Function at 0x447c20
Capabilities:
Delete file
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b3d58
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5d8
mov eax, dword [0x4e706c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.004417b0
add esp, 4
call fcn.0042f790
lea ecx, [ebp - 0xb0]
call fcn.0042efe0
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4eb718
call fcn.0043c030
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae edx, dword [ebp - 0xb0]
mov ecx, eax
call fcn.0044af00
add esp, 4
mov edx, 0x4d01fc
mov ecx, eax
call fcn.0043c030
push eax
call fcn.0043c2e0
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], vtable.InstalledProducts.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00462450
push 1
lea ecx, [ebp - 0x28]
call fcn.00462450
cmp dword [0x4e7d44], 8
mov eax, 0x4e7d30
push str.MBRW_C
cmovae eax, dword [0x4e7d30]
push eax
mov byte [ebp - 0x4f9], 0
call fcn.0048d2a7
add esp, 8
test eax, eax
je 0x447d67
cmp dword [0x4e7d44], 8
mov eax, 0x4e7d30
push str.MBRW_B
cmovae eax, dword [0x4e7d30]
push eax
call fcn.0048d2a7
add esp, 8
test eax, eax
je 0x447d67
xor al, al
jmp 0x447d69
mov al, 1
test al, al
je 0x447e95
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x28]
call fcn.004636d0
mov edi, 0x4e7c88
test al, al
je 0x447ded
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x28]
call fcn.00463a00
test al, al
je 0x447ded
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.0043bed0
call fcn.0042a5d0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xe0]
cmp edx, 8
jb 0x447e31
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447e27
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d2a
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
cmp edx, 8
jb 0x447f37
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447f2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d2f
jmp 0x447f2d
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00463190
mov edi, 0x4e7c88
test al, al
je 0x447ef3
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00464140
test al, al
je 0x447ef3
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
call fcn.0043bed0
call fcn.0042a5d0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x447f37
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447f2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d34
push edx
push ecx
call fcn.0046f0d0
add esp, 8
cmp byte [ebp - 0x4f9], 0
jne 0x448211
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.0042e7f0
cmp dword [ebp - 0x88], 0
jne 0x44802d
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x447fbd
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447fb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d39
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00456bb0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x448023
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x448019
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d3e
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov eax, 1
jmp 0x448d0c
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044bdd0
mov esi, eax
cmp esi, 0x4e7c88
je 0x44807a
mov ecx, edi
call fcn.00404d30
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x4e7c88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4e7c98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5bc]
cmp edx, 8
jb 0x4480ba
mov ecx, dword [ebp - 0x5d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4480b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d43
push edx
push ecx
call fcn.0046f0d0
add esp, 8
call fcn.0042a5d0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0x4f9], al
cmp edx, 8
jb 0x44810f
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4480ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d48
push edx
push ecx
call fcn.0046f0d0
mov al, byte [ebp - 0x4f9]
add esp, 8
test al, al
jne 0x448211
cmp edi, 0x4e7cb8
je 0x448140
cmp dword [0x4e7ccc], 8
mov eax, 0x4e7cb8
push dword [0x4e7cc8]
cmovae eax, dword [0x4e7cb8]
mov ecx, edi
push eax
call fcn.00407990
call fcn.0042a5d0
test al, al
jne 0x448211
cmp byte [0x4eca76], al
jne 0x4481a7
push 0x130
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.00487250
add esp, 8
lea ecx, [ebp - 0x298]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fe20
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x298]
call fcn.0040dbe0
lea ecx, [ebp - 0x298]
call fcn.0040d290
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.004417b0
add esp, 4
mov dword [ebp - 0x28], vtable.InstalledProducts.0
lea ecx, [ebp - 0x24]
call fcn.00456bb0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x448207
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4481fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d4d
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov eax, 3
jmp 0x448d0c
push 0x4e7d30
mov edx, str.Found_the_Service._Product_code_is:
lea ecx, [ebp - 0x48]
call fcn.0043bc00
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
mov edx, 0x73d
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004417b0
add esp, 4
mov byte [ebp - 0x4f9], 0
call fcn.00423c50
or edi, 0xffffffff
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448389
push str.creating_MBAMService_instance
mov edx, 0x743
call fcn.004417b0
add esp, 4
lea ecx, [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
call fcn.0044abe0
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.004417b0
mov ecx, dword [ebp - 0x80]
add esp, 4
push 1
call fcn.0041d3e0
mov esi, dword [ebp - 0x7c]
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x44834a
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x4f9], 1
call fcn.004417b0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x4482e9
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00430d70
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x44833e
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
call fcn.004417b0
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.00436a70
call fcn.00430f70
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448d52
push str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
jmp 0x448354
push str.No_need_to_prompt_for_password
mov edx, 0x75f
jmp 0x448354
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.004417b0
add esp, 4
mov byte [ebp - 4], 9
test esi, esi
je 0x448383
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x448383
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x448383
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
jmp 0x44839b
push str.Not_an_MBAM_product_code
mov edx, 0x76e
call fcn.004417b0
add esp, 4
push 0x4ecba4
push 0x41a1b0
push 0x4ecbac
call fcn.0046b5e3
add esp, 0xc
test eax, eax
je 0x448da5
push 0x4e7c88
lea ecx, [ebp - 0xc8]
call fcn.0040bf20
push 1
push 0x4ce774
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xa
call fcn.0040c2d0
push 0x18
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040c2d0
lea eax, [ebp - 0xc8]
mov edx, str.ISvc_path_is:
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0043bc00
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x448440
mov ecx, eax
call fcn.00404d30
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5d4]
cmp edx, 8
jb 0x448480
mov ecx, dword [ebp - 0x5e8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448476
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448daa
push edx
push ecx
call fcn.0046f0d0
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x776
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004417b0
add esp, 4
call fcn.00423c50
test al, al
je 0x44864c
cmp byte [ebp - 0x4f9], 0
jne 0x44864c
cmp dword [ebp - 0xb4], 8
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44864c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x570]
call fcn.0044bc60
push eax
mov edx, str.Error
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x558]
call fcn.00418ea0
add esp, 4
push str._deleting_ISvc
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.0043bda0
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x544]
cmp edx, 8
jb 0x448563
mov ecx, dword [ebp - 0x558]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448559
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448daf
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x55c]
cmp edx, 8
jb 0x4485c4
mov ecx, dword [ebp - 0x570]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4485ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448db4
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x560], 0
cmp dword [ebp - 0x128], 8
mov edx, 0x780
mov word [ebp - 0x570], ax
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x55c], 7
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.004417b0
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x44864c
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448642
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448db9
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea ecx, [ebp - 0x78]
call fcn.004403a0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x18], 0
mov edx, 0x4e7ee0
push dword [ebp - 0x18]
call fcn.00418f10
add esp, 4
push 0x2d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5a0]
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
call fcn.0043cfe0
add esp, 0xc
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60]
call fcn.00419870
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x58c]
cmp edx, 8
jb 0x4486e6
mov ecx, dword [ebp - 0x5a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4486dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448dbe
push edx
push ecx
call fcn.0046f0d0
add esp, 8
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push 2
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
push ecx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0046c03a
push 0x4ecba4
push 0x41a1b0
push 0x4ecbac
call fcn.0046b5e3
add esp, 0xc
test eax, eax
je 0x448dc3
push 0x4e7c88
lea ecx, [ebp - 0x5b8]
call fcn.0040bf20
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x13
push eax
mov edx, str.Uninstalling_Malwarebytes_from:
lea ecx, [ebp - 0x588]
call fcn.00418ea0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x448786
mov ecx, eax
call fcn.00404d30
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x574]
cmp edx, 8
jb 0x4487c6
mov ecx, dword [ebp - 0x588]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4487bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448dc8
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 7
mov word [ebp - 0x588], ax
cmp edx, 8
jb 0x448827
mov ecx, dword [ebp - 0x5b8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44881d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448dcd
push edx
push ecx
call fcn.0046f0d0
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x78c
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004417b0
add esp, 4
call fcn.0044f5f0
push 0x4e7ee0
lea ecx, [ebp - 0x154]
call fcn.0040bf20
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x530]
call fcn.0040bf20
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x518]
call fcn.0040bf20
push 0x30
mov byte [ebp - 4], 0x16
call fcn.0046f0de
movups xmm0, xmmword [ebp - 0x530]
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x500], esi
mov word [ebp - 0x530], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x520]
movq qword [esi + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x518]
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 7
movups xmmword [esi + 0x18], xmm0
mov word [ebp - 0x518], ax
movq xmm0, qword [ebp - 0x508]
movq qword [esi + 0x28], xmm0
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0xcc], eax
movups xmmword [ebp - 0xdc], xmm0
call fcn.0044b450
mov dword [ebp - 0xdc], 0x4d0e0c
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xcc], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xdc]
call fcn.0044b5e0
mov esi, dword [ebp - 0xcc]
test esi, esi
je 0x448967
mov ecx, esi
call fcn.004497e0
push 0x30
push esi
call fcn.0046f0d0
add esp, 8
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd8]
push esi
mov dword [ebp - 0x18], eax
call fcn.0046d456
add esp, 4
test eax, eax
je 0x448990
push eax
call fcn.0046cb9f
add esp, 4
push esi
call fcn.0046d39a
add esp, 4
push dword [ebp - 0x18]
call fcn.0046ced4
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x1b
call fcn.004497e0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4489c7
push 1
call fcn.0046cbcc
mov eax, dword [ebp - 0x2c]
add esp, 4
push eax
push dword [ebp - 0x30]
call fcn.0046ca71
add esp, 8
test eax, eax
je 0x4489e0
push eax
call fcn.0046cb9f
add esp, 4
cmp byte [0x4eca76], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
jne 0x448bb0
mov byte [ebp - 4], 0x1c
call fcn.00403ab0
mov ecx, eax
test ecx, ecx
je 0x448dd2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [0x4ecad4]
test eax, eax
je 0x448b7e
push 0x130
lea eax, [ebp - 0x3c8]
push 0
push eax
call fcn.00487250
add esp, 8
lea ecx, [ebp - 0x3c8]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fe20
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.0040dbe0
lea ecx, [ebp - 0x3c8]
call fcn.0040d290
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1d
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x448a96
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x448ddc
lea ecx, [ebp - 0x154]
call fcn.00404d30
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x448ae5
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448adb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448de1
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448b33
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448b29
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448de6
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404d30
lea ecx, [ebp - 0x48]
call fcn.00404d30
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00456bb0
lea ecx, [ebp - 0xb0]
call fcn.0040c5b0
mov eax, 3
jmp 0x448d0c
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1e
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x448b9a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x448deb
jmp 0x448c36
mov al, byte [0x4ecad1]
test al, al
jne 0x448c1a
call fcn.0046cfb2
add eax, 0x989680
push 0
push 0x64
adc edx, 0
push edx
push eax
call fcn.0046f7e0
push 0
push 0x3b9aca00
mov esi, eax
push edx
push esi
call fcn.004ae4b0
mov dword [ebp - 0x540], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x53c], edx
sub esi, eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x538], esi
movups xmm0, xmmword [ebp - 0x540]
push eax
movups xmmword [ebp - 0x168], xmm0
call fcn.0046ca99
add esp, 4
jmp 0x448bb0
mov eax, dword [0x4ecad4]
test eax, eax
je 0x448b9a
cmp dword [ebp - 0x2c], 0
jne 0x448df0
jmp 0x448aa0
lea ecx, [ebp - 0x154]
call fcn.00404d30
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x448c7b
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448c71
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448df5
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448cc9
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448cbf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448dfa
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404d30
lea ecx, [ebp - 0x48]
call fcn.00404d30
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00456bb0
lea ecx, [ebp - 0xb0]
call fcn.0040c5b0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046ebaf
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
call fcn.004417b0
lea ecx, [ebp - 0x4f8]
call fcn.0040d390
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x4f8]
call fcn.0041fe20
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0040dbe0
push 3
call fcn.0048e0fb
call fcn.0048d9d0
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048d9d0
call fcn.0048a05c
call fcn.0048a05c
push 0x80004005
call fcn.00403c20
call fcn.0048d9d0
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048d9d0
call fcn.0048d9d0
call fcn.0048a05c
call fcn.0048a05c
int3