Function at 0x448890
Capabilities:
Delete file
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2508
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5d8
mov eax, dword [0x4e406c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6ea
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.00442410
add esp, 4
call fcn.0042f780
lea ecx, [ebp - 0xb0]
call fcn.0042f270
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4e86a8
call fcn.0043c020
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae edx, dword [ebp - 0xb0]
mov ecx, eax
call fcn.0044b7e0
add esp, 4
mov edx, 0x4cdecc
mov ecx, eax
call fcn.0043c020
push eax
call fcn.0043c2d0
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], vtable.InstalledProducts.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00461150
push 1
lea ecx, [ebp - 0x28]
call fcn.00461150
cmp dword [0x4e4d44], 8
mov eax, 0x4e4d30
push str.MBRW_C
cmovae eax, dword [0x4e4d30]
push eax
mov byte [ebp - 0x4f9], 0
call fcn.0048b9e7
add esp, 8
test eax, eax
je 0x4489d7
cmp dword [0x4e4d44], 8
mov eax, 0x4e4d30
push str.MBRW_B
cmovae eax, dword [0x4e4d30]
push eax
call fcn.0048b9e7
add esp, 8
test eax, eax
je 0x4489d7
xor al, al
jmp 0x4489d9
mov al, 1
test al, al
je 0x448b05
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x28]
call fcn.00462650
mov edi, 0x4e4c88
test al, al
je 0x448a5d
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00462800
test al, al
je 0x448a5d
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.0043bec0
call fcn.0042a250
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xc8]
cmp edx, 8
jb 0x448aa1
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448a97
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44997f
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
cmp edx, 8
jb 0x448ba7
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448b9d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449984
jmp 0x448b9d
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00461e90
mov edi, 0x4e4c88
test al, al
je 0x448b63
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00462f40
test al, al
je 0x448b63
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
call fcn.0043bec0
call fcn.0042a250
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x448ba7
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448b9d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449989
push edx
push ecx
call fcn.0046d84e
add esp, 8
cmp byte [ebp - 0x4f9], 0
jne 0x448e81
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.0042e9f0
cmp dword [ebp - 0x88], 0
jne 0x448c9d
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x448c2d
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448c23
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44998e
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.004543c0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x448c93
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x448c89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449993
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov eax, 1
jmp 0x449961
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044c6b0
mov esi, eax
cmp esi, 0x4e4c88
je 0x448cea
mov ecx, edi
call fcn.00405090
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x4e4c88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4e4c98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5bc]
cmp edx, 8
jb 0x448d2a
mov ecx, dword [ebp - 0x5d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448d20
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449998
push edx
push ecx
call fcn.0046d84e
add esp, 8
call fcn.0042a250
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0x4f9], al
cmp edx, 8
jb 0x448d7f
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448d6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44999d
push edx
push ecx
call fcn.0046d84e
mov al, byte [ebp - 0x4f9]
add esp, 8
test al, al
jne 0x448e81
cmp edi, 0x4e4cb8
je 0x448db0
cmp dword [0x4e4ccc], 8
mov eax, 0x4e4cb8
push dword [0x4e4cc8]
cmovae eax, dword [0x4e4cb8]
mov ecx, edi
push eax
call fcn.00407cf0
call fcn.0042a250
test al, al
jne 0x448e81
cmp byte [0x4e9954], al
jne 0x448e17
push 0x130
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.00485990
add esp, 8
lea ecx, [ebp - 0x298]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fae0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x298]
call fcn.0040dd80
lea ecx, [ebp - 0x298]
call fcn.0040d430
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x730
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.00442410
add esp, 4
mov dword [ebp - 0x28], vtable.InstalledProducts.0
lea ecx, [ebp - 0x24]
call fcn.004543c0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x448e77
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x448e6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4499a2
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov eax, 3
jmp 0x449961
push 0x4e4d30
mov edx, str.Found_the_Service._Product_code_is:
lea ecx, [ebp - 0x48]
call fcn.0043bbf0
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
mov edx, 0x735
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00442410
add esp, 4
mov byte [ebp - 0x4f9], 0
call fcn.00423700
or edi, 0xffffffff
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448ff7
push str.creating_MBAMService_instance
mov edx, 0x73b
call fcn.00442410
add esp, 4
lea ecx, [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
call fcn.0044b4c0
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x73d
mov byte [ebp - 4], 8
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.00442410
mov ecx, dword [ebp - 0x80]
add esp, 4
call fcn.0041e130
mov esi, dword [ebp - 0x7c]
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448fb8
push str.Connected_to_MBAMService_instance
mov edx, 0x742
mov byte [ebp - 0x4f9], 1
call fcn.00442410
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x448f57
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00431430
add esp, 8
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448fac
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x746
call fcn.00442410
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.00436b00
call fcn.00431630
add esp, 8
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x4499a7
push str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x749
jmp 0x448fc2
push str.No_need_to_prompt_for_password
mov edx, 0x757
jmp 0x448fc2
push str.Error_connecting_to_MBAMService_
mov edx, 0x761
call fcn.00442410
add esp, 4
mov byte [ebp - 4], 9
test esi, esi
je 0x448ff1
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x448ff1
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x448ff1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
jmp 0x449009
push str.Not_an_MBAM_product_code
mov edx, 0x766
call fcn.00442410
add esp, 4
push 0x4e9a7c
push 0x41b130
push 0x4e9a84
call fcn.00469d9a
add esp, 0xc
test eax, eax
je 0x4499fa
push 0x4e4c88
lea ecx, [ebp - 0xf4]
call fcn.0040c290
push 0x19
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xa
call fcn.0040c600
lea eax, [ebp - 0xf4]
mov edx, str.ISvc_path_is:
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0043bbf0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x44909c
mov ecx, eax
call fcn.00405090
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5d4]
cmp edx, 8
jb 0x4490dc
mov ecx, dword [ebp - 0x5e8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4490d2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4499ff
push edx
push ecx
call fcn.0046d84e
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x76d
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00442410
add esp, 4
call fcn.00423700
test al, al
je 0x4492a8
cmp byte [ebp - 0x4f9], 0
jne 0x4492a8
cmp dword [ebp - 0xe0], 8
lea eax, [ebp - 0xf4]
cmovae eax, dword [ebp - 0xf4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4492a8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x570]
call fcn.0044c540
push eax
mov edx, str.Error
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x558]
call fcn.00419e20
add esp, 4
push str._deleting_ISvc
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.0043bd90
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x544]
cmp edx, 8
jb 0x4491bf
mov ecx, dword [ebp - 0x558]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4491b5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a04
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x55c]
cmp edx, 8
jb 0x449220
mov ecx, dword [ebp - 0x570]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449216
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a09
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x560], 0
cmp dword [ebp - 0x128], 8
mov edx, 0x777
mov word [ebp - 0x570], ax
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x55c], 7
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.00442410
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x4492a8
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44929e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a0e
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea ecx, [ebp - 0x78]
call fcn.00441000
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x18], 0
mov edx, 0x4e4ef8
push dword [ebp - 0x18]
call fcn.00419e90
add esp, 4
push 0x2d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5a0]
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
call fcn.0043d000
add esp, 0xc
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60]
call fcn.0041a7f0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x58c]
cmp edx, 8
jb 0x449342
mov ecx, dword [ebp - 0x5a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449338
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a13
push edx
push ecx
call fcn.0046d84e
add esp, 8
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push 2
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
push ecx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0046a7f1
push 0x4e9a7c
push 0x41b130
push 0x4e9a84
call fcn.00469d9a
add esp, 0xc
test eax, eax
je 0x449a18
push 0x4e4c88
lea ecx, [ebp - 0x5b8]
call fcn.0040c290
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x13
push eax
mov edx, str.Uninstalling_Malwarebytes_from:
lea ecx, [ebp - 0x588]
call fcn.00419e20
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x4493e2
mov ecx, eax
call fcn.00405090
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x574]
cmp edx, 8
jb 0x449422
mov ecx, dword [ebp - 0x588]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449418
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a1d
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 7
mov word [ebp - 0x588], ax
cmp edx, 8
jb 0x449483
mov ecx, dword [ebp - 0x5b8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449479
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a22
push edx
push ecx
call fcn.0046d84e
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x783
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00442410
add esp, 4
call fcn.0044f7e0
push 0x4e4ef8
lea ecx, [ebp - 0x154]
call fcn.0040c290
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x530]
call fcn.0040c290
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x518]
call fcn.0040c290
push 0x30
mov byte [ebp - 4], 0x16
call fcn.0046d85c
movups xmm0, xmmword [ebp - 0x530]
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x500], esi
mov word [ebp - 0x530], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x520]
movq qword [esi + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x518]
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 7
movups xmmword [esi + 0x18], xmm0
mov word [ebp - 0x518], ax
movq xmm0, qword [ebp - 0x508]
movq qword [esi + 0x28], xmm0
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc4]
xorps xmm0, xmm0
mov dword [ebp - 0xb4], eax
movups xmmword [ebp - 0xc4], xmm0
call fcn.0044bd30
mov dword [ebp - 0xc4], 0x4ceb14
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xb4], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xc4]
call fcn.0044bec0
mov esi, dword [ebp - 0xb4]
test esi, esi
je 0x4495c3
mov ecx, esi
call fcn.0044a0c0
push 0x30
push esi
call fcn.0046d84e
add esp, 8
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xc0]
push esi
mov dword [ebp - 0x18], eax
call fcn.0046bc0d
add esp, 4
test eax, eax
je 0x4495ec
push eax
call fcn.0046b356
add esp, 4
push esi
call fcn.0046bb51
add esp, 4
push dword [ebp - 0x18]
call fcn.0046b68b
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x1b
call fcn.0044a0c0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x449623
push 1
call fcn.0046b383
mov eax, dword [ebp - 0x2c]
add esp, 4
push eax
push dword [ebp - 0x30]
call fcn.0046b228
add esp, 8
test eax, eax
je 0x44963c
push eax
call fcn.0046b356
add esp, 4
cmp byte [0x4e9954], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
jne 0x449805
mov byte [ebp - 4], 0x1c
call fcn.00403c20
mov ecx, eax
test ecx, ecx
je 0x449a27
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [0x4e99b0]
test eax, eax
je 0x4497da
push 0x130
lea eax, [ebp - 0x3c8]
push 0
push eax
call fcn.00485990
add esp, 8
lea ecx, [ebp - 0x3c8]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fae0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.0040dd80
lea ecx, [ebp - 0x3c8]
call fcn.0040d430
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1d
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4496f2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x449a31
lea ecx, [ebp - 0x154]
call fcn.00405090
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x449741
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449737
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a36
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x44978f
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449785
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a3b
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00405090
lea ecx, [ebp - 0x48]
call fcn.00405090
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.004543c0
lea ecx, [ebp - 0xb0]
call fcn.00404e60
mov eax, 3
jmp 0x449961
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1e
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4497f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x449a40
jmp 0x44988b
mov al, byte [0x4e99ad]
test al, al
jne 0x44986f
call fcn.0046b769
add eax, 0x989680
push 0
push 0x64
adc edx, 0
push edx
push eax
call fcn.0046df60
push 0
push 0x3b9aca00
mov esi, eax
push edx
push esi
call fcn.004acc00
mov dword [ebp - 0x540], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x53c], edx
sub esi, eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x538], esi
movups xmm0, xmmword [ebp - 0x540]
push eax
movups xmmword [ebp - 0x168], xmm0
call fcn.0046b250
add esp, 4
jmp 0x449805
mov eax, dword [0x4e99b0]
test eax, eax
je 0x4497f6
cmp dword [ebp - 0x2c], 0
jne 0x449a45
jmp 0x4496fc
lea ecx, [ebp - 0x154]
call fcn.00405090
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x4498d0
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4498c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a4a
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x44991e
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449914
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449a4f
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00405090
lea ecx, [ebp - 0x48]
call fcn.00405090
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.004543c0
lea ecx, [ebp - 0xb0]
call fcn.00404e60
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046d32d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x74d
call fcn.00442410
lea ecx, [ebp - 0x4f8]
call fcn.0040d530
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x4f8]
call fcn.0041fae0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0040dd80
push 3
call fcn.0048c83b
call fcn.0048c110
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048c110
call fcn.0048879c
call fcn.0048879c
push 0x80004005
call fcn.00403d90
call fcn.0048c110
call fcn.0048879c
call fcn.0048879c
call fcn.0048c110
call fcn.0048c110
call fcn.0048879c
call fcn.0048879c
int3