Function at 0x140004b7e
Capabilities:
Delete file
Get common file path

Disassembly:
jmp 0x1400445a0
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x14e0
call fcn.14000105f
sub rsp, rax
mov rdi, rsp
mov ecx, 0x538
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x14f0]
mov rax, qword [0x1401940e8]
xor rax, rsp
mov qword [rsp + 0x14d0], rax
mov byte [rsp + 0x1453], 0
movzx eax, word [0x14014c994]
mov word [rsp + 0x550], ax
lea rax, [rsp + 0x552]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rax, [rsp + 0x780]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rcx, [rsp + 0x9a8]
call fcn.1400036c5
nop
lea rcx, [rsp + 0x9e8]
call fcn.1400036c5
nop
lea rax, [rsp + 0xa30]
mov rdi, rax
xor eax, eax
mov ecx, 0x50
rep stosb byte [rdi], al
mov qword [rsp + 0xa88], 0
mov byte [rsp + 0xa90], 0
lea rdx, [0x14014ccc4]
lea rcx, [rsp + 0xaa8]
call fcn.14000194c
nop
movzx eax, word [0x14014cd88]
mov word [rsp + 0xaf0], ax
lea rax, [rsp + 0xaf2]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
movzx eax, word [0x14014ce44]
mov word [rsp + 0xd20], ax
lea rax, [rsp + 0xd22]
mov rdi, rax
xor eax, eax
mov ecx, 0x40e
rep stosb byte [rdi], al
mov byte [rsp + 0x1134], 0
mov byte [rsp + 0x1135], 1
lea rax, [rsp + 0x1150]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1378]
call fcn.1400036c5
nop
lea rdx, [rsp + 0x78]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetClientRect]
mov edx, 0x3ec
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, [rsp + 0xa8]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0xd8], eax
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xdc], eax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0xe0], eax
mov eax, dword [rsp + 0xb4]
mov dword [rsp + 0xe4], eax
mov eax, dword [rsp + 0xd8]
mov ecx, dword [rsp + 0xe0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xfc], eax
mov eax, dword [rsp + 0xdc]
mov ecx, dword [rsp + 0xe4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0xfc]
sub eax, 0x20
mov dword [rsp + 0x104], eax
mov eax, dword [rsp + 0x100]
sub eax, 0x40
mov dword [rsp + 0x108], eax
mov eax, dword [rsp + 0xd8]
add eax, 0x10
mov dword [rsp + 0xf4], eax
mov eax, dword [rsp + 0xdc]
add eax, 0x20
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0x10c], 0x50000000
mov rax, qword [rsp + 0x14f0]
movsxd rax, dword [rax + 0x2a4]
mov rcx, qword [rsp + 0x14f0]
mov rcx, qword [rcx + 0x10]
mov eax, dword [rcx + rax*4]
mov dword [rsp + 0x1454], eax
cmp dword [rsp + 0x1454], 0x10
ja case.0x14004482e.2
movsxd rax, dword [rsp + 0x1454]
lea rcx, [0x140000000]
mov eax, dword [rcx + rax*4 + 0x45c74]
add rax, rcx
jmp rax
lea r8, str.AcroCleaner
mov edx, 0x104
lea rcx, [rsp + 0xaf0]
call fcn.1400031e3
lea r8, str.This_tool_removes_Adobe_Acrobat_DC_including_any_preferences_and_settings_that_may_be_preserved_when_uninstalling_normally._n_nThe_actions_performed_by_this_program_are_irreversible_and_may_nrequire_you_to_reinstall_the_Adobe
mov edx, 0x208
lea rcx, [rsp + 0xd20]
call fcn.1400031e3
mov edx, 0x3eb
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa005
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], MsiSourceListClearAllW
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x50
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [rsp + 0xd20]
lea rdx, [0x14014d820]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, qword [rsp + 0x14f0]
call fcn.14000285b
jmp 0x140045c14
xor r9d, r9d
mov r8d, reloc.msi.dll_MsiEnumComponentsW
lea rdx, [rsp + 0x1150]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea rdx, [rsp + 0x1150]
lea rcx, [rsp + 0x1378]
call fcn.140003198
lea r8, str.msftedit.dll
lea rdx, [rsp + 0x1378]
lea rcx, [rsp + 0x13a8]
call fcn.1400024dc
mov qword [rsp + 0x1458], rax
mov rcx, qword [rsp + 0x1458]
call fcn.140003567
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140044982
mov dword [rsp + 0x1460], 1
jmp 0x14004498d
mov dword [rsp + 0x1460], 0
movzx eax, byte [rsp + 0x1460]
mov byte [rsp + 0x1450], al
lea rcx, [rsp + 0x13a8]
call fcn.1400049d0
movzx eax, byte [rsp + 0x1450]
test eax, eax
je 0x140044b06
mov byte [rsp + 0x1135], 0
lea r8, str._riched20.dll
lea rdx, [rsp + 0x1378]
lea rcx, [rsp + 0x13d0]
call fcn.1400024dc
mov qword [rsp + 0x1468], rax
mov rcx, qword [rsp + 0x1468]
call fcn.140003567
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140044a0d
mov dword [rsp + 0x1470], 1
jmp 0x140044a18
mov dword [rsp + 0x1470], 0
movzx eax, byte [rsp + 0x1470]
mov byte [rsp + 0x1451], al
lea rcx, [rsp + 0x13d0]
call fcn.1400049d0
movzx eax, byte [rsp + 0x1451]
test eax, eax
je 0x140044b06
lea r8, [0x14014d870]
lea rdx, [rsp + 0x1378]
lea rcx, [rsp + 0x13f8]
call fcn.1400024dc
mov qword [rsp + 0x1478], rax
mov rcx, qword [rsp + 0x1478]
call fcn.140003567
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140044a90
mov dword [rsp + 0x1480], 1
jmp 0x140044a9b
mov dword [rsp + 0x1480], 0
movzx eax, byte [rsp + 0x1480]
mov byte [rsp + 0x1452], al
lea rcx, [rsp + 0x13f8]
call fcn.1400049d0
movzx eax, byte [rsp + 0x1452]
test eax, eax
je 0x140044b06
lea rdx, str.No_richedit_control_dll_available_on_the_machine.
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax + 0x50]
call fcn.140002f45
mov rax, qword [rsp + 0x14f0]
mov dword [rax + 0x2a4], 5
mov rax, qword [rsp + 0x14f0]
mov byte [rax + 0x40], 0
mov rcx, qword [rsp + 0x14f0]
call fcn.140004b7e
movzx eax, byte [rsp + 0x1135]
test eax, eax
je 0x140044b89
mov eax, dword [rsp + 0xf4]
add eax, 0xa
mov qword [rsp + 0x58], 0
mov rcx, qword [0x140195698]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0xa02a
mov rcx, qword [rsp + 0x14f0]
mov rcx, qword [rcx]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x136
mov dword [rsp + 0x30], 0x1b6
mov dword [rsp + 0x28], 5
mov dword [rsp + 0x20], eax
mov r9d, 0x50a10844
lea r8, [0x14014d0c8]
lea rdx, str.RICHEDIT50W
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x60], rax
jmp 0x140044bfe
mov eax, dword [rsp + 0xf4]
add eax, 0xa
mov qword [rsp + 0x58], 0
mov rcx, qword [0x140195698]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0xa02a
mov rcx, qword [rsp + 0x14f0]
mov rcx, qword [rcx]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x136
mov dword [rsp + 0x30], 0x1b6
mov dword [rsp + 0x28], 5
mov dword [rsp + 0x20], eax
mov r9d, 0x50a10844
lea r8, [0x14014d144]
lea rdx, str.RichEdit20W
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x60], rax
lea r8, str.Accept
mov edx, 0x3ea
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, str.Decline
mov edx, 2
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, 2
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r9d, 1
mov r8, rax
mov edx, MsiEnumProductsW
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x14f0]
call fcn.140004e58
lea rdx, [rsp + 0x550]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov r8d, 0x104
lea rdx, [rsp + 0x550]
lea rcx, [rsp + 0x550]
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea r8, str.RAFTEULA.rtf
mov edx, 0x104
lea rcx, [rsp + 0x550]
call fcn.14000187a
lea r8, [rsp + 0x550]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x14f0]
call fcn.14000566e
lea rcx, [rsp + 0x550]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x140045c14
mov edx, 0xa000
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r8d, 0x3ea
mov edx, 0xfffffff4
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov edx, 0x3ea
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, [0x14014d218]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, dword [rsp + 0xf8]
shl eax, 1
mov ecx, dword [rsp + 0xf4]
shl ecx, 1
mov qword [rsp + 0x58], 0
mov rdx, qword [0x140195698]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], 0xa007
mov rdx, qword [rsp + 0x14f0]
mov rdx, qword [rdx]
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], 0x14
mov edx, dword [rsp + 0x104]
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov r9d, dword [rsp + 0x10c]
lea r8, str.Following_product_will_be_removed:
lea rdx, [0x14014d918]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov eax, dword [rsp + 0xf4]
shl eax, 1
mov ecx, dword [rsp + 0x10c]
or ecx, 9
or ecx, 1
mov qword [rsp + 0x58], 0
mov rdx, qword [0x140195698]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], 0xa008
mov rdx, qword [rsp + 0x14f0]
mov rdx, qword [rdx]
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], 0x14
mov edx, dword [rsp + 0x104]
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], MsiReinstallFeatureW
mov dword [rsp + 0x20], eax
mov r9d, ecx
lea r8, [0x14014c998]
lea rdx, [0x14014d928]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rax, qword [rsp + 0x14f0]
mov eax, dword [rax + 0x2a8]
add eax, 0xa008
mov r9d, eax
mov r8d, 0xa009
mov edx, 0xa008
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_CheckRadioButton]
jmp 0x140045c14
xor r9d, r9d
mov r8d, MsiEnumProductsW
lea rdx, [rsp + 0x780]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea rdx, [rsp + 0x780]
lea rcx, [rsp + 0x9a8]
call fcn.140003198
mov rax, qword [rsp + 0x14f0]
cmp dword [rax + 0x2a8], 0
jne 0x140044f04
lea rdx, str.Adobe_Acrobat
lea rcx, [rsp + 0xaa8]
call fcn.140003198
lea r8, str.AdobeAcrobat_.
lea rdx, [rsp + 0x9a8]
lea rcx, [rsp + 0x1420]
call fcn.1400024dc
mov qword [rsp + 0x1488], rax
mov rdx, qword [rsp + 0x1488]
lea rcx, [rsp + 0x9a8]
call fcn.140004089
lea rcx, [rsp + 0x1420]
call fcn.1400049d0
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov qword [rsp + 0x1490], rax
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov rcx, qword [rsp + 0x1490]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str.Setup_could_not_find__s_installed_on_the_machine.__s_will_be_removed_from_default_location_mentioned_below:
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa034
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x3c
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x50
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [rsp + 0x120]
lea rdx, [0x14014d938]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov eax, dword [rsp + 0x104]
sub eax, 0x14
mov dword [rsp + 0x1498], eax
mov ecx, dword [rsp + 0x10c]
bts ecx, 0x17
bts ecx, 7
bts ecx, 0x10
bts ecx, 0xb
mov dword [rsp + 0x149c], ecx
lea rcx, [rsp + 0x9a8]
call fcn.140003567
mov qword [rsp + 0x58], 0
mov rcx, qword [0x140195698]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0xa035
mov rcx, qword [rsp + 0x14f0]
mov rcx, qword [rcx]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x14
mov ecx, dword [rsp + 0x1498]
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], MsiSetPropertyW
mov ecx, dword [rsp + 0xf4]
mov dword [rsp + 0x20], ecx
mov ecx, dword [rsp + 0x149c]
mov r9d, ecx
mov r8, rax
lea rdx, [0x14014d948]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x60], rax
xor r9d, r9d
mov r8d, 0x103
mov edx, 0xc5
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa038
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], MsiEnumProductsW
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0xdc
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, str.Click_Browse_to_add_any_additional_directory_for_cleanup.
lea rdx, [0x14014d958]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
cvtsi2sd xmm0, dword [rsp + 0x104]
mulsd xmm0, qword [0x14014f9d0]
cvttsd2si eax, xmm0
mov ecx, dword [rsp + 0x10c]
bts ecx, 0x17
bts ecx, 7
bts ecx, 0x10
mov rdx, qword [rsp + 0x14f0]
add rdx, 0x98
mov qword [rsp + 0x58], 0
mov rdi, qword [0x140195698]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], 0xa032
mov rdi, qword [rsp + 0x14f0]
mov rdi, qword [rdi]
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x104
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, ecx
mov r8, rdx
lea rdx, str.EDIT
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x60], rax
xor r9d, r9d
mov r8d, 0x103
mov edx, 0xc5
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8d, 8
mov rax, qword [rsp + 0x14f0]
mov edx, dword [rax + 0x1c]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsp + 0x14a0], eax
mov r8d, 4
mov rcx, qword [rsp + 0x14f0]
mov edx, dword [rcx + 0x18]
mov ecx, MsiEnumComponentsW
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [rsp + 0xf4]
shl ecx, 3
mov edx, dword [rsp + 0x10c]
bts edx, 0x10
mov qword [rsp + 0x58], 0
mov rdi, qword [0x140195698]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], 0xa036
mov rdi, qword [rsp + 0x14f0]
mov rdi, qword [rdi]
mov qword [rsp + 0x40], rdi
mov edi, dword [rsp + 0x14a0]
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x104
mov dword [rsp + 0x20], ecx
mov r9d, edx
lea r8, str.Browse
lea rdx, [0x14014d978]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
jmp 0x140045c14
mov rax, qword [rsp + 0x14f0]
cmp dword [rax + 0x2a8], 0
jne 0x1400452d5
lea rdx, str.Adobe_Acrobat
lea rcx, [rsp + 0xaa8]
call fcn.140003198
mov rax, qword [rsp + 0x14f0]
movzx eax, byte [rax + 0x43]
test eax, eax
je 0x1400452c7
mov rax, qword [rsp + 0x14f0]
mov byte [rax + 0x41], 1
lea rdx, str.Acrobat_Reader
lea rcx, [rsp + 0x9e8]
call fcn.140003198
jmp 0x1400452d3
mov rax, qword [rsp + 0x14f0]
mov byte [rax + 0x41], 0
jmp 0x140045338
mov rax, qword [rsp + 0x14f0]
cmp dword [rax + 0x2a8], 1
jne 0x140045338
lea rdx, str.Acrobat_Reader
lea rcx, [rsp + 0xaa8]
call fcn.140003198
mov rax, qword [rsp + 0x14f0]
movzx eax, byte [rax + 0x42]
test eax, eax
je 0x14004532c
mov rax, qword [rsp + 0x14f0]
mov byte [rax + 0x41], 1
lea rdx, str.Adobe_Acrobat
lea rcx, [rsp + 0x9e8]
call fcn.140003198
jmp 0x140045338
mov rax, qword [rsp + 0x14f0]
mov byte [rax + 0x41], 0
mov edx, 0x3ea
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, str.Clean_Now
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov edx, 0x3ea
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r8d, 0xa003
mov edx, 0xfffffff4
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rax, qword [rsp + 0x14f0]
cmp dword [rax + 0x2a8], 0
jne 0x140045474
mov rax, qword [rsp + 0x14f0]
movzx eax, byte [rax + 0x42]
test eax, eax
je 0x140045474
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov qword [rsp + 0x14a8], rax
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov rcx, qword [rsp + 0x14a8]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str.Setup_has_detected__s_installed_on_the_machine._Click_Clean_Now_to_start_cleanup.
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa039
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x50
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x50
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [rsp + 0x120]
lea rdx, [0x14014d988]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
jmp 0x14004560b
mov rax, qword [rsp + 0x14f0]
movzx eax, byte [rax + 0x46]
test eax, eax
jne 0x14004556f
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov qword [rsp + 0x14b0], rax
mov rcx, qword [rsp + 0x14f0]
add rcx, 0x98
mov qword [rsp + 0x14b8], rcx
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov rcx, qword [rsp + 0x14b0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x14b8]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str.Setup_is_ready_to_remove__s_from_the_machine._Click_Clean_Now_to_start_cleanup._n_nWarning_:_Path___s__will_be_ignored_since_a_valid__s_installation_was_not_found_at_this_location.
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa03c
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], MsiReinstallFeatureW
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x50
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [rsp + 0x120]
lea rdx, [0x14014d998]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
jmp 0x14004560b
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov r9, rax
lea r8, str.Setup_is_ready_to_clean__s_from_the_machine._Click_Clean_Now_to_start_cleanup.
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa03e
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x3c
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x50
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [rsp + 0x120]
lea rdx, [0x14014d9a8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rax, qword [rsp + 0x14f0]
movzx eax, byte [rax + 0x41]
test eax, eax
je 0x1400457a3
lea rcx, [rsp + 0x9e8]
call fcn.140003567
mov qword [rsp + 0x14c0], rax
lea rcx, [rsp + 0xaa8]
call fcn.140003567
mov rcx, qword [rsp + 0x14c0]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str.Removing_all__s_files_and_registries_may_break__s_workflows.
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa03a
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], MsiEnumProductsW
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0xdc
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [rsp + 0x120]
lea rdx, [0x14014d9b8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea rcx, [rsp + 0x9e8]
call fcn.140003567
mov r9, rax
lea r8, str.Leave__s_workflows_intact.
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
mov eax, dword [rsp + 0x10c]
or eax, 2
or eax, 1
bts eax, 0x10
mov qword [rsp + 0x58], 0
mov rcx, qword [0x140195698]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0xa03b
mov rcx, qword [rsp + 0x14f0]
mov rcx, qword [rcx]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x14
mov ecx, dword [rsp + 0x104]
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 0x104
mov ecx, dword [rsp + 0xf4]
mov dword [rsp + 0x20], ecx
mov r9d, eax
lea r8, [rsp + 0x120]
lea rdx, str.BUTTON
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r8d, 1
mov edx, 0xa03b
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x1400457b5
mov rax, qword [rsp + 0x14f0]
mov dword [rax + 0x2ac], 1
mov qword [rsp + 0x58], 0
mov rax, qword [0x140195698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xa03d
mov rax, qword [rsp + 0x14f0]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x12c
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [0x14014d214]
lea rdx, [0x14014d9d8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
jmp 0x140045c14
mov edx, 0x3eb
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_DestroyWindow]
mov edx, 2
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x3ea
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, str.View_Logs
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov edx, 0x3ea
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r8d, 0xa001
mov edx, 0xfffffff4
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov edx, 2
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, str.Finish
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov edx, 2
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r8d, 0xa000
mov edx, 0xfffffff4
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov edx, 0xa000
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r9d, 1
mov r8, rax
mov edx, MsiEnumProductsW
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x14f0]
movzx eax, byte [rax + 0x40]
test eax, eax
je 0x1400459fe
mov rax, qword [rsp + 0x14f0]
mov eax, dword [rax + 0x2a0]
mov dword [rsp + 0x14c8], eax
cmp dword [rsp + 0x14c8], 0
je 0x140045997
cmp dword [rsp + 0x14c8], 1
je 0x1400459b0
cmp dword [rsp + 0x14c8], 2
je 0x1400459c9
cmp dword [rsp + 0x14c8], 3
je 0x1400459e2
jmp 0x1400459f9
mov byte [rsp + 0x1453], 1
lea rax, str.You_have_successfully_installed__s._n_nPlease_review_log_file_for_more_details.
mov qword [rsp + 0x538], rax
jmp 0x1400459f9
mov byte [rsp + 0x1453], 1
lea rax, str.You_have_successfully_uninstalled__s._n_nPlease_review_log_file_for_more_details.
mov qword [rsp + 0x538], rax
jmp 0x1400459f9
mov byte [rsp + 0x1453], 1
lea rax, str.You_have_successfully_repaired__s._n_nPlease_review_log_file_for_more_details.
mov qword [rsp + 0x538], rax
jmp 0x1400459f9
mov byte [rsp + 0x1453], 1
lea rax, str._s_has_been_successfully_removed_from_the_machine._nPlease_restart_your_machine_to_complete_the_cleanup.
mov qword [rsp + 0x538], rax
jmp 0x140045a9f
mov rax, qword [rsp + 0x14f0]
mov eax, dword [rax + 0x2a0]
mov dword [rsp + 0x14cc], eax
cmp dword [rsp + 0x14cc], 0
je 0x140045a3d
cmp dword [rsp + 0x14cc], 1
je 0x140045a56
cmp dword [rsp + 0x14cc], 2
je 0x140045a6f
cmp dword [rsp + 0x14cc], 3
je 0x140045a88
jmp 0x140045a9f
mov byte [rsp + 0x1453], 1
lea rax, str.A_problem_occurred_while_installing__s._n_nPlease_review_log_file_for_more_details.
mov qword [rsp + 0x538], rax
jmp 0x140045a9f
mov byte [rsp + 0x1453], 1
lea rax, str.A_problem_occurred_while_uninstalling__s._n_nPlease_review_log_file_for_more_details.
mov qword [rsp + 0x538], rax
jmp 0x140045a9f
mov byte [rsp + 0x1453], 1
lea rax, str.A_problem_occurred_while_repairing__s._n_nPlease_review_log_file_for_more_details.
mov qword [rsp + 0x538], rax
jmp 0x140045a9f
mov byte [rsp + 0x1453], 1
lea rax, str.A_problem_occurred_while_removing__s_from_the_machine._Please_review_log_file_for_more_details.
mov qword [rsp + 0x538], rax
mov rax, qword [rsp + 0x14f0]
cmp dword [rax + 0x2a8], 0
jne 0x140045ae9
cmp byte [rsp + 0x1453], 0
jne 0x140045ac6
lea rcx, str.pstrTemp
call fcn.14000144c
lea r9, [0x14014d438]
mov r8, qword [rsp + 0x538]
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
jmp 0x140045b31
mov rax, qword [rsp + 0x14f0]
cmp dword [rax + 0x2a8], 1
jne 0x140045b31
cmp byte [rsp + 0x1453], 0
jne 0x140045b10
lea rcx, str.pstrTemp
call fcn.14000144c
lea r9, str.Acrobat_Reader_DC
mov r8, qword [rsp + 0x538]
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.14000547f
mov eax, dword [rsp + 0xe4]
sub eax, 0x20
mov qword [rsp + 0x58], 0
mov rcx, qword [0x140195698]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0xa029
mov rcx, qword [rsp + 0x14f0]
mov rcx, qword [rcx]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], MsiProvideComponentW
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10c]
lea r8, [rsp + 0x120]
lea rdx, [0x14014d9e8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea rdx, [0x14014d9f8]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax + 0x50]
call fcn.1400051a0
lea rdx, [0x14014da10]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax + 0x50]
call fcn.1400051a0
jmp 0x140045c14
mov rax, qword [rsp + 0x14f0]
movsxd rax, dword [rax + 0x2a4]
mov rcx, qword [rsp + 0x14f0]
mov rcx, qword [rcx + 0x10]
mov r8d, dword [rcx + rax*4]
lea rdx, str.No_such_state_exists:__d.
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax + 0x50]
call fcn.140002f45
nop
lea rcx, [rsp + 0x1378]
call fcn.1400049d0
nop
lea rcx, [rsp + 0xaa8]
call fcn.1400049d0
nop
lea rcx, [rsp + 0x9e8]
call fcn.1400049d0
nop
lea rcx, [rsp + 0x9a8]
call fcn.1400049d0
mov rcx, rsp
lea rdx, [0x14014eb90]
call fcn.140005466
mov rcx, qword [rsp + 0x14d0]
xor rcx, rsp
call fcn.1400023b0
add rsp, 0x14e0
pop rdi
ret