Function at 0x447800
Capabilities:
Delete file
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b27b8
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5d8
mov eax, dword [0x4e506c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.00441390
add esp, 4
call fcn.0042f360
lea ecx, [ebp - 0xb0]
call fcn.0042ebb0
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4e9698
call fcn.0043bc00
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae edx, dword [ebp - 0xb0]
mov ecx, eax
call fcn.0044aad0
add esp, 4
mov edx, 0x4cf2ec
mov ecx, eax
call fcn.0043bc00
push eax
call fcn.0043beb0
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], vtable.InstalledProducts.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00460f20
push 1
lea ecx, [ebp - 0x28]
call fcn.00460f20
cmp dword [0x4e5d44], 8
mov eax, 0x4e5d30
push str.MBRW_C
cmovae eax, dword [0x4e5d30]
push eax
mov byte [ebp - 0x4f9], 0
call fcn.0048bd37
add esp, 8
test eax, eax
je 0x447947
cmp dword [0x4e5d44], 8
mov eax, 0x4e5d30
push str.MBRW_B
cmovae eax, dword [0x4e5d30]
push eax
call fcn.0048bd37
add esp, 8
test eax, eax
je 0x447947
xor al, al
jmp 0x447949
mov al, 1
test al, al
je 0x447a75
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x28]
call fcn.004621a0
mov edi, 0x4e5c88
test al, al
je 0x4479cd
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x28]
call fcn.004624d0
test al, al
je 0x4479cd
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.0043baa0
call fcn.0042a1a0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xe0]
cmp edx, 8
jb 0x447a11
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447a07
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448901
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
cmp edx, 8
jb 0x447b17
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447b0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448906
jmp 0x447b0d
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00461c60
mov edi, 0x4e5c88
test al, al
je 0x447ad3
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00462c10
test al, al
je 0x447ad3
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
call fcn.0043baa0
call fcn.0042a1a0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x447b17
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447b0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44890b
push edx
push ecx
call fcn.0046db96
add esp, 8
cmp byte [ebp - 0x4f9], 0
jne 0x447df1
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.0042e3c0
cmp dword [ebp - 0x88], 0
jne 0x447c0d
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x447b9d
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447b93
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448910
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.004558d0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447c03
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447bf9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448915
push edx
push ecx
call fcn.0046db96
add esp, 8
mov eax, 1
jmp 0x4488e3
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044b9a0
mov esi, eax
cmp esi, 0x4e5c88
je 0x447c5a
mov ecx, edi
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x4e5c88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4e5c98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5bc]
cmp edx, 8
jb 0x447c9a
mov ecx, dword [ebp - 0x5d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447c90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44891a
push edx
push ecx
call fcn.0046db96
add esp, 8
call fcn.0042a1a0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0x4f9], al
cmp edx, 8
jb 0x447cef
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447cdf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44891f
push edx
push ecx
call fcn.0046db96
mov al, byte [ebp - 0x4f9]
add esp, 8
test al, al
jne 0x447df1
cmp edi, 0x4e5cb8
je 0x447d20
cmp dword [0x4e5ccc], 8
mov eax, 0x4e5cb8
push dword [0x4e5cc8]
cmovae eax, dword [0x4e5cb8]
mov ecx, edi
push eax
call fcn.00407920
call fcn.0042a1a0
test al, al
jne 0x447df1
cmp byte [0x4ea9f6], al
jne 0x447d87
push 0x130
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.00485ce0
add esp, 8
lea ecx, [ebp - 0x298]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fa10
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x298]
call fcn.0040db70
lea ecx, [ebp - 0x298]
call fcn.0040d220
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.00441390
add esp, 4
mov dword [ebp - 0x28], vtable.InstalledProducts.0
lea ecx, [ebp - 0x24]
call fcn.004558d0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447de7
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447ddd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448924
push edx
push ecx
call fcn.0046db96
add esp, 8
mov eax, 3
jmp 0x4488e3
push 0x4e5d30
mov edx, str.Found_the_Service._Product_code_is:
lea ecx, [ebp - 0x48]
call fcn.0043b7d0
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
mov edx, 0x73d
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00441390
add esp, 4
mov byte [ebp - 0x4f9], 0
call fcn.00423820
or edi, 0xffffffff
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447f67
push str.creating_MBAMService_instance
mov edx, 0x743
call fcn.00441390
add esp, 4
lea ecx, [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
call fcn.0044a7b0
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.00441390
mov ecx, dword [ebp - 0x80]
add esp, 4
call fcn.0041d360
mov esi, dword [ebp - 0x7c]
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447f28
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x4f9], 1
call fcn.00441390
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x447ec7
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00430940
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447f1c
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
call fcn.00441390
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.00436640
call fcn.00430b40
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448929
push str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
jmp 0x447f32
push str.No_need_to_prompt_for_password
mov edx, 0x75f
jmp 0x447f32
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.00441390
add esp, 4
mov byte [ebp - 4], 9
test esi, esi
je 0x447f61
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x447f61
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x447f61
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
jmp 0x447f79
push str.Not_an_MBAM_product_code
mov edx, 0x76e
call fcn.00441390
add esp, 4
push 0x4eab24
push 0x41a160
push 0x4eab2c
call fcn.0046a0b3
add esp, 0xc
test eax, eax
je 0x44897c
push 0x4e5c88
lea ecx, [ebp - 0xc8]
call fcn.0040beb0
push 1
push 0x4cd864
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xa
call fcn.0040c260
push 0x18
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040c260
lea eax, [ebp - 0xc8]
mov edx, str.ISvc_path_is:
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0043b7d0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x44801e
mov ecx, eax
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5d4]
cmp edx, 8
jb 0x44805e
mov ecx, dword [ebp - 0x5e8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448054
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448981
push edx
push ecx
call fcn.0046db96
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x776
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00441390
add esp, 4
call fcn.00423820
test al, al
je 0x44822a
cmp byte [ebp - 0x4f9], 0
jne 0x44822a
cmp dword [ebp - 0xb4], 8
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44822a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x570]
call fcn.0044b830
push eax
mov edx, str.Error
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x558]
call fcn.00418e50
add esp, 4
push str._deleting_ISvc
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.0043b970
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x544]
cmp edx, 8
jb 0x448141
mov ecx, dword [ebp - 0x558]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448137
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448986
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x55c]
cmp edx, 8
jb 0x4481a2
mov ecx, dword [ebp - 0x570]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448198
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44898b
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x560], 0
cmp dword [ebp - 0x128], 8
mov edx, 0x780
mov word [ebp - 0x570], ax
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x55c], 7
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.00441390
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x44822a
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448220
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448990
push edx
push ecx
call fcn.0046db96
add esp, 8
lea ecx, [ebp - 0x78]
call fcn.0043ff80
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x18], 0
mov edx, 0x4e5ee0
push dword [ebp - 0x18]
call fcn.00418ec0
add esp, 4
push 0x2d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5a0]
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
call fcn.0043cbc0
add esp, 0xc
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60]
call fcn.00419820
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x58c]
cmp edx, 8
jb 0x4482c4
mov ecx, dword [ebp - 0x5a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4482ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448995
push edx
push ecx
call fcn.0046db96
add esp, 8
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push 2
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
push ecx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0046ab0a
push 0x4eab24
push 0x41a160
push 0x4eab2c
call fcn.0046a0b3
add esp, 0xc
test eax, eax
je 0x44899a
push 0x4e5c88
lea ecx, [ebp - 0x5b8]
call fcn.0040beb0
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x13
push eax
mov edx, str.Uninstalling_Malwarebytes_from:
lea ecx, [ebp - 0x588]
call fcn.00418e50
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x448364
mov ecx, eax
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x574]
cmp edx, 8
jb 0x4483a4
mov ecx, dword [ebp - 0x588]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44839a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44899f
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 7
mov word [ebp - 0x588], ax
cmp edx, 8
jb 0x448405
mov ecx, dword [ebp - 0x5b8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4483fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489a4
push edx
push ecx
call fcn.0046db96
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x78c
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00441390
add esp, 4
call fcn.0044f1c0
push 0x4e5ee0
lea ecx, [ebp - 0x154]
call fcn.0040beb0
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x530]
call fcn.0040beb0
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x518]
call fcn.0040beb0
push 0x30
mov byte [ebp - 4], 0x16
call fcn.0046dba4
movups xmm0, xmmword [ebp - 0x530]
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x500], esi
mov word [ebp - 0x530], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x520]
movq qword [esi + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x518]
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 7
movups xmmword [esi + 0x18], xmm0
mov word [ebp - 0x518], ax
movq xmm0, qword [ebp - 0x508]
movq qword [esi + 0x28], xmm0
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0xcc], eax
movups xmmword [ebp - 0xdc], xmm0
call fcn.0044b020
mov dword [ebp - 0xdc], 0x4cfefc
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xcc], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xdc]
call fcn.0044b1b0
mov esi, dword [ebp - 0xcc]
test esi, esi
je 0x448545
mov ecx, esi
call fcn.004493b0
push 0x30
push esi
call fcn.0046db96
add esp, 8
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd8]
push esi
mov dword [ebp - 0x18], eax
call fcn.0046bf26
add esp, 4
test eax, eax
je 0x44856e
push eax
call fcn.0046b66f
add esp, 4
push esi
call fcn.0046be6a
add esp, 4
push dword [ebp - 0x18]
call fcn.0046b9a4
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x1b
call fcn.004493b0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4485a5
push 1
call fcn.0046b69c
mov eax, dword [ebp - 0x2c]
add esp, 4
push eax
push dword [ebp - 0x30]
call fcn.0046b541
add esp, 8
test eax, eax
je 0x4485be
push eax
call fcn.0046b66f
add esp, 4
cmp byte [0x4ea9f6], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
jne 0x448787
mov byte [ebp - 4], 0x1c
call fcn.00403a40
mov ecx, eax
test ecx, ecx
je 0x4489a9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [0x4eaa54]
test eax, eax
je 0x44875c
push 0x130
lea eax, [ebp - 0x3c8]
push 0
push eax
call fcn.00485ce0
add esp, 8
lea ecx, [ebp - 0x3c8]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fa10
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.0040db70
lea ecx, [ebp - 0x3c8]
call fcn.0040d220
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1d
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x448674
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x4489b3
lea ecx, [ebp - 0x154]
call fcn.00404cc0
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x4486c3
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4486b9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489b8
push edx
push ecx
call fcn.0046db96
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448711
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448707
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489bd
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404cc0
lea ecx, [ebp - 0x48]
call fcn.00404cc0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.004558d0
lea ecx, [ebp - 0xb0]
call fcn.0040c540
mov eax, 3
jmp 0x4488e3
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1e
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x448778
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x4489c2
jmp 0x44880d
mov al, byte [0x4eaa51]
test al, al
jne 0x4487f1
call fcn.0046ba82
add eax, 0x989680
push 0
push 0x64
adc edx, 0
push edx
push eax
call fcn.0046e2b0
push 0
push 0x3b9aca00
mov esi, eax
push edx
push esi
call fcn.004acf40
mov dword [ebp - 0x540], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x53c], edx
sub esi, eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x538], esi
movups xmm0, xmmword [ebp - 0x540]
push eax
movups xmmword [ebp - 0x168], xmm0
call fcn.0046b569
add esp, 4
jmp 0x448787
mov eax, dword [0x4eaa54]
test eax, eax
je 0x448778
cmp dword [ebp - 0x2c], 0
jne 0x4489c7
jmp 0x44867e
lea ecx, [ebp - 0x154]
call fcn.00404cc0
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x448852
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448848
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489cc
push edx
push ecx
call fcn.0046db96
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x4488a0
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448896
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489d1
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404cc0
lea ecx, [ebp - 0x48]
call fcn.00404cc0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.004558d0
lea ecx, [ebp - 0xb0]
call fcn.0040c540
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046d675
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
call fcn.00441390
lea ecx, [ebp - 0x4f8]
call fcn.0040d320
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x4f8]
call fcn.0041fa10
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0040db70
push 3
call fcn.0048cb8b
call fcn.0048c460
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.0048c460
call fcn.00488aec
call fcn.00488aec
push 0x80004005
call fcn.00403bb0
call fcn.0048c460
call fcn.00488aec
call fcn.00488aec
call fcn.0048c460
call fcn.0048c460
call fcn.00488aec
call fcn.00488aec
int3