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp byte [0x51093e], 0
jne 0x42729a
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x830], 0
push 0x4ebca4
lea ecx, [ebp - 0x840]
mov dword [ebp - 0x82c], 0
movups xmmword [ebp - 0x840], xmm0
call fcn.0040df90
lea eax, [ebp - 0x840]
xor dl, dl
push eax
xor cl, cl
call fcn.00431650
mov ecx, dword [ebp - 0x82c]
add esp, 4
cmp ecx, 7
jbe 0x42716f
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427165
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bc1
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp byte [0x51093f], 0
je 0x427295
xorps xmm0, xmm0
mov dword [ebp - 0x830], 0
xor eax, eax
mov dword [ebp - 0x82c], 7
movups xmmword [ebp - 0x840], xmm0
lea ecx, [ebp - 0x840]
mov word [ebp - 0x840], ax
call fcn.0045cef0
mov byte [0x51091c], al
test al, al
je 0x427255
lea eax, [ebp - 0x820]
mov dword [ebp - 0x81c], 0
push eax
lea eax, [ebp - 0xa44]
mov dword [ebp - 0x824], 0
push eax
lea eax, [ebp - 0x824]
mov dword [ebp - 0xa44], 0
push eax
lea edx, [ebp - 0x81c]
mov dword [ebp - 0x820], 0
lea ecx, [ebp - 0x840]
call fcn.004549c0
add esp, 0xc
test al, al
je 0x427244
movzx eax, word [ebp - 0x820]
push eax
movzx eax, word [ebp - 0xa44]
push eax
movzx eax, word [ebp - 0x824]
push eax
movzx eax, word [ebp - 0x81c]
push eax
push str._hu._hu._hu._hu
push 0x5109b8
call fcn.00441320
add esp, 0x18
jmp 0x427255
push 7
push 0x4f063c
mov ecx, 0x5109b8
call fcn.00404630
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x427295
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42728b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bc6
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.00455dd0
call fcn.00435670
test al, al
je 0x427528
mov dword [ebp - 4], 3
call fcn.00404d30
mov ecx, eax
test ecx, ecx
je 0x427b5d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 4], 0xffffffff
mov edx, 0xc8
mov dword [ebp - 0x81c], eax
lea ecx, [ebp - 0x828]
call fcn.00455840
push dword [eax]
lea eax, [ebp - 0x81c]
push str._s___cant_run_on_ARM
push eax
call fcn.00441320
mov edx, dword [ebp - 0x828]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x427318
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x42732e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x199
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ec7a8
mov ecx, eax
call fcn.00411050
mov edi, dword [ebp - 0x81c]
mov ecx, eax
mov edx, edi
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4273c6
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4273bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bcb
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp byte [0x51093e], 0
jne 0x4273d8
xor edx, edx
mov ecx, edi
call fcn.00457ae0
cmp byte [0x51093f], 0
jne 0x427433
push 0x130
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.00493220
add esp, 8
lea ecx, [ebp - 0x148]
push 0
push 0x6a6
push 0x233c
push 0x80
push 1
call fcn.00423840
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x148]
call fcn.0040f9b0
lea ecx, [ebp - 0x148]
call fcn.0040ef30
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x42744b
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, 0xc8
mov eax, dword [ebp - 0x844]
cmp eax, 1
je 0x427460
cmp eax, 2
jne 0x427465
call fcn.004352f0
cmp byte [0x51093f], 0
jne 0x42747a
push dword [ebp - 0x85c]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, str._Install_finished__
mov ecx, 0x50f6d0
call fcn.0041b9a0
push edi
mov ecx, eax
call fcn.0040f7e0
mov edx, 0x4ee850
mov ecx, eax
call fcn.00411050
lea ecx, [ebp - 0xa74]
mov dword [ebp - 0x844], eax
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4274bf
mov eax, dword [eax]
push ecx
mov ecx, dword [ebp - 0x844]
mov edx, eax
call fcn.00412550
add esp, 4
mov edx, 0x4ee2a0
mov ecx, eax
call fcn.0041b9a0
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa60]
add esp, 4
cmp ecx, 7
jbe 0x427994
mov edx, dword [ebp - 0xa74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42798a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bd0
jmp 0x42798a
cmp byte [0x51093e], 0
je 0x42753d
call fcn.0042ec00
mov edi, eax
jmp 0x427450
cmp dword [0x50cec4], 7
mov ecx, 0x50ceb0
mov edi, dword [0x50cec0]
cmova ecx, dword [0x50ceb0]
cmp edi, 4
jne 0x42759c
mov eax, edi
mov edx, str.2060
mov dword [ebp - 0x81c], eax
test eax, eax
je 0x4275df
sub ecx, edx
mov dword [ebp - 0x820], ecx
movzx ecx, word [edx + ecx]
movzx eax, word [edx]
cmp cx, ax
jne 0x42759c
mov eax, dword [ebp - 0x81c]
add edx, 2
mov ecx, dword [ebp - 0x820]
dec eax
mov dword [ebp - 0x81c], eax
test eax, eax
jne 0x427574
jmp 0x4275df
cmp dword [0x50cec4], 7
mov eax, 0x50ceb0
cmova eax, dword [0x50ceb0]
cmp edi, 4
jne 0x4275e8
mov edx, 0x4ee22c
test edi, edi
je 0x4275df
sub eax, edx
mov dword [ebp - 0x81c], eax
movzx ecx, word [eax + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x4275e8
mov eax, dword [ebp - 0x81c]
add edx, 2
sub edi, 1
jne 0x4275c5
xor al, al
mov ecx, 0x50cb51
xchg byte [ecx], al
call fcn.00436950
cmp byte [0x51093c], 0
mov byte [0x510927], al
jne 0x42762d
lea eax, [ebp - 0x874]
push eax
lea ecx, [ebp - 0xa5c]
call fcn.0040d620
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0x828], 1
call fcn.004289c0
test al, al
jne 0x42762d
mov ecx, 1
jmp 0x427635
mov ecx, dword [ebp - 0x828]
mov al, 1
mov byte [0x51093d], al
test cl, 1
je 0x42767f
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x42767f
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427675
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bd5
push ecx
push edx
call fcn.00490f7d
add esp, 8
lea eax, [ebp - 0xa44]
mov dword [ebp - 0xa44], 0
push eax
push 0x20019
push 0
push str.SOFTWAREMalwarebytesmbam
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4276fb
mov dword [ebp - 0x828], eax
lea eax, [ebp - 0x81c]
push eax
lea eax, [ebp - 0x828]
mov dword [ebp - 0x81c], 4
push eax
push 0
push 0
push str.dtopicon
push dword [ebp - 0xa44]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4276ef
cmp dword [ebp - 0x828], eax
setne byte [0x50cb52]
push dword [ebp - 0xa44]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.0042c9a0
mov edi, eax
lea ecx, [ebp - 0xa5c]
mov edx, edi
call fcn.0041c980
push 0x1e
push str.DoInstall_complete._Returned:
push ecx
mov ecx, eax
call fcn.0041c350
mov dword [ebp - 0x830], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x840], xmm0
mov dword [ebp - 0x82c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x840], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x830], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x4277a6
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42779c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bda
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp dword [ebp - 0x82c], 7
lea eax, [ebp - 0x840]
mov edx, 0x1bf
mov ecx, 0x4ee328
cmova eax, dword [ebp - 0x840]
push eax
call fcn.004471b0
add esp, 4
cmp byte [0x510926], 0
je 0x427851
push 0x11
xorps xmm0, xmm0
mov dword [ebp - 0xa4c], 0
push str.__useDevEndpoints
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0xa48], 0
movups xmmword [ebp - 0xa5c], xmm0
call fcn.0040df90
lea ecx, [ebp - 0xa5c]
call fcn.0045afc0
mov ecx, dword [ebp - 0xa48]
cmp ecx, 7
jbe 0x427851
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427847
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427be4
push ecx
push edx
call fcn.00490f7d
add esp, 8
call fcn.00448ca0
test al, al
jne 0x4278fd
lea ecx, [ebp - 0xa5c]
call fcn.00467cf0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x427874
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x1ca
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Problem_saving_state_of_create_desktop_icon_option
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0xa48]
add esp, 4
cmp ecx, 7
jbe 0x4278fd
mov edx, dword [ebp - 0xa5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4278f3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427bdf
push ecx
push edx
call fcn.00490f7d
add esp, 8
cmp dword [0x50cd88], 0
je 0x42791f
cmp dword [0x50cd8c], 7
mov eax, 0x50cd78
cmova eax, dword [0x50cd78]
push eax
call fcn.0048f346
cmp dword [0x50cda0], 0
je 0x427941
cmp dword [0x50cda4], 7
mov eax, 0x50cd90
cmova eax, dword [0x50cd90]
push eax
call fcn.0048f346
mov ecx, dword [ebp - 0x82c]
cmp ecx, 7
jbe 0x427450
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42797b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427be4
push ecx
push edx
call fcn.00490f7d
add esp, 8
jmp 0x427450
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, dword [ebp - 0x860]
cmp ecx, 7
jbe 0x4279d4
mov edx, dword [ebp - 0x874]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4279ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427be9
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x864], 0
mov word [ebp - 0x874], ax
add esi, 0xfffffff0
mov dword [ebp - 0x860], 7
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x427a09
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x990]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x990]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x994], eax
lea ecx, [ebp - 0x98c]
call fcn.0043dae0
mov eax, dword [ebp - 0x990]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x990]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x994], eax
lea eax, [ebp - 0x928]
mov dword [ebp - 4], 4
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0048f5ab
mov eax, dword [ebp - 0xa40]
add esp, 4
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xa44], eax
lea ecx, [ebp - 0xa3c]
call fcn.0043ed70
mov eax, dword [ebp - 0xa40]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0xa44], eax
lea eax, [ebp - 0x9d8]
mov dword [ebp - 4], 5
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0048f5ab
mov ecx, dword [ebp - 0x894]
add esp, 4
cmp ecx, 7
jbe 0x427b3b
mov edx, dword [ebp - 0x8a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427b31
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427be9
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00490c46
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
push 0x80004005
call fcn.00404ea0
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
push 0x80070057
call fcn.00404ea0
std
outsb dx, byte [esi]
inc edx
add byte [esi], bl
outsd dx, dword [esi]
inc edx
add byte [edi + ebp*2], bh
inc edx
add byte [edx + 0x6f], bl
inc edx
add ah, cl
int3