Function at 0x447770
Capabilities:
Delete file
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2698
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5d8
mov eax, dword [0x4e506c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.00441310
add esp, 4
call fcn.0042f2d0
lea ecx, [ebp - 0xb0]
call fcn.0042eb20
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4e9698
call fcn.0043bb80
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae edx, dword [ebp - 0xb0]
mov ecx, eax
call fcn.0044aa40
add esp, 4
mov edx, 0x4cf294
mov ecx, eax
call fcn.0043bb80
push eax
call fcn.0043be30
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], vtable.InstalledProducts.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00460de0
push 1
lea ecx, [ebp - 0x28]
call fcn.00460de0
cmp dword [0x4e5d44], 8
mov eax, 0x4e5d30
push str.MBRW_C
cmovae eax, dword [0x4e5d30]
push eax
mov byte [ebp - 0x4f9], 0
call fcn.0048bc09
add esp, 8
test eax, eax
je 0x4478b7
cmp dword [0x4e5d44], 8
mov eax, 0x4e5d30
push str.MBRW_B
cmovae eax, dword [0x4e5d30]
push eax
call fcn.0048bc09
add esp, 8
test eax, eax
je 0x4478b7
xor al, al
jmp 0x4478b9
mov al, 1
test al, al
je 0x4479e5
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x28]
call fcn.00462060
mov edi, 0x4e5c88
test al, al
je 0x44793d
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x28]
call fcn.00462390
test al, al
je 0x44793d
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.0043ba20
call fcn.0042a110
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xe0]
cmp edx, 8
jb 0x447981
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447977
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448871
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
cmp edx, 8
jb 0x447a87
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447a7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448876
jmp 0x447a7d
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00461b20
mov edi, 0x4e5c88
test al, al
je 0x447a43
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00462ad0
test al, al
je 0x447a43
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
call fcn.0043ba20
call fcn.0042a110
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x447a87
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447a7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44887b
push edx
push ecx
call fcn.0046da67
add esp, 8
cmp byte [ebp - 0x4f9], 0
jne 0x447d61
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.0042e330
cmp dword [ebp - 0x88], 0
jne 0x447b7d
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x447b0d
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447b03
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448880
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00455790
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447b73
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447b69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448885
push edx
push ecx
call fcn.0046da67
add esp, 8
mov eax, 1
jmp 0x448853
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044b910
mov esi, eax
cmp esi, 0x4e5c88
je 0x447bca
mov ecx, edi
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x4e5c88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4e5c98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5bc]
cmp edx, 8
jb 0x447c0a
mov ecx, dword [ebp - 0x5d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447c00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44888a
push edx
push ecx
call fcn.0046da67
add esp, 8
call fcn.0042a110
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0x4f9], al
cmp edx, 8
jb 0x447c5f
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447c4f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44888f
push edx
push ecx
call fcn.0046da67
mov al, byte [ebp - 0x4f9]
add esp, 8
test al, al
jne 0x447d61
cmp edi, 0x4e5cb8
je 0x447c90
cmp dword [0x4e5ccc], 8
mov eax, 0x4e5cb8
push dword [0x4e5cc8]
cmovae eax, dword [0x4e5cb8]
mov ecx, edi
push eax
call fcn.00407920
call fcn.0042a110
test al, al
jne 0x447d61
cmp byte [0x4ea9f6], al
jne 0x447cf7
push 0x130
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.00485bb0
add esp, 8
lea ecx, [ebp - 0x298]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041f980
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x298]
call fcn.0040db70
lea ecx, [ebp - 0x298]
call fcn.0040d220
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.00441310
add esp, 4
mov dword [ebp - 0x28], vtable.InstalledProducts.0
lea ecx, [ebp - 0x24]
call fcn.00455790
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447d57
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447d4d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448894
push edx
push ecx
call fcn.0046da67
add esp, 8
mov eax, 3
jmp 0x448853
push 0x4e5d30
mov edx, str.Found_the_Service._Product_code_is:
lea ecx, [ebp - 0x48]
call fcn.0043b750
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
mov edx, 0x73d
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00441310
add esp, 4
mov byte [ebp - 0x4f9], 0
call fcn.00423790
or edi, 0xffffffff
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447ed7
push str.creating_MBAMService_instance
mov edx, 0x743
call fcn.00441310
add esp, 4
lea ecx, [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
call fcn.0044a720
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
call fcn.00441310
mov ecx, dword [ebp - 0x80]
add esp, 4
call fcn.0041d2e0
mov esi, dword [ebp - 0x7c]
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447e98
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x4f9], 1
call fcn.00441310
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x447e37
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.004308c0
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447e8c
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
call fcn.00441310
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.004365c0
call fcn.00430ac0
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448899
push str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
jmp 0x447ea2
push str.No_need_to_prompt_for_password
mov edx, 0x75f
jmp 0x447ea2
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.00441310
add esp, 4
mov byte [ebp - 4], 9
test esi, esi
je 0x447ed1
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x447ed1
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x447ed1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
jmp 0x447ee9
push str.Not_an_MBAM_product_code
mov edx, 0x76e
call fcn.00441310
add esp, 4
push 0x4eab24
push 0x41a0d0
push 0x4eab2c
call fcn.00469f84
add esp, 0xc
test eax, eax
je 0x4488ec
push 0x4e5c88
lea ecx, [ebp - 0xc8]
call fcn.0040beb0
push 1
push 0x4cd80c
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xa
call fcn.0040c260
push 0x18
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040c260
lea eax, [ebp - 0xc8]
mov edx, str.ISvc_path_is:
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0043b750
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x447f8e
mov ecx, eax
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5d4]
cmp edx, 8
jb 0x447fce
mov ecx, dword [ebp - 0x5e8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447fc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488f1
push edx
push ecx
call fcn.0046da67
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x776
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00441310
add esp, 4
call fcn.00423790
test al, al
je 0x44819a
cmp byte [ebp - 0x4f9], 0
jne 0x44819a
cmp dword [ebp - 0xb4], 8
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44819a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x570]
call fcn.0044b7a0
push eax
mov edx, str.Error
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x558]
call fcn.00418dc0
add esp, 4
push str._deleting_ISvc
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.0043b8f0
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x544]
cmp edx, 8
jb 0x4480b1
mov ecx, dword [ebp - 0x558]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4480a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488f6
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x55c]
cmp edx, 8
jb 0x448112
mov ecx, dword [ebp - 0x570]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448108
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488fb
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x560], 0
cmp dword [ebp - 0x128], 8
mov edx, 0x780
mov word [ebp - 0x570], ax
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x55c], 7
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.00441310
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x44819a
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448190
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448900
push edx
push ecx
call fcn.0046da67
add esp, 8
lea ecx, [ebp - 0x78]
call fcn.0043ff00
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x18], 0
mov edx, 0x4e5ee0
push dword [ebp - 0x18]
call fcn.00418e30
add esp, 4
push 0x2d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5a0]
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
call fcn.0043cb40
add esp, 0xc
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60]
call fcn.00419790
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x58c]
cmp edx, 8
jb 0x448234
mov ecx, dword [ebp - 0x5a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44822a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448905
push edx
push ecx
call fcn.0046da67
add esp, 8
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push 2
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
push ecx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0046a9db
push 0x4eab24
push 0x41a0d0
push 0x4eab2c
call fcn.00469f84
add esp, 0xc
test eax, eax
je 0x44890a
push 0x4e5c88
lea ecx, [ebp - 0x5b8]
call fcn.0040beb0
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x13
push eax
mov edx, str.Uninstalling_Malwarebytes_from:
lea ecx, [ebp - 0x588]
call fcn.00418dc0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x4482d4
mov ecx, eax
call fcn.00404cc0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x574]
cmp edx, 8
jb 0x448314
mov ecx, dword [ebp - 0x588]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44830a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44890f
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 7
mov word [ebp - 0x588], ax
cmp edx, 8
jb 0x448375
mov ecx, dword [ebp - 0x5b8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44836b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448914
push edx
push ecx
call fcn.0046da67
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x78c
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.00441310
add esp, 4
call fcn.0044f140
push 0x4e5ee0
lea ecx, [ebp - 0x154]
call fcn.0040beb0
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x530]
call fcn.0040beb0
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x518]
call fcn.0040beb0
push 0x30
mov byte [ebp - 4], 0x16
call fcn.0046da75
movups xmm0, xmmword [ebp - 0x530]
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x500], esi
mov word [ebp - 0x530], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x520]
movq qword [esi + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x518]
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 7
movups xmmword [esi + 0x18], xmm0
mov word [ebp - 0x518], ax
movq xmm0, qword [ebp - 0x508]
movq qword [esi + 0x28], xmm0
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0xcc], eax
movups xmmword [ebp - 0xdc], xmm0
call fcn.0044af90
mov dword [ebp - 0xdc], 0x4cfea4
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xcc], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xdc]
call fcn.0044b120
mov esi, dword [ebp - 0xcc]
test esi, esi
je 0x4484b5
mov ecx, esi
call fcn.00449320
push 0x30
push esi
call fcn.0046da67
add esp, 8
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd8]
push esi
mov dword [ebp - 0x18], eax
call fcn.0046bdf7
add esp, 4
test eax, eax
je 0x4484de
push eax
call fcn.0046b540
add esp, 4
push esi
call fcn.0046bd3b
add esp, 4
push dword [ebp - 0x18]
call fcn.0046b875
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x1b
call fcn.00449320
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x448515
push 1
call fcn.0046b56d
mov eax, dword [ebp - 0x2c]
add esp, 4
push eax
push dword [ebp - 0x30]
call fcn.0046b412
add esp, 8
test eax, eax
je 0x44852e
push eax
call fcn.0046b540
add esp, 4
cmp byte [0x4ea9f6], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
jne 0x4486f7
mov byte [ebp - 4], 0x1c
call fcn.00403a40
mov ecx, eax
test ecx, ecx
je 0x448919
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [0x4eaa54]
test eax, eax
je 0x4486cc
push 0x130
lea eax, [ebp - 0x3c8]
push 0
push eax
call fcn.00485bb0
add esp, 8
lea ecx, [ebp - 0x3c8]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041f980
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.0040db70
lea ecx, [ebp - 0x3c8]
call fcn.0040d220
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1d
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4485e4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x448923
lea ecx, [ebp - 0x154]
call fcn.00404cc0
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x448633
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448629
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448928
push edx
push ecx
call fcn.0046da67
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448681
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448677
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44892d
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404cc0
lea ecx, [ebp - 0x48]
call fcn.00404cc0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00455790
lea ecx, [ebp - 0xb0]
call fcn.0040c540
mov eax, 3
jmp 0x448853
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1e
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4486e8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x448932
jmp 0x44877d
mov al, byte [0x4eaa51]
test al, al
jne 0x448761
call fcn.0046b953
add eax, 0x989680
push 0
push 0x64
adc edx, 0
push edx
push eax
call fcn.0046e180
push 0
push 0x3b9aca00
mov esi, eax
push edx
push esi
call fcn.004ace40
mov dword [ebp - 0x540], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x53c], edx
sub esi, eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x538], esi
movups xmm0, xmmword [ebp - 0x540]
push eax
movups xmmword [ebp - 0x168], xmm0
call fcn.0046b43a
add esp, 4
jmp 0x4486f7
mov eax, dword [0x4eaa54]
test eax, eax
je 0x4486e8
cmp dword [ebp - 0x2c], 0
jne 0x448937
jmp 0x4485ee
lea ecx, [ebp - 0x154]
call fcn.00404cc0
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x4487c2
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4487b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44893c
push edx
push ecx
call fcn.0046da67
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448810
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448806
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448941
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404cc0
lea ecx, [ebp - 0x48]
call fcn.00404cc0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00455790
lea ecx, [ebp - 0xb0]
call fcn.0040c540
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046d546
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
call fcn.00441310
lea ecx, [ebp - 0x4f8]
call fcn.0040d320
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x4f8]
call fcn.0041f980
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0040db70
push 3
call fcn.0048ca6b
call fcn.0048c340
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.0048c340
call fcn.004889bc
call fcn.004889bc
push 0x80004005
call fcn.00403bb0
call fcn.0048c340
call fcn.004889bc
call fcn.004889bc
call fcn.0048c340
call fcn.0048c340
call fcn.004889bc
call fcn.004889bc
int3