Function at 0x447830
Capabilities:
Delete file
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b3858
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5d8
mov eax, dword [0x4e706c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.004413d0
add esp, 4
call fcn.0042f3a0
lea ecx, [ebp - 0xb0]
call fcn.0042ebf0
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4eb698
call fcn.0043bc40
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae edx, dword [ebp - 0xb0]
mov ecx, eax
call fcn.0044ab10
add esp, 4
mov edx, 0x4d0314
mov ecx, eax
call fcn.0043bc40
push eax
call fcn.0043bef0
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], vtable.InstalledProducts.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00461fb0
push 1
lea ecx, [ebp - 0x28]
call fcn.00461fb0
cmp dword [0x4e7d44], 8
mov eax, 0x4e7d30
push str.MBRW_C
cmovae eax, dword [0x4e7d30]
push eax
mov byte [ebp - 0x4f9], 0
call fcn.0048cdc7
add esp, 8
test eax, eax
je 0x447977
cmp dword [0x4e7d44], 8
mov eax, 0x4e7d30
push str.MBRW_B
cmovae eax, dword [0x4e7d30]
push eax
call fcn.0048cdc7
add esp, 8
test eax, eax
je 0x447977
xor al, al
jmp 0x447979
mov al, 1
test al, al
je 0x447aa5
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x28]
call fcn.00463230
mov edi, 0x4e7c88
test al, al
je 0x4479fd
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x28]
call fcn.00463560
test al, al
je 0x4479fd
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.0043bae0
call fcn.0042a1e0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xe0]
cmp edx, 8
jb 0x447a41
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447a37
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448931
push edx
push ecx
call fcn.0046ec30
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
cmp edx, 8
jb 0x447b47
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447b3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448936
jmp 0x447b3d
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00462cf0
mov edi, 0x4e7c88
test al, al
je 0x447b03
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00463ca0
test al, al
je 0x447b03
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
call fcn.0043bae0
call fcn.0042a1e0
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x447b47
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447b3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44893b
push edx
push ecx
call fcn.0046ec30
add esp, 8
cmp byte [ebp - 0x4f9], 0
jne 0x447e21
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.0042e400
cmp dword [ebp - 0x88], 0
jne 0x447c3d
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x447bcd
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447bc3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448940
push edx
push ecx
call fcn.0046ec30
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00456700
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447c33
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447c29
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448945
push edx
push ecx
call fcn.0046ec30
add esp, 8
mov eax, 1
jmp 0x448913
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044b9e0
mov esi, eax
cmp esi, 0x4e7c88
je 0x447c8a
mov ecx, edi
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x4e7c88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4e7c98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5bc]
cmp edx, 8
jb 0x447cca
mov ecx, dword [ebp - 0x5d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447cc0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44894a
push edx
push ecx
call fcn.0046ec30
add esp, 8
call fcn.0042a1e0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0x4f9], al
cmp edx, 8
jb 0x447d1f
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447d0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44894f
push edx
push ecx
call fcn.0046ec30
mov al, byte [ebp - 0x4f9]
add esp, 8
test al, al
jne 0x447e21
cmp edi, 0x4e7cb8
je 0x447d50
cmp dword [0x4e7ccc], 8
mov eax, 0x4e7cb8
push dword [0x4e7cc8]
cmovae eax, dword [0x4e7cb8]
mov ecx, edi
push eax
call fcn.00407920
call fcn.0042a1e0
test al, al
jne 0x447e21
cmp byte [0x4ec9f6], al
jne 0x447db7
push 0x130
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.00486d70
add esp, 8
lea ecx, [ebp - 0x298]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fa10
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x298]
call fcn.0040db70
lea ecx, [ebp - 0x298]
call fcn.0040d220
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.004413d0
add esp, 4
mov dword [ebp - 0x28], vtable.InstalledProducts.0
lea ecx, [ebp - 0x24]
call fcn.00456700
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447e17
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447e0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448954
push edx
push ecx
call fcn.0046ec30
add esp, 8
mov eax, 3
jmp 0x448913
push 0x4e7d30
mov edx, str.Found_the_Service._Product_code_is:
lea ecx, [ebp - 0x48]
call fcn.0043b810
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
mov edx, 0x73d
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004413d0
add esp, 4
mov byte [ebp - 0x4f9], 0
call fcn.00423850
or edi, 0xffffffff
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447f97
push str.creating_MBAMService_instance
mov edx, 0x743
call fcn.004413d0
add esp, 4
lea ecx, [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
call fcn.0044a7f0
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.004413d0
mov ecx, dword [ebp - 0x80]
add esp, 4
call fcn.0041d360
mov esi, dword [ebp - 0x7c]
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447f58
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x4f9], 1
call fcn.004413d0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x447ef7
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00430980
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447f4c
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
call fcn.004413d0
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.00436680
call fcn.00430b80
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448959
push str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
jmp 0x447f62
push str.No_need_to_prompt_for_password
mov edx, 0x75f
jmp 0x447f62
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.004413d0
add esp, 4
mov byte [ebp - 4], 9
test esi, esi
je 0x447f91
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x447f91
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x447f91
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
jmp 0x447fa9
push str.Not_an_MBAM_product_code
mov edx, 0x76e
call fcn.004413d0
add esp, 4
push 0x4ecb24
push 0x41a160
push 0x4ecb2c
call fcn.0046b143
add esp, 0xc
test eax, eax
je 0x4489ac
push 0x4e7c88
lea ecx, [ebp - 0xc8]
call fcn.0040beb0
push 1
push 0x4ce88c
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xa
call fcn.0040c260
push 0x18
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040c260
lea eax, [ebp - 0xc8]
mov edx, str.ISvc_path_is:
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0043b810
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x44804e
mov ecx, eax
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5d4]
cmp edx, 8
jb 0x44808e
mov ecx, dword [ebp - 0x5e8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448084
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489b1
push edx
push ecx
call fcn.0046ec30
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x776
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004413d0
add esp, 4
call fcn.00423850
test al, al
je 0x44825a
cmp byte [ebp - 0x4f9], 0
jne 0x44825a
cmp dword [ebp - 0xb4], 8
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44825a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x570]
call fcn.0044b870
push eax
mov edx, str.Error
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x558]
call fcn.00418e50
add esp, 4
push str._deleting_ISvc
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.0043b9b0
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x544]
cmp edx, 8
jb 0x448171
mov ecx, dword [ebp - 0x558]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448167
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489b6
push edx
push ecx
call fcn.0046ec30
add esp, 8
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x55c]
cmp edx, 8
jb 0x4481d2
mov ecx, dword [ebp - 0x570]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4481c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489bb
push edx
push ecx
call fcn.0046ec30
add esp, 8
xor eax, eax
mov dword [ebp - 0x560], 0
cmp dword [ebp - 0x128], 8
mov edx, 0x780
mov word [ebp - 0x570], ax
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x55c], 7
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.004413d0
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x44825a
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448250
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489c0
push edx
push ecx
call fcn.0046ec30
add esp, 8
lea ecx, [ebp - 0x78]
call fcn.0043ffc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x18], 0
mov edx, 0x4e7ee0
push dword [ebp - 0x18]
call fcn.00418ec0
add esp, 4
push 0x2d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5a0]
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
call fcn.0043cc00
add esp, 0xc
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60]
call fcn.00419820
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x58c]
cmp edx, 8
jb 0x4482f4
mov ecx, dword [ebp - 0x5a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4482ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489c5
push edx
push ecx
call fcn.0046ec30
add esp, 8
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push 2
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
push ecx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0046bb9a
push 0x4ecb24
push 0x41a160
push 0x4ecb2c
call fcn.0046b143
add esp, 0xc
test eax, eax
je 0x4489ca
push 0x4e7c88
lea ecx, [ebp - 0x5b8]
call fcn.0040beb0
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x13
push eax
mov edx, str.Uninstalling_Malwarebytes_from:
lea ecx, [ebp - 0x588]
call fcn.00418e50
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x448394
mov ecx, eax
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x574]
cmp edx, 8
jb 0x4483d4
mov ecx, dword [ebp - 0x588]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4483ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489cf
push edx
push ecx
call fcn.0046ec30
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 7
mov word [ebp - 0x588], ax
cmp edx, 8
jb 0x448435
mov ecx, dword [ebp - 0x5b8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44842b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489d4
push edx
push ecx
call fcn.0046ec30
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x78c
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004413d0
add esp, 4
call fcn.0044f200
push 0x4e7ee0
lea ecx, [ebp - 0x154]
call fcn.0040beb0
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x530]
call fcn.0040beb0
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x518]
call fcn.0040beb0
push 0x30
mov byte [ebp - 4], 0x16
call fcn.0046ec3e
movups xmm0, xmmword [ebp - 0x530]
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x500], esi
mov word [ebp - 0x530], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x520]
movq qword [esi + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x518]
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 7
movups xmmword [esi + 0x18], xmm0
mov word [ebp - 0x518], ax
movq xmm0, qword [ebp - 0x508]
movq qword [esi + 0x28], xmm0
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0xcc], eax
movups xmmword [ebp - 0xdc], xmm0
call fcn.0044b060
mov dword [ebp - 0xdc], 0x4d0f24
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xcc], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xdc]
call fcn.0044b1f0
mov esi, dword [ebp - 0xcc]
test esi, esi
je 0x448575
mov ecx, esi
call fcn.004493e0
push 0x30
push esi
call fcn.0046ec30
add esp, 8
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd8]
push esi
mov dword [ebp - 0x18], eax
call fcn.0046cfb6
add esp, 4
test eax, eax
je 0x44859e
push eax
call fcn.0046c6ff
add esp, 4
push esi
call fcn.0046cefa
add esp, 4
push dword [ebp - 0x18]
call fcn.0046ca34
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x1b
call fcn.004493e0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4485d5
push 1
call fcn.0046c72c
mov eax, dword [ebp - 0x2c]
add esp, 4
push eax
push dword [ebp - 0x30]
call fcn.0046c5d1
add esp, 8
test eax, eax
je 0x4485ee
push eax
call fcn.0046c6ff
add esp, 4
cmp byte [0x4ec9f6], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
jne 0x4487b7
mov byte [ebp - 4], 0x1c
call fcn.00403a40
mov ecx, eax
test ecx, ecx
je 0x4489d9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [0x4eca54]
test eax, eax
je 0x44878c
push 0x130
lea eax, [ebp - 0x3c8]
push 0
push eax
call fcn.00486d70
add esp, 8
lea ecx, [ebp - 0x3c8]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041fa10
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.0040db70
lea ecx, [ebp - 0x3c8]
call fcn.0040d220
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1d
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4486a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x4489e3
lea ecx, [ebp - 0x154]
call fcn.00404cc0
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x4486f3
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4486e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489e8
push edx
push ecx
call fcn.0046ec30
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448741
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448737
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489ed
push edx
push ecx
call fcn.0046ec30
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404cc0
lea ecx, [ebp - 0x48]
call fcn.00404cc0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00456700
lea ecx, [ebp - 0xb0]
call fcn.0040c540
mov eax, 3
jmp 0x448913
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1e
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4487a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x4489f2
jmp 0x44883d
mov al, byte [0x4eca51]
test al, al
jne 0x448821
call fcn.0046cb12
add eax, 0x989680
push 0
push 0x64
adc edx, 0
push edx
push eax
call fcn.0046f340
push 0
push 0x3b9aca00
mov esi, eax
push edx
push esi
call fcn.004adfe0
mov dword [ebp - 0x540], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x53c], edx
sub esi, eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x538], esi
movups xmm0, xmmword [ebp - 0x540]
push eax
movups xmmword [ebp - 0x168], xmm0
call fcn.0046c5f9
add esp, 4
jmp 0x4487b7
mov eax, dword [0x4eca54]
test eax, eax
je 0x4487a8
cmp dword [ebp - 0x2c], 0
jne 0x4489f7
jmp 0x4486ae
lea ecx, [ebp - 0x154]
call fcn.00404cc0
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x448882
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448878
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4489fc
push edx
push ecx
call fcn.0046ec30
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x4488d0
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4488c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448a01
push edx
push ecx
call fcn.0046ec30
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404cc0
lea ecx, [ebp - 0x48]
call fcn.00404cc0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00456700
lea ecx, [ebp - 0xb0]
call fcn.0040c540
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046e70f
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
call fcn.004413d0
lea ecx, [ebp - 0x4f8]
call fcn.0040d320
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x4f8]
call fcn.0041fa10
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0040db70
push 3
call fcn.0048dc1b
call fcn.0048d4f0
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.00489b7c
call fcn.0048d4f0
call fcn.00489b7c
call fcn.00489b7c
push 0x80004005
call fcn.00403bb0
call fcn.0048d4f0
call fcn.00489b7c
call fcn.00489b7c
call fcn.0048d4f0
call fcn.0048d4f0
call fcn.00489b7c
call fcn.00489b7c
int3