Function at 0x42619b
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
sub esp, 0x78
lea ebp, [esp - 4]
mov eax, dword [0x59d300]
xor eax, ebp
mov dword [ebp + 0x78], eax
push 0x94
mov eax, 0x527421
call fcn.00506664
call fcn.0040dbda
mov al, byte [eax]
xor ebx, ebx
cmp al, bl
jne 0x426224
lea eax, [ebp - 0xa0]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x98]
push str.CUnInstallerHelper::CloseVProtector___Sending_vprot.exe_WM_QUIT
push eax
mov dword [ebp - 4], ebx
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0x40]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040bf31
lea edi, [ebp + 0x40]
mov byte [ebp - 4], 1
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xa0]
call fcn.0040c22b
jmp 0x42633f
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 4], 2
call fcn.0040b935
mov byte [ebp - 4], 3
call fcn.0040dbda
lea ecx, [ebp + 0x5c]
call fcn.0040b84b
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x426257
mov esi, dword [eax + 4]
jmp 0x42625a
lea esi, [eax + 4]
lea eax, [ebp - 0x98]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CloseVProtector___Sending_vprot.exe_WM_QUIT
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0x5c]
mov byte [ebp - 4], 3
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov edi, 0x2710
push edi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
cmp al, bl
je 0x4262f1
lea eax, [ebp + 0x5c]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040b831
push 0xa7
push str..UnInstallerHelper.cpp
push eax
push edi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0x5c]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040b8a0
or dword [ebp - 4], 0xffffffff
jmp 0x426344
mov edi, 0x2710
push str.GlobalVprotEventForWmClose
lea esi, [ebp + 0x40]
call fcn.0040b812
mov dword [ebp - 4], 9
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
mov eax, esi
mov byte [ebp - 4], 0xa
push eax
lea esi, [ebp + 0x14]
mov dword [ebp], vtable.CThreadPostMsgOnEvent.0
mov dword [ebp + 0x10], ebx
call fcn.0040be1c
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x3c], ebx
push ebx
push 1
lea esi, [ebp + 0x40]
mov byte [ebp - 4], 0xc
call fcn.0040dac5
lea ecx, [ebp]
call fcn.00475182
push 0xa
push str.vprot.exe
call fcn.0041c2eb
mov esi, eax
pop ecx
pop ecx
cmp esi, 1
jne 0x42654c
call fcn.0040dbda
cmp byte [eax], bl
jne 0x426417
lea eax, [ebp - 0xa0]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x98]
push str.CUnInstallerHelper::CloseVProtector___WM_QUIT_didnt_work_10_sec._try_to_kill.
push eax
mov byte [ebp - 4], 0xd
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0x5c]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040bf31
lea edi, [ebp + 0x5c]
mov byte [ebp - 4], 0xe
call fcn.0040ba4e
push ebx
push esi
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.0040c22b
jmp 0x426530
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 0xf
call fcn.0040b935
mov byte [ebp - 4], 0x10
call fcn.0040dbda
lea ecx, [ebp + 0x5c]
call fcn.0040b84b
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x18], 8
jb 0x426447
mov esi, dword [eax + 4]
jmp 0x42644a
lea esi, [eax + 4]
lea eax, [ebp - 0x98]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CloseVProtector___WM_QUIT_didnt_work_10_sec._try_to_kill.
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0x5c]
mov byte [ebp - 4], 0x10
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push edi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x12
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
cmp al, bl
je 0x4264dc
lea eax, [ebp + 0x5c]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040b831
push 0xae
push str..UnInstallerHelper.cpp
push eax
push edi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x13
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0x5c]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0xf
call fcn.0040b8a0
mov dword [ebp - 4], 0xc
jmp 0x426530
push ebx
push 0x426577
call dword [sym.imp.USER32.dll_EnumWindows]
push 0xa
push str.vprot.exe
call fcn.0041c2eb
pop ecx
pop ecx
mov esi, eax
lea ecx, [ebp]
call fcn.00474c78
cmp esi, 1
setne al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x78]
xor ecx, ebp
call fcn.004ffa47
add ebp, 0x7c
leave
ret