Function at 0x447760
Capabilities:
Delete file
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2f68
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5d8
mov eax, dword [0x4e506c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.Enter_ConfigureAndRunUninstall
mov edx, 0x6f2
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.004412b0
add esp, 4
call fcn.0042f010
lea ecx, [ebp - 0xb0]
call fcn.0042eb00
mov edx, str.Got_License_state:__
mov dword [ebp - 4], 0
mov ecx, 0x4e96a0
call fcn.0043bb20
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae edx, dword [ebp - 0xb0]
mov ecx, eax
call fcn.0044aa30
add esp, 4
mov edx, 0x4cf0b4
mov ecx, eax
call fcn.0043bb20
push eax
call fcn.0043bdd0
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], vtable.InstalledProducts.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00461610
push 1
lea ecx, [ebp - 0x28]
call fcn.00461610
cmp dword [0x4e5d44], 8
mov eax, 0x4e5d30
push str.MBRW_C
cmovae eax, dword [0x4e5d30]
push eax
mov byte [ebp - 0x4f9], 0
call fcn.0048c547
add esp, 8
test eax, eax
je 0x4478a7
cmp dword [0x4e5d44], 8
mov eax, 0x4e5d30
push str.MBRW_B
cmovae eax, dword [0x4e5d30]
push eax
call fcn.0048c547
add esp, 8
test eax, eax
je 0x4478a7
xor al, al
jmp 0x4478a9
mov al, 1
test al, al
je 0x4479d5
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x28]
call fcn.00462b20
mov edi, 0x4e5c88
test al, al
je 0x44792d
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x28]
call fcn.00462cd0
test al, al
je 0x44792d
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.0043b9c0
call fcn.0042a140
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xe0]
cmp edx, 8
jb 0x447971
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447967
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448861
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
cmp edx, 8
jb 0x447a77
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447a6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448866
jmp 0x447a6d
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00462350
mov edi, 0x4e5c88
test al, al
je 0x447a33
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00463410
test al, al
je 0x447a33
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
call fcn.0043b9c0
call fcn.0042a140
mov byte [ebp - 0x4f9], al
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x447a77
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447a6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44886b
push edx
push ecx
call fcn.0046e3a3
add esp, 8
cmp byte [ebp - 0x4f9], 0
jne 0x447d51
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.0042e280
cmp dword [ebp - 0x88], 0
jne 0x447b6d
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x447afd
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447af3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448870
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00455f80
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447b63
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447b59
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448875
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov eax, 1
jmp 0x448843
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044b900
mov esi, eax
cmp esi, 0x4e5c88
je 0x447bba
mov ecx, edi
call fcn.00404c50
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x4e5c88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4e5c98], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5bc]
cmp edx, 8
jb 0x447bfa
mov ecx, dword [ebp - 0x5d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447bf0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44887a
push edx
push ecx
call fcn.0046e3a3
add esp, 8
call fcn.0042a140
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0x4f9], al
cmp edx, 8
jb 0x447c4f
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447c3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44887f
push edx
push ecx
call fcn.0046e3a3
mov al, byte [ebp - 0x4f9]
add esp, 8
test al, al
jne 0x447d51
cmp edi, 0x4e5cb8
je 0x447c80
cmp dword [0x4e5ccc], 8
mov eax, 0x4e5cb8
push dword [0x4e5cc8]
cmovae eax, dword [0x4e5cb8]
mov ecx, edi
push eax
call fcn.004078c0
call fcn.0042a140
test al, al
jne 0x447d51
cmp byte [0x4ea9fc], al
jne 0x447ce7
push 0x130
lea eax, [ebp - 0x298]
push 0
push eax
call fcn.004864f0
add esp, 8
lea ecx, [ebp - 0x298]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041f9e0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x298]
call fcn.0040db10
lea ecx, [ebp - 0x298]
call fcn.0040d1c0
push str.Uninstall_failed_to_find_installation_directory
mov edx, 0x738
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.004412b0
add esp, 4
mov dword [ebp - 0x28], vtable.InstalledProducts.0
lea ecx, [ebp - 0x24]
call fcn.00455f80
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x447d47
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447d3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448884
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov eax, 3
jmp 0x448843
push 0x4e5d30
mov edx, str.Found_the_Service._Product_code_is:
lea ecx, [ebp - 0x48]
call fcn.0043b6f0
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
mov edx, 0x73d
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004412b0
add esp, 4
mov byte [ebp - 0x4f9], 0
call fcn.004235c0
or edi, 0xffffffff
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447ec7
push str.creating_MBAMService_instance
mov edx, 0x743
call fcn.004412b0
add esp, 4
lea ecx, [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
call fcn.0044a710
push str.created_MBAMService_instance_ok__connecting
mov edx, 0x745
mov byte [ebp - 4], 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
call fcn.004412b0
mov ecx, dword [ebp - 0x80]
add esp, 4
call fcn.0041df70
mov esi, dword [ebp - 0x7c]
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447e88
push str.Connected_to_MBAMService_instance
mov edx, 0x74a
mov byte [ebp - 0x4f9], 1
call fcn.004412b0
push ecx
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test esi, esi
je 0x447e27
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [eax + 4], esi
call fcn.00430cc0
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x447e7c
push str.Prompting_user_for_password_to_uninstall
mov edx, 0x74e
call fcn.004412b0
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.004362f0
call fcn.00430ec0
add esp, 8
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
test al, al
je 0x448889
push str.Uninstall_password_is_correct___proceeding_with_uninstall
mov edx, 0x751
jmp 0x447e92
push str.No_need_to_prompt_for_password
mov edx, 0x75f
jmp 0x447e92
push str.Error_connecting_to_MBAMService_
mov edx, 0x769
call fcn.004412b0
add esp, 4
mov byte [ebp - 4], 9
test esi, esi
je 0x447ec1
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x447ec1
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x447ec1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 7
jmp 0x447ed9
push str.Not_an_MBAM_product_code
mov edx, 0x76e
call fcn.004412b0
add esp, 4
push 0x4eab24
push 0x41af20
push 0x4eab2c
call fcn.0046a8b6
add esp, 0xc
test eax, eax
je 0x4488dc
push 0x4e5c88
lea ecx, [ebp - 0xc8]
call fcn.0040be50
push 1
push 0x4cd5e8
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xa
call fcn.0040c200
push 0x18
push str.MBAMInstallerService.exe
lea ecx, [ebp - 0xc8]
call fcn.0040c200
lea eax, [ebp - 0xc8]
mov edx, str.ISvc_path_is:
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0043b6f0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x447f7e
mov ecx, eax
call fcn.00404c50
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x5d4]
cmp edx, 8
jb 0x447fbe
mov ecx, dword [ebp - 0x5e8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447fb4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488e1
push edx
push ecx
call fcn.0046e3a3
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x776
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004412b0
add esp, 4
call fcn.004235c0
test al, al
je 0x44818a
cmp byte [ebp - 0x4f9], 0
jne 0x44818a
cmp dword [ebp - 0xb4], 8
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44818a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x570]
call fcn.0044b790
push eax
mov edx, str.Error
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x558]
call fcn.00419c10
add esp, 4
push str._deleting_ISvc
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x13c]
call fcn.0043b890
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x544]
cmp edx, 8
jb 0x4480a1
mov ecx, dword [ebp - 0x558]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448097
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488e6
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x55c]
cmp edx, 8
jb 0x448102
mov ecx, dword [ebp - 0x570]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4480f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488eb
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x560], 0
cmp dword [ebp - 0x128], 8
mov edx, 0x780
mov word [ebp - 0x570], ax
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x55c], 7
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.004412b0
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x44818a
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448180
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488f0
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea ecx, [ebp - 0x78]
call fcn.0043fea0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x18], 0
mov edx, 0x4e5ee0
push dword [ebp - 0x18]
call fcn.00419c80
add esp, 4
push 0x2d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5a0]
push str.MalwarebytesMBAMServicelogsMBAMSERVICE.LOG
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
call fcn.0043cae0
add esp, 0xc
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60]
call fcn.0041a5e0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x58c]
cmp edx, 8
jb 0x448224
mov ecx, dword [ebp - 0x5a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44821a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488f5
push edx
push ecx
call fcn.0046e3a3
add esp, 8
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push 2
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
push ecx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0046b30d
push 0x4eab24
push 0x41af20
push 0x4eab2c
call fcn.0046a8b6
add esp, 0xc
test eax, eax
je 0x4488fa
push 0x4e5c88
lea ecx, [ebp - 0x5b8]
call fcn.0040be50
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x13
push eax
mov edx, str.Uninstalling_Malwarebytes_from:
lea ecx, [ebp - 0x588]
call fcn.00419c10
mov esi, eax
add esp, 4
lea eax, [ebp - 0x48]
cmp eax, esi
je 0x4482c4
mov ecx, eax
call fcn.00404c50
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x38], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x574]
cmp edx, 8
jb 0x448304
mov ecx, dword [ebp - 0x588]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4482fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4488ff
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 7
mov word [ebp - 0x588], ax
cmp edx, 8
jb 0x448365
mov ecx, dword [ebp - 0x5b8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44835b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448904
push edx
push ecx
call fcn.0046e3a3
add esp, 8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov edx, 0x78c
mov ecx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbutils.cpp
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004412b0
add esp, 4
call fcn.0044f130
push 0x4e5ee0
lea ecx, [ebp - 0x154]
call fcn.0040be50
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x530]
call fcn.0040be50
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x518]
call fcn.0040be50
push 0x30
mov byte [ebp - 4], 0x16
call fcn.0046e3b1
movups xmm0, xmmword [ebp - 0x530]
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x500], esi
mov word [ebp - 0x530], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x520]
movq qword [esi + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x518]
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 7
movups xmmword [esi + 0x18], xmm0
mov word [ebp - 0x518], ax
movq xmm0, qword [ebp - 0x508]
movq qword [esi + 0x28], xmm0
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0xcc], eax
movups xmmword [ebp - 0xdc], xmm0
call fcn.0044af80
mov dword [ebp - 0xdc], 0x4cfcc4
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xcc], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xdc]
call fcn.0044b110
mov esi, dword [ebp - 0xcc]
test esi, esi
je 0x4484a5
mov ecx, esi
call fcn.00449310
push 0x30
push esi
call fcn.0046e3a3
add esp, 8
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd8]
push esi
mov dword [ebp - 0x18], eax
call fcn.0046c729
add esp, 4
test eax, eax
je 0x4484ce
push eax
call fcn.0046be72
add esp, 4
push esi
call fcn.0046c66d
add esp, 4
push dword [ebp - 0x18]
call fcn.0046c1a7
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x1b
call fcn.00449310
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x448505
push 1
call fcn.0046be9f
mov eax, dword [ebp - 0x2c]
add esp, 4
push eax
push dword [ebp - 0x30]
call fcn.0046bd44
add esp, 8
test eax, eax
je 0x44851e
push eax
call fcn.0046be72
add esp, 4
cmp byte [0x4ea9fc], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
jne 0x4486e7
mov byte [ebp - 4], 0x1c
call fcn.004039d0
mov ecx, eax
test ecx, ecx
je 0x448909
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [0x4eaa58]
test eax, eax
je 0x4486bc
push 0x130
lea eax, [ebp - 0x3c8]
push 0
push eax
call fcn.004864f0
add esp, 8
lea ecx, [ebp - 0x3c8]
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
call fcn.0041f9e0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.0040db10
lea ecx, [ebp - 0x3c8]
call fcn.0040d1c0
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1d
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4485d4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x448913
lea ecx, [ebp - 0x154]
call fcn.00404c50
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x448623
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448619
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448918
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448671
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448667
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44891d
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404c50
lea ecx, [ebp - 0x48]
call fcn.00404c50
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00455f80
lea ecx, [ebp - 0xb0]
call fcn.0040c4e0
mov eax, 3
jmp 0x448843
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1e
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4486d8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c], 0
jne 0x448922
jmp 0x44876d
mov al, byte [0x4eaa55]
test al, al
jne 0x448751
call fcn.0046c285
add eax, 0x989680
push 0
push 0x64
adc edx, 0
push edx
push eax
call fcn.0046eac0
push 0
push 0x3b9aca00
mov esi, eax
push edx
push esi
call fcn.004ad750
mov dword [ebp - 0x540], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x53c], edx
sub esi, eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x538], esi
movups xmm0, xmmword [ebp - 0x540]
push eax
movups xmmword [ebp - 0x168], xmm0
call fcn.0046bd6c
add esp, 4
jmp 0x4486e7
mov eax, dword [0x4eaa58]
test eax, eax
je 0x4486d8
cmp dword [ebp - 0x2c], 0
jne 0x448927
jmp 0x4485de
lea ecx, [ebp - 0x154]
call fcn.00404c50
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x4487b2
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4487a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44892c
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x448800
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4487f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448931
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404c50
lea ecx, [ebp - 0x48]
call fcn.00404c50
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x28], vtable.InstalledProducts.0
call fcn.00455f80
lea ecx, [ebp - 0xb0]
call fcn.0040c4e0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046de82
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
push str.Uninstall_password_is_incorrect__cannot_proceed_with_uninstall
mov edx, 0x755
call fcn.004412b0
lea ecx, [ebp - 0x4f8]
call fcn.0040d2c0
push ecx
push 0
push 0x6a6
push 0x2364
push 0x3f2
push 1
lea ecx, [ebp - 0x4f8]
call fcn.0041f9e0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0040db10
push 3
call fcn.0048d39b
call fcn.0048cc70
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.0048cc70
call fcn.004892fc
call fcn.004892fc
push 0x80004005
call fcn.00403b40
call fcn.0048cc70
call fcn.004892fc
call fcn.004892fc
call fcn.0048cc70
call fcn.0048cc70
call fcn.004892fc
call fcn.004892fc
int3