Function at 0x426ac8
Capabilities:
Copy file
Get common file path
Parse pe header

Disassembly:
push ebp
sub esp, 0x2fc
lea ebp, [esp - 4]
mov eax, dword [0x59d300]
xor eax, ebp
mov dword [ebp + 0x2fc], eax
push 0x90
mov eax, 0x536367
call fcn.00506664
mov eax, dword [ebp + 0x324]
mov dword [ebp + 4], eax
mov eax, dword [ebp + 0x328]
xor edi, edi
mov dword [ebp], eax
mov dword [ebp - 0x9c], edi
xor ebx, ebx
lea eax, [ebp + 0x308]
inc ebx
push eax
lea esi, [ebp + 0x14]
mov dword [ebp - 4], ebx
call fcn.0040be1c
mov byte [ebp - 4], 2
call fcn.0040dbda
cmp byte [eax], 0
jne 0x426ecd
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__start
push eax
mov byte [ebp - 4], 3
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 4
call fcn.0040ba4e
push 0
push ebx
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040c22b
call fcn.0040dbda
cmp byte [eax], 0
jne 0x426ff9
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp + 0x308]
push eax
push 0x543368
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Installer_Path:
push eax
mov byte [ebp - 4], 0xc
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0xd
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040c22b
call fcn.0040dbda
cmp byte [eax], 0
jne 0x427145
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
push dword [ebp + 4]
lea eax, [ebp - 0x90]
push 0x543368
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Config_File:
push eax
mov byte [ebp - 4], 0x15
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x16
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040c22b
call fcn.0040dbda
cmp byte [eax], 0
jne 0x42728d
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
push dword [ebp]
lea eax, [ebp - 0x90]
push 0x543368
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Partner:
push eax
mov byte [ebp - 4], 0x1e
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x1f
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040c22b
call fcn.0040dbda
cmp byte [eax], 0
jne 0x4273d5
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
movzx eax, byte [ebp + 0x32c]
push eax
push 0x543368
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Executed_From__Contrl_Pannel:
push eax
mov byte [ebp - 4], 0x27
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.004126c3
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x28
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040c22b
call fcn.0040dbda
cmp byte [eax], 0
jne 0x427520
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
movzx eax, byte [ebp + 0x404]
push eax
push 0x543368
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Need_Elevation:
push eax
mov byte [ebp - 4], 0x30
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.004126c3
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x31
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040c22b
xor eax, eax
push 0x206
xor ebx, ebx
mov word [ebp + 0xf4], ax
lea eax, [ebp + 0xf6]
push ebx
push eax
call fcn.005060b0
add esp, 0xc
lea eax, [ebp + 0xf4]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [ebp + 0x320], 8
mov eax, dword [ebp + 0x30c]
jae 0x426e72
lea eax, [ebp + 0x30c]
push 0x5c
push eax
call fcn.00500ab5
pop ecx
pop ecx
cmp eax, ebx
jne 0x42766b
push ebx
push 1
lea esi, [ebp + 0x14]
call fcn.0040dac5
push ebx
push 1
lea esi, [ebp + 0x308]
call fcn.0040dac5
lea edi, [ebp + 0x330]
call fcn.004051c4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2fc]
xor ecx, ebp
call fcn.004ffa47
add ebp, 0x300
leave
ret
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 5
call fcn.0040b935
mov byte [ebp - 4], 6
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 8
jb 0x426f00
mov esi, dword [eax + 4]
jmp 0x426f03
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__start
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push edi
push ebx
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 6
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 8
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x426fa1
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x106
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push edi
push ebx
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040b8a0
mov dword [ebp - 4], 2
jmp 0x426b8d
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0xe
call fcn.0040b935
mov byte [ebp - 4], 0xf
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x18], 8
jb 0x42702c
mov esi, dword [eax + 4]
jmp 0x42702f
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Installer_Path:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea ecx, [ebp + 0x308]
push ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0xf
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x11
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4270ed
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x107
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x12
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xe
call fcn.0040b8a0
mov dword [ebp - 4], 2
jmp 0x426c15
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x17
call fcn.0040b935
mov byte [ebp - 4], 0x18
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x18], 8
jb 0x427178
mov esi, dword [eax + 4]
jmp 0x42717b
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Config_File:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push dword [ebp + 4]
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x18
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x1a
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x427235
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x108
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x1b
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x18
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x17
call fcn.0040b8a0
mov dword [ebp - 4], 2
jmp 0x426c99
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x20
call fcn.0040b935
mov byte [ebp - 4], 0x21
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x22
cmp dword [eax + 0x18], 8
jb 0x4272c0
mov esi, dword [eax + 4]
jmp 0x4272c3
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Partner:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push dword [ebp]
push eax
call fcn.0040b612
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x21
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x23
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x42737d
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x109
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x24
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x21
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x20
call fcn.0040b8a0
mov dword [ebp - 4], 2
jmp 0x426d1d
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x29
call fcn.0040b935
mov byte [ebp - 4], 0x2a
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x2b
cmp dword [eax + 0x18], 8
jb 0x427408
mov esi, dword [eax + 4]
jmp 0x42740b
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Executed_From__Contrl_Pannel:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
movzx ecx, byte [ebp + 0x32c]
push ecx
push eax
call fcn.004126c3
push 0
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x2a
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2c
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4274c8
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x10a
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2d
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2a
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x29
call fcn.0040b8a0
mov dword [ebp - 4], 2
jmp 0x426da4
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x32
call fcn.0040b935
mov byte [ebp - 4], 0x33
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x34
cmp dword [eax + 0x18], 8
jb 0x427553
mov esi, dword [eax + 4]
jmp 0x427556
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__Need_Elevation:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
movzx ecx, byte [ebp + 0x404]
push ecx
push eax
call fcn.004126c3
push 0
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x33
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x35
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x427613
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x10b
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x36
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x33
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x32
call fcn.0040b8a0
mov dword [ebp - 4], 2
jmp 0x426e2b
add eax, 2
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x427670
sub eax, edx
lea edi, [ebp + 0xf4]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
cmp cx, bx
jne 0x427684
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [ebp + 0xf4]
rep movsb byte es:[edi], byte [esi]
push eax
lea esi, [ebp + 0xa0]
call fcn.0040b812
mov byte [ebp - 4], 0x39
cmp dword [ebp + 0xb8], 8
mov ecx, dword [ebp + 0xa4]
jae 0x4276ca
lea ecx, [ebp + 0xa4]
cmp dword [ebp + 0x320], 8
mov eax, dword [ebp + 0x30c]
jae 0x4276df
lea eax, [ebp + 0x30c]
push ebx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
setne al
test al, al
jne 0x42789d
call fcn.0040dbda
cmp byte [eax], 0
jne 0x42777d
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__FAIL_to_copy_uninstaller.exe_to_TEMP
push eax
mov byte [ebp - 4], 0x3a
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x3b
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x39
call fcn.0040c22b
xor edi, edi
push edi
push 1
lea esi, [ebp + 0xa0]
call fcn.0040dac5
push edi
push 1
lea esi, [ebp + 0x14]
call fcn.0040dac5
push edi
jmp 0x426e90
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x3c
call fcn.0040b935
mov byte [ebp - 4], 0x3d
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x3e
cmp dword [eax + 0x18], 8
jb 0x4277b0
mov esi, dword [eax + 4]
jmp 0x4277b3
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__FAIL_to_copy_uninstaller.exe_to_TEMP
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x3d
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x3f
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x427853
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x11c
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x40
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x3d
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x3c
call fcn.0040b8a0
jmp 0x42775c
xor eax, eax
mov dword [ebp + 0x9c], 7
mov dword [ebp + 0x98], ebx
mov word [ebp + 0x88], ax
lea eax, [ebp + 0x308]
push eax
mov byte [ebp - 4], 0x43
call fcn.00409199
or edi, 0xffffffff
cmp eax, edi
je 0x4278ff
inc eax
push eax
push ebx
lea eax, [ebp + 0x308]
push eax
lea esi, [ebp + 0xd8]
call fcn.0040b98d
push edi
push ebx
lea ecx, [ebp + 0x84]
mov byte [ebp - 4], 0x44
call fcn.0040bd91
push ebx
push 1
mov byte [ebp - 4], 0x43
call fcn.0040dac5
lea eax, [ebp + 0xa0]
push eax
call fcn.00409199
cmp eax, edi
je 0x427941
inc eax
push eax
push ebx
lea eax, [ebp + 0xa0]
push eax
lea esi, [ebp + 0xd8]
call fcn.0040b98d
push edi
push ebx
lea ecx, [ebp + 0xa0]
mov byte [ebp - 4], 0x45
call fcn.0040bd91
push ebx
push 1
mov byte [ebp - 4], 0x43
call fcn.0040dac5
mov esi, str.UninstallRes
push esi
lea eax, [ebp + 0x84]
push eax
lea eax, [ebp + 0x4c]
push eax
call fcn.0040aaf4
add esp, 0xc
push esi
lea eax, [ebp + 0xa0]
push eax
mov byte [ebp - 4], 0x46
call fcn.0040b547
xor eax, eax
mov dword [ebp + 0x80], 7
mov dword [ebp + 0x7c], ebx
mov word [ebp + 0x6c], ax
mov byte [ebp - 4], 0x47
cmp dword [ebp + 0x64], 8
mov eax, dword [ebp + 0x50]
jae 0x42798e
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004722ee
test al, al
je 0x4279d4
push 0x548724
lea esi, [ebp + 0xd8]
call fcn.0040b812
lea eax, [ebp + 0xa0]
push eax
mov eax, esi
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp + 0x68]
mov dword [ebp - 0x9c], 1
call fcn.00473715
mov byte [ebp + 0x13], 1
test al, al
je 0x4279d8
mov byte [ebp + 0x13], 0
mov dword [ebp - 4], 0x47
test byte [ebp - 0x9c], 1
je 0x4279f6
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
cmp byte [ebp + 0x13], 0
je 0x427a5b
mov byte [ebp + 0x13], 0
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp + 0x68]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x4c]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x84]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0xa0]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x14]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x308]
call fcn.0040dac5
lea edi, [ebp + 0x330]
call fcn.004051c4
mov al, byte [ebp + 0x13]
jmp 0x426eaa
mov ecx, dword [ebp + 4]
lea eax, [ebp + 0x30]
push str.Installation_UninstallPage
push eax
call fcn.0041a08e
push dword [ebp]
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0x49
call fcn.0041e36a
and dword [ebp + 0xd0], 0
xor eax, eax
mov dword [ebp + 0xd4], 7
mov word [ebp + 0xc0], ax
mov ecx, dword [ebp + 4]
mov edi, str.Installation_Bundles_Bundle_InstallFolderName
lea eax, [ebp + 0xd8]
push edi
push eax
mov byte [ebp - 4], 0x4a
call fcn.0041a08e
add esp, 0x14
push 0x54323c
mov byte [ebp - 4], 0x4b
call fcn.0040ba24
push 0
test eax, eax
push 1
lea esi, [ebp + 0xd8]
setne bl
mov byte [ebp - 4], 0x4a
call fcn.0040dac5
test bl, bl
je 0x427ba3
push str.__XPIPATH_
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
mov ecx, dword [ebp + 4]
lea eax, [ebp + 0xd8]
push edi
push eax
call fcn.0041a08e
pop ecx
pop ecx
push 0xffffffffffffffff
xor ebx, ebx
push ebx
lea ecx, [ebp + 0xbc]
mov byte [ebp - 4], 0x4c
call fcn.0040b405
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x4a
call fcn.0040dac5
push 0x54947c
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], bl
jne 0x4281c4
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_XPIPATH
push eax
mov byte [ebp - 4], 0x4d
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x4e
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
cmp byte [ebp + 0x32c], 0
je 0x427c71
push 0x54323c
lea eax, [ebp + 0x30]
call fcn.0040ba24
test eax, eax
je 0x427c71
cmp byte [ebp + 0x356], 0
jne 0x427c71
push str.__UNINSTALLPAGE_
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
push 0xffffffffffffffff
xor ebx, ebx
push ebx
lea eax, [ebp + 0x30]
lea ecx, [ebp + 0xbc]
call fcn.0040b405
push 0x54947c
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], bl
jne 0x4282f2
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_UNINSTALLPAGE
push eax
mov byte [ebp - 4], 0x56
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x57
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
mov ecx, dword [ebp + 4]
mov edi, str.Installation_FolderName
lea eax, [ebp + 0xd8]
push edi
push eax
call fcn.0041a08e
pop ecx
pop ecx
push 0x54323c
mov byte [ebp - 4], 0x5f
call fcn.0040ba24
push 0
test eax, eax
push 1
lea esi, [ebp + 0xd8]
setne bl
mov byte [ebp - 4], 0x4a
call fcn.0040dac5
test bl, bl
je 0x427d7a
push str.__DEP_
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
mov ecx, dword [ebp + 4]
lea eax, [ebp + 0xd8]
push edi
push eax
call fcn.0041a08e
pop ecx
pop ecx
push 0xffffffffffffffff
xor ebx, ebx
push ebx
lea ecx, [ebp + 0xbc]
mov byte [ebp - 4], 0x60
call fcn.0040b405
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x4a
call fcn.0040dac5
push 0x54947c
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], bl
jne 0x428420
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_DEP
push eax
mov byte [ebp - 4], 0x61
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x62
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
xor ebx, ebx
cmp byte [ebp + 0x355], bl
je 0x427e01
push str.__REGISTERSATB
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], bl
jne 0x42854e
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_REGISTERSATB
push eax
mov byte [ebp - 4], 0x6a
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x6b
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
xor ebx, ebx
cmp byte [ebp + 0x359], 0
je 0x427e88
push str.__PROMPT
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], 0
jne 0x42867c
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_PROMPT
push eax
mov byte [ebp - 4], 0x73
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x74
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
xor ebx, ebx
cmp byte [ebp + 0x35a], 0
je 0x427f0f
push str.__OFFLINE
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], 0
jne 0x4287aa
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_OFFLINE
push eax
mov byte [ebp - 4], 0x7c
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x7d
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
xor ebx, ebx
push str.__EXECUTEUNINSTALL
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], 0
jne 0x4288d8
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_EXECUTEUNINSTALL
push eax
mov byte [ebp - 4], 0x85
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x86
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
cmp byte [ebp + 0x352], 0
je 0x428029
push str.__CHANGEPROFILE
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
push 0xffffffffffffffff
xor ebx, ebx
push ebx
lea eax, [ebp + 0x378]
lea ecx, [ebp + 0xbc]
call fcn.0040b405
call fcn.0040dbda
cmp byte [eax], bl
jne 0x428a06
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_CHANGEPROFILE
push eax
mov byte [ebp - 4], 0x8e
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x8f
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
push str.__PARTNER_
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
mov eax, dword [ebp]
push 0xffffffffffffffff
xor ebx, ebx
push ebx
lea ecx, [ebp + 0xbc]
call fcn.0040b405
push 0x544a1c
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], bl
jne 0x428b34
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_PARTNER
push eax
mov byte [ebp - 4], 0x97
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0x98
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
push str.__APPDIR_
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
push 0xffffffffffffffff
xor ebx, ebx
push ebx
lea eax, [ebp + 0x84]
lea ecx, [ebp + 0xbc]
call fcn.0040b405
push 0x54947c
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
push str.__FROMELEVATION
lea eax, [ebp + 0xbc]
push eax
call fcn.0040b547
cmp byte [ebp + 0x404], bl
je 0x428d90
call fcn.0040dbda
cmp byte [eax], bl
jne 0x428c62
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x90]
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_FROMELEVATION
push eax
mov byte [ebp - 4], 0xa0
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0xa1
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
cmp dword [ebp + 0xd4], 8
mov edi, dword [ebp + 0xc0]
push 0
jae 0x42819e
lea edi, [ebp + 0xc0]
sub esp, 0x1c
lea eax, [ebp + 0xf4]
mov esi, esp
mov dword [ebp - 0x9c], esp
push eax
call fcn.0040b812
mov ecx, edi
call fcn.00419e7d
add esp, 0x20
jmp 0x428db4
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x4f
call fcn.0040b935
mov byte [ebp - 4], 0x50
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x51
cmp dword [eax + 0x18], 8
jb 0x4281f7
mov esi, dword [eax + 4]
jmp 0x4281fa
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_XPIPATH
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x50
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x52
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x42829a
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x146
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x53
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x50
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x4f
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x427ba3
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x58
call fcn.0040b935
mov byte [ebp - 4], 0x59
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x5a
cmp dword [eax + 0x18], 8
jb 0x428325
mov esi, dword [eax + 4]
jmp 0x428328
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_UNINSTALLPAGE
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x59
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x5b
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4283c8
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x14f
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x5c
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x59
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x58
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x427c71
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x63
call fcn.0040b935
mov byte [ebp - 4], 0x64
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x65
cmp dword [eax + 0x18], 8
jb 0x428453
mov esi, dword [eax + 4]
jmp 0x428456
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_DEP
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x64
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x66
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4284f6
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x158
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x67
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x64
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x63
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x427d7a
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x6c
call fcn.0040b935
mov byte [ebp - 4], 0x6d
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x6e
cmp dword [eax + 0x18], 8
jb 0x428581
mov esi, dword [eax + 4]
jmp 0x428584
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_REGISTERSATB
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x6d
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x6f
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x428624
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x15e
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x70
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x6d
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x6c
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x427dff
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x75
call fcn.0040b935
mov byte [ebp - 4], 0x76
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x77
cmp dword [eax + 0x18], 8
jb 0x4286af
mov esi, dword [eax + 4]
jmp 0x4286b2
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_PROMPT
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x76
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x78
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x428752
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x164
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x79
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x76
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x75
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x427e86
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x7e
call fcn.0040b935
mov byte [ebp - 4], 0x7f
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x80
cmp dword [eax + 0x18], 8
jb 0x4287dd
mov esi, dword [eax + 4]
jmp 0x4287e0
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_OFFLINE
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x7f
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x81
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x428880
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x16a
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x82
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x7f
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x7e
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x427f0d
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x87
call fcn.0040b935
mov byte [ebp - 4], 0x88
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x89
cmp dword [eax + 0x18], 8
jb 0x42890b
mov esi, dword [eax + 4]
jmp 0x42890e
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_EXECUTEUNINSTALL
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x88
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x8a
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4289ae
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x16e
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x8b
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x88
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x87
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x427f8b
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x90
call fcn.0040b935
mov byte [ebp - 4], 0x91
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x92
cmp dword [eax + 0x18], 8
jb 0x428a39
mov esi, dword [eax + 4]
jmp 0x428a3c
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_CHANGEPROFILE
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x91
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x93
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x428adc
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x174
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x94
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x91
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x90
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x428029
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x99
call fcn.0040b935
mov byte [ebp - 4], 0x9a
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0x9b
cmp dword [eax + 0x18], 8
jb 0x428b67
mov esi, dword [eax + 4]
jmp 0x428b6a
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_PARTNER
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0x9a
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x9c
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x428c0a
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x17c
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x9d
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x9a
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x99
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x4280c8
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0xa2
call fcn.0040b935
mov byte [ebp - 4], 0xa3
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0xa4
cmp dword [eax + 0x18], 8
jb 0x428c95
mov esi, dword [eax + 4]
jmp 0x428c98
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CUnInstallerHelper::CreateTempCopyAndExecute__ADD_FROMELEVATION
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0xa3
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x428d38
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x186
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xa2
call fcn.0040b8a0
mov dword [ebp - 4], 0x4a
jmp 0x428187
cmp dword [ebp + 0xd4], 8
mov eax, dword [ebp + 0xc0]
jae 0x428da5
lea eax, [ebp + 0xc0]
push ebx
push eax
lea ecx, [ebp + 0xf4]
call fcn.004181c2
pop ecx
pop ecx
mov byte [ebp + 0x13], al
call fcn.0040dbda
cmp byte [eax], 0
jne 0x428e67
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
lea eax, [ebp + 0xbc]
push eax
push 0x543368
lea eax, [ebp - 0x90]
push str.Executing_uninstaller_from_TEMP_with_params:
push eax
mov byte [ebp - 4], 0xa9
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0xd8]
mov byte [ebp - 4], 0xaa
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.0040c22b
push 0
push 1
lea esi, [ebp + 0xbc]
call fcn.0040dac5
push 0
push 1
lea esi, [ebp + 0x30]
call fcn.0040dac5
mov al, byte [ebp + 0x13]
mov byte [ebp + 0x13], al
xor ebx, ebx
jmp 0x427a00
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0xab
call fcn.0040b935
mov byte [ebp - 4], 0xac
call fcn.0040dbda
lea ecx, [ebp + 0xd8]
call fcn.0040b84b
mov byte [ebp - 4], 0xad
cmp dword [eax + 0x18], 8
jb 0x428e9a
mov esi, dword [eax + 4]
jmp 0x428e9d
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.Executing_uninstaller_from_TEMP_with_params:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea ecx, [ebp + 0xbc]
push ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp + 0xd8]
mov byte [ebp - 4], 0xac
call fcn.0040dac5
lea eax, [ebp + 8]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xae
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x428f5b
lea eax, [ebp + 0xd8]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x18e
push str..UnInstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xaf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0xd8]
call fcn.0040dac5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xac
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xab
call fcn.0040b8a0
jmp 0x428e3f