Function at 0x4495b0
Capabilities:
Delete file
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4af478
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5d8
mov eax, dword [0x4e006c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x741
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.004433b0
add esp, 4
call fcn.004346b0
lea ecx, [ebp - 0xb0]
call fcn.004341a0
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4e47b0
call fcn.0040c280
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae edx, dword [ebp - 0xb0]
mov ecx, eax
call fcn.0040db90
add esp, 4
mov edx, 0x4c9bfc
mov ecx, eax
call fcn.0040c280
push eax
call fcn.0043e590
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x30], vtable.InstalledProducts.0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
push 0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.0045e150
push 1
lea ecx, [ebp - 0x30]
call fcn.0045e150
cmp dword [0x4e0d04], 8
mov eax, 0x4e0cf0
push str.MBRW_C
cmovae eax, dword [0x4e0cf0]
push eax
mov byte [ebp - 0x4f9], 0
call fcn.0048e3fb
add esp, 8
test eax, eax
je 0x4496f7
cmp dword [0x4e0d04], 8
mov eax, 0x4e0cf0
push str.MBRW_B
cmovae eax, dword [0x4e0cf0]
push eax
call fcn.0048e3fb
add esp, 8
test eax, eax
je 0x4496f7
xor al, al
jmp 0x4496f9
mov al, 1
test al, al
je 0x449825
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x30]
call fcn.0045f650
mov edi, 0x4e0c48
test al, al
je 0x44977d
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x30]
call fcn.0045f800
test al, al
je 0x44977d
lea eax, [ebp - 0xdc]
mov ecx, edi
push eax
call fcn.0043e430
call fcn.0042f7a0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xc8]
cmp edx, 8
jb 0x4497c1
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4497b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a683
push edx
push ecx
call fcn.0046a609
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
cmp edx, 8
jb 0x4498c7
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4498bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a688
jmp 0x4498bd
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.0045ee90
mov edi, 0x4e0c48
test al, al
je 0x449883
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0045ff40
test al, al
je 0x449883
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
call fcn.0043e430
call fcn.0042f7a0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x4498c7
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4498bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a68d
push edx
push ecx
call fcn.0046a609
add esp, 8
cmp byte [ebp - 0x4f9], 0
jne 0x449b93
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.00433d20
cmp dword [ebp - 0x88], 0
jne 0x4499b6
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x44994d
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449943
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a692
push edx
push ecx
call fcn.0046a609
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
call fcn.0045e0c0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x4499ac
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4499a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a697
push edx
push ecx
call fcn.0046a609
add esp, 8
mov eax, 1
jmp 0x44a665
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044c560
mov esi, eax
cmp esi, 0x4e0c48
je 0x449a03
mov ecx, edi
call fcn.00405100
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x4e0c48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4e0c58], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5bc]
cmp edx, 8
jb 0x449a43
mov ecx, dword [ebp - 0x5d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449a39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a69c
push edx
push ecx
call fcn.0046a609
add esp, 8
call fcn.0042f7a0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0x4f9], al
cmp edx, 8
jb 0x449a98
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449a88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a6a1
push edx
push ecx
call fcn.0046a609
mov al, byte [ebp - 0x4f9]
add esp, 8
test al, al
jne 0x449b93
cmp edi, 0x4e0c78
je 0x449ac9
cmp dword [0x4e0c8c], 8
mov eax, 0x4e0c78
push dword [0x4e0c88]
cmovae eax, dword [0x4e0c78]
mov ecx, edi
push eax
call fcn.00407d50
call fcn.0042f7a0
test al, al
jne 0x449b93
cmp byte [0x4e5a28], al
jne 0x449b30
push 0x130
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.00482710
add esp, 8
lea ecx, [ebp - 0x298]
push 0
push 0xff
push 0x104
push 0x107
push 1
call fcn.00425750
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x298]
call fcn.00416f40
lea ecx, [ebp - 0x298]
call fcn.004165f0
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x787
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.004433b0
add esp, 4
lea ecx, [ebp - 0x30]
call fcn.0045e0c0
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x449b89
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x449b7f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a6a6
push edx
push ecx
call fcn.0046a609
add esp, 8
mov eax, 3
jmp 0x44a665
push 0x4e0cf0
mov edx, str.Found_the_Service._Product_code_is:
lea ecx, [ebp - 0x48]
call fcn.0043e160
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
mov edx, 0x78c
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004433b0
add esp, 4
mov byte [ebp - 0x4f9], 0
call fcn.004290b0
or edi, 0xffffffff
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x449d09
push str.creating_MBAMService_instance
mov edx, 0x792
call fcn.004433b0
add esp, 4
lea ecx, [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
call fcn.0044b7f0
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x794
mov byte [ebp - 4], 8
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.004433b0
mov ecx, dword [ebp - 0x80]
add esp, 4
call fcn.00423ca0
mov esi, dword [ebp - 0x7c]
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x449cca
push str.Connected_to_MBAMService_instance
mov edx, 0x799
mov byte [ebp - 0x4f9], 1
call fcn.004433b0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x449c69
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00436370
add esp, 8
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x449cbe
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x79d
call fcn.004433b0
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.0043a6c0
call fcn.00436570
add esp, 8
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x44a6ab
push str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x7a0
jmp 0x449cd4
push str.No_need_to_prompt_for_password
mov edx, 0x7ae
jmp 0x449cd4
push str.Error_connecting_to_MBAMService_
mov edx, 0x7b8
call fcn.004433b0
add esp, 4
mov byte [ebp - 4], 9
test esi, esi
je 0x449d03
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x449d03
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x449d03
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
jmp 0x449d1b
push str.Not_an_MBAM_product_code
mov edx, 0x7bd
call fcn.004433b0
add esp, 4
push 0x4e5b58
push 0x41fd50
push 0x4e5b60
call fcn.00466ace
add esp, 0xc
test eax, eax
je 0x44a6fe
push 0x4e0c48
lea ecx, [ebp - 0xf4]
call fcn.004154d0
push 0x19
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xa
call fcn.00415840
lea eax, [ebp - 0xf4]
mov edx, str.ISvc_path_is:
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0043e160
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x449dae
mov ecx, eax
call fcn.00405100
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5d4]
cmp edx, 8
jb 0x449dee
mov ecx, dword [ebp - 0x5e8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449de4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a703
push edx
push ecx
call fcn.0046a609
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x7c4
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004433b0
add esp, 4
call fcn.004290b0
test al, al
je 0x449fba
cmp byte [ebp - 0x4f9], 0
jne 0x449fba
cmp dword [ebp - 0xe0], 8
lea eax, [ebp - 0xf4]
cmovae eax, dword [ebp - 0xf4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x449fba
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x570]
call fcn.0044c3f0
push eax
mov edx, str.Error
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x558]
call fcn.0041ea90
add esp, 4
push str._deleting_ISvc
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.0043e300
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x544]
cmp edx, 8
jb 0x449ed1
mov ecx, dword [ebp - 0x558]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449ec7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a708
push edx
push ecx
call fcn.0046a609
add esp, 8
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x55c]
cmp edx, 8
jb 0x449f32
mov ecx, dword [ebp - 0x570]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449f28
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a70d
push edx
push ecx
call fcn.0046a609
add esp, 8
xor eax, eax
mov dword [ebp - 0x560], 0
cmp dword [ebp - 0x128], 8
mov edx, 0x7ce
mov word [ebp - 0x570], ax
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x55c], 7
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.004433b0
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x449fba
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449fb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a712
push edx
push ecx
call fcn.0046a609
add esp, 8
lea ecx, [ebp - 0x78]
call fcn.00441c40
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x18], 0
mov edx, 0x4e0eb8
push dword [ebp - 0x18]
call fcn.0041eb00
add esp, 4
push 0x2d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5a0]
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
call fcn.0043f030
add esp, 0xc
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60]
call fcn.0041f460
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x58c]
cmp edx, 8
jb 0x44a054
mov ecx, dword [ebp - 0x5a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44a04a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a717
push edx
push ecx
call fcn.0046a609
add esp, 8
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push 2
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
push ecx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.00467877
push 0x4e5b58
push 0x41fd50
push 0x4e5b60
call fcn.00466ace
add esp, 0xc
test eax, eax
je 0x44a71c
push 0x4e0c48
lea ecx, [ebp - 0x5b8]
call fcn.004154d0
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x13
push eax
mov edx, str.Uninstalling_Malwarebytes_from:
lea ecx, [ebp - 0x588]
call fcn.0041ea90
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x44a0f4
mov ecx, eax
call fcn.00405100
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x574]
cmp edx, 8
jb 0x44a134
mov ecx, dword [ebp - 0x588]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44a12a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a721
push edx
push ecx
call fcn.0046a609
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 7
mov word [ebp - 0x588], ax
cmp edx, 8
jb 0x44a195
mov ecx, dword [ebp - 0x5b8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44a18b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a726
push edx
push ecx
call fcn.0046a609
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x7da
mov ecx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004433b0
add esp, 4
call fcn.00450bf0
push 0x4e0eb8
lea ecx, [ebp - 0x154]
call fcn.004154d0
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x530]
call fcn.004154d0
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x518]
call fcn.004154d0
push 0x30
mov byte [ebp - 4], 0x16
call fcn.0046a617
movups xmm0, xmmword [ebp - 0x530]
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x500], esi
mov word [ebp - 0x530], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x520]
movq qword [esi + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x518]
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 7
movups xmmword [esi + 0x18], xmm0
mov word [ebp - 0x518], ax
movq xmm0, qword [ebp - 0x508]
movq qword [esi + 0x28], xmm0
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc4]
xorps xmm0, xmm0
mov dword [ebp - 0xb4], eax
movups xmmword [ebp - 0xc4], xmm0
call fcn.0044bbe0
mov dword [ebp - 0xc4], 0x4ca0c4
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xb4], esi
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xc4]
call fcn.0044bd70
mov esi, dword [ebp - 0xb4]
test esi, esi
je 0x44a2d5
mov ecx, esi
call fcn.00441db0
push 0x30
push esi
call fcn.0046a609
add esp, 8
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xc0]
push esi
mov dword [ebp - 0x18], eax
call fcn.004689c8
add esp, 4
test eax, eax
je 0x44a2fe
push eax
call fcn.00468111
add esp, 4
push esi
call fcn.0046890c
add esp, 4
push dword [ebp - 0x18]
call fcn.00468446
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x1b
call fcn.00441db0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x44a335
push 1
call fcn.0046813e
mov eax, dword [ebp - 0x1c]
add esp, 4
push eax
push dword [ebp - 0x20]
call fcn.00467fe3
add esp, 8
test eax, eax
je 0x44a34e
push eax
call fcn.00468111
add esp, 4
cmp byte [0x4e5a28], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
jne 0x44a510
mov byte [ebp - 4], 0x1c
call fcn.00403b50
mov ecx, eax
test ecx, ecx
je 0x44a72b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [0x4e5a84]
test eax, eax
je 0x44a4e5
push 0x130
lea eax, [ebp - 0x3c8]
push 0
push eax
call fcn.00482710
add esp, 8
lea ecx, [ebp - 0x3c8]
push 0
push 0xff
push 0x104
push 0x107
push 1
call fcn.00425750
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.00416f40
lea ecx, [ebp - 0x3c8]
call fcn.004165f0
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1d
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x44a404
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x1c], 0
jne 0x44a735
lea ecx, [ebp - 0x154]
call fcn.00405100
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x44a453
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44a449
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a73a
push edx
push ecx
call fcn.0046a609
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x44a4a1
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44a497
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a73f
push edx
push ecx
call fcn.0046a609
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00405100
lea ecx, [ebp - 0x48]
call fcn.00405100
lea ecx, [ebp - 0x30]
call fcn.0045e0c0
lea ecx, [ebp - 0xb0]
call fcn.00404f20
mov eax, 3
jmp 0x44a665
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1e
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x44a501
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x1c], 0
jne 0x44a744
jmp 0x44a596
mov al, byte [0x4e5a81]
test al, al
jne 0x44a57a
call fcn.00468524
add eax, 0x989680
push 0
push 0x64
adc edx, 0
push edx
push eax
call fcn.0046ad20
push 0
push 0x3b9aca00
mov esi, eax
push edx
push esi
call fcn.004a99a0
mov dword [ebp - 0x540], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x53c], edx
sub esi, eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x538], esi
movups xmm0, xmmword [ebp - 0x540]
push eax
movups xmmword [ebp - 0x168], xmm0
call fcn.0046800b
add esp, 4
jmp 0x44a510
mov eax, dword [0x4e5a84]
test eax, eax
je 0x44a501
cmp dword [ebp - 0x1c], 0
jne 0x44a749
jmp 0x44a40e
lea ecx, [ebp - 0x154]
call fcn.00405100
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x44a5db
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44a5d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a74e
push edx
push ecx
call fcn.0046a609
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x44a629
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44a61f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a753
push edx
push ecx
call fcn.0046a609
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00405100
lea ecx, [ebp - 0x48]
call fcn.00405100
lea ecx, [ebp - 0x30]
call fcn.0045e0c0
lea ecx, [ebp - 0xb0]
call fcn.00404f20
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046a0e8
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x7a4
call fcn.004433b0
lea ecx, [ebp - 0x4f8]
call fcn.004166f0
push ecx
push 0
push 0xff
push 0x104
push 0x107
push 1
lea ecx, [ebp - 0x4f8]
call fcn.00425750
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00416f40
push 3
call fcn.0048f041
call fcn.00486dba
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.0048552c
call fcn.00486dba
call fcn.0048552c
call fcn.0048552c
push 0x80004005
call fcn.00403cc0
call fcn.00486dba
call fcn.0048552c
call fcn.0048552c
call fcn.00486dba
call fcn.00486dba
call fcn.0048552c
call fcn.0048552c
int3